crickx Privacy Policy – How We Protect Your Personal Data

crickx ("crickx", "we", "us", or "our") is the data controller responsible for personal data collected through the crickx platform at crickx.one and any associated mobile or progressive web applications (collectively, the "Platform").

For all data protection enquiries, including requests to exercise your rights under applicable data protection law, please contact the crickx Data Protection contact point:

• Email: [email protected]
• Subject line: Privacy / Data Request
• Response time: within 30 days of receipt of a verifiable request

This Privacy Policy applies to all registered users, prospective users, and visitors to the crickx Platform. By registering for a crickx account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

crickx collects personal data in the following categories, depending on your interaction with the Platform:

Registration & Identity Data:

• Full legal name, date of birth, nationality
• Email address and mobile phone number
• Username and encrypted password hash
• Government-issued identification documents (CNIC, passport) submitted for KYC verification
• Proof of address documents where required by KYC procedures

Financial & Transaction Data:

• JazzCash and Easypaisa account identifiers (masked)
• Bank account details (masked) for HBL, UBL, Meezan Bank, Bank Alfalah transfers
• Card type and last four digits for Visa and Mastercard transactions
• Cryptocurrency wallet address for USDT TRC20 transactions
• Full transaction history: deposits, withdrawals, bets placed, casino wagers, and winnings

Technical & Usage Data:

• IP address, device identifier, browser type, and operating system
• Session logs, login timestamps, and geolocation data (city/country level)
• Pages visited, features used, and interaction patterns on the crickx Platform
• Cookie identifiers and similar tracking technology data (see Section 6)

Communications Data:

• Content of support chat messages and emails sent to crickx
• Survey responses and feedback submitted through the Platform

crickx uses your personal data for the following purposes:

• Account management: Creating and maintaining your crickx account, processing crickx login authentication, and managing your PKR wallet balance.
• Payment processing: Facilitating deposits and withdrawals via JazzCash, Easypaisa, bank transfer, cards, and crypto. Verifying ownership of payment accounts.
• Identity verification (KYC): Verifying your age (18+), identity, and source of funds as required by applicable licensing and anti-money laundering obligations.
• Platform operation: Delivering cricket betting markets, casino games, live dealer services, and all other crickx Platform features you access.
• Responsible gaming: Monitoring account activity for signs of problem gambling. Applying self-exclusion, deposit limits, and cooling-off periods as requested or required.
• Fraud prevention & security: Detecting and preventing fraudulent transactions, unauthorised crickx login attempts, money laundering, and abuse of promotional offers.
• Customer support: Responding to your enquiries, resolving disputes, and handling feedback.
• Legal compliance: Meeting obligations under applicable international licensing conditions, anti-money laundering regulations, and data protection law.
• Marketing communications: Sending promotional offers and platform updates to opted-in users. You may unsubscribe at any time via account settings or by contacting [email protected].
• Platform improvement: Analysing aggregate usage data to improve the crickx Platform, betting markets, game catalogue, and payment experience.

crickx processes personal data on the following legal bases under applicable data protection frameworks:

• Contract performance: Processing necessary to deliver the crickx Platform services you have contracted for by accepting the Terms & Conditions — including account management, betting, casino, and payments.
• Legal obligation: Processing required to comply with KYC, anti-money laundering, licensing, and other applicable legal obligations.
• Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — where our legitimate interests are not overridden by your fundamental rights.
• Consent: Marketing communications and non-essential cookies, where we rely on your affirmative consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

crickx does not sell, rent, or trade your personal data. We may share your data with the following categories of third party only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, and USDT TRC20 processors — to facilitate deposits and withdrawals on your crickx account.
• KYC / identity verification providers: Third-party services that assist crickx in verifying user identity and age as required by licensing obligations.
• Game content providers: Casino game studios whose titles are hosted on the crickx Platform may receive anonymised session data necessary for game delivery and fairness auditing.
• Cloud and infrastructure providers: Hosting, database, and CDN providers operating under data processing agreements with crickx.
• Regulatory and law enforcement authorities: Where crickx is legally required to disclose personal data in response to a valid legal process, court order, or regulatory requirement.
• Professional advisors: Legal, audit, and compliance advisors under strict confidentiality obligations.

All third-party data processors engaged by crickx are contractually bound to process personal data only on crickx's instructions and in accordance with applicable data protection standards.

The crickx Platform uses cookies and similar tracking technologies. These fall into the following categories:

• Strictly necessary cookies: Required for crickx login session management, security, and core Platform functionality. These cannot be disabled without impairing Platform access.
• Functional cookies: Remember your language, currency display, and Platform preferences to personalise your crickx experience between sessions.
• Analytics cookies: Aggregate, anonymised data on how users navigate the crickx Platform, which games are played most, and where users encounter difficulties — used to improve the Platform.
• Marketing cookies: Used only where you have given explicit consent. Help crickx understand the effectiveness of promotional campaigns without identifying you individually to third parties.

You can manage cookie preferences via the crickx cookie consent tool displayed on your first Platform visit, or through your browser settings. Disabling non-essential cookies will not prevent you from accessing the crickx Platform but may affect certain personalisation features.

crickx retains personal data for as long as is necessary for the purposes described in this Privacy Policy, subject to the following retention guidelines:

• Account data and transaction records are retained for a minimum of 5 years from account closure to comply with anti-money laundering and licensing obligations.
• KYC documents are retained for the minimum period required by applicable licensing frameworks, typically 5 years from the completion of the KYC process.
• Customer support communications are retained for 3 years from the date of the interaction unless a longer period is required by an ongoing dispute or legal process.
• Technical and usage logs are retained for 13 months from the date of collection, after which they are anonymised or deleted.
• Marketing consent records are retained for the duration of your crickx account and for 3 years after unsubscription.

Following the expiry of the applicable retention period, crickx will securely delete or anonymise your personal data in accordance with our data destruction policy.

crickx implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and the crickx Platform.
• Encryption at rest for sensitive data categories including KYC documents and financial data.
• Access controls limiting crickx employee access to personal data on a strict need-to-know basis.
• Two-factor authentication available for all crickx user accounts and mandatory for crickx internal administrative access.
• Regular security assessments and penetration testing of the crickx Platform infrastructure.
• Incident response procedures providing for prompt notification in the event of a material data breach.

No data transmission over the internet is entirely secure. While crickx takes all reasonable steps to protect your data, users are also responsible for maintaining the security of their own crickx login credentials and devices.

crickx operates globally and your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, crickx ensures that appropriate safeguards are in place, which may include standard contractual clauses, adequacy decisions, or equivalent data protection mechanisms recognised under applicable international data protection frameworks.

In particular, data processed by crickx's payment partners (including JazzCash and Easypaisa) remains subject to those partners' own privacy policies and applicable Pakistani financial data protection requirements. By using crickx payment services, you consent to the necessary data sharing with payment processors for transaction completion.

Subject to applicable law and the conditions of our licensing obligations, you have the following rights in relation to your personal data held by crickx:

• Right of access: Request a copy of the personal data crickx holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data on your crickx account.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction: Request that crickx restricts the processing of your personal data in certain circumstances.
• Right to data portability: Receive a copy of your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object: Object to processing of your personal data based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, submit a request to [email protected] with the subject line Data Rights Request. crickx will respond within 30 days. Identity verification may be required before processing your request.

The crickx Platform is strictly prohibited for persons under the age of 18. crickx does not knowingly collect personal data from individuals under 18 years of age. If crickx becomes aware that personal data has been collected from a person under 18, that data will be deleted and the associated account closed immediately.

Age verification is enforced at registration and through ongoing KYC procedures. If you believe a minor has registered on the crickx Platform, please notify us immediately at [email protected].

crickx reserves the right to update this Privacy Policy at any time. When material changes are made, crickx will notify registered users by email to the address on file or via a prominent notice on the Platform. The date of the most recent revision is displayed at the top of this page.

Your continued use of the crickx Platform following notification of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the updated Privacy Policy, you must cease using the Platform and request account closure in accordance with the crickx Terms & Conditions.

For questions, concerns, or requests relating to this Privacy Policy or crickx's data protection practices, please contact:

• Email: [email protected]
• Subject line: Privacy / Data Request
• Support hours: 09:00 – 01:00 PKT (UTC+5), 7 days a week

For responsible gaming assistance, please visit the crickx Responsible Gaming page. For platform terms, see the crickx Terms & Conditions.