cx999 Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") describes how cx999 ("cx999", "we", "us", "our"), the operator of the online casino and sports betting platform at cx999.biz, collects, uses, stores, shares, and protects the personal data of users ("Player", "you", "your") who register, access, or interact with the cx999 platform.

cx999 is committed to protecting the personal information of all players — particularly those based across Pakistan, including Karachi, Lahore, Islamabad, Faisalabad, and beyond. We take data protection seriously and have built our systems with player privacy as a foundational principle, not an afterthought.

By creating a cx999 account, using the cx999 Login portal, making a deposit, placing a bet, or otherwise accessing any part of the cx999 platform, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. This Policy forms part of the cx999 Terms & Conditions and should be read alongside that document.

cx999 collects personal data through several channels: account registration, identity verification, financial transactions, platform usage, and customer support interactions. The categories of data we collect are as follows:

cx999 does not intentionally collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is inherent in standard photo ID verification.

cx999 uses the personal data we collect solely for the following defined purposes:

• Account management: To create, maintain, and secure your cx999 account, including facilitating the cx999 Login process and recovering your account when required.
• Identity verification (KYC): To verify that you are who you say you are, that you are at least 21 years of age, and that your payment methods are registered in your own name.
• Transaction processing: To process deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK, and to execute PKR withdrawals back to verified payment methods.
• Legal and regulatory compliance: To fulfil obligations under applicable anti-money laundering (AML) and counter-terrorism financing (CTF) frameworks, including record-keeping and suspicious activity reporting where required.
• Responsible gaming: To monitor player behaviour for signs of problem gambling, enforce self-exclusion and deposit limits, and contact players who may need support.
• Customer support: To respond to queries, resolve disputes, and maintain records of communications for accountability purposes.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct on the cx999 platform.
• Platform improvement: To analyse aggregated usage patterns and improve the cx999 experience — including game selection, payment flow, and mobile performance — for Pakistani players.
• Service communications: To send account notifications, security alerts, deposit confirmations, and withdrawal updates. cx999 does not send unsolicited marketing communications without your explicit opt-in.

cx999 processes your personal data on the following lawful bases:

• Contractual necessity: Processing your data is necessary to fulfil the contract between cx999 and you — specifically, to operate your account, process transactions, and deliver the cx999 gaming service.
• Legal obligation: cx999 is required by applicable law and our international licensing obligations to collect and retain certain data, including KYC documents, transaction records, and AML-related information.
• Legitimate interests: cx999 has legitimate interests in securing the platform, preventing fraud, improving services, and monitoring for responsible gaming concerns. These interests do not override your fundamental privacy rights.
• Consent: Where cx999 relies on your consent as the basis for processing — for example, for optional marketing communications — you have the right to withdraw that consent at any time by contacting [email protected].

cx999 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Period. We may, however, share specific categories of your data with carefully selected third parties where this is necessary to operate the platform or comply with legal requirements:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive the minimum financial data required to process your PKR transactions. Each processor operates under its own data protection obligations.
• Identity verification providers: cx999 uses licensed KYC service providers to assist in verifying CNIC documents and performing liveness checks. These providers process your data solely on cx999's behalf and under strict data processing agreements.
• Game software providers: Third-party game studios whose titles appear in the cx999 casino lobby may receive session data necessary to deliver gameplay. No directly identifiable personal data such as your name or CNIC is transmitted to game providers.
• Regulatory and law enforcement authorities: cx999 will disclose personal data to competent authorities, regulatory bodies, or law enforcement agencies where required to do so by applicable law, court order, or our licensing obligations.
• IT infrastructure providers: Hosting, cloud storage, and security vendors who process data on cx999's behalf under binding contractual data protection terms.

cx999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our international licensing obligations. The following general retention periods apply:

Once the applicable retention period expires, cx999 will securely delete or anonymise your personal data in a manner that prevents reconstruction of the original information.

cx999 employs a comprehensive, layered approach to data security to protect your personal information against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and cx999 servers — the same standard used by international banks.
• AES-256 encryption at rest for sensitive stored data including KYC documents, financial records, and account credentials.
• Multi-factor authentication (MFA) options available to all cx999 account holders for enhanced cx999 Login security.
• Access controls ensuring that cx999 staff can only access player data on a strict need-to-know basis, with all access logged and auditable.
• Penetration testing and regular security audits conducted by qualified third-party security professionals.
• Intrusion detection systems and real-time monitoring for anomalous access patterns, brute-force attempts, and suspicious activity.
• Secure data centres with physical access controls, redundant systems, and disaster recovery protocols.

While cx999 takes every reasonable precaution to protect your data, no internet-based system can be guaranteed 100% secure. If you believe your cx999 account has been compromised, please contact [email protected] immediately.

cx999 uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience on the platform. Cookies are small text files stored on your device by your browser. cx999 uses the following categories of cookies:

• Strictly necessary cookies: These are essential for the cx999 platform to function. They maintain your logged-in session via the cx999 Login portal, remember your language and currency preferences, and enable core features. These cookies cannot be disabled without breaking platform functionality.
• Performance cookies: These collect anonymised data about how players interact with cx999 — such as which pages are visited most frequently and where errors occur — to help us improve the platform experience for Pakistani users.
• Functional cookies: These remember your preferences such as game view settings and notification choices to personalise your experience without requiring you to re-enter preferences on every visit.
• Analytics cookies: cx999 uses privacy-respecting analytics tools to understand aggregate player behaviour. This data is processed in anonymised or pseudonymised form and is never used to identify individual players.

You can manage, restrict, or delete cookies through your browser's privacy settings at any time. Note that disabling strictly necessary cookies will affect your ability to use the cx999 Login and other core platform features. For more details on managing cookies in popular browsers, refer to your browser's official help documentation.

As a cx999 player, you hold the following rights in respect of your personal data held by cx999. To exercise any of these rights, contact our data protection team at [email protected] with the subject line "DATA RIGHTS REQUEST — [Your Account Username]":

• Right of access: You may request a copy of the personal data cx999 holds about you, along with information about how it is being used. cx999 will respond within 30 days of receiving a verified request.
• Right to rectification: If any personal data cx999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: Subject to our legal retention obligations, you may request that cx999 delete your personal data. Note that data required for AML compliance and financial audit purposes must be retained for the periods set out in Section 06 above, and cannot be deleted at your request during those retention windows.
• Right to restrict processing: In certain circumstances, you may request that cx999 restrict the active processing of your data while a correction or objection is being considered.
• Right to data portability: Where technically feasible and legally appropriate, you may request that cx999 provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where cx999 relies on your consent as the legal basis for processing (such as for optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to cx999 processing your data on the basis of legitimate interests where you believe your fundamental rights and freedoms override those interests.

cx999 will respond to all verified data rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, cx999 may extend this period by a further 30 days and will notify you accordingly.

cx999 is strictly an adult platform. The minimum age to register and use any cx999 service is 21 years. cx999 does not knowingly collect, store, or process the personal data of individuals under the age of 21.

Age verification is performed during the KYC process using CNIC documentation. If cx999 discovers at any point that personal data belonging to an individual under the age of 21 has been collected — whether through a falsified registration or any other means — that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that your child under the age of 21 has registered on cx999, please contact us immediately at [email protected]. We will investigate and take immediate action to close the account and remove the associated data.

The cx999 platform integrates with a number of third-party service providers to deliver a complete gaming experience. These include game software studios, payment gateway operators, identity verification services, and cloud infrastructure providers. While cx999 carefully vets all third-party partners and requires them to uphold appropriate data protection standards, each provider operates under its own privacy policy in respect of data they independently control.

cx999 is not responsible for the privacy practices of third-party providers beyond the contractual obligations we impose on them as data processors. Players who have concerns about how a specific payment provider — such as JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank — handles their data should consult the privacy documentation of those providers directly.

cx999 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes to our operational practices, new data processing activities, or improvements in our security measures. The updated policy will always be published at cx999.biz/privacy-policy with a revised "Last Updated" date clearly indicated at the top of the document.

For material changes — those that significantly affect how we use your personal data or reduce your rights — cx999 will notify registered players via the email address associated with their account at least 14 days before the changes take effect. Continued use of the cx999 platform after the effective date of any updated policy constitutes your acceptance of the revised terms.

cx999 encourages all Pakistani players to review this Privacy Policy periodically to stay informed about how their data is being protected and used. If you disagree with any changes to this Policy, you have the right to close your cx999 account and request data deletion in accordance with Section 09 above.

If you have any questions, concerns, or requests related to this Privacy Policy or the way cx999 handles your personal data, our support and compliance teams are available around the clock to assist players across Pakistan.

For general privacy enquiries, data rights requests, or concerns about how your data is being processed, please contact us using the details below. All contact information is provided as plain text only and is not intended to be a clickable link:

• Privacy & Data Rights Email: [email protected]
• Subject Line for Data Requests: DATA RIGHTS REQUEST — [Your Account Username]
• Subject Line for Legal Notices: LEGAL NOTICE — [Your Account Username]
• Response Time: Within 30 calendar days for data rights requests; within 5 business days for legal notices
• Support Availability: 24 hours a day, 7 days a week

cx999 takes every privacy concern seriously. Whether you are a player in Karachi raising a question about your transaction data, or a player in Lahore requesting access to your account history, our compliance team will treat your request with the highest level of professionalism and confidentiality.