Privacy Policy — cx99 Data Protection Commitment

01 Who We Are

cx99 (referred to throughout this Privacy Policy as "cx99", "we", "us", or "our") is an online casino and sports betting platform accessible at cx99.ws. cx99 is operated under an internationally recognised gaming licence framework and serves registered users in Pakistan and other permitted jurisdictions.

For the purposes of this Privacy Policy, cx99 acts as the data controller in respect of personal data collected from users of the cx99 platform. This means cx99 is responsible for determining the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through the cx99 website at cx99.ws, the cx99 mobile platform, cx99's live chat support system, cx99's email communications, and any other cx99-operated channel through which users interact with the platform.

If you have any questions about how cx99 handles your personal data, please contact the cx99 support team via live chat or at [email protected] before submitting a formal request.

02 Data We Collect

cx99 collects personal data from users through several channels: directly from you when you register, from your use of the platform, and in certain cases from third-party verification providers. The categories of personal data cx99 may collect include:

Data Category	Specific Data Points	Collection Method
Identity Data	Full name, date of birth, gender, CNIC number (for KYC)	Registration form, KYC submission
Contact Data	Email address, mobile phone number, city of residence (e.g. Karachi, Lahore, Islamabad)	Registration form, account settings
Financial Data	JazzCash / EasyPaisa / SadaPay account reference, bank account name (HBL / UBL), USDT wallet address (TRC20)	Wallet deposit and withdrawal flows
Usage Data	Games played, bets placed, session duration, page views, feature interactions	Automated platform tracking
Technical Data	IP address, device type, operating system, browser version, screen resolution	Automated server logs
Communications Data	Live chat transcripts, support email correspondence, dispute records	cx99 support system
Responsible Gaming Data	Deposit limits set, self-exclusion status, cooling-off period records, session reminders	Account settings, support requests

cx99 does not collect or store sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data beyond what is strictly required for responsible gaming monitoring purposes.

03 How We Use Your Data

cx99 uses your personal data for the following purposes:

Account Registration & Management: To create and maintain your cx99 account, verify your identity, process your login credentials, and communicate account-related updates to you.
Age & Identity Verification (KYC): To confirm that you meet cx99's minimum age requirement of 21 years and that your identity matches the information provided at registration. This is a regulatory obligation cx99 takes seriously.
Payment Processing: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20. cx99 retains sufficient payment reference data to process refunds, resolve disputes, and comply with anti-money laundering obligations.
Platform Personalisation: To display relevant game recommendations, personalise promotional offers, and optimise the cx99 interface based on your gameplay history and preferences.
Fraud Prevention & Security: To detect, investigate, and prevent fraudulent account activity, multi-accounting, bonus abuse, and unauthorised access attempts.
Responsible Gaming Monitoring: To identify patterns of play that may indicate problem gambling behaviour, enforce deposit limits and self-exclusion measures, and communicate responsible gaming resources to at-risk users.
Customer Support: To respond to your support queries via live chat and email, maintain a record of communications for quality assurance, and resolve disputes in an auditable manner.
Legal & Regulatory Compliance: To meet the obligations imposed by cx99's gaming licence framework, including record-keeping, reporting, and cooperation with regulatory authorities where required.
Marketing Communications: To send promotional emails and in-platform notifications about cx99 bonuses and offers, where you have provided or not objected to receiving such communications. You may opt out at any time via account settings.

04 Legal Basis for Processing

cx99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

Contractual Necessity: Processing required to perform the contract between you and cx99 — i.e., to operate your cx99 account, process transactions, and provide the Platform Services you have requested.
Legal Obligation: Processing required for cx99 to comply with applicable laws and the conditions of its gaming licence, including KYC, anti-money laundering checks, and responsible gaming obligations.
Legitimate Interests: Processing necessary for cx99's legitimate business interests, including fraud prevention, platform security, and improving the cx99 user experience, where those interests are not overridden by your privacy rights.
Consent: Where cx99 relies on your consent as a legal basis — for example, for certain marketing communications — you have the right to withdraw that consent at any time by contacting cx99 support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

05 Data Sharing & Third Parties

cx99 does not sell, rent, or otherwise trade your personal data to third parties for commercial purposes. cx99 may share your personal data with the following categories of third parties solely for the purposes described in this Privacy Policy:

Payment Processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20 network operators receive transaction-level data necessary to process your deposits and withdrawals. Each provider operates under its own privacy terms.
Identity Verification Providers: Third-party KYC service providers who assist cx99 in verifying your identity and age. These providers are contractually bound to process your data only for verification purposes.
Game Content Providers: Licensed third-party casino game studios whose products appear in the cx99 lobby. These providers may receive anonymised session data for game performance and certification purposes.
Customer Support Technology: The live chat platform and ticketing system used by cx99's support team to manage user communications. Support data is stored securely and access-restricted to cx99 support staff.
Regulatory Authorities: cx99's gaming licence authority and, where legally required, law enforcement agencies or financial intelligence units. Such disclosures are made only to the extent required by applicable law or regulatory obligation.
Fraud & Security Partners: Third-party fraud detection and cybersecurity providers who assist cx99 in protecting the platform and its users from malicious activity.

All third parties with whom cx99 shares personal data are required to handle that data in a manner consistent with applicable data protection standards and are prohibited from using it for any purpose beyond what cx99 has specified.

06 Cookies & Tracking

cx99 uses cookies and similar tracking technologies on its website and platform to enhance your experience, maintain your session, and gather anonymised analytics data. The types of cookies cx99 uses are:

Essential Cookies: Required for core platform functionality, including maintaining your login session, remembering your language preference, and enabling secure payment flows. These cookies cannot be disabled without affecting platform functionality.
Performance & Analytics Cookies: Used to collect anonymised data about how users interact with the cx99 platform — such as pages visited, features used, and session duration — to help cx99 improve the user experience.
Functional Cookies: Used to remember your preferences within the cx99 platform, such as your preferred game lobby view, responsible gaming settings, and notification preferences.
Security Cookies: Used by cx99's fraud prevention systems to identify and flag suspicious access patterns, including bot activity and unauthorised login attempts.

cx99 does not use third-party advertising or retargeting cookies. You can manage your cookie preferences through your browser settings, though disabling essential cookies may impair your ability to use the cx99 platform.

07 Data Retention

cx99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including the satisfaction of any legal, regulatory, accounting, or reporting obligations. The general retention periods cx99 applies are as follows:

Active Account Data: Retained for the full duration of your cx99 account's active status, plus a minimum of 5 years following account closure, as required by cx99's gaming licence obligations.
KYC & Identity Documents: Retained for a minimum of 5 years following account closure or the last transaction, in accordance with anti-money laundering record-keeping requirements.
Financial Transaction Records: Deposit and withdrawal records are retained for a minimum of 5 years for regulatory and dispute resolution purposes.
Support & Communications Records: Live chat transcripts and email correspondence are retained for 3 years following the last communication, to support dispute resolution and quality assurance.
Responsible Gaming Records: Self-exclusion records, deposit limit histories, and problem gambling intervention records are retained for a minimum of 5 years to prevent re-registration during active exclusion periods.
Marketing Preferences: Records of your marketing opt-in or opt-out status are retained for as long as your cx99 account remains active, and for 3 years following account closure.

Following the expiry of the applicable retention period, cx99 will securely delete or anonymise your personal data so that it can no longer be linked to your identity.

08 Data Security

cx99 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The key security measures in place include:

TLS 1.3 Encryption: All data transmitted between your device and cx99 servers is encrypted using TLS 1.3. This applies to the cx99 website, mobile platform, and API communications.
Password Hashing: User passwords are stored using a strong one-way cryptographic hashing algorithm with unique salts. cx99 staff cannot view your password in plain text at any point.
Payment Tokenisation: Payment method details are tokenised — cx99 receives only a secure reference token from payment providers, not your full JazzCash PIN, bank account number, or mobile wallet credentials.
Access Controls: Access to cx99 user data is restricted to cx99 personnel on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and regular security training.
Two-Factor Authentication: cx99 recommends and supports two-factor authentication (2FA) on all user accounts to prevent unauthorised login.
Intrusion Detection: cx99 operates real-time intrusion detection and anomaly monitoring systems to identify and respond to potential security incidents promptly.

While cx99 takes all reasonable technical and organisational measures to protect your data, no system is entirely immune to risk. You play an important role in your own account security — please use a strong, unique password for your cx99 account and never share your login credentials with anyone.

09 Your Rights

cx99 respects your rights over your personal data. Depending on the applicable legal framework, you may hold some or all of the following rights with respect to personal data cx99 holds about you:

Right of Access: You have the right to request a copy of the personal data cx99 holds about you, including a description of how it is being used and to whom it has been disclosed.
Right to Rectification: You have the right to request that cx99 corrects any inaccurate or incomplete personal data held in your cx99 account. Many basic corrections (e.g., contact details) can be made directly through your account settings.
Right to Erasure: You may request that cx99 deletes your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. Note that cx99 may be unable to erase data that is required to be retained by regulatory obligation.
Right to Restrict Processing: You may request that cx99 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to cx99's legitimate interest basis for processing.
Right to Data Portability: Where processing is based on your consent or a contractual requirement and is carried out by automated means, you may request that cx99 provides your data in a structured, commonly used, machine-readable format.
Right to Object: You have the right to object to cx99 processing your personal data where cx99 relies on legitimate interests as its legal basis, including for direct marketing purposes. You may opt out of marketing emails at any time via your cx99 account settings.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of these rights, please submit your request to cx99 via live chat or by email to [email protected] with the subject line "Data Rights Request". cx99 will respond to all verified requests within 30 days. In some cases, cx99 may require proof of identity before processing your request.

10 Children & Minors

cx99 operates an absolute prohibition on the use of the platform by anyone under the age of 21. cx99 does not knowingly collect personal data from any individual under the age of 21. cx99's registration process includes a mandatory age declaration, and cx99 enforces KYC age verification measures to identify and remove underage users.

If cx99 becomes aware that personal data has been collected from a person under 21 years of age, cx99 will immediately suspend the relevant account, void any associated gaming activity, and delete the personal data collected in respect of that individual, subject to any overriding regulatory retention obligation.

If you are a parent or guardian and believe that a person under your care has registered a cx99 account or provided personal data to cx99, please contact cx99 immediately at [email protected] so that cx99 can take appropriate action without delay.

STRICTLY 21+ ONLY
cx99 enforces a minimum age of 21 on all Platform Services. Age verification is mandatory for all users before withdrawal requests are processed.

11 International Transfers

As cx99 operates under an internationally recognised gaming licence framework, some of your personal data may be processed or stored on servers located outside Pakistan. Where such international data transfers occur, cx99 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy.

These safeguards include contractual clauses with data processors that impose equivalent data protection standards, as well as technical security controls applicable regardless of server location. Third-party providers (including payment processors and game studios) who receive cx99 user data are required to maintain security and confidentiality standards consistent with those described in this Privacy Policy.

By using cx99 and registering an account, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan in connection with the operation of the cx99 platform.

12 Changes to This Policy

cx99 reserves the right to update or modify this Privacy Policy at any time. All changes will be published at cx99.ws/privacy-policy with an updated "Last Updated" date. Where changes are material — meaning they significantly affect how cx99 collects or uses your personal data — cx99 will notify registered users by email to their registered address before the change takes effect.

Your continued use of the cx99 platform following notification of a material change constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you must cease using cx99 and may request account closure by contacting cx99 support.

Minor editorial corrections, clarifications, or structural reorganisations that do not alter the substantive meaning of this Privacy Policy may be made without prior notification, though the "Last Updated" date will always be revised to reflect any change.

13 Contact & Data Requests

For all privacy-related enquiries, data access requests, correction requests, erasure requests, or concerns regarding how cx99 handles your personal data, please contact the cx99 Privacy Team through the following channels:

Live Chat: Available 24/7 directly within the cx99 platform. This is the fastest way to reach cx99 support. Please mention "Privacy Request" at the start of your chat so the team can route your enquiry correctly.
Support Email: [email protected] — Please use the subject line "Privacy Policy Request" and include your cx99 account username and the specific nature of your request. cx99 aims to acknowledge all privacy-related emails within 48 hours and to resolve them fully within 30 days.

For responsible gaming concerns — including self-exclusion requests, deposit limit adjustments, or problem gambling support — please visit the cx99 Responsible Gaming page for dedicated tools and guidance.

The [email protected] email address is displayed as plain text only. It is not a clickable link. Please copy the address manually into your email client if needed.

cx99 Privacy Policy

How cx99 Protects Your Privacy

Your Data Is Safe at cx99. Join Pakistan's Trusted Casino Platform.