cx888 Privacy Policy — How We Protect Your Data

Introduction

This Privacy Policy describes how cx888 collects, uses, stores, shares, and protects personal information relating to players who register an account or use any service on the cx888 platform, accessible at cx888.im. The policy applies to all cx888 products and services including the online casino, live casino, sports betting, esports betting, crash games, and any future services added to the platform.

cx888 takes its data protection obligations seriously. We process personal data because operating an online gaming platform responsibly — verifying player identities, processing PKR payments, preventing fraud, and complying with gaming regulations — requires it. We do not process personal data beyond what is genuinely necessary for these purposes.

By creating a cx888 account or using any cx888 service, you acknowledge that you have read and understood this Privacy Policy. If you are not comfortable with how cx888 handles personal data as described in this policy, you should not create an account or, if you are an existing player, you may request account closure by contacting support at support@cx888.im.

Data We Collect

cx888 collects personal data through several means: directly from you during registration and account use, automatically through your use of the platform, and in some cases from third parties such as payment providers and identity verification services.

Registration Data

When you create a cx888 account, we collect the following information:

• Full legal name
• Date of birth
• Email address
• Mobile phone number
• Residential address in Pakistan
• Username and encrypted password

Identity Verification Data (KYC)

To comply with anti-money laundering obligations and our gaming licence requirements, cx888 collects the following verification documents from players prior to processing withdrawals:

• Copy of a valid government-issued photo ID (NADRA CNIC, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or government letter dated within the past three months)
• In some cases, proof of payment method ownership

Financial Transaction Data

cx888 records details of all financial transactions on your account, including deposit amounts in PKR, withdrawal requests, payment methods used, transaction timestamps, and transaction reference numbers. We do not store full card numbers — payment card data is handled by our PCI-DSS compliant payment processing partners.

Gaming Activity Data

cx888 records your gaming history on the platform, including games played, bet amounts in PKR, outcomes, session duration, and login timestamps. This data is used for responsible gaming monitoring, dispute resolution, and regulatory compliance.

Technical Data

When you access cx888, we automatically collect technical data including your IP address, device type and operating system, browser type and version, referring URL, and clickstream data within the platform. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

How We Use Your Data

cx888 uses collected personal data for the following purposes:

cx888 does not use personal data for automated individual decision-making that produces legal or similarly significant effects, except where such processing is required to comply with anti-money laundering obligations. Where automated processing is used in this context, players have the right to request human review of the decision.

Legal Basis for Processing

cx888 processes personal data under one or more of the following legal bases depending on the specific processing activity:

Contract Performance

Processing your registration data, managing your account, and handling your PKR deposits and withdrawals are all necessary to fulfil the contractual relationship between cx888 and you as a player. Without this processing, cx888 cannot provide the service you have signed up for.

Legal Obligation

cx888 is required by its gaming licence and applicable anti-money laundering regulations to collect and retain certain personal data, including identity verification documents and full transaction records. This processing is mandatory — cx888 cannot waive these requirements regardless of player preference.

Legitimate Interests

cx888 processes certain data — particularly technical and usage data — on the basis of legitimate interests, specifically to protect the security and integrity of the platform, prevent fraud and collusion, and improve the product for all players. cx888 has assessed that these interests are not overridden by player privacy rights, given the limited nature of the processing and the security benefits it provides.

Consent

Where cx888 processes personal data for marketing purposes — sending promotional emails, bonus notifications, or special offer messages — it does so on the basis of your consent, which you provide at registration. You can withdraw this consent at any time by adjusting your notification preferences in your account settings or by contacting support.

Data Sharing

cx888 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your information is shared only in the following limited circumstances:

Service Providers

cx888 works with carefully selected third-party service providers to operate the platform. These include payment processors handling Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments; identity verification services for KYC document review; game software providers; fraud detection technology providers; and cloud infrastructure operators. Each service provider is permitted to process your data only for the specific purpose of providing their service to cx888, under written data processing agreements that require them to maintain appropriate security standards.

Regulatory and Legal Disclosure

cx888 may be required to disclose personal data to regulatory authorities, law enforcement agencies, or gaming regulators where required by law, court order, or regulatory instruction. cx888 will comply with such requirements and, where permitted by law, will notify the affected player of the disclosure.

Anti-Money Laundering Reporting

In accordance with its AML obligations, cx888 is required to report suspicious transactions to the relevant financial intelligence authority. Such reports are made confidentially and cx888 is legally prohibited from disclosing to the subject of a report that a report has been made.

Business Transfers

In the event that cx888 undergoes a merger, acquisition, or sale of all or a substantial part of its assets, personal data may be transferred as part of that transaction. Players will be notified of any such transfer and the privacy practices of the acquiring entity before their data is subject to a different privacy policy.

Cookies and Tracking Technologies

cx888 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players use the site. Cookies are small text files placed on your device by your browser when you visit cx888.

Types of Cookies Used

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and cookies that maintain your login state. These cannot be disabled without breaking the platform.
• Performance cookies: Collect anonymised data about how players use cx888 — which pages are visited most, where players encounter errors, and how long sessions last. This data is aggregated and does not identify individual players.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and display settings, so you do not need to re-configure the platform on each visit.
• Marketing cookies: Used to show relevant cx888 promotions to registered players within the platform. cx888 does not use third-party advertising networks on the platform.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the cx888 platform. cx888 does not respond to "Do Not Track" browser signals, as there is no consistent industry standard for such signals.

Data Security

cx888 implements a multi-layered security framework to protect personal data from unauthorised access, loss, or disclosure. Key security measures in place include:

• Transport encryption: All data transmitted between your device and cx888 is encrypted using TLS 1.3 with 256-bit AES encryption — the same standard used by Pakistani banks and major financial institutions.
• Data at rest encryption: Personal data and financial records stored in cx888 databases are encrypted at rest. Even in the unlikely event of a database breach, stored data cannot be read without the encryption keys, which are held separately.
• Access controls: Internal access to player personal data is restricted to cx888 staff who require it to perform their role. All access is logged and subject to regular audit. Staff access privileges are reviewed quarterly.
• Penetration testing: cx888 systems are subject to regular third-party security penetration testing to identify and address vulnerabilities before they can be exploited.
• Fraud monitoring: cx888 operates 24/7 automated fraud detection systems that monitor transactions and login activity for suspicious patterns and trigger security reviews where anomalies are detected.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to player privacy, cx888 will notify affected players and relevant authorities within the timeframes required by applicable law.

Data Retention

cx888 retains personal data for as long as is necessary to fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods are as follows:

• Account data: Retained for the duration of your active account plus 5 years following account closure, in line with standard financial record-keeping requirements.
• Identity verification documents: Retained for 5 years from the date of verification or from the date of account closure, whichever is later, as required under AML regulations.
• Financial transaction records: Retained for 5 years from the date of each transaction.
• Gaming activity logs: Retained for 3 years for customer support and responsible gaming monitoring purposes, and for up to 5 years where required by our gaming licence.
• Marketing data (where consent was given): Retained until you withdraw consent or request deletion, whichever comes first.
• Technical/log data: Retained for 12 months for security monitoring purposes.

Once the applicable retention period has expired, cx888 securely deletes or anonymises the relevant data. Anonymised data — data from which all identifying information has been irreversibly removed — may be retained indefinitely for analytical and statistical purposes.

Your Rights

As a cx888 player, you have the following rights in relation to the personal data cx888 holds about you. To exercise any of these rights, contact cx888 at support@cx888.im with the subject line "Data Rights Request".