CrickX Privacy Policy

This Privacy Policy (the "Policy") describes how CrickX ("we", "us", "our" or the "Platform") collects, uses, stores, shares and protects the personal data of individuals ("Users", "Players" or "you") who access or use the CrickX website at https://crickx.cam and its associated services.

CrickX is an online sports betting and casino entertainment platform operated for adult users. We are committed to processing personal data lawfully, fairly and transparently, in accordance with applicable data protection legislation. This Policy applies to all personal data processed in connection with your use of the Platform, including data provided during registration, account operation, payment transactions, customer support interactions and browsing activity on the CrickX website.

By registering an account on CrickX or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform.

The following terms carry specific meanings throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person. This includes, but is not limited to, your name, email address, date of birth, residential address, payment details and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, modification or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, the Data Controller is the CrickX operating entity.
• "Data Processor" means a third party that processes Personal Data on behalf of CrickX, subject to our instructions and appropriate data protection agreements.
• "KYC" means Know Your Customer — the identity verification process used to confirm your identity, age and eligibility in accordance with regulatory requirements.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, analytics and user-experience features.
• "Sensitive Data" means a subset of Personal Data warranting heightened protection, including financial account details and government-issued identification documents.

CrickX collects the following categories of personal data in connection with your use of the Platform:

CrickX collects personal data through the following means:

4.1 Directly from You

When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, respond to a survey or participate in a promotion, you provide us with personal data directly. You are not required to provide data beyond what is necessary for the specific purpose; however, withholding required data may prevent you from accessing certain Platform features.

4.2 Automated Technical Collection

When you access the Platform, our servers automatically collect technical data including your IP address, browser type, operating system, session information and interaction data. This collection occurs via server logs, cookies and similar tracking technologies as described in Section 9.

4.3 Third-Party Sources

Where permitted by applicable law, CrickX may receive personal data from third-party sources including:

• Identity verification and KYC service providers engaged to confirm your identity and age
• Payment processing partners (to confirm payment method ownership and transaction legitimacy)
• Fraud prevention and AML screening databases
• Responsible-gambling self-exclusion registers where applicable

CrickX processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are:

• Contractual necessity: Processing your identity, contact and financial data is necessary to operate your account, process bets and handle payments as part of our contractual relationship with you.
• Legal obligation: KYC, AML screening and certain data retention obligations arise from the regulatory requirements imposed on the Platform's operating licence. We process the relevant data to comply with these obligations.
• Legitimate interests: We process technical and usage data for fraud prevention, platform security, responsible-gambling monitoring and service improvement, where these interests are not overridden by your rights and interests.
• Consent: Where we seek to send you marketing communications or deploy non-essential cookies, we will obtain your prior consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

CrickX uses your personal data for the following purposes:

• Account management: Creating and maintaining your Player Account, enabling login and protecting account security.
• Identity and age verification: Confirming that you meet the minimum age requirement (18+, or higher where the operator/licence jurisdiction requires) and are eligible to use the Platform.
• Payment processing: Facilitating deposits and withdrawals, verifying payment method ownership and preventing financial fraud.
• AML and regulatory compliance: Screening transactions and account activity against applicable Anti-Money Laundering requirements and reporting obligations.
• Customer support: Responding to your queries, complaints and account-related requests through live chat, email and other support channels.
• Responsible-gambling monitoring: Analysing your usage patterns to identify indicators of problem-gambling behaviour and, where appropriate, proactively contacting you with responsible-gambling information.
• Security and fraud prevention: Detecting and preventing unauthorised access, account fraud, bonus abuse and other prohibited conduct.
• Service improvement: Analysing aggregated and anonymised usage data to improve Platform features, fix bugs and optimise user experience.
• Marketing (with consent): Sending you promotional communications about CrickX offers and events where you have consented to receive such communications. You may opt out at any time.
• Legal proceedings: Retaining and disclosing data as required to defend or pursue legal claims.

CrickX does not sell, rent or trade your personal data to any third party for commercial purposes. We share personal data with third parties only in the circumstances described below, and only to the extent necessary for the stated purpose.

7.1 Service Providers and Data Processors

We engage carefully selected third-party service providers who process personal data on our behalf, including: KYC and identity verification providers; payment gateway and fraud-prevention partners; hosting and infrastructure providers; live-chat and customer-support platform operators; and email delivery services. All such processors are bound by written data processing agreements obligating them to process data only on our instructions and in accordance with applicable data protection law.

7.2 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, regulatory authorities or courts where required to do so by law, court order or in connection with the investigation of alleged criminal activity, including money laundering, fraud or match-fixing. We will notify you of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition or sale of all or part of CrickX's business assets, personal data held by CrickX may be transferred to the acquiring entity. We will notify affected Users of any such transfer and the implications for their data before it takes effect.

7.4 No Sale of Data

CrickX collects and processes financial information in connection with deposits and withdrawals. This includes records of transaction amounts, dates, payment method categories and, where required by KYC obligations, proof of payment method ownership.

For the convenience of Pakistani Users, CrickX references familiar local payment methods including Easypaisa, JazzCash, Raast (SBP), HBL Bank Transfer, UBL Bank Transfer, Meezan Bank, Bank Alfalah and cryptocurrency options. The inclusion of these names does not imply that these providers endorse, support or are affiliated with gambling activity. Payment-provider names are used as market-familiarity references only, and actual transaction availability depends on the policies of each provider.

Full payment card numbers (where applicable) are processed exclusively by our payment gateway partners using PCI-DSS-compliant systems. CrickX does not store full card numbers on its own servers. Transaction records, however, are retained as required by our AML obligations and in accordance with Section 10 of this Policy.

CrickX uses cookies and similar browser-based technologies to operate the Platform, enhance user experience and collect analytical data. Cookies are small text files stored on your device when you visit the Platform.

9.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled without preventing core features (such as login session management) from working. No consent is required for these.
• Functional cookies: Enable personalisation features such as your preferred odds format, language setting and responsible-gambling limit preferences.
• Analytical cookies: Used to understand how users interact with the Platform — pages visited, session duration and error reports — to help us improve performance. These are used only on an aggregated, anonymised basis where possible.
• Marketing cookies: Used to deliver relevant promotional content within the Platform. Marketing cookies are only deployed with your explicit consent.

9.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings or through the cookie preference centre available on the Platform. Please be aware that disabling certain cookies may affect Platform functionality. Strictly necessary cookies cannot be disabled without impairing your ability to use core features.

CrickX retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active account data: Retained for the duration of your account and for a minimum of five years following account closure, in compliance with AML record-keeping obligations.
• KYC and identity documents: Retained for the period required by the operator's licence conditions and applicable AML regulations, typically five years from the date of collection or date of last transaction (whichever is later).
• Financial transaction records: Retained for a minimum of five years to satisfy AML and financial record-keeping requirements.
• Customer support communications: Retained for up to three years following resolution of the relevant query or complaint, unless a dispute requires longer retention.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance.
• Technical and log data: Typically retained for up to 12 months, unless required for an active security investigation or legal matter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you.

CrickX implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Key measures include:

• TLS/SSL encryption for all data in transit between your device and our servers
• Encryption at rest for sensitive data stored on CrickX infrastructure
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Multi-factor authentication for internal system access
• Regular security vulnerability assessments and penetration testing
• Incident response procedures with defined timelines for breach notification where required

Subject to applicable law and any restrictions arising from our legal obligations (such as AML record-keeping requirements), you hold the following rights in respect of your personal data held by CrickX. You may exercise any of these rights by contacting our support team using the details in Section 16.

Please note that certain rights are subject to exceptions. For example, we cannot delete data that we are legally required to retain for AML compliance purposes. Where we are unable to fulfil a request in full, we will explain the reason.

CrickX is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18, or any higher minimum age required by the operator and licence jurisdiction. Age verification is a mandatory part of the KYC process, and accounts found to belong to minors are closed immediately with any associated funds returned where appropriate.

If you are a parent or guardian and believe that a minor has registered an account on CrickX using false information, please contact our support team immediately. We will take prompt action to investigate and close the account in question.

CrickX may transfer your personal data to service providers and infrastructure located outside your country of residence, including outside Pakistan. Such transfers may occur for the purposes of account operation, payment processing, KYC verification and customer support.

Where personal data is transferred internationally, we ensure that appropriate safeguards are in place, which may include: standard contractual clauses approved by a relevant data protection authority; adequacy decisions; or binding corporate rules. We take reasonable steps to ensure that any recipient of your personal data in a third country provides a level of protection that is at least equivalent to that applicable in the country from which the data was transferred.

If you would like further information about the safeguards in place for international transfers of your data, please contact us using the details provided in Section 16.

CrickX reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law or Platform features. When we make material changes, we will notify you by displaying a prominent notice on the Platform and, where appropriate, by sending a notification to your registered email address.

The "Last updated" date at the top of this page indicates when the current version came into effect. We encourage you to review this Policy periodically. Your continued use of the CrickX Platform following the publication of an updated Policy constitutes acceptance of the revised terms.

Previous versions of this Privacy Policy are available upon request by contacting our support team.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how CrickX handles your personal data, please reach out to our team. We will acknowledge your request and respond within a reasonable timeframe, and in any event within 30 days for formal data-subject rights requests.

If you are dissatisfied with our response to a privacy complaint, you may have the right to escalate your complaint to the relevant supervisory authority in the jurisdiction where CrickX holds its operational licence. Contact details for the supervisory authority are available from our support team upon request.