This Privacy Policy applies to all services provided by Cricex through the website cricex-win.com and covers every member who has registered or interacted with the platform, regardless of which product they use – cricket betting, esports, poker, football betting, or the VIP Club. When you register on Cricex and use any of its services, you are consenting to the collection and processing of your personal data as described in this document.
Cricex is committed to being straightforward about the data it holds. There is no hidden tracking beyond what is described here, no selling of personal details to third-party marketers, and no use of your data for purposes you have not been informed about. If anything in this policy is unclear, you can always reach us at support@cricex-win.com.
1. Data We Collect
Cricex collects personal data from members through the registration process, ongoing account activity, and automatic technical processes. The data we collect falls into the following categories:
1.1 Registration Data
When you create a Cricex account, we collect the following information which you provide directly:
- Full legal name as it appears on your Pakistani CNIC or passport
- Date of birth (to verify you meet the minimum age requirement of 18 years)
- Pakistani mobile number (used for account verification and communication)
- Email address (used for account communication and promotional updates where consented)
- Residential address in Pakistan
- Username and password (password is stored in encrypted form and never readable by staff)
1.2 Verification Data
To comply with identity verification requirements, Cricex may additionally request and retain:
- Copies of your Pakistani CNIC (front and back)
- Copies of a valid Pakistani passport if provided in lieu of CNIC
- Proof of address documents such as utility bills or bank statements
- Screenshots or confirmation details of mobile wallet registration for Easypaisa or JazzCash accounts used for deposits
1.3 Financial Transaction Data
Cricex records details of all deposits and withdrawals processed through your account including the payment method used, transaction amounts in PKR, transaction dates and reference numbers, and the status of each transaction. This data is retained for fraud prevention, dispute resolution, and regulatory compliance purposes.
1.4 Betting and Gaming Activity Data
All bets placed, games participated in, and poker hands played on Cricex are recorded and associated with your member account. This includes the markets bet on, stake amounts, odds accepted, settlement results, and bonus usage. This data is used for account management, responsible gaming monitoring, and product improvement.
1.5 Technical and Device Data
When you access Cricex, our systems automatically collect certain technical data including your IP address, device type and operating system, browser type and version, pages visited on the Cricex platform, time and duration of sessions, and referring URLs. This data is used for security monitoring, fraud detection, and platform performance analysis.
What We Do Not Collect
- Cricex does not collect your full payment card number – card payments are processed by a secure third-party payment gateway
- We do not access your mobile wallet PIN or banking passwords at any point
- We do not purchase or import personal data from external marketing databases
2. How We Use Your Data
Cricex uses the personal data it holds for the following specific purposes. We do not use your data for anything that is not listed here without first obtaining your consent.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, verification documents | Contract performance |
| Identity and age verification | CNIC, DOB, address documents | Legal obligation |
| Processing deposits and withdrawals | Financial transaction data, payment method details | Contract performance |
| Fraud prevention and security | Device data, IP address, transaction patterns | Legitimate interest |
| Responsible gaming monitoring | Betting activity, deposit frequency, session data | Legal obligation / legitimate interest |
| Customer support | Account data, transaction history, communications | Contract performance |
| Promotional communications | Email address, betting preferences | Consent (opt-in required) |
| Platform improvement and analytics | Aggregated usage data, technical data | Legitimate interest |
2.1 Promotional Communications
If you have opted in to receiving promotional emails from Cricex, we may send you information about new promotions, bonus offers, and platform features that are relevant to your betting activity on Cricex. You can withdraw this consent at any time by using the unsubscribe link in any marketing email or by contacting support@cricex-win.com. Opting out of marketing communications does not affect transactional messages such as deposit confirmations, withdrawal notifications, and account security alerts, which are sent regardless of marketing preference.
2.2 Responsible Gaming Use of Data
Cricex uses betting activity, deposit patterns, and session data to monitor for signs of problem gambling behaviour. Where our systems or support team identify patterns that may indicate a member is experiencing difficulty managing their gambling, we may proactively reach out to offer responsible gaming tools or information. This use of data is central to Cricex's commitment to responsible gaming and is not used for any commercial purpose.
3. Data Storage and Security
Cricex takes the security of your personal data seriously. All member data is stored on secure servers with industry-standard protections in place. The following security measures are applied to Cricex's data infrastructure:
- Encryption in transit: All data transmitted between your device and the Cricex platform is encrypted using TLS (Transport Layer Security) protocol. The padlock icon in your browser address bar confirms this connection is active.
- Encryption at rest: Sensitive personal data stored in Cricex's databases is encrypted at rest, meaning it is unreadable without the appropriate decryption keys.
- Password hashing: Your Cricex account password is never stored in readable form. It is processed through a one-way cryptographic hash function, meaning even Cricex staff cannot read your password.
- Access controls: Access to member personal data within Cricex is restricted on a need-to-know basis. Staff who do not require access to personal data for their role cannot view it.
- Intrusion detection: Cricex operates automated systems that monitor for unusual access patterns, potential breaches, or suspicious activity and generate alerts for the security team.
- Regular security reviews: Cricex conducts periodic reviews of its data security practices and infrastructure to identify and address vulnerabilities.
What to Do if You Suspect Unauthorised Access
If you believe your Cricex account has been accessed without your authorisation, change your password immediately and contact support@cricex-win.com with "SECURITY" in the subject line. Our team will investigate within 24 hours and suspend the account if necessary while the investigation is ongoing.
4. Sharing Your Personal Data
Cricex does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and only with parties that have agreed to handle it in accordance with appropriate data protection standards.
4.1 Payment Processors
To process your deposits and withdrawals, Cricex shares transaction data with its payment processing partners who handle Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfers, and Visa/Mastercard transactions. The data shared is limited to what is necessary to complete the transaction – typically name, amount, and account reference. These processors are contractually required to use your data only for the purpose of processing the transaction.
4.2 Identity Verification Partners
Cricex may use specialist third-party identity verification services to cross-check the identity documents you provide. Where this occurs, your CNIC details or other verification data may be shared with that provider solely for the purpose of confirming authenticity. These providers are bound by strict data handling agreements with Cricex.
4.3 Fraud Detection Services
To protect the platform and its members from fraud and money laundering, Cricex may share certain technical and transactional data with fraud detection service providers. This data is used to generate risk scores and identify suspicious patterns. No unnecessary personal information is shared beyond what fraud analysis requires.
4.4 Legal and Regulatory Disclosure
Cricex may be required to disclose member data to law enforcement agencies, regulatory authorities, or courts in response to lawful requests or legal proceedings. In such cases, Cricex discloses only the minimum data necessary to comply with the legal obligation and will notify the affected member where it is legally permitted to do so.
4.5 Business Transfers
In the event of a merger, acquisition, or sale of all or part of Cricex's business, member personal data may be transferred to the acquiring entity as part of that transaction. Members would be notified of any such transfer and of any changes to this Privacy Policy that result from it.
No Third-Party Marketing
Cricex never shares your personal data with third-party companies for their own marketing purposes. Your email address, phone number, and betting history are not sold to advertisers or data brokers under any circumstances.
5. Cookies and Tracking Technologies
Cricex uses cookies and similar tracking technologies to operate the platform effectively, improve the user experience, and maintain session security. A cookie is a small text file stored on your device by your browser when you visit a website.
5.1 Types of Cookies Used by Cricex
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Maintain your login session, remember your account preferences, process bets and transactions securely | No – required for the platform to function | |
| Understand how members use Cricex – which pages are visited, how long sessions last, where users encounter difficulty – to improve the platform | Yes – opt out available in browser settings | |
| Remember your language preferences, favourite sports and markets, and display personalised content relevant to your betting activity on Cricex | Yes – some personalisation features may be reduced |
5.2 Managing Cookies
You can control which non-essential cookies are stored on your device through your browser settings. Most modern browsers allow you to view, delete, and block cookies. If you block all cookies, some features of the Cricex platform may not function correctly – in particular, you will not be able to remain logged in between sessions.
5.3 Local Storage
In addition to cookies, Cricex uses browser local storage to retain certain session preferences and cached data to improve platform loading speed. This data is stored only on your device and is not transmitted to third parties.
6. Your Rights Over Your Personal Data
As a Cricex member, you have the following rights regarding the personal data we hold about you. To exercise any of these rights, contact us at support@cricex-win.com with your account details and a clear description of your request.
Response Times
Cricex aims to respond to all data rights requests within 30 days of receiving the verified request. Where a request is complex or involves large volumes of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
7. Data Retention
Cricex does not keep your personal data for longer than is necessary for the purposes for which it was collected, subject to the legal retention obligations described below.
7.1 Active Account Data
While your Cricex account remains active, all account data including registration details, verification documents, transaction history, and betting records are retained in full. This data is required for ongoing account management, responsible gaming monitoring, and customer support.
7.2 Data After Account Closure
Following voluntary account closure or account termination by Cricex, personal data is retained for the following periods:
- Financial transaction records: Retained for a minimum of 5 years from the date of the last transaction, in compliance with standard financial record-keeping requirements
- Identity verification documents: Retained for a minimum of 5 years from account closure
- Betting and gaming activity records: Retained for a minimum of 3 years from account closure
- Customer support communications: Retained for 3 years from the date of the communication
- Technical and device data: Typically deleted or anonymised within 12 months of account closure
Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it cannot be associated with any individual member.
8. Minors and Under-18 Protection
Cricex does not knowingly collect or process personal data from individuals under the age of 18. The platform is intended exclusively for adults, and registration requires confirmation that the user is at least 18 years old. Age verification checks are conducted as part of the Cricex registration and withdrawal process.
If Cricex becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately, the associated account will be closed, and any deposits will be returned to the source payment method. If you believe a minor may have registered on Cricex using false information, please contact support@cricex-win.com immediately so the matter can be investigated and resolved.
9. Updates to This Privacy Policy
Cricex may update this Privacy Policy from time to time to reflect changes in our data practices, changes to the platform's products or services, or changes in applicable law. When material changes are made to this policy, Cricex will notify registered members via the email address on their account at least 7 days before the changes take effect.
The "Last Updated" date shown at the top of this page reflects the most recent revision. The current version of this Privacy Policy is always accessible at cricex-win.com/privacy-policy. Your continued use of Cricex after a policy update constitutes acceptance of the revised Privacy Policy. If you do not agree with any update, you should cease using the platform and may request account closure as described in the Terms and Conditions.
Minor clarifications or corrections that do not materially change how Cricex uses member data may be made without advance notice. Where Cricex is unsure whether a change is material, it will treat the change as material and provide advance notice.
10. Contact Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that Cricex holds about you, please get in touch using the details below. Our team takes privacy enquiries seriously and will respond within the stated timeframes.
- Email: support@cricex-win.com
- Subject line for data requests: "Privacy Request – [your account username]"
- Response time: Within 5 business days for general privacy queries; within 30 days for formal data rights requests
- Support hours: 24 hours a day, 7 days a week
For data rights requests, please include your full name, registered email address, Pakistani mobile number, and a clear description of your request. We may ask for additional verification to confirm your identity before processing sensitive data requests.
The related documents below may also be useful: