cx999 Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected and processed by cx999 in connection with the cx999 online casino and sports betting platform accessible at cx999.app (the "Platform"), including all associated sub-domains, mobile-optimised interfaces and any future cx999 digital properties.

By registering an account on cx999, visiting the Platform or using any cx999 service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the data practices described herein, you should not create a cx999 account or use cx999 services.

This Privacy Policy should be read together with the cx999 Terms & Conditions and the Responsible Gaming Policy, which together form the complete governance framework for your cx999 account and use of cx999 services.

2. Data Controller Information

cx999 acts as the data controller in respect of personal data collected through the cx999 Platform. The data controller is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing complies with applicable data protection standards.

For all data-related enquiries, requests or complaints, you may contact cx999 directly at: [email protected] (plain text — not a clickable link). Please mark your correspondence "Data Privacy Enquiry" to ensure it is directed to the appropriate team within cx999.

3. Personal Data We Collect

cx999 collects the following categories of personal data from registered users and Platform visitors:

• Identity Data: Full legal name, date of birth, CNIC number, selfie photograph for KYC identity verification.
• Contact Data: Email address, Pakistani mobile number (in 03XX or +92 format), correspondence records with cx999 support.
• Financial Data: Payment method details (JazzCash account numbers, Easypaisa numbers, bank account details, card numbers masked to last four digits), deposit amounts, withdrawal requests, transaction history.
• Account Data: Username, password (stored in hashed encrypted form — never in plain text), account settings, responsible gaming limit configurations, KYC verification status.
• Transactional Data: Full betting and gaming history including game titles, bet amounts, outcomes and timestamps; bonus redemption history.
• Technical Data: IP address, device type and operating system, browser type and version, session timestamps, login history including device and location indicators.
• Usage Data: Pages visited on the cx999 Platform, game categories browsed, search queries within the Platform, time spent per session.
• Communications Data: Records of communications between you and cx999 including support tickets, live chat transcripts and email correspondence.

cx999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs or health data unless specifically required by a legal obligation and with appropriate safeguards in place.

4. How We Collect Your Data

cx999 collects your personal data through the following channels:

• Direct Provision: Data you actively provide during the cx999 registration process, during KYC verification, when making deposits or withdrawal requests, when contacting cx999 support, or when updating your cx999 account settings.
• Automated Collection: Technical and usage data collected automatically when you access and interact with the cx999 Platform, including through server logs, session tracking systems and analytics tools.
• Cookies and Similar Technologies: Data collected through cookies, pixel tags and similar tracking technologies placed on your device when you visit the cx999 Platform. See Section 6 for full cookie details.
• Third-Party Sources: Identity verification data from KYC service providers; fraud detection signals from anti-fraud systems; payment confirmation data from payment processors including JazzCash, Easypaisa and banking institutions.
• Game Provider Data: Transactional and gameplay data received from cx999's licensed game content providers including RNG-certified slot providers and live casino streaming operators in connection with games played through the cx999 Platform.

5. Purposes and Legal Basis for Processing

cx999 processes your personal data for the following purposes, each supported by an appropriate legal basis:

• Account Creation and Management: To register and maintain your cx999 account, process your login credentials and deliver cx999 platform services. Legal basis: performance of contract.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, Easypaisa, bank transfer and other supported payment methods. Legal basis: performance of contract.
• Identity Verification (KYC): To verify your identity and age (18+) in compliance with applicable anti-money laundering and responsible gaming obligations. Legal basis: legal obligation and legitimate interests.
• Responsible Gaming Compliance: To enforce deposit limits, loss limits, cooling-off periods and self-exclusion requests configured in your cx999 account. Legal basis: legal obligation and legitimate interests.
• Fraud Prevention and Security: To detect, investigate and prevent fraudulent transactions, account takeovers, multi-accounting and other prohibited activity on the cx999 Platform. Legal basis: legitimate interests.
• Customer Support: To respond to your enquiries, complaints and support requests and maintain records of cx999 support interactions. Legal basis: performance of contract and legitimate interests.
• Legal and Regulatory Compliance: To comply with applicable legal obligations including record-keeping requirements, regulatory reporting and law enforcement requests. Legal basis: legal obligation.
• Platform Improvement: To analyse usage patterns, identify technical issues and improve the cx999 Platform's performance, features and user experience. Legal basis: legitimate interests.
• Marketing Communications: To send you promotional communications about cx999 offers, bonuses and platform updates where you have provided consent. You may withdraw consent to marketing at any time through your cx999 account settings. Legal basis: consent.

6. Cookies and Tracking Technologies

6.1 cx999 uses cookies and similar tracking technologies on the Platform. Cookies are small data files placed on your device that help cx999 recognise returning users, maintain session states, and gather usage analytics.

6.2 cx999 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the cx999 Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your cx999 account preferences such as language settings, responsible gaming display preferences and lobby layout configurations.
• Analytics Cookies: Used by cx999 to understand how users navigate the Platform — which sections are most used, where users encounter difficulties and how long sessions typically last. This data is aggregated and does not personally identify individual users.
• Performance Cookies: Used to monitor Platform performance, identify technical errors and optimise load times particularly on mobile devices and Pakistani mobile network connections.

6.3 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use core cx999 Platform functions including login and the cx999 Cashier.

7. Data Sharing and Third Parties

cx999 does not sell your personal data to third parties. cx999 shares personal data only in the following circumstances and with appropriate data protection measures in place:

• Payment Processors: Financial data is shared with JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard networks and other payment infrastructure providers solely for the purpose of processing your transactions.
• KYC and Identity Verification Providers: Identity data including CNIC details and selfie photographs are shared with certified KYC service providers for the purpose of age and identity verification.
• Game Content Providers: Gameplay and transactional data is shared with cx999's licensed game providers (including Pragmatic Play, PG Soft, JILI and others) as necessary for game delivery, RNG certification compliance and dispute resolution.
• Fraud Detection and Security Services: Technical data including IP addresses and device identifiers may be shared with anti-fraud and cybersecurity service providers to protect the integrity of the cx999 Platform.
• Legal and Regulatory Authorities: cx999 will disclose personal data to law enforcement agencies, regulatory bodies or other government authorities where required by applicable law, court order or regulatory direction.
• Professional Advisers: cx999 may share data with legal, audit or compliance advisers under strict confidentiality obligations in connection with regulatory compliance or dispute resolution processes.

8. International Data Transfers

Some of cx999's service providers and game content partners operate from outside Pakistan. Where personal data is transferred internationally — for example, to KYC verification systems or game provider servers — cx999 ensures that appropriate safeguards are in place in accordance with applicable data protection standards, including contractual protections and security certifications.

By using the cx999 Platform, you acknowledge that your personal data may be processed by cx999 service providers in jurisdictions outside Pakistan. cx999 requires all third-party data processors to implement data security standards consistent with those applied by cx999 itself.

9. Data Retention

cx999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following specific retention periods:

• Active Account Data: Retained for the duration of your registered cx999 account and for a minimum of five (5) years following account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Support Correspondence: Retained for three (3) years from the date of last interaction.
• Technical and Usage Logs: Retained for up to twelve (12) months from collection, after which they are anonymised or deleted.
• Self-Excluded Users: Basic account identifiers are retained indefinitely to enforce self-exclusion requests and prevent re-registration.

10. Security of Your Personal Data

cx999 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and cx999 servers.
• Bcrypt hashing for stored passwords — cx999 never stores passwords in plain text.
• Two-factor authentication (2FA) available for all cx999 accounts.
• Role-based access controls limiting cx999 staff access to personal data on a need-to-know basis.
• Regular security audits and penetration testing of the cx999 Platform infrastructure.
• Encrypted storage of sensitive financial data and KYC documentation.

Despite cx999's security measures, no internet-based system is completely immune from security threats. cx999 cannot guarantee absolute security of data transmitted over the internet. You are also responsible for maintaining the security of your cx999 account credentials.

11. Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights in relation to your personal data held by cx999:

• Right of Access: You may request a copy of the personal data cx999 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held in your cx999 account.
• Right to Erasure: You may request deletion of your personal data subject to cx999's legal obligations to retain certain records (e.g., financial transaction records must be retained for regulatory compliance).
• Right to Restriction of Processing: You may request that cx999 restrict processing of your data in certain circumstances, such as while a complaint or inaccuracy dispute is under review.
• Right to Data Portability: You may request that cx999 provide your personal data in a structured, commonly used machine-readable format.
• Right to Object: You may object to processing of your personal data for direct marketing purposes. Withdraw consent to marketing communications at any time through your cx999 account settings.
• Right to Withdraw Consent: Where cx999 processes your data on the basis of consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, contact cx999 at: [email protected] (plain text — not a clickable link) with "Data Rights Request" in the subject line. cx999 will respond within thirty (30) calendar days of receiving a valid request.

12. Children's Privacy

cx999 services are strictly for individuals aged 18 and above. cx999 does not knowingly collect personal data from anyone under 18 years of age. If cx999 becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately and the associated cx999 account will be permanently suspended.

If you become aware that a minor has registered or is using a cx999 account, please notify cx999 immediately at [email protected] (plain text — not a clickable link).

13. Changes to This Privacy Policy

cx999 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered cx999 users via email notification or in-Platform notice with a minimum of fourteen (14) days' advance notice where reasonably practicable.

The effective date of the most recent version of this Privacy Policy is displayed at the top of this document. Continued use of the cx999 Platform following the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. You should review this Privacy Policy periodically to remain informed of cx999's current data practices.

14. Contact and Data Enquiries

For any questions, concerns or requests relating to this Privacy Policy or cx999's data processing practices, please contact the cx999 privacy team. The official cx999 contact email is: [email protected] (plain text only — this address is not a clickable link and must be typed manually into your email client).

When contacting cx999 about a privacy matter, please include your registered email address or cx999 account identifier, a clear description of your enquiry or request, and the subject line "Data Privacy Enquiry" to ensure prompt routing to the relevant cx999 team.