crickx Privacy Policy

This Privacy Policy is issued by crickx ("crickx", "we", "us", "our"), the operator of the online casino and sports betting platform available at crickx.lat and its associated subdomains (the "Platform"). crickx acts as the data controller in respect of personal data collected from users ("you", "Player", "User") who access or use the Platform.

crickx operates under international gaming licensing standards and is committed to handling personal data responsibly, in a manner consistent with applicable data protection principles and the requirements of the jurisdiction in which crickx is licensed. Where Pakistani data protection legislation applies to your data, crickx seeks to comply with those requirements alongside its international obligations.

For any questions relating to this Privacy Policy or to the manner in which crickx handles personal data, please contact crickx's data support team at [email protected].

crickx collects personal data from users through several channels, including the account registration process, ongoing platform use, payment transactions, and customer support interactions. The categories of data collected include:

2.1 Registration & Account Data

• Identity data: Full legal name, date of birth, gender (where provided).
• Contact data: Pakistani mobile number (primary account identifier), email address.
• Authentication data: Username, hashed password, OTP history (for security audit purposes only — OTPs themselves are not retained after expiry).
• Profile data: Preferred language, currency (PKR), account settings and preferences.

2.2 Identity Verification Data

• National Identity Card (CNIC) number and copy, passport details, or driver's licence, where provided for KYC/AML verification purposes.
• Selfie or video verification images, where required as part of the identity verification process.

2.3 Transaction & Financial Data

• Deposit and withdrawal amounts, timestamps, and transaction reference numbers.
• Payment method identifiers (e.g. the last four digits of a mobile wallet number, bank account name) — not full account credentials.
• Account balance history, betting and gaming transaction records.

2.4 Usage & Technical Data

• IP address, device type, operating system, browser type and version.
• Session duration, pages visited, games played, bet history, and click-path data.
• Network operator and approximate geographic location (city-level — not GPS coordinates).

2.5 Communications Data

• Records of customer support interactions (live chat transcripts, support ticket content).
• Responses to surveys or feedback requests, where voluntarily provided.

crickx uses the personal data it collects for the following specific purposes:

crickx processes your personal data only where a valid legal basis exists. The primary legal bases crickx relies upon are:

• Contract Performance: Processing that is necessary to deliver the crickx platform services you have registered for and agreed to under the Terms & Conditions — including account management, game access, and payment processing.
• Legal Obligation: Processing required to comply with crickx's obligations under applicable law and its gaming licence conditions, including KYC identity verification, AML transaction monitoring, age verification, and regulatory reporting.
• Legitimate Interest: Processing necessary for crickx's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and aggregated usage analytics — where such interests are not overridden by your fundamental rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent, primarily in relation to receiving optional promotional communications from crickx. Consent may be withdrawn at any time by updating your communication preferences in your account settings.

crickx handles payment-related data with particular care given its sensitive nature. When you deposit or withdraw via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, your transaction is processed through the respective payment provider's own systems, which are subject to their own privacy and security frameworks. crickx receives transaction confirmations and reference data, but does not receive or store full mobile wallet PINs, full bank account numbers, or complete card numbers.

5.1 Know Your Customer (KYC)

As part of crickx's obligations under its gaming licence and in alignment with international AML standards, crickx may require you to complete identity verification before processing withdrawal requests or when account activity triggers a review. This typically involves submitting a copy of your CNIC, passport, or driver's licence. KYC documents are reviewed by authorised crickx personnel, stored securely in encrypted form, and retained only for the period required by applicable regulatory obligations. KYC documents are not shared outside of crickx's authorised verification and compliance teams except where required by law or requested by a relevant regulatory authority.

crickx uses cookies and similar session-management technologies on the Platform to deliver and maintain core platform functionality, enhance your user experience, and conduct aggregated platform analytics. Cookies used by crickx fall into the following categories:

• Essential Cookies: Required for the crickx Platform to function correctly. These include session authentication tokens that keep you logged in during your visit, security tokens for CSRF protection, and preferences cookies for language and currency settings. These cookies cannot be disabled without impairing your ability to use crickx.
• Functional Cookies: Used to remember your preferences across sessions, such as your preferred casino game categories, interface settings, and notification preferences. These improve your experience on return visits.
• Analytics Cookies: Used to collect aggregated and anonymised data about how users navigate the crickx Platform — which game categories are most visited, which pages load slowest, and where users encounter friction. This data is used exclusively to improve the crickx product and is not linked to identifiable individuals.

crickx does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair platform functionality, including the ability to remain logged in during a session.

crickx does not sell your personal data. crickx shares your personal data only in the following circumstances and only with the categories of recipients described below:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other payment providers through which crickx facilitates your transactions. These providers receive only the data necessary to complete the relevant transaction and are bound by their own regulatory and privacy obligations.
• Identity Verification Services: Third-party KYC service providers who assist crickx in verifying the identity and age of account holders. These providers operate under contractual data processing agreements with crickx.
• Game Content Providers: crickx's game library is powered by third-party software studios (including PG Soft, Pragmatic Play, Jili, Evolution Gaming, and SA Gaming). These providers may receive aggregated game session data for game performance and fairness audit purposes. They do not receive your name, contact information, or payment details.
• Regulatory Authorities: Where required by crickx's gaming licence conditions, AML law, or a lawful regulatory request, crickx may be required to disclose player data to gaming regulators, financial intelligence units, or other competent authorities.
• Law Enforcement: Where required by a valid court order, legal process, or applicable law, crickx may disclose personal data to law enforcement agencies. crickx will seek to notify affected users of such disclosures unless prohibited from doing so by law.
• Professional Advisors: Legal, accounting, and auditing professionals engaged by crickx under appropriate confidentiality obligations, where necessary in connection with crickx's legitimate business and compliance operations.

crickx implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• End-to-End Encryption: All data in transit between your device and crickx servers is encrypted using TLS 1.2 or higher with 256-bit key strength.
• Password Hashing: Passwords are stored exclusively as salted cryptographic hashes using industry-standard algorithms. crickx staff cannot read your password in plain text.
• OTP Two-Factor Authentication: Sensitive account actions — including password resets, new device logins, and large withdrawals — require OTP verification via your registered Pakistani mobile number.
• Access Controls: Access to personal data within crickx's systems is restricted on a need-to-know basis. Staff who handle player data are subject to confidentiality obligations and receive regular data protection training.
• Infrastructure Security: crickx's platform infrastructure is hosted in data centres with industry-standard physical and network security controls, regular penetration testing, and automated threat monitoring.
• Incident Response: crickx maintains documented procedures for identifying, investigating, and responding to data security incidents, including procedures for notifying affected users and relevant authorities within required timeframes where a reportable breach has occurred.

Despite these measures, no digital platform can guarantee absolute security. If you have reason to believe your crickx account or personal data has been compromised, contact [email protected] immediately.

crickx retains personal data for no longer than necessary to fulfil the purposes for which it was collected, or as required to comply with applicable legal, regulatory, and contractual obligations. Key retention periods applied by crickx are as follows:

At the end of the applicable retention period, personal data is either securely deleted or rendered permanently anonymous such that it can no longer be linked to an identifiable individual.

As a crickx user, you hold the following rights in relation to your personal data, subject to applicable law and regulatory limitations:

• Right of Access: You may request a copy of the personal data crickx holds about you. crickx will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data crickx holds about you is inaccurate or incomplete, you have the right to request correction. Many profile data fields can be updated directly in your account settings.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. Note that some data must be retained to comply with crickx's legal and regulatory obligations (e.g. AML records), and erasure requests in respect of such data may be declined on that basis.
• Right to Restrict Processing: You may request that crickx restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of the data while crickx investigates.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you may request a machine-readable copy of the data you have provided to crickx.
• Right to Object: You may object to processing based on crickx's legitimate interest, including profiling for fraud prevention. crickx will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g. promotional communications), you may withdraw consent at any time via your account settings, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact crickx's data support team at [email protected]. crickx may require you to verify your identity before processing a data rights request. crickx will not charge a fee for handling reasonable requests.

crickx's services are strictly limited to individuals aged 21 years and above. crickx does not knowingly collect or process personal data from persons under the age of 21. If crickx becomes aware that it holds personal data from a person under 21, that data will be deleted promptly and the associated account will be permanently closed. All funds in such an account will be returned to the payment source where technically feasible, or forfeited where such return is not possible.

If you are a parent or guardian and believe that a person under 21 in your care has created a crickx account, please contact crickx support immediately at [email protected] with details. crickx will investigate and act promptly.

crickx is an internationally operated platform. As a result, your personal data may be processed or stored on servers located outside of Pakistan, including in the jurisdiction where crickx's gaming licence is held, and in locations where crickx's technology infrastructure partners operate. Where personal data is transferred across borders, crickx ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards applied by crickx for international transfers include: contractual clauses with data processors and sub-processors that bind them to equivalent data protection standards; selection of processors operating under recognised international security certifications; and limitation of data shared in international transfers to the minimum necessary for the processing purpose.

crickx reviews this Privacy Policy on at least an annual basis and may update it at any time to reflect changes in our data practices, applicable law, regulatory requirements, or crickx's services. Material changes to this Privacy Policy — particularly those that affect how crickx uses your personal data or your rights in relation to it — will be communicated to registered players via the mobile number or email address on file, or by prominent notice on the crickx Platform, before the changes take effect.

Minor clarifications, corrections to typographical errors, or updates that do not materially affect the substance of the Policy may be made without specific individual notification. The date at the top of this Privacy Policy reflects the date on which the most recently effective version was published.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how crickx has handled your personal data, please contact the crickx data support team:

• Email: [email protected]
• Subject line: "Privacy — [Your crickx Username]" for fastest routing
• Response time: crickx aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 calendar days
• Language: crickx accepts privacy-related correspondence in both English and Urdu

If you are dissatisfied with crickx's response to a privacy-related complaint, you may refer the matter to the relevant gaming regulatory authority under whose licence crickx operates, or to the relevant data protection supervisory authority in your jurisdiction. crickx will co-operate fully with any such regulatory enquiry.