Cricket CX Privacy Policy — How We Protect Your Data

1Who We Are

Cricket CX operates the online sports betting and casino platform available at cricketcx.onl. For the purposes of this Privacy Policy, Cricket CX is the data controller — meaning we are responsible for determining how and why your personal data is processed.

Our platform is built specifically for players in Pakistan. Every feature, payment method and customer support interaction is designed with Pakistani users in mind. This Privacy Policy applies to all personal data collected from players using Cricket CX, regardless of how they access the platform — whether through a mobile browser, desktop browser or any other device.

If you have any questions about this policy or about how Cricket CX handles your data, you can reach us at any time at support@cricketcx.onl.

2Data We Collect

Cricket CX collects personal data through three main channels: information you provide directly, information collected automatically and information received from third parties.

Information You Provide Directly

• Registration data: Your full name, date of birth, phone number and email address (if provided) when you create a Cricket CX account.
• Identity verification documents: CNIC, passport or other government-issued identification submitted during KYC verification.
• Payment information: Details of your Easypaisa, JazzCash, NayaPay, SadaPay, bank account or Visa/Mastercard used for PKR deposits and withdrawals. Full card numbers are not stored by Cricket CX — they are tokenised by our payment processor.
• Support communications: Messages, queries and complaints you submit to Cricket CX's support team via email or live chat.
• Responsible gaming preferences: Deposit limits, loss limits, cooling-off requests or self-exclusion submissions.

Information Collected Automatically

• Device and browser data: Device type, operating system, browser type and screen resolution.
• Usage data: Pages visited on Cricket CX, games played, bet history, session duration and navigation patterns.
• IP address and approximate location: Used for fraud prevention and to verify access from Pakistan.
• Cookies and similar technologies: Detailed in Section 6 of this policy.

Information From Third Parties

Cricket CX may receive limited personal data from third-party identity verification providers used during KYC checks, and from payment processors confirming transaction status. This data is used only in connection with the purpose for which it was shared.

3How We Use Your Data

Cricket CX uses the personal data we collect for the following purposes:

• Account management: Creating and maintaining your Cricket CX player account, authenticating you when you log in and managing your account settings and preferences.
• Payment processing: Processing your PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer and Visa/Mastercard. Verifying that payment methods belong to you.
• Identity verification (KYC): Verifying your age (18+) and identity before processing significant withdrawals or where we are legally required to do so.
• Fraud prevention and security: Detecting and preventing fraudulent account activity, duplicate accounts, money laundering and other prohibited behaviour. Monitoring for unusual transaction patterns or login activity.
• Game and betting services: Recording and settling your bets, maintaining your game history and calculating bonus eligibility and wagering progress.
• Customer support: Responding to your queries, resolving complaints and providing assistance when requested.
• Responsible gaming: Enforcing deposit limits, loss limits and self-exclusion periods you have set, and identifying patterns of play that may indicate problem gambling.
• Platform improvement: Analysing aggregated usage data to understand how Cricket CX is being used and where improvements can be made. This analysis uses anonymised or pseudonymised data wherever possible.
• Marketing communications: Sending you information about promotions, bonuses and relevant Cricket CX news — but only if you have opted in. See Section 11 for full details and how to opt out.

4Legal Basis for Processing

Cricket CX processes your personal data on the following legal grounds:

• Contractual necessity: Processing your registration data, payment information and bet history is necessary to fulfil the contract between you and Cricket CX — specifically, to operate your player account and settle your bets.
• Legal obligation: Identity verification (KYC) and transaction monitoring are required by applicable financial compliance regulations. We are legally required to carry out these checks and retain the relevant records for specified periods.
• Legitimate interests: Fraud prevention, platform security, detecting duplicate accounts and improving the Cricket CX platform are processing activities we carry out based on our legitimate interests as an operator, balanced against your rights and expectations as a player.
• Consent: Marketing communications are sent only where you have provided explicit consent. You can withdraw this consent at any time. See Section 11.

5Who We Share Your Data With

Cricket CX does not sell your personal data. We share data only with the following categories of third parties, only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank partners and Visa/Mastercard networks receive the minimum data necessary to process your PKR transactions. These providers operate under their own privacy policies and security standards.
• Identity verification providers: Third-party KYC service providers receive identity document data for the purpose of verifying your age and identity. They process this data under strict contractual data processing agreements with Cricket CX.
• Game software providers: Where Cricket CX hosts games from third-party software providers, those providers may receive technical data (such as a pseudonymous player identifier and bet values) necessary to run the game. They do not receive your full personal profile.
• Fraud and security providers: Anti-fraud and cybersecurity service providers may process IP addresses, device fingerprints and behavioural data to detect and prevent fraudulent activity on Cricket CX.
• Legal and regulatory authorities: Cricket CX will disclose personal data to law enforcement, regulatory bodies or courts where required by applicable law or a valid legal order. We will notify affected players where legally permitted to do so.

6Cookies & Tracking Technologies

Cricket CX uses cookies and similar technologies on its platform. Here is a plain breakdown of what we use and why:

Most browsers allow you to control cookies through their settings. Note that disabling essential cookies will prevent Cricket CX from functioning correctly. For optional cookies, using your browser's cookie controls is the most direct way to opt out.

7Data Security

Cricket CX takes the security of your personal data seriously. The following technical and organisational measures are in place to protect your information:

• TLS encryption is applied to all data transmitted between your device and Cricket CX's servers. Any connection to Cricket CX that is not secured by TLS is rejected.
• Encryption at rest is applied to sensitive data stored on Cricket CX's servers, including identity documents, payment information and account credentials.
• Access controls: Access to personal data within Cricket CX's systems is restricted on a need-to-know basis. Staff members can only access the data required for their specific role. All access is logged.
• Password security: Account passwords on Cricket CX are stored as salted cryptographic hashes — not as plain text. Cricket CX staff cannot see your password.
• Regular security reviews: Cricket CX conducts regular internal security reviews and works with third-party security specialists to identify and address vulnerabilities in the platform.
• Data breach response: In the event of a data breach that poses a risk to players' rights, Cricket CX will notify affected players as quickly as possible and take immediate steps to contain the breach and mitigate harm.

8Data Retention

Cricket CX retains personal data only for as long as necessary for the purpose it was collected and to meet applicable legal retention requirements. The following general retention periods apply:

• Account and transaction data is retained for a minimum of 5 years from the date of the last transaction, as required by financial compliance obligations. After this period, data is deleted or fully anonymised.
• Identity verification documents (CNIC, passport copies) are retained for the period required by applicable KYC regulations, typically 5 years from the date of verification or account closure.
• Support communications are retained for 2 years from the date of the communication, to allow Cricket CX to review complaint history if a similar issue arises.
• Marketing preferences and consent records are retained for as long as your account is active and for 2 years thereafter, to maintain a record of your opt-in or opt-out history.
• Analytics data is retained in anonymised or aggregated form indefinitely, as it no longer constitutes personal data after anonymisation.

When your Cricket CX account is closed — whether by you voluntarily or by Cricket CX due to a terms violation — personal data is flagged for deletion and removed from active systems at the applicable retention period's end. Where a legal hold applies (for example, an ongoing investigation), data may be retained beyond the standard period until the hold is lifted.

9Your Rights Over Your Personal Data

As a Cricket CX player, you have the following rights in relation to your personal data. To exercise any of these rights, contact support@cricketcx.onl with your registered phone number and a description of your request. Cricket CX will respond within 30 days.

Please note that deletion requests may not be fulfilled where Cricket CX is legally required to retain the relevant data. In such cases, Cricket CX will explain what data it is required to retain and for how long.

10Children's Privacy

Cricket CX is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. The age verification checks we carry out during account registration and before processing significant withdrawals are specifically designed to prevent underage players from using the platform.

If Cricket CX becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted and the associated account closed immediately. If you have reason to believe that a minor has registered an account on Cricket CX, please notify us at support@cricketcx.onl so we can take immediate action.

11Marketing Communications

Cricket CX may send you promotional communications about bonuses, new games, PSL season offers and other platform news. We do this only where you have explicitly opted in to receive such communications.

Marketing communications from Cricket CX may be delivered via:

• SMS to your registered phone number
• Email to your registered email address (if provided)
• In-platform notifications when you are logged in to your Cricket CX account

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email from Cricket CX
• Replying STOP to any marketing SMS from Cricket CX
• Adjusting your communication preferences in your Cricket CX account settings
• Emailing support@cricketcx.onl with a request to be removed from marketing lists

Opting out of marketing will not affect your ability to receive transactional communications from Cricket CX — such as deposit confirmations, withdrawal updates, account security alerts and support responses. These communications are a necessary part of operating your account and are not marketing.

12Policy Updates

Cricket CX reviews this Privacy Policy regularly and updates it when our data practices change or when required by applicable law. The date of the most recent update is always shown at the top of this page.

Where an update materially affects how we use your personal data — for example, if we add a new category of processing or a new type of third-party sharing — Cricket CX will notify registered players via SMS or email at least 7 days before the change takes effect, and will update this policy page accordingly.

For minor administrative updates that do not change the substance of how your data is handled, Cricket CX may update this policy without advance notice. Continued use of Cricket CX after a policy update constitutes acceptance of the updated terms.

If you disagree with any update to this Privacy Policy, you are entitled to request account closure. Contact support@cricketcx.onl and we will process your closure request within 5 business days. Any real-money balance at the time of closure will be returned to your registered PKR payment method.

13Contact & Complaints

If you have questions, concerns or complaints about how Cricket CX handles your personal data, please contact us in the first instance through the following channel:

Cricket CX takes all privacy complaints seriously. When you submit a privacy complaint, we will:

1. Acknowledge receipt of your complaint within 3 business days.
2. Investigate the complaint and provide a substantive response within 30 days.
3. Where the complaint is upheld, take prompt corrective action and inform you of what steps have been taken.
4. Where the complaint is not upheld, provide a clear explanation of the reasons.

If you are not satisfied with Cricket CX's response to a privacy complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction. Cricket CX will cooperate fully with any such investigation.