Privacy Policy

1. Who We Are

crickes (referred to as "crickes", "we", "us", or "our" throughout this Privacy Policy) operates the online sports betting and casino platform accessible at crickes.pro. We are the data controller responsible for the personal information collected through the crickes Platform, including the website, mobile interface, and all associated products and services.

crickes is Pakistan's premier online betting destination, offering cricket betting, PSL markets, live dealer games, premium slot titles, and instant PKR transactions via JazzCash and EasyPaisa. We operate under an international gaming licence and are fully committed to protecting the privacy of every member who places their trust in our platform.

For any privacy-related queries, you may contact our dedicated Data Protection team at [email protected]. We respond to all privacy enquiries within five business days.

2. Data We Collect

crickes collects personal data from you in three ways: information you provide directly during registration and ongoing account use; information generated automatically through your use of the Platform; and information we receive from third parties in connection with KYC verification and payment processing.

2.1 Information You Provide Directly

Category	Specific Data Points
Registration Data	Full legal name, date of birth, Pakistani CNIC or passport number, residential address (city, province, postal code), email address, mobile number
Financial Data	JazzCash account number, EasyPaisa wallet number, bank account details (HBL, UBL, Meezan Bank, SadaPay, Raast), USDT TRC20 wallet address, PKR transaction history, deposit and withdrawal records
KYC Documents	Copy of CNIC (front and back), passport bio-data page, proof of address (utility bill or bank statement not older than 3 months), selfie photograph for biometric verification
Account Preferences	Communication preferences, responsible gaming limit settings (deposit limits, loss limits, session time limits, self-exclusion elections), marketing opt-in status
Support Communications	Live chat transcripts, email correspondence, any documents or screenshots shared with our support team

2.2 Information Collected Automatically

When you access and use the crickes Platform, we automatically collect certain technical and behavioural data. This includes your IP address, device type and operating system, browser type and version, referring URL, pages visited and time spent on each page, betting and gaming activity logs (markets viewed, wagers placed, game sessions), session start and end times, and error logs.

This data is collected using server logs, cookies, and similar tracking technologies described in Section 6 of this Policy. Automatically collected data is used primarily for platform security, fraud prevention, performance optimisation, and responsible gaming monitoring.

2.3 Information From Third Parties

crickes may receive personal data about you from the following categories of third parties: (a) identity verification and KYC service providers who assist us in confirming your age and identity; (b) payment processors who confirm the status of your deposit and withdrawal transactions; (c) fraud prevention and AML screening services; and (d) analytics providers who help us understand aggregate Platform usage patterns. In all cases, third-party data sharing is governed by data processing agreements that require these parties to handle your information in accordance with applicable data protection standards.

3. How We Use Your Data

crickes uses your personal data for clearly defined purposes only. We do not use your data for any purpose that is incompatible with the reasons it was originally collected. The primary purposes for which we process your data are as follows:

• Account Management: To create, maintain, and administer your crickes account, including processing your login credentials and account settings.
• Service Delivery: To enable you to place bets on cricket, PSL, boxing, and other sports markets; access casino and live dealer games; and use all other features of the Platform.
• Payment Processing: To process PKR deposits via JazzCash, EasyPaisa, and bank transfers, and to process withdrawal requests to your verified payment method.
• Identity & Age Verification: To verify that you are at least 21 years of age and that your identity matches the registration information provided, as required by our gaming licence obligations.
• Fraud Prevention & AML: To detect, investigate, and prevent fraudulent activity, money laundering, and other unlawful financial behaviour on the Platform.
• Responsible Gaming: To monitor your betting and gaming behaviour against responsible gaming indicators, apply the limits you have set, and proactively identify members who may be showing signs of problem gambling.
• Customer Support: To respond to your support requests, investigate complaints, and improve the quality of our customer service operations.
• Legal Compliance: To comply with our obligations under applicable gaming regulations, anti-money laundering laws, and any directives issued by competent authorities.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent to receive such communications. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregate usage patterns, identify technical issues, and continuously improve the quality, security, and performance of the crickes Platform.

4. Legal Basis for Processing

Every instance of personal data processing at crickes is conducted on one of the following recognised legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable gaming regulations, AML legislation, KYC requirements, and any orders from competent regulatory or law enforcement authorities.
• Legitimate Interests: Processing conducted for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and optional analytics tracking, conducted only where you have given clear, informed, and freely withdrawable consent.

5. Data Sharing

crickes does not sell your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to protect it in accordance with applicable data protection standards.

5.1 Service Providers

We share data with carefully selected third-party service providers who assist us in operating the Platform. These include KYC and identity verification providers, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank payment gateways), cloud infrastructure providers, fraud detection services, customer support software providers, and responsible gaming monitoring tools. All service providers are bound by data processing agreements and may only use your data for the specific purpose for which it was shared.

5.2 Legal & Regulatory Disclosures

crickes may disclose your personal data to competent authorities — including gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies — where we are legally required to do so or where disclosure is necessary to prevent, detect, or investigate fraud, money laundering, or other criminal activity.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of crickes's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to how your data is processed prior to the transfer taking effect.

6. Cookies & Tracking Technologies

crickes uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session state, prevent fraud, and — where you have consented — analyse Platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in, security tokens that protect against cross-site request forgery, and cookies that remember your language and currency preferences. These cannot be disabled.
• Functional Cookies: Remember your account preferences such as responsible gaming settings, bet slip layout, and notification preferences. Disabling these may affect your Platform experience.
• Analytics Cookies: Used to collect aggregate data about how members use the Platform — which pages are most visited, where users drop off, and how betting features are used. This data is anonymised and used solely for Platform improvement. These require your consent.
• Security Cookies: Used by our fraud detection systems to identify unusual login patterns, assess device trust levels, and detect automated or bot-driven activity.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary or security cookies may impair the functionality of the Platform and may affect our ability to maintain the security of your account.

7. Data Retention

crickes retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your active membership on the crickes Platform.
• KYC Documents: Retained for a minimum of five (5) years following account closure, as required by AML and gaming regulatory obligations.
• Transaction Records: PKR deposit and withdrawal records, bet settlement records, and financial transaction logs are retained for a minimum of five (5) years from the date of the transaction.
• Support Communications: Retained for three (3) years from the date of the final communication in each support case.
• Marketing Data: Retained until you withdraw consent or for two (2) years of marketing inactivity, whichever comes first.
• Server & Security Logs: Retained for twelve (12) months from the date of creation, then deleted unless required for an ongoing fraud or legal investigation.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

8. Data Security

crickes implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security infrastructure includes the following:

• TLS 1.3 encryption for all data in transit between your device and the crickes Platform.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment information.
• Multi-factor authentication (MFA) requirements for all administrative access to systems that process member data.
• Regular third-party penetration testing and security audits of the crickes Platform infrastructure.
• Strict role-based access controls — crickes staff can only access the minimum personal data necessary to perform their specific job functions.
• 24/7 automated anomaly detection and intrusion prevention systems monitoring Platform traffic.
• Secure, geographically redundant data centres with physical access controls.

Despite these measures, no internet-based system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a high risk to your rights, crickes will notify affected members as soon as practicable in accordance with applicable breach notification requirements.

9. Your Rights

As a crickes member, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will respond to all verified requests within 30 days.

10. Children's Privacy

The crickes Platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. If you are under 21, you are not permitted to register an account or use the crickes Platform under any circumstances.

If crickes becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete all associated personal data, and return any deposited funds. If you are a parent or guardian and believe your child has registered on the crickes Platform, please contact us immediately at [email protected].

We strongly encourage parents and guardians to use parental control software to prevent minors from accessing online gambling platforms. Resources such as Gamban and similar filtering tools are available to help block access to betting and casino websites.

11. International Data Transfers

As crickes operates under an international gaming licence and uses globally distributed cloud infrastructure, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, crickes ensures that adequate data protection safeguards are in place, including:

• Data processing agreements incorporating internationally recognised standard contractual clauses where required.
• Transfers only to service providers whose data protection practices have been assessed and approved by our Data Protection team.
• Encrypted data transmission for all cross-border data transfers.

By using the crickes Platform, you acknowledge that your personal data may be transferred internationally as described in this section. If you have concerns about international data transfers, please contact us at [email protected].

12. Changes to This Privacy Policy

crickes reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. When material changes are made, we will notify registered members via email and/or a prominent notice on the Platform homepage at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy will always reflect when the most recent revision was made. We encourage you to review this page periodically. Your continued use of the crickes Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by crickes, please contact our Data Protection team through the following channel:

Email: [email protected]
Subject Line: Privacy Policy Enquiry / Data Rights Request
Response Time: Within 5 business days for general enquiries; within 30 days for formal data rights requests
Support Hours: 24 hours a day, 7 days a week

Please include your registered account email address, a clear description of your request, and — for data rights requests — a copy of your CNIC or other identity document so that we can verify your identity before processing your request.