Crikex Privacy Policy — How We Handle Your Personal Data

Your privacy is not a formality at Crikex. This Policy explains exactly what data we collect, why we collect it, how it is protected, and what rights you have over it as a member using our platform in Pakistan.

Last Updated: 1 January 2025 Language: English (en-PK)
crikex

What Crikex Promises About Your Data

Before you read through the full policy, here are the six most important things Crikex commits to on data privacy.

We Never Sell Your Data

Crikex does not sell, rent, or trade your personal information to advertisers, data brokers, or any third party for commercial purposes. Your account details and betting history belong to you, not to anyone else's marketing department.

AES-256 Encryption on All Transactions

Every financial transaction on Crikex — deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card — is protected with AES-256 encryption. Your payment details are never stored in plain text on Crikex servers.

Data Collected Only for Specific Purposes

We collect personal data only for the purposes required to operate your Crikex account — processing bets, verifying identity, handling payments, and complying with applicable regulations. Nothing more.

Your Rights Are Real and Enforceable

You have the right to access, correct, port, and delete your personal data. Requests are handled within 30 days. Crikex does not make exercising data rights difficult or expensive — contact support@crikex.online at any time.

Minimal Data, Properly Justified

Crikex operates on a data minimisation principle. If we don't need a piece of information to operate your account or meet a legal obligation, we don't ask for it. Browsing the Crikex website without registering generates only anonymous analytics data.

Breach Notification Within 72 Hours

In the unlikely event of a data security breach that affects your personal information, Crikex will notify you and the relevant authority within 72 hours of becoming aware of it. You will be told what data was affected and what steps Crikex is taking to resolve the issue.

crikex
This Privacy Policy applies to all personal data collected by Crikex through the website crikex.online and all associated services including sports betting, PSL markets, online casino, Teen Patti, live cricket scores, and customer support. By using any Crikex service, you confirm that you have read and understood this Policy.

1. Who We Are

Crikex ("we", "our", "us") is the operator of the platform available at crikex.online. Crikex is a sports betting and online gaming platform built specifically for users in Pakistan, offering cricket and PSL betting, esports wagering, casino games, Teen Patti, and real-time cricket scores. For the purposes of this Privacy Policy, Crikex is the data controller responsible for your personal information.

You can contact the Crikex data protection team directly at support@crikex.online. We are committed to handling your personal data with care, transparency, and respect — not because we have to, but because it is the right way to operate a platform that Pakistani users trust with their financial information.

2. Data We Collect

Crikex collects personal data in three broad ways: data you provide directly, data generated automatically by your use of the platform, and data received from third-party payment processors and identity verification services.

2.1 Data You Provide Directly

  • Registration data: full name, Pakistani mobile number, date of birth, and email address (if provided)
  • Identity verification documents: CNIC number, scanned copy of CNIC or passport when requested for KYC purposes
  • Payment information: mobile wallet account number (Easypaisa, JazzCash, NayaPay, SadaPay), IBAN for IBFT transfers, or masked card number for Visa/Mastercard payments
  • Account preferences: responsible gaming settings, communication preferences, bonus opt-in choices
  • Support communications: messages sent to Crikex via live chat, WhatsApp, or email

2.2 Data Generated Automatically

  • Betting activity: bets placed, markets selected, stakes, winnings, and settlement outcomes
  • Session data: login times, session duration, pages visited, features used
  • Device and technical data: IP address, device type, operating system, browser type, device fingerprint identifier
  • Location data: approximate country-level location derived from IP address
  • Cookie data: as described in Section 6 of this Policy

2.3 Data from Third Parties

  • Payment processors: transaction confirmation, payment status, and fraud risk signals from Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners
  • Identity verification services: result of document verification checks where Crikex uses a third-party KYC provider
  • Fraud and security partners: risk signals used to identify suspicious account activity or abnormal betting patterns

3. How Crikex Uses Your Data

Every use of your personal data at Crikex has a defined purpose. We do not use your data for purposes beyond those listed below without first obtaining your explicit consent.

3.1 Account Operation

Your registration data, betting activity, and payment information are used to create and operate your Crikex account — processing your bets, crediting winnings, managing your balance, and responding to support queries. This is the core purpose for which Crikex exists and the primary reason personal data is collected.

3.2 Identity Verification and Fraud Prevention

Crikex uses CNIC data and third-party KYC checks to verify that members are who they claim to be and that they meet the minimum age requirement of 18 years. The same data, combined with betting behaviour and device information, is used by our risk and fraud team to identify unusual account activity, suspected collusion, bonus abuse, and payment fraud.

3.3 Payment Processing

Your registered payment method information is used solely to process deposits and withdrawals. Crikex shares the minimum necessary payment details with our processing partners (Easypaisa, JazzCash, etc.) to execute your requested transactions. Payment card numbers are tokenised and never stored in full on Crikex systems.

3.4 Responsible Gaming Monitoring

Crikex analyses betting frequency, stake sizes, session duration, and deposit patterns to identify members who may be showing signs of problem gambling. Where these indicators are present, Crikex may proactively reach out to offer information about responsible gaming tools. This monitoring is carried out in your interest and the data is not used for commercial profiling.

3.5 Legal and Regulatory Compliance

Crikex is required by law to retain certain records of financial transactions and identity verification for audit and compliance purposes. Data retained for legal compliance is held securely, accessed only by authorised personnel, and deleted when the legally required retention period expires.

3.6 Service Improvement and Analytics

Aggregate, anonymised data about how members use the Crikex platform is used to improve the product — identifying features that aren't working well, pages that load slowly, or markets that members find confusing. This data cannot be linked back to any individual member.

3.7 Communications

Crikex may send you transactional messages — bet confirmation, withdrawal status updates, password reset notifications — and, if you have opted in, promotional communications about bonuses, PSL betting offers, or new features. You can opt out of promotional communications at any time from your account notification settings without affecting your ability to receive transactional messages.

crikex

4. Legal Basis for Processing

Crikex processes your personal data under the following legal bases:

  • Contractual necessity: processing required to operate your account, settle bets, and process payments under the Terms and Conditions you accepted at registration
  • Legal obligation: processing required to comply with applicable financial regulations, anti-money laundering requirements, and age verification obligations
  • Legitimate interests: fraud prevention, platform security, responsible gaming monitoring, and aggregate service analytics — where Crikex's legitimate interests do not override your privacy rights
  • Consent: promotional communications and any optional data collection where we ask for explicit permission. Consent can be withdrawn at any time without affecting the lawfulness of prior processing

5. Data Sharing with Third Parties

Crikex does not sell or rent your personal data. We share data only with the following categories of third party, only to the extent necessary for the described purpose, and under strict confidentiality and data processing agreements:

5.1 Payment Processors

When you deposit or withdraw funds, the minimum necessary payment details are shared with the relevant payment service — Easypaisa, JazzCash, NayaPay, SadaPay, or your bank via IBFT. These processors receive only what is required to execute your transaction and are contractually prohibited from using that data for any other purpose.

5.2 Identity Verification Providers

Where Crikex uses a third-party KYC service to verify your identity, your CNIC details and document images are shared with that provider for the sole purpose of verification. Verification providers are selected based on their security standards and are contractually bound to data protection obligations.

5.3 Technology and Infrastructure Providers

Crikex uses cloud hosting, database, and content delivery providers to operate the platform. These providers process data on Crikex's behalf and have no independent right to use your personal information. All such providers are subject to binding data processing agreements.

5.4 Legal and Regulatory Disclosure

Crikex may disclose personal data to law enforcement authorities, regulators, or courts where required by applicable law or in response to a valid legal order. Where possible, Crikex will notify the affected member of such a disclosure unless legally prohibited from doing so.

Crikex does not share your betting history, account balance, or personal profile with any advertising network, social media platform, or data analytics company for commercial targeting purposes.

6. Cookies and Tracking Technologies

Crikex uses cookies and similar technologies on the crikex.online website. Here is a plain-English explanation of what we use and why:

6.1 Essential Cookies

These cookies are required for the Crikex platform to function. They maintain your login session, remember your bet slip contents, and store your language and display preferences. Essential cookies cannot be disabled without breaking core platform functionality. No personal data beyond session identifiers is stored in essential cookies.

6.2 Analytics Cookies

Crikex uses anonymised analytics to understand how members navigate the platform — which pages are visited most, where users spend time, and where they encounter problems. Analytics data is aggregated and cannot be linked to individual accounts. You can opt out of analytics cookies from the cookie preference centre accessible in the footer of the Crikex website.

6.3 Security Cookies

Crikex uses security tokens and device fingerprinting cookies to protect your account from unauthorised access. These track whether your current session matches the device and location profile associated with your account, helping to detect and block account takeover attempts.

6.4 No Third-Party Advertising Cookies

Crikex does not deploy third-party advertising cookies or tracking pixels that allow external networks to follow your activity across other websites. Your browsing behaviour outside of crikex.online is not tracked by Crikex or on Crikex's behalf.

7. Data Security

Crikex takes data security seriously because our members trust us with financial and identity information. The security measures in place include:

  • AES-256 encryption for all financial transaction data in transit and at rest
  • TLS 1.3 for all data transmitted between your device and the Crikex platform
  • Two-factor authentication (2FA) available to all members and strongly recommended
  • Role-based access control — Crikex staff access to member data is restricted by role and logged for audit purposes
  • Penetration testing conducted by independent security specialists on a regular schedule
  • Incident response plan ensuring that any breach affecting member data is identified, contained, and reported within required timeframes

Despite these measures, no digital platform can guarantee absolute security. Crikex strongly recommends that members use a unique, strong password for their Crikex account and enable 2FA from their account security settings.

8. Data Retention

Crikex retains your personal data for as long as your account remains active and for the period required by applicable law after account closure. In practice:

  • Active account data — retained for the lifetime of your account plus any legally required period after closure
  • Financial transaction records — retained for a minimum of 5 years after the transaction date in compliance with financial regulations
  • Identity verification documents — retained for a minimum of 5 years after account closure
  • Support communications — retained for 2 years after the conversation closes
  • Analytics and session data — retained in aggregate anonymised form indefinitely; individual session logs deleted after 12 months

When the applicable retention period expires, data is securely deleted or permanently anonymised. Data subject to an ongoing legal investigation or dispute may be retained beyond standard periods until the matter is resolved.

9. Your Privacy Rights

As a Crikex member, you have the following rights over your personal data. These rights are free to exercise and Crikex will respond to all valid requests within 30 days:

Right to Access

Request a copy of all personal data Crikex holds about you, including your account profile, betting history, and payment records. We will provide this in a commonly used electronic format.

Right to Rectification

If any personal data Crikex holds about you is inaccurate or incomplete, you have the right to request correction. Most account details can be updated directly from your account settings.

Right to Erasure

Request deletion of your personal data where it is no longer needed for the purpose it was collected, or where you withdraw consent. Some data must be retained for legal compliance and cannot be deleted on request.

Right to Data Portability

Request your personal data in a structured, machine-readable format (such as CSV or JSON) so you can transfer it to another service if you choose. This right applies to data you provided directly to Crikex.

Right to Restrict Processing

Ask Crikex to pause processing of your data while you contest its accuracy or object to its use. Data that is restricted can still be stored but will not be actively used by Crikex until the restriction is lifted.

Right to Object

Object to Crikex processing your data for legitimate interests, including responsible gaming profiling or analytics. Crikex will cease the processing unless there are compelling legitimate grounds that override your interests.

To exercise any of these rights, contact the Crikex data protection team at support@crikex.online with the subject line "Data Rights Request". Please include your registered mobile number so we can verify your identity before processing the request. Crikex will acknowledge your request within 3 business days and respond fully within 30 days.

10. Children's Privacy

Crikex is strictly an adults-only platform for users aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has registered on Crikex, please contact us immediately at support@crikex.online. We will investigate the report, close the account, and delete all associated personal data promptly.

Crikex uses date of birth verification at registration and reserves the right to request documentary proof of age at any time. Accounts where age verification fails will be suspended with all deposit amounts returned to the original payment source after verification is completed.

11. International Data Transfers

Crikex's primary data processing infrastructure is operated in compliance with applicable data protection standards. Where personal data is processed by third-party service providers located outside Pakistan — for example, cloud infrastructure or KYC verification services — Crikex ensures that appropriate contractual safeguards are in place before any transfer occurs.

These safeguards include binding contractual clauses requiring overseas processors to maintain security standards equivalent to those applied by Crikex, and restricting their use of your data to the specific purpose for which it was shared. Crikex does not transfer personal data to countries or organisations that cannot provide equivalent protection without first obtaining your explicit consent.

12. Changes to This Privacy Policy

Crikex may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or our data practices. When we make a significant change — one that affects how we use your data or reduces your rights — we will notify you via your registered mobile number or email address at least 14 days before the change takes effect.

Minor clarifications, formatting corrections, and updates that do not affect your rights may be published without advance notice. The date at the top of this page always reflects when the Policy was last substantively updated. Continued use of the Crikex platform after a Policy update constitutes acceptance of the revised terms.

If you disagree with changes to this Policy, you have the right to close your Crikex account and request deletion of your data before the updated Policy takes effect. Contact support@crikex.online to exercise this option.

13. Contact and Complaints

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, the Crikex data protection team is available:

  • Email: support@crikex.online — Subject line: "Privacy Enquiry" or "Data Rights Request"
  • Live Chat: Available from the Crikex platform 24/7 after login
  • Response time: acknowledgement within 3 business days, full response within 30 days

If you feel that Crikex has not addressed your privacy concern adequately, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. Crikex will cooperate fully with any such investigation and take all remedial steps required.

Crikex treats all privacy complaints seriously. Our data protection team reviews every complaint and uses feedback to improve our data practices. We are not interested in dismissing legitimate concerns — transparency and accountability are part of how Crikex earns and keeps the trust of our members across Pakistan.

This Privacy Policy was last updated on 1 January 2025. Members who registered before this date should note that this updated Policy applies to all data processed from 1 January 2025 onwards.
Terms and Conditions
This Privacy Policy should be read alongside the Crikex Terms and Conditions, which govern the full scope of your rights and responsibilities as a member. Read the Terms and Conditions.
Responsible Gaming
Deposit limits, session controls, and self-exclusion tools are available directly in your Crikex account settings. Visit the Responsible Gaming page.

Join 500,000+ Members Who Trust Crikex with Their Data

AES-256 encrypted transactions, no data selling, and real enforceable privacy rights — all on Pakistan's most trusted sports betting and casino platform. Registration is free and takes five minutes.

Create Free Account

18+ only · Bet responsibly · Responsible Gaming Policy