Crikex Privacy Policy

Crikex ("we", "us", "our", "the Operator", "the Platform") operates an English-language online betting and gaming platform accessible at crikex.cam. We are committed to protecting the personal data of every individual who accesses or uses our Services, including users based in Pakistan and other jurisdictions.

This Privacy Policy ("Policy") sets out how Crikex collects, receives, uses, stores, shares, transfers and otherwise processes personal data in connection with your use of the Platform. It also describes the rights available to you in relation to your personal data and how you may exercise them.

By registering an Account, accessing the Platform or otherwise using the Services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree to this Policy, you must not use the Services.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, financial information, IP address and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, Crikex.
• "Processor" means any third party that processes Personal Data on behalf of Crikex, under a binding data processing agreement.
• "User" / "Data Subject" means any natural person who registers an Account on or accesses the Crikex Platform.
• "KYC" means Know Your Customer — the identity and age verification process conducted by or on behalf of the Operator.
• "Cookies" means small text files stored on your device by the Platform for functionality, analytics and personalisation purposes.
• "Services" means the totality of features, functionalities, content and products offered through the Crikex Platform.

We collect Personal Data through several channels, including directly from you during registration and account use, automatically through your use of the Platform, and from third parties where applicable.

3.1 Data You Provide Directly

• Full legal name and date of birth (required for KYC)
• Email address and account password (hashed)
• Residential address and city (e.g. Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar)
• Phone number (where provided)
• Copies of identity documents submitted for KYC verification
• Payment information: account name, payment method reference, transaction amounts in PKR
• Support communications: messages sent via live chat or email
• Responsible gambling declarations and self-exclusion requests

3.2 Data Collected Automatically

• IP address and approximate geographic location
• Device type, operating system and browser information
• Session data: pages visited, time on page, click events, betting activity
• Cookie identifiers and tracking pixels (see Section 9)
• Login timestamps and authentication events

3.3 Data From Third Parties

• Identity verification results from KYC service providers
• Fraud-screening signals from payment processors
• Age verification data from independent verification agencies

Crikex processes Personal Data only for specific, lawful purposes as described below. We do not use your data in ways inconsistent with the purposes for which it was collected without first obtaining your consent or establishing another lawful basis.

• Account creation and management: Setting up, maintaining and securing your Crikex Account, including authentication and Account recovery.
• Service delivery: Processing deposits and withdrawals (including via payment references familiar to Pakistani users), settling bets, awarding bonuses and providing access to games.
• Identity & age verification (KYC): Verifying that you meet the minimum age requirement (18+, or higher as required by the operator's license jurisdiction) and confirming your identity as part of anti-fraud and AML obligations.
• Responsible gambling: Monitoring account activity to identify indicators of problem gambling; enforcing deposit limits, loss limits, session timers and self-exclusion requests.
• Fraud prevention and platform security: Detecting, investigating and preventing fraudulent activity, unauthorised access, collusion and market manipulation.
• Legal and regulatory compliance: Fulfilling obligations under the Operator's applicable gaming license, including AML reporting, record-keeping and cooperation with lawful regulatory requests.
• Customer support: Responding to enquiries, resolving disputes and maintaining service quality records.
• Platform improvement: Analysing usage patterns to improve performance, fix technical issues and develop new features — particularly for mobile users on Pakistani networks.
• Marketing communications (with consent): Sending promotional offers and platform updates to users who have opted in. You may withdraw consent at any time via your Account settings.

Where applicable data protection law requires a legal basis for processing Personal Data, Crikex relies on the following grounds:

• Contractual necessity: Processing required to perform the agreement between you and Crikex — including account management, bet settlement and payment processing.
• Legal obligation: Processing necessary to comply with applicable laws and the Operator's licensing obligations — including KYC, AML checks and regulatory record-keeping.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and certain non-essential cookies, where you have given explicit, informed consent. Consent may be withdrawn at any time.

Crikex does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. We may share your data in the following limited circumstances:

6.1 Service Providers (Processors)

We engage third-party service providers — including payment processors, KYC verification agencies, fraud-detection platforms, cloud hosting providers and analytics tools — who process data on our behalf under binding data processing agreements that restrict their use to providing the contracted service only.

6.2 Regulatory and Law Enforcement Authorities

We may disclose Personal Data to regulators, licensing authorities, law enforcement agencies or courts when required to do so by applicable law, court order or regulatory direction. We will, where legally permitted, notify you of such disclosures.

6.3 Payment References

6.4 Business Transfers

In the event of a merger, acquisition or sale of all or part of the Operator's business or assets, your Personal Data may be transferred to the successor entity. We will notify you in advance of any such transfer affecting your data rights.

Crikex retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting and reporting obligations.

The following general retention periods apply, subject to the Operator's applicable regulatory requirements:

• Account and transaction data: Retained for a minimum period following Account closure as required by the Operator's license jurisdiction (typically five to seven years) to meet AML and audit record-keeping obligations.
• KYC documentation: Retained for the duration specified by the Operator's licensing rules after the Account is closed, to satisfy identity verification record-keeping requirements.
• Support communications: Retained for a period sufficient to resolve disputes and meet consumer protection obligations — generally between two and five years.
• Marketing consent records: Retained for as long as you remain an active user or until you withdraw consent, plus a reasonable period to evidence the consent history.

At the end of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to an identified individual.

Crikex implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• HTTPS / TLS encryption for all data transmitted between your device and our servers.
• Password hashing using industry-standard cryptographic algorithms. We do not store plaintext passwords.
• Two-factor authentication (2FA) available on all Accounts to add a second layer of login security.
• Access controls ensuring that Personal Data is accessible only to staff who require it to perform their role.
• Regular security assessments of our infrastructure, payment flows and data handling processes.

Despite the measures above, no internet transmission or electronic storage system is guaranteed to be completely secure. We cannot warrant absolute security and are not liable for breaches resulting from circumstances beyond our reasonable control.

Crikex uses cookies and similar technologies to improve your experience, maintain session integrity and gather analytics data that helps us optimise the Platform for Pakistani users.

9.1 Types of Cookies

• Strictly necessary cookies: Required for the Platform to function. Examples include session management, security tokens and load-balancing cookies. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language settings and PKR currency display, so you do not have to re-enter them on each visit.
• Analytics cookies: Used with your consent to collect aggregate usage data — pages visited, session duration and feature engagement — to help us improve the Platform.
• Marketing cookies: Used with your consent to measure the effectiveness of promotional campaigns and deliver relevant offers. You may withdraw consent at any time.

9.2 Managing Cookies

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. For analytics and marketing cookies, you may also manage consent through your Account settings or our cookie preference centre.

Subject to applicable data protection law in the jurisdiction governing this Policy, you may have the following rights with respect to your Personal Data:

• Right of access: You may request a copy of the Personal Data Crikex holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete Personal Data.
• Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data in certain circumstances, subject to overriding legal retention obligations.
• Right to restriction: You may request that processing of your Personal Data be restricted in defined circumstances.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request transfer of your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing processing.
• Right to withdraw consent: Where processing is consent-based, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact our Data Privacy team at [email protected] with a clear description of your request. We will respond within a reasonable timeframe in accordance with applicable law. Identity verification may be required before processing certain requests.

The Services are strictly intended for adults aged 18 or over, or the higher minimum age required by the Operator's license jurisdiction. Crikex does not knowingly collect Personal Data from individuals under the applicable minimum age. Age verification is conducted as part of the KYC process.

If we become aware that Personal Data has been collected from a minor, we will promptly delete that data, close the associated Account and return any verified funds deposited. If you believe a minor has registered on the Platform, please notify us immediately at [email protected].

As an internationally operated platform, your Personal Data may be transferred to and processed in countries other than the country in which you reside — including countries whose data protection laws may differ from those in Pakistan or your country of residence.

Where such transfers occur, Crikex uses contractual and other appropriate safeguards — such as standard contractual clauses or binding processor agreements — to ensure that your Personal Data receives an adequate level of protection regardless of where it is processed.

Crikex reserves the right to update this Privacy Policy at any time. Material changes will be communicated via email to your registered address and/or a prominent notice on the Platform. The "Last updated" date at the top of this page reflects the most recent revision.

Your continued use of the Services following the publication of an updated Policy constitutes your acceptance of the revised terms. If you object to any changes, you must stop using the Services and may close your Account by contacting our support team.

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your Personal Data, please contact Crikex using the details below. We aim to respond to all privacy-related enquiries within five (5) business days.