cx999 Privacy Policy

1 Who We Are

cx999 is an internationally licensed online gaming and sports betting platform accessible at cx999.one. For the purposes of this Privacy Policy, cx999 acts as the data controller in respect of all personal data collected from players through the cx999 platform, registration process, customer support channels, and associated communications.

cx999 is committed to handling your personal data in a lawful, fair, and transparent manner, consistent with the principles of its international gaming licence and applicable data protection standards.

2 Personal Data We Collect

cx999 collects personal data in the following categories:

cx999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related disclosures arise voluntarily in the context of responsible gaming support interactions.

3 How We Collect Your Data

cx999 collects personal data through the following means:

• Direct provision: Data you provide when registering an account, completing KYC, making a deposit or withdrawal, submitting a support request, or contacting cx999 by any channel;
• Automated collection: Technical data collected automatically when you access or use the cx999 platform, including via cookies, log files, and device fingerprinting technologies;
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT payment partners following deposit or withdrawal operations;
• Identity verification providers: Data received from third-party KYC and AML screening services engaged by cx999 for the purpose of verifying player identity and screening against international sanctions lists;
• Publicly available sources: Where permitted by applicable law, cx999 may supplement player records with information from publicly available registries for fraud prevention and AML purposes.

4 Why We Use Your Data

cx999 uses your personal data for the following purposes:

• Creating and managing your cx999 player account;
• Verifying your identity and age (21+) in compliance with cx999's international gaming licence obligations;
• Processing deposits and withdrawals in PKR via your chosen payment method;
• Providing customer support via live chat and email;
• Detecting, investigating, and preventing fraud, money laundering, collusion, and other prohibited conduct;
• Administering bonuses, promotions, and loyalty programmes;
• Monitoring gaming activity to support responsible gaming obligations, including identifying players who may be exhibiting signs of problem gambling;
• Complying with legal obligations imposed by cx999's international gaming licence, applicable AML regulations, and court orders or regulatory authority requests;
• Improving platform performance, game offerings, and user experience through aggregated analytics;
• Sending transactional communications (account alerts, withdrawal confirmations, security notifications) by SMS or email.

5 Legal Bases for Processing

cx999 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil cx999's obligations to you under the Player Agreement, including account management, transaction processing, and support delivery;
• Legal obligation: Processing required for cx999 to comply with its international gaming licence conditions, AML obligations, and applicable law;
• Legitimate interests: Processing for fraud prevention, platform security, business analytics, and responsible gaming monitoring, where these interests are not overridden by your rights;
• Consent: Processing for direct marketing communications, where cx999 has obtained your explicit prior consent at the point of registration or subsequently through account settings.

6 Data Sharing & Third Parties

cx999 does not sell your personal data. cx999 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT payment partners, for the purpose of processing deposits and withdrawals;
• KYC and AML providers: Identity verification and sanctions screening partners engaged to assist cx999 in meeting its licence-mandated due diligence obligations;
• Game content providers: Software studios and live dealer platform operators whose games are hosted on cx999, where technical integration requires the transmission of session data;
• Fraud prevention services: Third-party risk management and device intelligence platforms used to detect and prevent account fraud;
• Legal and regulatory authorities: Government agencies, courts, or regulatory bodies where cx999 is required by law or by its licensing authority to disclose player information;
• Professional advisers: Legal counsel, auditors, and compliance consultants acting under strict confidentiality obligations.

All third parties with whom cx999 shares personal data are required to implement appropriate technical and organisational measures to protect that data and to use it only for the specified purpose for which it was shared.

7 Cookies & Tracking Technologies

cx999 uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help cx999 deliver a functional, secure, and personalised experience. The following cookie categories are in use:

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to use the cx999 platform.

8 Data Retention

cx999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by cx999's licensing obligations:

• Account and identity data: Retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years following the date of each transaction;
• Gaming activity logs: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes;
• Support communications: Retained for a minimum of two (2) years from the date of the last interaction;
• Marketing consent records: Retained for the duration of your account, plus one (1) year following account closure, to evidence the basis for any marketing communications sent.

Following the expiry of the applicable retention period, cx999 will securely delete or anonymise your personal data in accordance with its internal data destruction procedures.

9 Data Security

cx999 implements a comprehensive set of technical and organisational security measures to protect player data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and cx999 servers;
• AES-256 encryption for sensitive data at rest, including stored identity documents and financial references;
• Multi-factor authentication (MFA) available to all players for account login;
• Regular third-party penetration testing and vulnerability assessments of the cx999 platform infrastructure;
• Strict role-based access controls limiting employee access to player data on a need-to-know basis;
• Continuous monitoring of platform activity for anomalous patterns indicative of data breach or unauthorised access attempts.

10 International Data Transfers

cx999 operates under an international gaming licence and utilises service providers located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, cx999 ensures that appropriate safeguards are in place, including:

• Contractual data transfer agreements incorporating standard data protection clauses;
• Transfers only to service providers whose data protection standards are assessed as adequate by cx999's compliance function;
• Where applicable, explicit player consent obtained prior to transfer.

By using the cx999 platform, Pakistani players acknowledge and consent to the international transfer of their personal data as described in this section.

11 Minors

cx999 is strictly prohibited from collecting personal data from individuals under the age of 21. The cx999 platform is intended exclusively for adult players aged 21 and above. cx999 employs mandatory CNIC-based age verification as part of its KYC process to prevent underage access.

Parents and guardians in Pakistan who believe a minor may have accessed or registered on cx999 are encouraged to contact cx999 support immediately via live chat at cx999.one. cx999 will investigate and take prompt remedial action.

12 Exercising Your Data Rights

To exercise any of the data rights described in this Privacy Policy — including access, rectification, erasure, restriction, portability, or objection — please contact cx999 through one of the following channels:

• Live Chat: Available 24/7 at cx999.one. Identify yourself as submitting a data rights request and a support agent will initiate the process;
• Email: [email protected] — include "Data Rights Request" in the subject line along with your registered mobile number.

cx999 will acknowledge your request within five (5) business days and provide a substantive response within fourteen (14) business days. In complex cases, cx999 may extend this period by a further fourteen (14) business days, in which case you will be notified of the extension and the reason for it.

cx999 reserves the right to request proof of identity before processing any data rights request, to ensure that data is not disclosed or modified in response to fraudulent requests.

13 Marketing Communications

cx999 may, with your prior consent, send you promotional communications about bonuses, new games, PSL cricket betting markets, and other cx999 offers via SMS or email. Consent for marketing communications is collected at the point of registration and may be updated at any time through your cx999 account settings.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your cx999 account settings panel;
• Clicking the unsubscribe link included in any cx999 marketing email;
• Contacting cx999 support via live chat or at [email protected] with a request to opt out.

Opting out of marketing communications does not affect the delivery of transactional or account-related communications, such as deposit confirmations, withdrawal notifications, and security alerts, which cx999 sends as part of its contractual obligations to you.

14 Changes to This Privacy Policy

cx999 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data collected, new third-party sharing arrangements, or changes to the legal basis for processing — cx999 will notify registered players via SMS or email prior to the changes taking effect.

Non-material amendments, such as clarifications of existing language, may take effect immediately upon publication of the revised policy at cx999.one/privacy-policy. The effective date at the top of this document will be updated accordingly.

Continued use of the cx999 platform following notification of any material amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you must cease using the platform and may request account closure in accordance with the cx999 Terms & Conditions.

15 Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or cx999's data practices, please contact the cx999 Privacy team through the following channels:

• Live Chat: 24/7 at cx999.one — fastest response channel, average reply time under 90 seconds.
• Email: [email protected] — please include "Privacy Enquiry" in the subject line.

cx999 takes all privacy-related complaints seriously. Where a complaint cannot be resolved through direct contact, cx999 operates an internal escalation procedure. Players may request escalation to cx999's Data Protection Officer by stating this clearly in their support communication.

For further information on how cx999 handles your data in the context of responsible gaming, please refer to the cx999 Responsible Gaming page and the cx999 Terms & Conditions.