cx999 Privacy Policy — How We Protect Your Personal Data

1Who We Are

cx999 is an online betting and gaming platform operated at cx999.click, serving players in Pakistan. References in this policy to "cx999", "we", "us" or "our" refer to the operator of the cx999 platform and its authorised data processing activities.

cx999 acts as the data controller for all personal information collected through the platform, meaning we determine the purposes for which your data is used and the way in which it is processed. Where cx999 engages third-party service providers — such as payment processors or identity verification services — those parties act as data processors under written agreements that require them to handle your data only in accordance with our instructions and applicable law.

If you have any questions about how cx999 handles your personal data, the first point of contact is our support team at support@cx999.click. We aim to respond to all privacy-related enquiries within three business days.

2What Personal Data cx999 Collects

cx999 collects only the personal data that is genuinely necessary to provide you with a safe, compliant and enjoyable betting experience. We do not collect data speculatively or retain it beyond the period for which it serves a defined purpose.

cx999 does not collect sensitive personal data such as health information, religious beliefs or political opinions. The only biometric data we may process is a photograph of your CNIC for identity verification purposes, and this is handled through our verified KYC provider under strict data handling agreements.

3How cx999 Collects Your Data

cx999 collects personal data through several channels, all of which are clearly identified here:

• Direct input by you: Information you provide when registering on cx999, completing KYC verification, making deposits or withdrawals, contacting support or responding to surveys.
• Automated collection: Technical and usage data collected automatically when you access the cx999 platform, including IP address, device identifiers, browser type and interaction logs. This collection is necessary for security, fraud prevention and platform performance.
• Payment processors: Financial data received from Easypaisa, JazzCash, NayaPay, SadaPay or bank IBFT systems when you make a transaction on cx999. cx999 receives confirmation and reference data from these providers — we do not store full mobile wallet PINs or bank passwords.
• Identity verification providers: cx999 uses a third-party KYC service to verify CNIC documents. This provider returns a verified/not-verified result to cx999 along with the name and date of birth matched against your submitted document.
• Referrals: If you were referred to cx999 by another player through the Refer a Friend programme, cx999 receives your registration details in connection with that referral. Referral data is used solely to process the referral reward.

4How cx999 Uses Your Personal Data

cx999 uses your personal data for the following defined purposes. We do not use personal data for any purpose beyond what is described in this policy without first seeking your consent or notifying you of the change.

• Account management: Creating and maintaining your cx999 account, authenticating your identity at login, processing deposits and withdrawals, applying bonuses and managing your betting history.
• Legal compliance: Fulfilling our Know Your Customer (KYC), Anti-Money Laundering (AML) and age verification obligations. These are legal requirements, not optional processes, and cx999 is obliged to perform them for all registered accounts.
• Fraud prevention and security: Detecting and preventing fraudulent transactions, account takeovers, bonus abuse and other harmful activities. Technical and usage data plays a key role in identifying suspicious patterns before they cause harm to legitimate players.
• Platform improvement: Using anonymised and aggregated usage data to understand how players interact with cx999, identify usability issues and develop new features. This analysis does not involve decisions made about individual players.
• Customer support: Using your account and communication history to resolve support queries efficiently and consistently. Support transcripts are retained to ensure continuity when a case spans multiple interactions.
• Responsible gaming: Monitoring betting patterns and account activity to identify potential problem gambling indicators. Where concerning patterns are detected, cx999 may proactively reach out to offer responsible gaming tools or information.
• Marketing communications: Sending promotional emails, SMS notifications and in-platform messages about cx999 offers, new features and events — subject to your communication preferences as set out in Section 12.

5Legal Basis for Processing

cx999 processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contract performance: Most data processing on cx999 is necessary to deliver the services you signed up for — operating your account, processing bets, handling deposits and withdrawals. Without this data, cx999 cannot provide the platform to you.
• Legal obligation: KYC, AML and age verification processing is mandated by applicable regulations. cx999 has no discretion to skip these checks for any player, regardless of their history or trust level.
• Legitimate interests: Fraud detection, platform security and anonymised analytics are processed on the basis of cx999's legitimate business interest in operating a safe and sustainable platform. These interests do not override your fundamental privacy rights.
• Consent: Marketing communications beyond essential transactional messages are sent only with your consent. You may withdraw this consent at any time as described in Section 12.

6Sharing Your Personal Data

cx999 does not sell, rent or trade your personal data to any third party for commercial purposes. Full stop. However, cx999 does share data with specific categories of third-party partners where doing so is necessary to deliver the cx999 service:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners. Shared data includes your name, payment reference and transaction amount. Payment processors are bound by their own regulatory obligations and strict data handling standards.
• Identity verification providers: Your CNIC image and personal details are shared with our KYC provider solely for the purpose of verifying your identity. The provider does not retain images beyond the verification process.
• Technology infrastructure providers: Cloud hosting, database and platform infrastructure providers that store and process cx999 data on our behalf under written data processing agreements.
• Customer support tools: Support chat and email platforms used by the cx999 support team. These tools may process limited account data to enable efficient case management.
• Regulatory and law enforcement authorities: cx999 will disclose personal data to government or regulatory authorities when required to do so by applicable law, court order or regulatory direction. cx999 will seek to notify affected players of such disclosure where legally permitted to do so.

7How Long cx999 Retains Your Data

cx999 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

When the applicable retention period expires, cx999 securely deletes or anonymises the data so that it can no longer be attributed to you as an individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

8Cookies and Tracking Technologies

cx999 uses cookies and similar tracking technologies to operate the platform, remember your preferences and analyse how the site is being used. Cookies are small text files stored on your device by your browser when you visit cx999.

• Essential cookies: Required for cx999 to function. These enable login sessions, maintain your betting slip, remember language preferences and protect against cross-site request forgery. These cookies cannot be disabled without preventing normal platform use.
• Analytics cookies: Used to understand how players navigate cx999, which features are used most frequently and where technical issues occur. Analytics data is aggregated and does not identify individual users. You may opt out of analytics cookies through your browser settings.
• Preference cookies: Store settings you have chosen on cx999, such as your default betting market view, notification preferences and display settings. Disabling these cookies will reset your preferences on each visit.

cx999 does not use advertising or retargeting cookies that track you across other websites. Your cx999 browsing activity stays on cx999. You can manage cookie settings through your browser's privacy controls. Note that blocking essential cookies will prevent certain cx999 features from working correctly.

9Your Data Rights as a cx999 Player

As a player registered on cx999, you have the following rights over your personal data. cx999 will respond to all rights requests within 30 days of receipt. All requests should be submitted to support@cx999.click with the subject line "Privacy Rights Request".

10How cx999 Secures Your Data

cx999 implements a layered approach to data security that reflects the sensitivity of the financial and identity data we hold. Our security measures include, but are not limited to, the following:

• Transport layer security: All data transmitted between your device and the cx999 platform is encrypted using TLS 1.3 with 256-bit AES encryption. The cx999 padlock in your browser confirms this encryption is active at all times.
• Password security: cx999 stores passwords using industry-standard one-way hashing with salting. Even cx999 employees cannot view your password. If you forget it, a reset is required — recovery is not possible because the original is not stored.
• Two-factor authentication: cx999 offers two-factor authentication (2FA) via SMS code for all accounts. We strongly recommend enabling 2FA. For accounts with balances above a defined threshold, cx999 may require 2FA to be active before processing withdrawals.
• Access controls: cx999 staff access to player data is restricted on a strict need-to-know basis. Support agents can view only the data necessary to resolve a specific query. Access logs are maintained and reviewed regularly.
• Infrastructure security: cx999's platform is hosted on enterprise-grade cloud infrastructure with dedicated firewalls, intrusion detection systems and regular penetration testing by independent security firms.
• Data breach response: In the event of a personal data breach that poses a risk to players, cx999 will notify affected users within 72 hours of becoming aware of the breach and will take immediate steps to contain and remediate it.

11Children and Age Verification

The cx999 platform is strictly for adults aged 18 and over. cx999 does not knowingly collect personal data from persons under 18 years of age. If you believe a person under 18 has created a cx999 account, please contact us at support@cx999.click and we will investigate immediately and close the account if confirmed.

cx999 operates a mandatory age verification process for all registered accounts. CNIC verification is required before any withdrawal can be processed. Where cx999 has reasonable grounds to believe an account is held by a minor, access to the account will be suspended immediately pending age verification. Any balance in an account closed due to age non-compliance will be returned to the depositing payment method after deducting any bonus amounts.

12Marketing Communications

cx999 may send you promotional communications about new features, betting offers, bonuses and events on the cx999 platform. These communications are sent by email and SMS to the contact details you provided at registration.

By registering on cx999 you may opt in to marketing communications during the registration process. You may change your marketing preferences at any time in the following ways:

• Log in to your cx999 account, go to Account Settings and update your communication preferences under the Notifications section.
• Click the unsubscribe link in any marketing email sent by cx999. Unsubscribe requests are processed within 48 hours.
• Contact cx999 support at support@cx999.click and request removal from marketing lists.

Please note that opting out of marketing communications does not affect transactional messages — cx999 will continue to send essential account notifications including deposit confirmations, withdrawal receipts and security alerts regardless of your marketing preferences. These messages are necessary for the safe operation of your account and cannot be disabled.

13Third-Party Links

The cx999 platform may occasionally contain links to third-party websites or services in connection with specific promotions or informational content. cx999 is not responsible for the privacy practices of any third-party site and the presence of a link does not imply endorsement of that site's data handling practices.

If you click through to a third-party site from cx999, you leave the cx999 environment and your data becomes subject to that site's own privacy policy. cx999 strongly recommends that you review the privacy policy of any external site before providing personal information to it. As a general rule, cx999 keeps the number of external links to a minimum to reduce your exposure to third-party data collection.

14Updates to This Privacy Policy

cx999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or platform features. When material changes are made, cx999 will notify registered players by email and/or a prominent notice on the cx999 platform at least 14 days before the changes take effect.

Non-material changes — such as updating contact details, correcting typographical errors or clarifying existing practices without altering their substance — may be made without advance notice. The effective date at the top of this document will always reflect the date of the most recent update.

We encourage you to review this Privacy Policy periodically. Your continued use of the cx999 platform after the effective date of any update constitutes acceptance of the revised policy. If you do not agree with material changes, you may close your account before they take effect.

15Contact cx999 on Privacy Matters

If you have any questions, concerns or requests related to this Privacy Policy or the way cx999 handles your personal data, please contact us using the details below. We take privacy queries seriously and treat all correspondence with appropriate care and confidentiality.

For data deletion requests and formal rights exercises, please include your registered mobile number and a brief description of your request. cx999 may need to verify your identity before processing a rights request to prevent unauthorised access to another player's data.