crikex Privacy Policy

1.Introduction

crikex ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all users ("you", "User", "Player") who access or register on the crikex platform at crikex.bio. This Privacy Policy explains what personal information crikex collects, why it is collected, how it is used and protected, and what rights you have in relation to your data.

This Policy should be read in conjunction with the crikex Terms & Conditions and Responsible Gaming Policy. By creating an account or using any feature of the crikex platform, you consent to the data practices described in this Privacy Policy.

crikex takes data protection seriously. The platform handles user data with care and implements technical and organisational safeguards appropriate to the nature of the information processed. We do not sell personal data to third parties and we do not use your data for purposes beyond those described in this Policy.

2.Data Controller

For the purposes of this Privacy Policy, crikex acts as the data controller responsible for the personal information collected through the crikex platform. Queries regarding data processing, data access requests, and complaints about data handling should be directed to the crikex Data Protection contact as described in Section 14 of this Policy.

Where crikex engages third-party service providers to process data on its behalf (for example, payment processors, identity verification services, or analytics providers), those parties act as data processors under crikex's instruction and are contractually bound to process personal data only for the purposes specified by crikex.

3.Data We Collect

crikex collects personal data through several channels: directly from you when you register or use the platform, automatically through your use of the Service, and from third-party sources where necessary for verification purposes.

crikex does not intentionally collect special categories of sensitive personal data (such as health information, political opinions, or biometric data beyond what is strictly necessary for identity verification). Where identity verification requires a photograph, that image is used solely for KYC purposes and is not processed for facial recognition or profiling.

4.How We Use Your Data

crikex processes personal data only for specified, legitimate purposes. The primary purposes for which your data is used include:

• Account Management: Creating and maintaining your crikex account, verifying your identity, and enabling login and account security features;
• Service Delivery: Processing deposits and withdrawals, settling bets, crediting winnings and bonuses, and providing access to all platform features;
• Legal and Regulatory Compliance: Conducting KYC and anti-money laundering (AML) checks, maintaining records required by applicable regulations, and responding to law enforcement requests where legally mandated;
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, duplicate accounts, money laundering, and other prohibited conduct; monitoring for security threats and anomalous account behaviour;
• Responsible Gaming: Monitoring gambling patterns to identify potential problem gambling; administering self-exclusion, deposit limits, and other player protection tools;
• Customer Support: Responding to your queries, complaints, and support requests; maintaining records of communications for quality assurance;
• Platform Improvement: Analysing aggregated usage data to improve site performance, user experience, and product development — this analysis uses anonymised or pseudonymised data where possible;
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to users who have not opted out — you may opt out of marketing emails at any time via your account settings.

crikex does not use your personal data for automated decision-making that produces legal or similarly significant effects without providing you with an opportunity to contest that decision.

5.Legal Basis for Processing

crikex processes your personal data on one or more of the following legal grounds:

• Contract Performance: Processing necessary to operate your crikex account, process transactions, and deliver the services you have requested;
• Legal Obligation: Processing required to comply with applicable legal requirements, including KYC/AML obligations and regulatory reporting;
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring — where these interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent that you may withdraw at any time.

6.Data Sharing & Third Parties

crikex does not sell, rent, or trade your personal data to third parties for their own commercial purposes. crikex may share your personal data with third parties only in the following circumstances:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Skrill, and cryptocurrency networks — to process deposits and withdrawals on your behalf;
• Identity Verification Providers: Third-party KYC service providers who verify identity documents as part of the crikex onboarding and compliance process;
• Game Providers: Licensed game suppliers (such as Evolution Gaming, Pragmatic Play, PG Soft) whose platforms power games within the crikex casino — limited session and technical data may be shared to facilitate game delivery;
• Legal and Regulatory Authorities: Law enforcement agencies, regulatory bodies, or courts where crikex is legally required to disclose information;
• IT and Infrastructure Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on crikex's behalf under strict data processing agreements.

All third-party processors engaged by crikex are required to maintain appropriate security standards and are contractually prohibited from using crikex user data for any purpose beyond the contracted service.

7.Data Retention

crikex retains personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Account data is retained for the duration of your active crikex account plus a minimum of five (5) years following account closure, to meet standard record-keeping and AML compliance obligations;
• Transaction and financial records are retained for a minimum of five (5) years from the date of the transaction;
• KYC identity documents are retained for the duration required by the applicable regulatory framework governing crikex's operations;
• Support communications are retained for a minimum of two (2) years for quality assurance and dispute resolution purposes;
• Marketing preference records are retained until you withdraw consent or request deletion, subject to any overriding legal retention requirement.

Upon expiry of the applicable retention period, crikex will securely delete or anonymise the relevant personal data.

8.Data Security

crikex implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and the crikex platform;
• Encrypted storage for sensitive personal and financial data at rest;
• Role-based access controls restricting internal access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of platform infrastructure;
• Two-factor authentication (2FA) available to all users to protect account access;
• Continuous monitoring for suspicious account activity and security anomalies.

While crikex applies industry-standard security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your crikex account credentials and for notifying crikex immediately if you suspect any unauthorised access to your account.

9.Cookies & Tracking Technologies

crikex uses cookies and similar tracking technologies to operate the platform, maintain your login session, and analyse platform usage. The following categories of cookies may be used:

• Essential Cookies: Required for the platform to function — these enable login sessions, security tokens, and core platform features. They cannot be disabled without disrupting service functionality;
• Functional Cookies: Remember your preferences (such as language settings and display options) to improve your experience across sessions;
• Analytics Cookies: Collect anonymised data on how users navigate the crikex platform, used to improve site performance and user experience. No personally identifiable information is linked to analytics data;
• Marketing Cookies: Used to present relevant promotions and offers within the crikex platform based on your usage patterns. These are only activated where you have given consent.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent access to the crikex platform but may affect personalisation features.

10.Your Data Rights

Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by crikex:

• Right of Access: You may request a copy of the personal data crikex holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data — many details can be updated directly in your account settings;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations;
• Right to Restrict Processing: You may request that crikex restrict the processing of your data in certain circumstances;
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to crikex;
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing — marketing opt-out can be actioned immediately via your account settings;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact crikex support as described in Section 14. crikex will respond to data rights requests within a reasonable period and in accordance with applicable law. Requests may require identity verification before processing.

Please note that certain rights may be limited where retention of data is required for legal compliance, fraud prevention, or responsible gaming monitoring. crikex will explain any such limitations when responding to your request.

11.Minors

If you believe a minor has registered on the crikex platform, please notify us immediately via the contact details in Section 14 so that we can take prompt action.

12.International Data Transfers

In the course of providing the crikex service, personal data may be transferred to and processed in countries outside Pakistan. This may occur where crikex's infrastructure providers, payment processors, or game suppliers operate data centres or processing facilities in other jurisdictions.

Where personal data is transferred internationally, crikex takes steps to ensure that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Privacy Policy. This may include contractual data protection provisions with the receiving party.

13.Changes to This Privacy Policy

crikex may update this Privacy Policy from time to time to reflect changes in data processing practices, applicable legal requirements, or platform features. Material changes will be communicated to registered users via email or a prominent notice on the crikex platform prior to taking effect.

The "Last Updated" date at the top of this page will reflect when the most recent revision was made. Your continued use of crikex following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with a material change, you may request account closure as described in the Terms & Conditions.

14.Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by crikex, please contact us through the following channels:

crikex will aim to respond to all data-related queries within fourteen (14) business days. Where a response requires additional time — for example, to verify your identity or compile requested data — crikex will inform you of the expected timeline.