cx888 Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") is published by cx888 ("cx888", "We", "Us", "Our") and governs the collection, use, storage, disclosure, and protection of personal data belonging to users ("You", "Player", "User") who access or interact with the cx888 platform at cx888.ws. This Policy forms part of the broader legal framework applicable to your use of the cx888 platform, alongside our Terms & Conditions and Responsible Gaming policy.

cx888 is committed to handling all personal data with transparency, fairness, and integrity. We process only the data that is genuinely necessary for the purposes described in this Policy and do not engage in the sale or rental of personal data to unrelated commercial third parties.

1.1 Who This Policy Applies To. This Privacy Policy applies to all individuals who access the cx888 platform, including registered account holders, guest browsers, and any person who contacts cx888 through our support channels. It applies regardless of whether you access the platform from Karachi, Lahore, Islamabad, Faisalabad, or any other city across Pakistan.

1.2 Scope of This Policy. This Policy covers personal data processed in connection with account registration, gameplay activity, payment transactions, customer support interactions, and marketing communications. It does not apply to third-party websites or services that may be referenced or linked from within the cx888 platform.

1.3 Legal Basis for Processing. cx888 processes personal data on the following legal grounds: (a) contractual necessity — to perform our obligations to you as an account holder; (b) legal obligation — to comply with anti-money laundering, KYC, and responsible gaming regulations; (c) legitimate interest — to improve platform security, prevent fraud, and maintain the integrity of gaming services; and (d) your consent — for marketing communications and non-essential cookies, where applicable.

2.1 Identity & Registration Data. When you register a cx888 account, we collect your full legal name, date of birth, gender, nationality, residential address, and CNIC (Computerised National Identity Card) number for identity verification purposes. This data is mandatory — without it, we cannot open a verified account for you.

2.2 Contact Data. We collect your email address and mobile phone number at registration. These are used to send account notifications, security alerts, withdrawal confirmations, and (with your consent) promotional communications. Your contact details are never sold to third-party marketers.

2.3 Financial Data. To process deposits and withdrawals in PKR, cx888 collects payment method details including JazzCash or EasyPaisa account numbers, bank account details (for HBL, UBL, Meezan Bank, Bank Alfalah, MCB, or RAAST transfers), and transaction reference numbers. Full payment card numbers, if ever entered, are handled by PCI-DSS compliant payment processors and are never stored on cx888 servers directly.

2.4 Gameplay & Activity Data. cx888 records your betting history, game session logs, wager amounts, game outcomes, deposit and withdrawal history, and bonus usage records. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

2.5 Technical & Device Data. When you access cx888, we automatically collect your IP address, browser type and version, device type, operating system, screen resolution, referring URL, and session duration. This data helps us maintain platform security, detect fraudulent access attempts, and optimise the user experience for Pakistani players on a range of devices.

2.6 Communications Data. If you contact cx888 support, we retain records of the conversation including the content of messages, timestamps, and any documentation you provide. This allows us to handle disputes effectively and maintain quality of service.

3.1 Direct Collection. The majority of your personal data is collected directly from you when you register an account, complete KYC verification, make a deposit or withdrawal, submit a support request, or respond to a cx888 survey or promotion.

3.2 Automated Collection. cx888 uses cookies, web beacons, session tracking scripts, and server log files to automatically collect technical and behavioural data as you use the platform. This collection happens in the background and does not require any manual input from you. Please refer to Section 6 of this Policy for full details on cookies.

3.3 Third-Party Sources. In limited circumstances, cx888 may receive personal data about you from third-party sources. These include: payment processors confirming the outcome of a transaction; identity verification providers who assist with CNIC validation; and fraud detection services that flag suspicious activity patterns. Data received from third parties is handled with the same level of care and security as data collected directly.

4.1 Account Management. We use your registration and contact data to create and maintain your cx888 account, verify your identity, process login requests, and manage account security including password resets and two-factor authentication.

4.2 Payment Processing. Financial data is used exclusively to process deposits and withdrawals in PKR via your chosen payment method. cx888 does not use your financial data for any purpose other than facilitating your requested transactions.

4.3 Regulatory Compliance. cx888 is required by its international gaming licence and applicable anti-money laundering obligations to maintain accurate records of player identity and transaction history. This data may be disclosed to regulatory authorities upon lawful request.

4.4 Responsible Gaming. cx888 uses gameplay and session data to monitor for signs of problematic gambling behaviour, enforce self-exclusion requests, apply deposit and session limits set by the player, and comply with age verification requirements. This processing is central to our responsible gaming commitment — all players must be 21 years of age or older.

4.5 Fraud Prevention & Security. Technical data, device fingerprints, and IP addresses are used to detect and prevent account takeovers, duplicate registrations, bonus abuse, and financial fraud. cx888 operates automated and manual fraud review processes to protect the integrity of the platform and the safety of all players.

4.6 Platform Improvement. Aggregated, anonymised gameplay and technical data is used to analyse platform performance, identify bugs, improve game load times, and optimise the mobile experience for Pakistani users across a range of devices and network conditions.

4.7 Marketing Communications. With your explicit consent at the point of registration or subsequently through your account settings, cx888 may send you promotional emails or SMS messages about new games, bonuses, and offers. You may withdraw this consent at any time through your account preferences, and opting out will not affect your ability to use the platform.

5.1 When We Share Data. cx888 shares your personal data only in the limited circumstances described below. We do not sell, rent, or trade your personal data to unrelated third parties for commercial gain under any circumstances.

5.2 Payment Processors. To facilitate PKR deposits and withdrawals, cx888 shares the minimum necessary financial data with payment service providers including JazzCash, EasyPaisa, and local banking institutions. These providers are contractually bound to process your data solely for the purpose of completing the requested transaction.

5.3 Identity Verification Providers. During the KYC process, cx888 may share your name, CNIC details, and date of birth with licensed identity verification providers to confirm the authenticity of your documents. These providers operate under strict data processing agreements.

5.4 Regulatory Authorities. cx888 may be required by law, court order, or regulatory directive to disclose personal data to gaming regulators, financial intelligence authorities, or law enforcement agencies. In such cases, cx888 will disclose only the minimum data required to satisfy the legal obligation and will notify you where permitted to do so.

5.5 Group Companies & Technology Partners. cx888 may share data with entities within its corporate group or with technology service providers who supply platform infrastructure, game content, customer support tools, or analytics services. All such parties are bound by data processing agreements that restrict them from using your data for purposes other than those specified.

5.6 Business Transfers. In the event of a merger, acquisition, or sale of assets involving cx888, personal data held by cx888 may be transferred to the acquiring entity as part of the transaction. Affected users will be notified in advance of any such transfer where reasonably practicable.

6.1 What Are Cookies. Cookies are small text files placed on your device when you visit cx888. They allow the platform to recognise your device, remember your preferences, maintain your login session, and collect usage data for security and analytical purposes.

6.2 Types of Cookies We Use.

6.3 Managing Cookies. You may control cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will prevent you from accessing certain platform features including the login system. Analytical and marketing cookies can be disabled without affecting your ability to play. Note that cookie controls must be re-applied each time you clear your browser data.

7.1 Retention Periods. cx888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or regulation. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction.
• Gameplay and session logs: Retained for a minimum of three (3) years to support dispute resolution and responsible gaming monitoring.
• Support communications: Retained for three (3) years from the date of the last interaction.
• Marketing consent records: Retained for the duration of the account and for one (1) year following any withdrawal of consent.

7.2 Secure Deletion. Upon expiry of the applicable retention period, cx888 will securely delete or anonymise personal data using industry-standard data destruction methods. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes as it can no longer be attributed to any individual.

8.1 Technical Safeguards. cx888 employs 256-bit SSL/TLS encryption across all data transmission channels between your device and our servers. All stored personal data is protected by AES-256 encryption at rest. Database access is restricted to authorised personnel only and is subject to multi-factor authentication controls.

8.2 Operational Safeguards. cx888 maintains a formal information security policy that is reviewed and updated at least annually. All staff who access personal data undergo data protection training and are bound by confidentiality obligations. Access to personal data is granted on a strict need-to-know basis and is logged for audit purposes.

8.3 Incident Response. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, cx888 will notify affected users without undue delay and will take immediate steps to contain the breach, assess its scope, and prevent recurrence. Where required by applicable law, cx888 will also notify the relevant supervisory authority within the timeframe prescribed.

8.4 Your Own Security Responsibilities. The security of your cx888 account also depends on the strength and confidentiality of your own password. cx888 strongly recommends using a unique, complex password for your account and enabling any available two-factor authentication option. cx888 will never ask you for your password via email, SMS, or chat — any such request should be treated as a phishing attempt and reported to our support team immediately.

9.1 Right of Access. You have the right to request a copy of the personal data cx888 holds about you. Access requests can be submitted through your account settings or by contacting our support team. We will respond to verified access requests within 30 days.

9.2 Right to Rectification. If any personal data cx888 holds about you is inaccurate or incomplete, you have the right to request its correction. Minor corrections such as typographical errors in contact details can be made directly within your account settings. Material changes to identity data may require re-verification.

9.3 Right to Erasure. Subject to applicable regulatory retention obligations, you have the right to request deletion of your personal data. Note that cx888 is legally required to retain certain categories of data (such as transaction records and KYC documents) for a minimum period regardless of an erasure request. Erasure of non-mandatory data will be actioned within 30 days of a verified request.

9.4 Right to Restrict Processing. You may request that cx888 restrict the processing of your personal data in certain circumstances — for example, if you dispute the accuracy of data we hold, or if you object to processing based on legitimate interests while we consider your objection.

9.5 Right to Data Portability. Where your data was provided by you directly and is processed by automated means on the basis of your consent or a contract, you may request a copy of that data in a structured, machine-readable format.

9.6 Right to Object. You have the right to object at any time to processing of your personal data for direct marketing purposes. Upon receipt of a valid objection, cx888 will cease marketing communications immediately. You may also object to processing based on legitimate interests, though such objections may not always override cx888's legal or regulatory obligations.

9.7 Exercising Your Rights. To exercise any of the rights described above, contact the cx888 support team at the email address displayed in the footer of this page. All requests will be acknowledged within 5 business days and resolved within 30 days unless the complexity of the request requires additional time, in which case you will be notified.

10.1 Minimum Age Requirement. cx888 strictly enforces a minimum age requirement of 21 years for all registered users. The cx888 platform is not directed at, nor intended for use by, individuals under the age of 21. We do not knowingly collect personal data from individuals under this age threshold.

10.2 Age Verification. cx888 verifies the age of all registered users as part of the KYC process. If cx888 becomes aware or has reasonable grounds to believe that a user has registered while under the age of 21, the account will be immediately suspended, all deposits will be returned to the original payment source, and any winnings generated will be forfeited without exception.

10.3 Parental Guidance. If you are a parent or guardian and believe that a minor in your household has registered on cx888 without your knowledge, please contact our support team immediately. cx888 will investigate all such reports promptly and take appropriate remedial action including account closure and full deposit refund.

11.1 Right to Amend. cx888 reserves the right to update or modify this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, platform functionality, or internal data practices. The effective date at the top of this Policy will be updated whenever a revision is published.

11.2 Notification of Material Changes. Where a proposed change to this Policy materially affects how your personal data is collected or used, cx888 will notify registered account holders by email or in-app notification at least 14 days before the revised Policy takes effect. Continued use of the platform after the revised effective date constitutes acceptance of the updated Policy.

11.3 Reviewing This Policy. cx888 recommends that all users review this Privacy Policy periodically to stay informed about how their data is being handled. The most current version of this Policy will always be accessible at cx888.ws/privacy-policy.

12.1 Privacy Enquiries. If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data cx888 holds about you, please contact our support team. We aim to respond to all privacy-related enquiries within five (5) business days.

12.2 Contact Details. All privacy enquiries should be directed to cx888 via the email address listed below. Please include your registered account username, a brief description of your enquiry, and any relevant supporting information to help us resolve your request promptly.

Contact email: [email protected]

12.3 Complaints. If you are not satisfied with cx888's response to a privacy concern, you have the right to escalate your complaint to the relevant gaming regulator or data protection authority under the applicable jurisdiction of cx888's gaming licence. cx888 will cooperate fully with any regulatory investigation.