Cricex Privacy Policy

01 Introduction

This Privacy Policy (the "Policy") describes how Cricex, operating under the domain cricex.cam (hereinafter "Cricex", "we", "us" or "our"), collects, uses, stores, shares and protects personal data provided by or generated from users ("you", "User") of the Cricex platform.

Cricex is an English-language online betting information and platform reference service designed for Pakistani users. Our content covers sports betting — with particular depth in cricket, PSL/T20 and ICC tournament markets — alongside football, UFC, live casino, slot games and instant-win content. As a result, we process a range of personal data categories during the course of providing our services, including account registration data, identity verification records, financial transaction data and behavioural usage data.

This Policy applies to all personal data processed in connection with the Cricex website, its mobile interface, customer support channels (including live chat and email), and any related services. It should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated into our broader user agreement framework.

If you are accessing Cricex from Pakistan, please be aware that this Policy is governed by the data protection framework of the jurisdiction in which Cricex holds its operating license, not Pakistani data protection legislation. Users are responsible for understanding how their local laws interact with their use of our platform.

02 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

03 Data Controller

The Data Controller for all Personal Data collected through the Cricex Platform is the legal entity operating cricex.cam under its applicable gaming and data protection licensing arrangements. The Platform operates under an international gaming license; details of the applicable jurisdiction are available on request through our support team.

Cricex does not operate under the jurisdiction of Pakistan's data protection framework, nor does it claim authorisation from the Government of Pakistan, the Pakistan Telecommunication Authority, the State Bank of Pakistan or any Pakistani regulatory body. Users accessing Cricex from Pakistan do so under the governance framework of the Platform's operating license jurisdiction.

For all data-related enquiries, Users may contact our Data Protection contact via the details provided in Section 15 of this Policy.

04 Personal Data We Collect

Cricex collects Personal Data through several channels: information provided directly by Users during registration and account management; data generated automatically through Platform usage; and information obtained from third-party verification and payment service providers. The categories of data we collect include, but are not limited to:

4.1 Registration & Identity Data

• Full legal name and date of birth;
• Residential address (including city — e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar);
• Email address and contact number;
• Username and encrypted password credentials;
• Nationality and country of residence.

4.2 Identity Verification (KYC) Data

• Government-issued identity document scans (e.g., CNIC, passport);
• Proof of address documentation (e.g., utility bills, bank statements);
• Selfie or facial image data where required for biometric identity matching;
• Source of funds documentation where triggered by compliance thresholds.

4.3 Financial & Transaction Data

• Deposit and withdrawal amounts and transaction timestamps;
• Payment method references (e.g., mobile wallet identifiers for services such as Easypaisa and JazzCash, or bank account references for HBL, UBL, Meezan Bank, Bank Alfalah and Raast-linked accounts). These references are collected solely for transaction processing — use of these names does not imply endorsement of gambling by the respective payment providers;
• Cryptocurrency wallet addresses where digital asset deposits are used;
• Bet history, wagering records and account balance information.

4.4 Technical & Usage Data

• IP address, device type, browser type and operating system;
• Session duration, pages visited and navigation paths;
• Geolocation data derived from IP address (not precise GPS data);
• Log data, error reports and Platform performance metrics.

4.5 Communication Data

• Records of live chat conversations, email correspondence and support ticket submissions;
• Responses to surveys, promotional participation and feedback submissions.

05 Purposes of Processing & Legal Basis

Cricex processes Personal Data only where a lawful basis for processing exists. The primary purposes and their corresponding legal bases are set out below:

06 Data Sharing & Third Parties

Cricex does not sell Personal Data to third parties under any circumstances. We may share Personal Data with the following categories of recipients only where necessary and under appropriate data-sharing controls:

• KYC and Identity Verification Providers: Third-party services engaged to verify identity documents and conduct due diligence checks. These providers act as Data Processors under contractual data processing agreements.
• Payment Processing Partners: Financial institutions and payment gateway operators required to process deposit and withdrawal transactions. Data shared is limited to what is necessary for transaction execution.
• Cloud Infrastructure Providers: Hosting and data storage providers operating the infrastructure on which the Cricex Platform runs. All such providers are vetted for security standards and operate under data processing agreements.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order or regulatory directive, Cricex may disclose Personal Data to competent authorities. Such disclosures will be limited to the minimum data required to satisfy the legal obligation.
• Anti-Fraud and Financial Crime Screening Services: Industry-standard screening tools used to identify patterns associated with money laundering, match-fixing or multi-account abuse. Data shared is handled under strict confidentiality controls.
• Professional Advisors: Legal counsel, auditors and compliance consultants where necessary for the administration of the business, subject to professional confidentiality obligations.

Cricex does not share Personal Data with third parties for their own independent marketing or commercial purposes.

07 International Data Transfers

Given the international nature of online gaming operations, Personal Data processed by Cricex may be transferred to, stored in, or accessed from countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

Where such transfers occur, Cricex ensures that appropriate safeguards are in place, which may include standard contractual clauses, binding corporate rules, adequacy decisions applicable to the receiving jurisdiction, or other transfer mechanisms recognised under the applicable data protection framework.

By using the Cricex Platform, you acknowledge that your Personal Data may be transferred internationally in accordance with the safeguards described in this Policy.

08 Data Retention

Cricex retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Account Data: Retained for the duration of the active Account relationship and for a period of up to five (5) years following Account closure, or longer where required by applicable gaming regulations or anti-money laundering legislation.
• KYC Documents: Retained for the minimum period required by the applicable gaming license regulatory framework, typically five (5) years from the date of submission or Account closure.
• Financial Transaction Records: Retained for up to seven (7) years in accordance with standard financial record-keeping obligations under applicable law.
• Support and Communication Records: Retained for up to three (3) years following the resolution of a support interaction, unless a longer period is required for ongoing dispute or regulatory purposes.
• Technical and Usage Data: Typically retained in anonymised or aggregated form for analytical purposes; identifiable usage logs are retained for up to twelve (12) months.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with standard data destruction procedures.

09 Security Measures

Cricex implements a range of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include, but are not limited to:

• TLS/SSL encrypted connections for all data transmitted between your device and the Platform;
• Encrypted storage of passwords and sensitive account credentials — passwords are never stored in plain text;
• Two-factor authentication (2FA) options for User Account access;
• Access controls ensuring that internal staff access to Personal Data is limited to those with a documented need and appropriate authorisation;
• Regular security assessments and penetration testing of Platform infrastructure;
• Incident response procedures for detecting, containing and notifying affected parties of data security breaches within applicable regulatory timeframes.

10 Cookies & Tracking Technologies

The Cricex Platform uses cookies and similar tracking technologies to operate core Platform functions, analyse usage patterns and, where applicable and with your consent, to serve personalised content.

Categories of cookies used on Cricex:

• Strictly Necessary Cookies: Required for the Platform to function — including session management, security tokens and load balancing. These cannot be disabled without rendering the Platform unusable.
• Functional Cookies: Store your preferences, such as language settings and odds format selection (decimal, fractional), to improve your experience across sessions.
• Analytics Cookies: Used to understand how Users interact with the Platform — for example, which pages are visited most frequently and where sessions typically end. Data collected is aggregated and used to improve the product.
• Marketing Cookies: Where consent is provided, these cookies may be used to deliver content relevant to your interests. You may withdraw consent for marketing cookies at any time through your browser settings or by contacting support.

You can manage cookie preferences through your browser settings. Disabling certain cookie categories may affect Platform functionality. For further information on managing cookies in your browser, consult your browser's help documentation.

11 Your Data Rights

Subject to applicable data protection law and certain regulatory exceptions, you have the following rights in relation to your Personal Data held by Cricex. To exercise any of these rights, please contact us using the details in Section 15.

Cricex will respond to rights requests within thirty (30) days of receipt. Where requests are complex or numerous, this period may be extended by a further sixty (60) days, with notification provided within the initial thirty-day window.

12 Minors & Age Restrictions

The Cricex Platform is strictly restricted to adults. Users must be at least 18 years of age, or the higher minimum age required by the operator's license jurisdiction, to register and use the Platform.

Cricex does not knowingly collect Personal Data from persons under the minimum eligible age. If we become aware that Personal Data has been submitted by a minor, we will immediately close the associated Account, void all transactions and permanently delete the data. If you believe that a minor may have registered on the Platform using false information, please notify us immediately via the contact details in Section 15.

Being 18 years of age does not, by itself, confirm that gambling is lawful in Pakistan. Pakistani users must independently confirm their legal position before using the Platform.

13 Marketing Communications

13.1 Cricex may send promotional communications — including bonus offers, platform updates and sports betting market notifications — to Users who have provided explicit opt-in consent during registration or through their account communication preferences.

13.2 You may withdraw consent for marketing communications at any time by:

• Using the unsubscribe link included in any marketing email;
• Updating your communication preferences in the Account settings;
• Contacting our support team via live chat or email.

13.3 Withdrawal of marketing consent does not affect your ability to use the Platform or your entitlement to transactional or service-related communications, such as deposit confirmations, withdrawal notifications and KYC requests.

13.4 Cricex will not send marketing communications to Users who have activated self-exclusion under the Platform's responsible gambling framework.

14 Amendments to This Policy

14.1 Cricex reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will provide reasonable notice to Users via the registered email address and/or a prominent notice on the Platform prior to the revised Policy taking effect.

14.2 The version of the Privacy Policy published on the Platform at any given time is the operative version. The effective date at the top of this page will be updated to reflect the date of the most recent revision.

14.3 Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. We recommend reviewing this page periodically to stay informed of how your data is handled.

15 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how Cricex has handled your Personal Data, please contact us using the details below. Support is available 24/7 via live chat on the Platform. Urdu-language support is available on request.

If your complaint is not resolved to your satisfaction through our internal process, you may have the right to escalate it to the supervisory authority in the jurisdiction governing this Platform's data processing activities. Details of the relevant authority are available on request from our support team.