CX Cricket Privacy Policy — How We Handle Your Personal Data

CX Cricket (cxcricket.site) is an online sports betting and casino platform serving Pakistani players. When this Privacy Policy refers to "CX Cricket", "we", "us", or "our", it refers to the operator of the cxcricket.site platform and all associated services.

CX Cricket acts as the data controller in respect of the personal information you provide when registering an account, using the platform, or contacting our support team. This means CX Cricket decides the purposes for which your personal data is collected and the manner in which it is processed. We take that responsibility seriously.

This Privacy Policy applies to all users of the CX Cricket platform, including registered account holders, users who browse without registering, and anyone who contacts CX Cricket through any channel. By using CX Cricket, you acknowledge that you have read and understood this policy.

2.1 Information You Provide Directly

When you create a CX Cricket account or interact with the platform, you provide us with:

• Full legal name as it appears on your CNIC.
• Date of birth — used to verify that you meet the 18+ age requirement.
• Mobile number and email address.
• CNIC number and copies of identity documents submitted for KYC verification.
• Payment account details — your Easypaisa or JazzCash mobile number, NayaPay or SadaPay wallet identifiers, bank account numbers, or card details used for deposits and withdrawals.
• Any information you provide voluntarily in support chat conversations or email correspondence with CX Cricket.

2.2 Information Generated by Your Use of CX Cricket

As you use the CX Cricket platform, we automatically collect:

• Betting and game history — every bet placed, game round played, outcome, and the PKR amounts involved.
• Transaction records — every deposit and withdrawal processed through your CX Cricket account.
• Login and session data — IP addresses, login timestamps, session durations, and device identifiers.
• Device and browser information — operating system, browser type, screen resolution, and device model.
• Location data — country and city inferred from your IP address (CX Cricket does not collect GPS location data).

2.3 Information from Third Parties

CX Cricket may receive information about you from third parties in specific circumstances:

• Identity verification providers — where your CNIC is checked against official databases as part of KYC.
• Payment processors — transaction confirmation and status information from Easypaisa, JazzCash, and other payment partners.
• Fraud prevention services — risk signals related to device identifiers or IP addresses flagged across the industry.

CX Cricket uses the personal data described in Section 2 for the following purposes:

CX Cricket does not use automated decision-making in a way that has a significant legal or similarly significant effect on you — for example, we do not use automated systems to deny you an account or a withdrawal without a human review step.

CX Cricket processes your personal data on the following legal bases:

• Contractual necessity: Most of the data processing described in this policy is necessary to provide you with the CX Cricket service — to run your account, process your payments, and resolve disputes. Without this processing, we cannot operate your account.
• Legal obligation: CX Cricket is subject to anti-money laundering (AML) and Know Your Customer (KYC) obligations. Processing your identity data for verification purposes is required by these obligations, not optional.
• Legitimate interests: Fraud detection, platform security, and responsible gaming monitoring are conducted on the basis of CX Cricket's legitimate interest in operating a safe and fair platform. These interests have been balanced against your privacy rights — in each case the processing is proportionate and does not override your rights.
• Consent: Where CX Cricket sends you promotional communications (offers, promotions, PSL specials), this is based on your consent, which you can withdraw at any time by unsubscribing or contacting support.

CX Cricket shares your personal data only in the following circumstances — and in each case, only to the extent necessary for the specific purpose:

5.1 Payment Processors

When you make a deposit or request a withdrawal, CX Cricket shares the minimum necessary information with the relevant payment processor — your mobile wallet number, the transaction amount in PKR, and a reference identifier. This sharing is essential to complete the transaction. CX Cricket works with Easypaisa, JazzCash, NayaPay, SadaPay, and Pakistani bank IBFT systems.

5.2 Identity Verification Services

For KYC purposes, CX Cricket may share your identity document details with accredited verification service providers. These providers are contractually bound to use your data only for the verification purpose and to maintain appropriate security standards.

5.3 Game Providers

For casino and game products on CX Cricket — including live baccarat, crash games, and fishing games — a session token and anonymised player identifier may be shared with the relevant game provider to load and authenticate your game session. Your full name and financial details are not shared with game providers.

5.4 Legal and Regulatory Obligations

CX Cricket may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts where required by applicable law. CX Cricket will only comply with requests that are legally valid and proportionate.

Payment data receives special treatment at CX Cricket because of its sensitivity. Here is how your PKR payment information is handled:

• Card details (Visa/Mastercard) are processed through a PCI-DSS compliant payment gateway. CX Cricket does not store your full card number on its own servers — only a tokenised reference.
• Mobile wallet identifiers (your Easypaisa or JazzCash number) are stored in encrypted form in CX Cricket's database. Staff members can see the last four digits for support purposes but cannot see your full wallet number unless specifically required for a transaction investigation.
• Bank account details submitted for IBFT withdrawals are stored encrypted and used only to process the specific withdrawal they were provided for.
• Transaction history — the full record of every PKR deposit and withdrawal — is retained for a minimum of five years to comply with financial record-keeping obligations. This history is available to you in your account and can be exported on request.

Identity documents — CNIC copies, proof of address, and verification selfies — are among the most sensitive data CX Cricket holds. The following protections apply specifically to KYC documents:

• Documents are stored in an encrypted, access-controlled repository separate from the main CX Cricket database.
• Access to KYC documents is restricted to a small number of trained compliance team members who operate under strict confidentiality obligations.
• Documents are not shared with any third party beyond the verification service used to authenticate them, and only for the duration of the verification process.
• Once KYC is complete and verified, original document images are archived under secure retention and are not accessible in day-to-day operations.
• KYC documents are retained for a minimum of five years after account closure in accordance with AML regulatory requirements.

CX Cricket conducts KYC under a risk-based approach — not every account is asked for documents on day one, but all accounts will be asked to verify before high-value withdrawals are processed or where unusual activity is detected. This protects the broader CX Cricket player community as well as individual account holders.

CX Cricket uses cookies and similar technologies on the platform. Here is a breakdown of what is used and why:

CX Cricket does not use advertising cookies, retargeting pixels, or social media tracking cookies. The platform's analytics use aggregated, anonymised data only — CX Cricket is not building individual marketing profiles from your browsing behaviour.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent the CX Cricket platform from functioning correctly — your session will not be maintained and you will not be able to place bets or access your balance.

CX Cricket implements technical and organisational security measures appropriate to the risk of the data we hold. These include:

• Encryption in transit: All data transmitted between your device and the CX Cricket platform uses TLS 1.2 or higher (256-bit SSL). The padlock in your browser confirms this connection.
• Encryption at rest: Sensitive data fields — including CNIC details, payment identifiers, and KYC documents — are encrypted in the database using AES-256 encryption.
• Access controls: CX Cricket staff access to player data is role-based and logged. Support agents can see what they need to assist you — they cannot access your KYC documents or full payment details without a specific compliance justification.
• Regular security testing: The CX Cricket platform undergoes regular penetration testing and vulnerability assessments. Critical findings are remediated within defined timeframes.
• Incident response: CX Cricket maintains a data breach response plan. In the event of a breach that affects your personal data materially, you will be notified without undue delay.

CX Cricket retains your personal data for as long as is necessary for the purposes described in this policy, subject to minimum retention periods required by law:

• Active account data: Retained for the duration of your CX Cricket account and for a minimum of 5 years after account closure.
• Transaction records: PKR deposit and withdrawal history retained for a minimum of 7 years after each transaction, in line with financial record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years after account closure or the date of the last transaction, whichever is later.
• Support communications: Chat and email records retained for 3 years from the date of the conversation.
• Marketing preferences: Retained until you withdraw your consent or request deletion of your CX Cricket account.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be connected to you personally. Anonymised, aggregated data may be retained indefinitely for platform analytics.

You have the following rights in relation to the personal data CX Cricket holds about you. To exercise any right, contact support with the subject line "Data Rights Request" — we will respond within 30 days.

CX Cricket is strictly for adults aged 18 and over. The platform does not knowingly collect or process personal data from anyone under the age of 18. If you are a parent or guardian and believe a minor has created a CX Cricket account using false information, please contact us immediately at support@cxcricket.site. We will investigate and close the account promptly.

CX Cricket's age verification process is designed to catch under-age registrations. Any account found to belong to a person under 18 will be closed immediately, all balances forfeited in line with our Terms and Conditions, and the case reported as required.

CX Cricket may update this Privacy Policy from time to time to reflect changes in how we operate, changes in the services we offer, or changes in applicable law. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Send registered CX Cricket account holders an email notification summarising the key changes, at least 14 days before the updated policy takes effect.
• Display a notice on the CX Cricket platform for the 14-day notice period.

Continued use of the CX Cricket platform after the notice period constitutes your acceptance of the updated Privacy Policy. If you do not accept changes to the policy, you may close your CX Cricket account — your verified real-money balance will be returned to your registered payment method.

If you have a question about this Privacy Policy, want to exercise a data right, or want to raise a privacy complaint, the quickest route is through CX Cricket's support team:

• Email: support@cxcricket.site — use the subject line "Privacy Request" or "Privacy Complaint" for fastest routing.
• Live Chat: Available on every CX Cricket page — ask to be connected to the privacy team.

CX Cricket will acknowledge all privacy requests within 5 business days and respond in full within 30 days. Where a request is complex or involves large volumes of data, we may extend the response period by up to an additional 30 days — we will inform you if this applies.

If you are not satisfied with CX Cricket's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. CX Cricket will cooperate fully with any such investigation.