cricex Privacy Policy

1. Introduction

cricex ("cricex", "we", "us", "the Platform") operates cricex.im, a mobile-first sports betting and online casino platform serving English-speaking players in Pakistan and other eligible jurisdictions. This Privacy Policy ("Policy") describes how cricex collects, processes, stores and transfers the personal data of individuals who register an account, visit the Platform or otherwise interact with cricex services.

By registering a cricex account or continuing to use cricex.im, you acknowledge that you have read, understood and agreed to the data practices described in this Policy. If you do not agree, please cease using the Platform and contact us to close your account.

2. Data Controller

cricex acts as the data controller in respect of the personal data processed under this Policy. cricex determines the purposes and means of processing player data and is responsible for ensuring that such processing complies with applicable data protection laws. For all privacy-related enquiries, please use the contact details set out in Section 14.

3. Data We Collect

cricex collects the following categories of personal data from players:

cricex does not knowingly collect sensitive personal data (such as biometric data, health records or religious affiliation) and requests that players do not submit such information through any cricex channel.

4. How We Use Your Data

cricex processes your personal data for the following purposes:

• Account management: to register, authenticate and maintain your cricex account, including OTP-based login verification.
• Payment processing: to process PKR deposits via Easypaisa, JazzCash, HBL, UBL, Meezan Bank, Bank Alfalah and USDT TRC20, and to execute withdrawal instructions to your verified payment method.
• Regulatory compliance: to fulfil anti-money-laundering (AML) and know-your-customer (KYC) obligations, including identity verification and transaction monitoring.
• Responsible gaming: to monitor betting patterns, enforce deposit and loss limits, process self-exclusion requests and identify players who may require support.
• Platform improvement: to analyse usage data in aggregate to improve cricket betting markets, casino game offerings, site performance and the mobile experience for Pakistani players.
• Customer support: to respond to queries, complaints and account recovery requests submitted to [email protected].
• Security: to detect and prevent fraud, multi-accounting, bonus abuse and other prohibited activities described in the cricex Terms & Conditions.
• Communications: to send service-related notifications, including deposit confirmations, withdrawal status updates and changes to these policies, where you have not opted out of such communications.

5. Legal Basis for Processing

cricex processes personal data under the following legal bases:

• Contractual necessity: processing required to fulfil the player account agreement, including payment processing and account authentication.
• Legal obligation: processing required to comply with AML regulations, KYC requirements and applicable gambling regulatory conditions.
• Legitimate interests: fraud prevention, platform security, responsible gaming monitoring and aggregate analytics, where such interests are not overridden by your rights.
• Consent: where processing is based on consent (for example, optional marketing communications), you may withdraw consent at any time by contacting [email protected].

6. Data Sharing

cricex does not sell, rent or trade personal data. Data is shared only in the following circumstances:

• Payment processors: Easypaisa and JazzCash receive the transaction data necessary to process PKR deposits and withdrawals. Bank partners (HBL, UBL, Meezan Bank, Bank Alfalah) receive data required for bank transfer processing.
• Identity verification providers: where regulatory requirements necessitate third-party KYC or AML screening, the minimum necessary personal data is shared with approved verification providers.
• Game content providers: game studios supplying casino and slot titles may receive your session identifier and bet data in aggregated or anonymised form for RNG certification and RTP audit purposes.
• Regulatory and law enforcement authorities: cricex will disclose personal data to competent authorities when required by law, court order or regulatory direction.
• Corporate transactions: in the event of a merger, acquisition or sale of substantially all of cricex's assets, player data may be transferred to the successor entity, subject to equivalent privacy protections.

7. International Data Transfers

cricex may transfer personal data to servers or service providers located outside Pakistan. Where such transfers occur, cricex implements appropriate safeguards, including standard contractual clauses or equivalent data transfer mechanisms, to ensure that your personal data receives a level of protection consistent with applicable privacy laws. If you require further information about the safeguards applied to international transfers involving your data, please contact us using the details in Section 14.

8. Data Retention

cricex retains personal data for as long as your account remains active and for a period thereafter as required by regulatory and legal obligations. Specifically:

• Identity and financial transaction records are retained for a minimum of five years following account closure in accordance with standard AML retention requirements.
• Betting and gaming logs are retained for a minimum of three years for dispute resolution purposes.
• Technical and usage data may be retained in anonymised aggregate form indefinitely for platform analytics.
• Support correspondence is retained for two years following resolution of the underlying matter.

Where retention is no longer necessary and no legal obligation requires continued storage, data is securely deleted or irreversibly anonymised.

9. Security Measures

cricex employs the following technical and organisational measures to protect your personal data:

• TLS 1.2 / 1.3 encryption for all data in transit between your device and cricex servers;
• Bcrypt or equivalent hashing for all stored passwords — cricex employees cannot view your password in plaintext;
• OTP-based two-step authentication for account login from new devices;
• Role-based internal access controls limiting employee access to personal data on a need-to-know basis;
• Regular internal security reviews and third-party penetration testing of Platform infrastructure.

Notwithstanding these measures, no internet transmission or electronic storage system is completely secure. In the event of a data breach that is likely to result in risk to your rights, cricex will notify affected players in accordance with applicable regulatory requirements.

10. Cookies and Tracking

cricex uses the following categories of cookies on cricex.im:

• Strictly necessary cookies: session management cookies required to maintain your login state and load-balance requests across Platform servers. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: first-party analytics cookies that collect anonymised data on page visits, load times and feature usage to help cricex improve the Platform. No personally identifiable information is included in analytics reports.

cricex does not use third-party advertising or retargeting cookies on cricex.im. You may configure your browser to refuse or delete cookies; however, disabling strictly necessary cookies will prevent you from remaining logged in to your cricex account.

11. Your Data Rights

Subject to applicable law and regulatory retention obligations, you have the following rights in relation to the personal data that cricex holds about you:

To exercise any of these rights, submit a written request to [email protected] with sufficient detail to identify your account. cricex will respond within 30 days. Some requests may be subject to verification of your identity before processing begins.

12. Children and Minors

cricex strictly prohibits the use of its Platform by persons under the age of 18. cricex does not knowingly collect personal data from minors. If cricex becomes aware that personal data has been submitted by a person under 18, that data will be deleted and the associated account permanently closed. Parents or guardians in Pakistan who believe a minor has accessed cricex should contact [email protected] immediately.

13. Changes to This Policy

cricex reserves the right to update this Privacy Policy at any time to reflect changes in data practices, legal requirements or Platform features. Material changes will be notified by posting a prominent notice on cricex.im for a minimum of 14 days before the revised Policy takes effect. Continued use of the Platform following the effective date constitutes acceptance of the updated Policy. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

14. Contact

For all privacy-related queries, data subject requests or complaints regarding cricex's data handling practices, please contact the cricex privacy team:

Email: [email protected]

cricex will acknowledge receipt of privacy enquiries within two business days and provide a substantive response within 30 days of receipt. Where a complaint cannot be resolved directly, you may have the right to escalate the matter to the relevant data protection authority in the jurisdiction applicable to your account.