crickx Privacy Policy

crickx is committed to protecting the personal data of all users who interact with our platform. This Privacy Policy has been prepared in accordance with internationally recognised data protection principles and describes the basis on which any personal data we collect from you, or that you provide to us, will be processed.

This Policy should be read alongside the crickx Terms and Conditions and the crickx Responsible Gaming Policy, each of which forms part of the overall agreement between you and crickx. Where this Policy uses the term "personal data", it means any information that identifies you or could reasonably be used to identify you, whether on its own or in combination with other information.

If you have any questions about how crickx handles your personal data, or if you wish to exercise any of your data subject rights, please contact the crickx Data Protection team using the contact details set out in Section 13 of this Policy.

crickx collects the following categories of personal data in connection with your use of the platform:

crickx does not intentionally collect any special categories of sensitive personal data (such as health data, biometric data, or political opinions) unless specifically required for identity verification or responsible gaming purposes and only with your explicit consent where required.

crickx collects personal data through the following means:

• Direct interactions: When you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact customer support, or participate in a promotion, you provide personal data to us directly.
• Automated technologies: As you navigate the crickx platform, we automatically collect Technical Data and Usage Data through cookies, server logs, and similar tracking technologies. Please refer to Section 10 for full details of our cookie practices.
• Third-party sources: We may receive personal data about you from third-party identity verification providers, fraud prevention databases, payment processors (such as JazzCash and EasyPaisa), and our licensed game suppliers where this is necessary to deliver services to you or to meet our regulatory obligations.
• Publicly available sources: In connection with KYC and anti-money laundering obligations, crickx may cross-reference information you provide against publicly available records, including sanctions lists and politically exposed persons (PEP) databases.

crickx uses personal data for the following purposes:

• Account management: To create and maintain your crickx account, verify your identity, process deposits and withdrawals, and communicate account-related information to you.
• Service delivery: To provide access to cricket betting markets, live casino games, slots, Hi-Lo, Diamond Tycoon, and all other platform features available through your account.
• Regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and responsible gaming obligations imposed by our international gaming licence.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, collusion, match manipulation, and other prohibited conduct as defined in the crickx Terms and Conditions.
• Responsible gaming: To monitor gaming patterns, implement player-elected restrictions (deposit limits, self-exclusion, cooling-off periods), and to identify users who may be exhibiting signs of problem gambling so that appropriate support can be offered.
• Customer support: To respond to your queries, complaints, and disputes, and to maintain records of communications for quality assurance and regulatory purposes.
• Marketing communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and platform updates via email or in-app notification. You may withdraw consent at any time by contacting support or updating your account preferences.
• Platform improvement: To analyse aggregated usage data in order to improve the performance, security, and user experience of the crickx platform. Where data is used for analytics, it is aggregated and anonymised wherever possible.

crickx processes personal data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary for the performance of the contract between you and crickx, including account registration, transaction processing, and service delivery.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and responsible gaming mandates imposed by our licensing authority.
• Legitimate interests: Processing is necessary for the legitimate interests of crickx, including fraud detection, platform security, responsible gaming monitoring, and general business administration, provided that such interests are not overridden by your rights and interests.
• Consent: Where processing is based on consent (for example, for direct marketing communications), you have the right to withdraw consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

crickx does not sell, rent, or trade your personal data. We may share your personal data with the following categories of third parties only where necessary and on a need-to-know basis:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 network processors require transaction data in order to facilitate deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML screening providers who assist crickx in verifying user identities and screening against sanctions and PEP lists.
• Game software suppliers: Licensed game providers whose games are accessible through the crickx platform receive minimal technical and usage data required to deliver their games and to ensure game integrity.
• Fraud prevention services: Third-party fraud detection and risk assessment providers who help crickx identify suspicious activity and protect platform integrity.
• Regulatory authorities: crickx's licensing authority and any relevant law enforcement or regulatory bodies where disclosure is required by law or by the terms of our gaming licence.
• Professional advisers: Lawyers, auditors, accountants, and insurers acting in a professional capacity in connection with crickx's operations, subject to professional confidentiality obligations.

All third parties with whom crickx shares personal data are required to process that data in accordance with applicable data protection principles and to implement appropriate security measures. crickx does not permit third-party service providers to use your personal data for their own marketing or commercial purposes.

crickx retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, and licensing obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account relationship with crickx and for a minimum of five (5) years following permanent account closure, in compliance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable anti-money laundering regulations.
• Customer support communications: Retained for three (3) years from the date of the final communication in the relevant support case, unless a longer period is required for ongoing regulatory or dispute proceedings.
• Responsible gaming records: Self-exclusion records, deposit limit elections, and cooling-off period records are retained for the duration of any active restriction and for a minimum of five (5) years thereafter.
• Marketing consent records: Records of marketing consent are retained for the duration of the consent period and for three (3) years after consent is withdrawn, as evidence of the original consent basis.
• Technical and usage logs: Server logs and session data are typically retained for a period of up to twelve (12) months for security and platform integrity purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with crickx's data disposal procedures.

crickx implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the crickx platform;
• Encryption at rest for all databases containing personal data;
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their specific role;
• Regular security audits, vulnerability assessments, and penetration testing conducted by qualified third-party security professionals;
• Multi-factor authentication requirements for all internal systems that process personal data;
• Comprehensive incident response procedures to detect, contain, and notify affected users of any personal data breach in a timely manner.

While crickx takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for keeping your crickx account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

As a data subject, you hold the following rights in relation to your personal data held by crickx. To exercise any of these rights, please contact the crickx Data Protection team using the contact details in Section 13:

• Right of access: You have the right to request a copy of all personal data that crickx holds about you, together with information about how it is being processed.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data be corrected or completed without undue delay.
• Right to erasure: In certain circumstances, you have the right to request that crickx delete your personal data. This right is subject to any overriding legal obligation that requires crickx to retain the data (for example, AML record-keeping requirements).
• Right to restrict processing: You have the right to request that crickx restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to data portability: Where processing is carried out on the basis of your consent or for the performance of a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where processing is based on legitimate interests. crickx will cease processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

All data subject requests will be responded to within thirty (30) days of receipt. Where a request is complex or where a large number of requests are received simultaneously, this period may be extended by a further sixty (60) days, in which case crickx will notify you of the extension within the initial thirty-day period.

crickx uses cookies and similar tracking technologies to operate the platform effectively, to remember your preferences, and to analyse how users interact with the site. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the operation of the platform and cannot be disabled. They include session authentication tokens, security tokens, and load-balancing cookies.
• Functional cookies: These cookies remember your preferences (such as language settings and login state) to provide a more personalised experience. They can be disabled but doing so may affect platform functionality.
• Analytics cookies: These cookies collect aggregated, anonymised data about how users navigate the crickx platform. This data helps us understand which features are most used and where improvements can be made.
• Fraud prevention cookies: These cookies support our fraud detection systems by helping to identify unusual or suspicious behaviour patterns across sessions.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain categories of cookies may affect the functionality of the crickx platform and your ability to access some features.

The crickx platform is strictly intended for users who are aged 21 years or older. crickx does not knowingly collect personal data from any individual under the age of 21. The minimum age of 21 is enforced through our account registration process and through ongoing KYC and age verification procedures.

If crickx becomes aware that personal data has been collected from an individual who is under the age of 21 without the verification process having detected this, the account will be closed immediately, all wagering activity will be voided, and the personal data of that individual will be deleted as soon as reasonably practicable, subject to any legal obligations that require its retention.

If you are a parent or guardian and believe that your child has registered an account on the crickx platform, please contact our support team immediately at [email protected] so that the account can be investigated and closed without delay.

crickx reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or regulation, or improvements to the crickx platform. The date of the most recent revision is displayed at the top of this document.

Where changes are material — meaning they affect how your personal data is used or your rights as a data subject in a significant way — crickx will notify registered users via email or an in-platform notification before the updated Policy takes effect. For non-material changes, the updated Policy will be published on this page and will take effect on the date shown.

We encourage you to review this Privacy Policy periodically to stay informed of how crickx is protecting your data. Continued use of the crickx platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which crickx processes your personal data, please contact the crickx Data Protection team using the following details:

Email: [email protected]

Please include your full name, registered email address, and a clear description of your query or request. We aim to acknowledge all data protection enquiries within two (2) business days and to provide a substantive response within thirty (30) days of receipt.