Cric Ex Privacy Policy — Your Data Rights in Pakistan

This Privacy Policy applies to cric ex, the online betting and live casino platform operated at cricex-play.com ("cric ex", "we", "us", "our"). Cric ex is the data controller for all personal information collected from users of the platform.

Cric ex is a platform built specifically for Pakistani users. All our services — cricket betting, PSL betting, sports and esports betting, Andar Bahar live games, the VIP Club and live cricket scores — are operated under a single account and data framework governed by this policy.

If you have questions about how cric ex handles your personal data, you can contact our privacy team at support@cricex-play.com at any time. We aim to respond to all data-related enquiries within 5 working days.

Cric ex collects the following categories of personal data from Pakistani users:

We do not collect sensitive personal data such as biometric data, health data or political opinions. We collect the minimum data needed to deliver a safe, compliant and high-quality experience for Pakistani users on cric ex.

Cric ex collects your personal data through the following channels:

• Directly from you: When you register, deposit, bet, request a withdrawal, contact support or update your account settings on cric ex.
• Automatically: Technical data including your IP address, device information and session activity is collected automatically when you access the cric ex platform.
• Payment processors: When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, our payment processors share limited transaction reference data with cric ex to confirm the payment. Cric ex does not store your full card or mobile wallet credentials.
• Identity verification services: Where we ask you to complete KYC verification, we may use a third-party identity verification provider to check the validity of documents you submit. That provider shares only a verification result with cric ex — not the full document content.

Cric ex does not purchase data lists or collect data from social media platforms about you without your explicit consent.

Cric ex uses your personal data for the following specific purposes:

• Account management: To create and maintain your cric ex account, verify your identity and authenticate your logins.
• Transaction processing: To process your PKR deposits and withdrawals via supported local payment methods and maintain accurate financial records.
• Betting services: To accept, record and settle bets you place on cricket, PSL, sports, esports and other markets on cric ex.
• Legal and regulatory compliance: To fulfil our anti-money laundering (AML) and Know Your Customer (KYC) obligations, including verifying your age and identity.
• Fraud prevention and security: To detect unusual activity, prevent unauthorised access and protect both you and cric ex from fraud.
• Responsible gaming: To monitor for signs of problem gambling and to enforce any deposit limits, cooling-off periods or self-exclusions you have set.
• Customer support: To respond to your queries, complaints and requests via live chat and email.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the cric ex product experience for Pakistani users.
• Marketing communications: To send you relevant promotions and updates — only if you have opted in to receive them. You can opt out at any time.

Cric ex does not use your data for any purpose not listed above without first obtaining your explicit consent.

Cric ex does not sell your personal data. We share data with third parties only in the following limited and controlled circumstances:

• Payment processors: Your payment reference information is shared with our payment partners (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT processors and card networks) solely to complete your transaction. These partners are contractually bound to use your data only for payment processing.
• Identity verification providers: Where KYC verification is required, we share document data with our third-party verification partner to confirm your identity. This partner processes data under strict confidentiality agreements.
• Technology providers: Cric ex uses carefully selected technology partners for hosting, security monitoring and platform infrastructure. These providers access data only to perform their contracted services and cannot use your data for any other purpose.
• Legal obligations: Cric ex may disclose your personal data to law enforcement, regulatory authorities or courts where we are legally required to do so. We will notify you of any such disclosure where we are legally permitted to do so.
• Business transfers: In the event that cric ex is acquired or merges with another entity, your data may be transferred as part of that transaction. We will notify you in advance of any such transfer.

All third parties who receive your data from cric ex are bound by confidentiality obligations and may only use your data for the specific purpose for which it was shared.

All financial transactions on cric ex are conducted in Pakistani Rupees (PKR). Cric ex takes the security of your financial data extremely seriously and applies the following specific protections:

• Cric ex does not store your full Easypaisa or JazzCash account PIN, your bank account password or your full card number. Only the last four digits of a card and a masked wallet reference are retained for transaction reconciliation.
• Payment data is encrypted in transit and at rest using industry-standard encryption protocols.
• Transaction records are retained for a minimum of five years to comply with Pakistani financial regulations and anti-money laundering requirements.
• Withdrawal requests are always processed to a payment method registered in your own name that has previously been used to deposit on cric ex. This policy protects you from fraudulent withdrawal attempts by third parties.
• Cric ex monitors all transactions for unusual patterns as part of our fraud prevention and AML compliance programme. Accounts flagged for investigation may be temporarily frozen while we review the relevant activity.

If you notice any unauthorised transaction in your cric ex account, please contact our support team immediately via live chat so we can investigate and take appropriate action.

Cric ex uses cookies and similar technologies to ensure the platform functions correctly and to improve your experience. We use the following categories of cookies:

• Strictly necessary cookies: These are essential for the cric ex platform to function. They include session management cookies that keep you logged in while you navigate the site. These cannot be disabled.
• Performance cookies: These help cric ex understand how users interact with the platform — which pages load slowly, where users encounter errors and so on. This data is aggregated and anonymised.
• Functionality cookies: These remember your preferences such as language settings and display options so you don't have to set them every time you visit cric ex.

Cric ex does not use third-party advertising cookies or cross-site tracking cookies. You can manage cookie settings in your browser at any time. Please note that disabling strictly necessary cookies may affect the functionality of the cric ex platform.

Cric ex implements a comprehensive set of technical and organisational security measures to protect your personal data:

• Encryption: All data in transit is encrypted using TLS 1.2 or higher (256-bit SSL). Data at rest in our databases is encrypted using AES-256.
• Access controls: Personal data is accessible only to cric ex staff who need it to perform their specific role. Access is logged and reviewed regularly.
• Two-factor authentication: Cric ex strongly recommends and supports two-factor authentication for all user accounts. Internal cric ex systems require multi-factor authentication for all staff accessing user data.
• Security monitoring: Cric ex systems are monitored 24/7 for intrusion attempts, unusual access patterns and other security threats.
• Penetration testing: Our platform undergoes regular security testing by independent third-party security firms.

While cric ex takes all reasonable measures to protect your data, no internet-based platform can guarantee 100% security. If you believe your account has been compromised, please contact our support team immediately. We will investigate within 2 hours of receiving an urgent security report.

Cric ex retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by applicable law:

• Active accounts: Personal data is retained for as long as your cric ex account remains active.
• Closed accounts: Following account closure, cric ex retains your identity data, transaction records and KYC documents for a minimum of five years in compliance with Pakistani AML regulations.
• Support communications: Chat and email records with our support team are retained for 3 years.
• Technical logs: Server logs and security event logs are retained for 12 months.
• Marketing data: If you have opted in to marketing communications from cric ex, your contact details for this purpose are retained until you opt out. After opting out, we will retain a record of your opt-out to ensure we do not contact you again.

Once the relevant retention period has passed, your personal data is securely deleted or anonymised so that it can no longer be associated with you.

Cric ex respects your rights over your personal data. As a Pakistani user of cric ex, you have the following rights:

Cric ex is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered on cric ex or provided personal data to us, please contact us immediately at support@cricex-play.com.

Upon receiving a verified report that a cric ex account belongs to a minor, we will close the account immediately, delete all associated personal data where legally permissible and return any deposited funds to the payment method used. We take our responsibility to prevent underage gambling very seriously and apply age verification checks at registration and during KYC processes.

Cric ex may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer or applicable legal requirements. When we make material changes, we will notify registered users via email or via a prominent notice on the cric ex platform.

The "Last updated" date at the top of this page shows when the policy was most recently revised. We encourage you to review this policy periodically. Continued use of cric ex after a policy update constitutes acceptance of the revised policy.

If you have concerns about any changes to this Privacy Policy, please contact our support team before continuing to use cric ex. We are always happy to explain what has changed and why.

If you have any questions, concerns or complaints about how cric ex handles your personal data, please reach out to us through any of the following channels:

• Email: support@cricex-play.com — please use the subject line "Privacy Enquiry" for data-related queries. We aim to respond within 5 working days.
• Live Chat: Available 24/7 on the cric ex platform — the fastest way to raise any concern.
• VIP Members: Gold and Platinum tier members may raise privacy concerns directly with their dedicated account manager.

Cric ex takes privacy complaints seriously. If we receive a privacy complaint from you, we will acknowledge it within 2 working days, investigate thoroughly and provide a substantive response within 20 working days. If you are not satisfied with our response, you have the right to escalate the matter in writing and we will conduct a senior-level review.