crikex Privacy Policy

1.1 The data controller responsible for the personal data of crikex players is the licensed operator of the crikex Platform ("crikex," "we," "us," "our"), operating the online gaming platform available at crikex.vu under an international gaming license.

1.2 As the data controller, crikex determines the purposes and means by which personal data collected through the Platform is processed. crikex is responsible for ensuring that all data processing activities comply with the data protection requirements imposed by our gaming license and applicable international standards.

1.3 Data protection inquiries, subject access requests, and data rights exercises can be directed to crikex's support team via live chat on the Platform or by email at [email protected].

2.1 crikex collects personal data through several channels: directly from you during registration and account use, automatically through Platform interaction, and from third-party service providers where relevant. The categories of personal data collected are as follows:

2.1.1 Registration and Account Data

• Full legal name as it appears on your CNIC;
• Date of birth (for age verification purposes);
• Pakistani mobile number (used as primary login identifier and for 2FA);
• Email address (where provided during registration);
• Chosen username and encrypted password hash;
• Residential address in Pakistan.

2.1.2 KYC and Identity Verification Data

• CNIC number and copies of both sides of your CNIC card;
• Selfie photographs taken for identity matching purposes;
• Documentation confirming ownership of registered payment methods (e.g., JazzCash or EasyPaisa account confirmation);
• Any additional documentation requested during enhanced due diligence procedures under our AML obligations.

2.1.3 Financial and Transaction Data

• Deposit amounts, timestamps, and payment method identifiers;
• Withdrawal requests, amounts, processing status, and destination payment method identifiers;
• Wallet balance history and transaction ledger;
• Bonus activation, wagering progress, and bonus settlement records.

2.1.4 Gaming Activity Data

• Sports bets placed — including event, market, stake, odds, and settlement outcome;
• Casino and slot game round history including game title, wager, result, and timestamp;
• Live dealer game participation history;
• Session start and end times, session duration, and session result aggregates.

2.1.5 Technical and Device Data

• IP address at time of each login and transaction;
• Device type, operating system, and browser version;
• Device fingerprint for fraud detection purposes;
• Cookies and similar tracking technologies as described in Section 6.

2.1.6 Communications Data

• Records of live chat conversations with crikex support;
• Email correspondence with crikex;
• Feedback, complaints, and dispute correspondence.

3.1 crikex processes your personal data for the following specific purposes:

3.2 crikex does not process personal data for purposes incompatible with those stated above without first seeking appropriate additional consent or establishing a separate legal basis for such processing.

4.1 crikex relies on the following legal bases for processing personal data, as applicable to each processing activity:

• Contractual Necessity: Processing that is necessary to provide you with the services you have contracted for — account management, payment processing, bet settlement, and customer support — is processed on the basis of the contractual relationship between you and crikex.
• Legal Obligation: crikex is subject to mandatory regulatory requirements under our international gaming license, including KYC identity verification, AML transaction monitoring, responsible gaming record-keeping, and regulatory reporting. Processing for these purposes is carried out on the basis of legal obligation and cannot be refused without compromising our ability to offer you Services.
• Legitimate Interests: crikex processes certain data — including fraud detection, platform security, and internal analytics — on the basis of our legitimate interests in operating a secure, fair, and commercially viable platform. These interests have been assessed against player privacy rights and do not unduly prejudice individual privacy.
• Consent: Where crikex processes data for direct marketing communications — including promotional SMS, email offers, and PSL/World Cup betting alerts — this processing is based on your explicit consent, which may be withdrawn at any time without affecting other aspects of your Account.

5.1 crikex does not sell your personal data. We do share data with carefully selected third parties where necessary for the purposes stated in this Policy, subject to appropriate data protection obligations.

5.2 Categories of Third-Party Recipients

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive transactional data necessary to process your deposits and withdrawals. These providers operate under their own privacy frameworks and are not authorised to use your data for any purpose beyond transaction processing.
• KYC and Identity Verification Partners: crikex may use licensed third-party identity verification services to assist with CNIC validation and age verification. These partners are bound by strict data processing agreements and may only process your KYC data for verification purposes.
• Game Software Providers: Third-party game studios (including live dealer providers) receive necessary session data to deliver gameplay. They do not receive full identity or financial account data.
• Fraud Detection and AML Service Providers: crikex may share transactional and behavioural data with specialist fraud detection and AML screening services to meet our regulatory obligations.
• Regulatory and Law Enforcement Authorities: crikex is legally obligated to disclose certain information to our gaming licensing authority and, where required by law or court order, to Pakistani or international law enforcement authorities.
• IT Infrastructure and Cloud Providers: crikex uses secure cloud hosting and IT infrastructure providers. These providers process data only as data processors acting on crikex's documented instructions and are bound by contractual data protection obligations.

5.3 crikex requires all third-party data recipients to maintain appropriate technical and organisational security measures and to process personal data only in accordance with crikex's documented instructions or their own applicable regulatory obligations.

6.1 crikex uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that enable the Platform to recognise you, maintain your session, and provide personalised functionality.

6.2 Types of Cookies Used by crikex

• Essential Session Cookies: These cookies are strictly necessary for the Platform to function. They maintain your login session, preserve your Wallet balance display, and enable secure navigation between pages. These cookies cannot be disabled without breaking core Platform functionality.
• Security Cookies: Used for fraud detection, CSRF protection, and device fingerprinting to identify suspicious login activity that may indicate unauthorised access to your Account.
• Analytics Cookies: crikex uses privacy-respecting analytics to understand how players navigate the Platform — which features are used most frequently, where navigation issues occur, and how loading performance can be improved. Analytics data is aggregated and anonymised.
• Preference Cookies: These cookies remember your Platform settings — such as preferred language, notification preferences, and display settings — so you do not need to reset them on every visit.
• Marketing Cookies: Where you have consented to marketing communications, certain cookies may be used to attribute your visits to specific promotional campaigns. Marketing cookies are only activated upon consent.

6.3 You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access your Account or place bets, but may affect certain personalisation features.

7.1 crikex retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements under our gaming license.

7.2 The following retention periods apply as general guidelines (specific regulatory requirements may mandate longer retention in individual cases):

• Account and KYC Data: Retained for the duration of your Account relationship with crikex plus a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial regulatory requirements applicable to licensed gaming operators.
• Gaming Activity Records: Retained for a minimum of three (3) years for responsible gaming monitoring purposes and to support dispute resolution in the event of a delayed complaint.
• Customer Support Communications: Retained for three (3) years from the date of the most recent interaction in a support thread.
• Marketing Consent Records: Retained for a minimum of three (3) years from the date consent was given or last confirmed, to demonstrate consent compliance.

7.3 Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Anonymised aggregated data may be retained indefinitely for statistical and analytical purposes.

8.1 crikex implements comprehensive technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration.

8.2 Technical security measures employed by crikex include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and crikex servers;
• AES-256 encryption for sensitive data at rest including KYC documents and payment method identifiers;
• Cryptographic password hashing — passwords are never stored in readable form;
• Multi-factor authentication (2FA) available for all Player Accounts;
• Automated brute-force detection and account lockout mechanisms;
• Continuous intrusion detection and security event monitoring;
• Regular third-party penetration testing and security audits;
• Segregated network architecture separating player data from operational systems.

8.3 Organisational security measures include mandatory data protection training for all crikex staff with access to personal data, strict access controls on the principle of least privilege, and documented data breach response procedures with mandatory notification protocols.

8.4 In the event of a personal data breach that is likely to result in risk to the rights and freedoms of affected players, crikex will notify affected individuals without undue delay and will report the breach to the relevant regulatory authority in accordance with our licensing obligations.

9.1 As a platform operating under an international gaming license, crikex may process and store personal data on servers located outside of Pakistan. Where such transfers occur, crikex ensures that appropriate safeguards are in place to protect your personal data to an equivalent standard as would apply in Pakistan.

9.2 Transfers to third-party service providers (including KYC verification partners, payment processors, and cloud infrastructure providers) are governed by contractual data processing agreements that impose binding data protection obligations on the recipient.

9.3 crikex does not transfer personal data to jurisdictions that do not provide an adequate level of protection for personal data without ensuring that supplementary safeguards — such as standard contractual clauses or equivalent binding commitments — are in place.

10.1 The crikex Platform and all its Services are strictly for adults aged 21 years and above. crikex does not knowingly collect personal data from individuals under the age of 21.

10.2 crikex employs mandatory KYC age verification to prevent underage individuals from creating or using Accounts. Any Account identified as belonging to a person under 21 will be immediately suspended. All personal data associated with an underage Account will be retained only as required for regulatory reporting and then deleted.

10.3 If a parent or guardian believes that their child may have created a crikex Account, they should contact us immediately at [email protected]. crikex will investigate and action such reports as a matter of urgency.

11.1 With your explicit consent during registration or at any subsequent point, crikex may send you direct marketing communications including promotional offers, PSL match betting alerts, World Cup bonus notifications, new game announcements, and Eid/seasonal promotional campaigns — via SMS to your registered Pakistani mobile number or email.

11.2 crikex will never send marketing communications to individuals who have not provided valid consent for such communications, or to individuals who are under active self-exclusion for responsible gaming reasons.

11.3 Withdrawing Marketing Consent. You may withdraw your consent to marketing communications at any time by: (a) following the unsubscribe link in any marketing email; (b) replying "STOP" to any marketing SMS; or (c) adjusting your communication preferences in the Account Settings section of your crikex Profile. Withdrawal of marketing consent will not affect any other aspect of your Account.

11.4 Withdrawal of marketing consent will be actioned within 5 business days. You may still receive transactional and service communications (e.g., deposit confirmations, withdrawal notifications, and responsible gaming alerts) which are not marketing and are not subject to marketing consent preferences.

12.1 crikex processes gaming activity data, session data, and self-imposed limit data for responsible gaming purposes — specifically to monitor for behavioural patterns that may indicate problem gambling, to enforce player-imposed responsible gaming restrictions, and to comply with licensing requirements related to player protection.

12.2 Where a Player has activated a self-exclusion on crikex, their contact details are added to an internal exclusion list. Marketing communications will cease immediately upon self-exclusion activation. crikex will not facilitate re-registration attempts during any active self-exclusion period.

12.3 Responsible gaming data — including self-exclusion history, deposit limit adjustment records, and any responsible gaming intervention notes — is retained as part of the Player's account record for a minimum of five (5) years to support regulatory compliance and to prevent circumvention of self-exclusion through re-registration.

12.4 For more information about crikex's responsible gaming tools and resources, please visit the Responsible Gaming page.

13.1 The crikex Platform may contain links to third-party websites or content — for example, links to sports governing body websites for match result verification or links to responsible gaming support organisations. This Privacy Policy applies only to data processing carried out by crikex and does not extend to any third-party websites linked to or referenced from the Platform.

13.2 crikex is not responsible for the privacy practices, data collection activities, or security standards of any third-party website. Players who follow links to external sites are encouraged to review those sites' own privacy policies before providing any personal information.

14.1 crikex reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or the Services we offer. The most current version of this Policy will always be accessible on the crikex Platform with the effective date clearly displayed.

14.2 Where material changes are made to this Privacy Policy — particularly changes that affect how we process personal data or that reduce your data rights — crikex will notify registered Players by email or via an in-platform notification at least 7 days before the changes take effect.

14.3 Continued use of the crikex Platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of and agreement to the updated policy. Players who do not accept the updated policy may request Account closure, following which their data will be handled in accordance with the retention obligations described in Section 7.

15.1 For all privacy-related inquiries, data rights requests, concerns about how crikex handles your personal data, or to report a potential data security concern, please contact us through the following channels:

• Live Chat: Available 24/7 via the chat function on the crikex Platform. For immediate privacy concerns, live chat is the fastest channel to reach a support representative.
• Email: [email protected] — Please include "Privacy Policy" or "Data Rights Request" in the subject line to ensure your message is directed to the appropriate team.

15.2 crikex aims to acknowledge all privacy-related inquiries within 24 hours and to resolve data rights requests within 30 calendar days of receipt. Complex requests or those requiring enhanced verification may take longer, in which case crikex will communicate a revised timeline.

15.3 If you are dissatisfied with how crikex has handled a privacy concern after raising it with our support team, you have the right to escalate the matter to the data protection supervisory authority relevant to our gaming license jurisdiction.