The security of your personal data is our top priority at Cristal. This privacy policy clearly explains what data we collect, why we hold it, and how it is used.
Here are the key points before you read the full details.
This privacy policy ("Policy") is issued by the organization operating the Cristal platform. It applies to Cristal's website, mobile app, and all related services.
By registering, logging in, or using any of Cristal's services, you are considered to have accepted the terms of this privacy policy. If you do not agree with this policy, please refrain from using Cristal.
Cristal collects user information in several ways. Full details are provided below:
Information You Provide Directly:
Automatically Collected Data:
The information we collect is used for the following purposes:
| Data Type | Purpose of Use | Legal Basis |
|---|---|---|
| Identity Information | Account creation & verification, KYC completion | Contractual Obligation |
| Payment Information | Deposit & withdrawal processing, transaction records | Contractual Obligation & Legal Compliance |
| Usage Data | Service improvement and personalised experience | Legitimate Interest |
| Device Information | Fraud prevention & security assurance | Legitimate Interest |
| Contact Information | Sending offers and updates (with your consent) | Consent |
If you no longer wish to receive marketing communications, you can turn off notifications in your account settings or submit a request to our support team.
Cristal never sells your personal data or shares it with third parties for commercial purposes. However, information may be shared in the following limited circumstances:
Cristal uses industry-leading technology to keep your information secure:
That said, no organisation can guarantee 100% security on the internet. On your end, please use a strong password and never share your account credentials with anyone.
Cristal does not retain data longer than necessary. Retention periods depend on the type of data and applicable legal requirements:
Once the designated retention period has passed, data is securely deleted or anonymised so that individuals can no longer be identified.
Cristal complies with international data protection standards. Under these standards, you have the following rights:
You may request to view the data Cristal holds about you.
You may request corrections to any inaccurate or outdated information.
You can request that your data be deleted under certain circumstances.
You may request that your data no longer be used for specific purposes.
You may request a copy of your data in a structured, portable format.
You can object to the processing of your data in specific circumstances.
To exercise these rights support@cristal.bestEmail us at. We typically respond within 30 business days. However, some data may not be deletable due to legal obligations.
Cristal's website and app use cookies and similar technologies. Types of cookies:
Manage cookies through your browser settings. Please note that disabling essential cookies may cause issues with login and payments.
Cristal's services are intended for users aged 18 and above. We do not knowingly collect any data from individuals under the age of 18.
If a minor registers and this comes to our attention, the account will be closed immediately and all collected data will be deleted.
Cristal may update this privacy policy at any time. For significant changes:
For any privacy-related questions or concerns, please contact us:
When you sign up anywhere online, the first question that comes to mind is — what are they going to do with my information? It's a fair question, and Cristal believes every user has the right to a straight answer. That's why this privacy policy is written in plain language — there's nothing hidden behind legal jargon.
Every piece of information Cristal collects has a specific reason behind it. Without a mobile number, payments cannot be processed. Without a date of birth, age verification is not possible. Without KYC, large withdrawals face legal restrictions. Each data point collected is necessary either to deliver our service or to meet a legal obligation.
The most important thing to know — Cristal never sells your data. We don't share it with ad companies. We don't pass it to data brokers in Bangladesh or anywhere else. Limited information is shared with bKash or Nagad to process payments, but only to complete the transaction — nothing more.
On the technical side, Cristal adheres to the highest industry security standards. We use the same level of encryption as banks. Our server facilities are protected physically and digitally, and staff access is strictly controlled — only authorised personnel can view specific data.
You also have a role to play in keeping your account secure. Use a strong password — at least 8 characters, mixing numbers and special characters. Keep two-factor authentication enabled. Avoid logging in over public WiFi. If anyone contacts you by phone or message claiming to be from Cristal and asks for your password or OTP, don't share it — it's always a phishing attempt.
There are a lot of misconceptions about cookies. Cookies aren't inherently bad — Cristal uses them to keep you logged in, remember your language preference, and understand which parts of the site get the most use. If you want to disable marketing cookies, you can do so through your browser settings.
For further questions about privacy, please reach out to the Cristal support team. Our support team is available 24 hours a day. Data requests, deletion requests, and other privacy-related matters are typically responded to within 24–48 hours.
Registration is completely free and takes just 2 minutes. Your data is always protected to international security standards.