Cricada Privacy Policy — How We Handle Your Personal Data in Pakistan

Cricada is an online sports betting and casino platform operating at cricada.net, designed specifically for Pakistani users. We are the data controller responsible for the personal information you provide when you register, make deposits, place bets or otherwise interact with any part of the Cricada platform.

Our platform covers cricket betting odds, PSL and international cricket markets, jackpot slots, regular slots, virtual sports, esports betting, promotions and responsible gaming tools. All personal data collected in connection with these services is handled in accordance with this Privacy Policy.

If you have any questions about how Cricada handles your data, or if you wish to exercise any of your data rights, you can reach our Privacy team directly at privacy@cricada.net. We will respond to all genuine privacy enquiries within 30 days.

Cricada collects only the information necessary to provide our betting and casino services, process PKR payments, verify your identity and comply with applicable legal requirements. Here is a clear breakdown of what we collect and when:

Cricada does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, health information or biometric data. We do not collect information about your friends, family or contacts unless they are independently registered members of Cricada.

Every piece of data Cricada collects is used for a specific, defined purpose. We do not process your data for purposes beyond those listed here without first notifying you and, where required, obtaining your consent.

• Account management: Your identity and contact data is used to create, verify and maintain your Cricada member account, process logins and ensure only you can access your balance.
• Payment processing: Financial data is used to process PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payments, and to process withdrawal requests to your chosen payment method.
• Identity verification (KYC): We are required to verify the identity of members, particularly before processing withdrawals above certain thresholds. This involves checking your name, date of birth and CNIC.
• Fraud prevention and security: Technical and transaction data is used to identify and prevent fraudulent activity, multiple accounts, money laundering and any other prohibited conduct as defined in our Terms and Conditions.
• Responsible gaming: Transaction and usage data is used to monitor for signs of problem gambling and to apply responsible gaming tools such as deposit limits, cooling-off periods and self-exclusion.
• Customer support: Communications data is used to respond to your enquiries, resolve disputes and provide assistance with your account.
• Platform improvement: Aggregated and anonymised usage data helps Cricada improve platform design, fix bugs, develop new features and optimise the betting experience.
• Marketing communications: Where you have opted in, your contact data is used to send you promotions, bonus offers, odds boost notifications and news about Cricada. You can opt out at any time.
• Legal compliance: All categories of data may be used to comply with applicable laws, regulatory requirements and any lawful requests from competent authorities.

Cricada processes your personal data on the following legal grounds:

• Contract performance: Processing your data is necessary to deliver the betting and casino services you signed up for, including account management, bet settlement and PKR payments.
• Legal obligation: Cricada is required by law to collect and retain certain information, including KYC identity verification, transaction records for anti-money laundering compliance and age verification data.
• Legitimate interests: Cricada has a legitimate interest in preventing fraud, maintaining platform security, improving our services and monitoring for responsible gaming purposes — provided these interests do not override your fundamental rights.
• Consent: Where we process data for marketing communications or optional features, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

Cricada does not sell, rent or trade your personal data. We share data only in the following limited circumstances, and only to the minimum extent necessary:

• Payment providers: Financial data is shared with payment processors including Easypaisa, JazzCash, NayaPay, SadaPay and banking partners solely to process your PKR deposits and withdrawals. These providers operate under their own privacy policies and are bound by contractual obligations to protect your data.
• Game providers: Technical identifiers (not your full personal details) may be shared with third-party game suppliers such as slots and casino providers to facilitate gameplay and resolve game session disputes.
• Identity verification services: KYC data including CNIC copies may be shared with regulated identity verification service providers for the purpose of verifying your identity. These providers are contractually bound to confidentiality.
• Regulatory and legal authorities: Cricada may be required to disclose personal data to law enforcement agencies, financial regulators or courts in response to a lawful request. We will notify you of such disclosures where legally permitted to do so.
• Fraud prevention agencies: In cases of suspected fraud, money laundering or account abuse, relevant data may be shared with fraud prevention organisations and industry bodies.

Cricada uses cookies and similar tracking technologies on the platform for specific, defined purposes. A cookie is a small text file stored on your device when you visit a website. Here is how Cricada uses them:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and cookies that remember your odds format preference. These cannot be disabled without breaking the platform.
• Analytical cookies: Used to understand how members use Cricada — which pages are most visited, which features are most used, and where technical issues occur. This data is aggregated and anonymised. We use tools like Google Analytics for this purpose.
• Preference cookies: Store your personal settings such as preferred language, notification preferences and display options so you do not have to reconfigure them on each visit.
• Security cookies: Used to detect fraud, protect against account takeovers and identify unusual login patterns.

You can manage your cookie preferences through your browser settings. Note that disabling non-essential cookies may affect some features of the Cricada platform. Cricada does not use third-party advertising cookies and does not allow advertising networks to track you across other websites through our platform.

Protecting your personal and financial data is one of Cricada's highest technical priorities. The following security measures are in place:

• All data transmitted between your device and Cricada's servers is encrypted using TLS 1.2 or higher — the same standard used by banks.
• Passwords are never stored in plain text. All credentials are hashed using industry-standard algorithms before storage.
• Financial data including Easypaisa and JazzCash account references is stored with additional encryption and access controls beyond those applied to general account data.
• Access to member data within Cricada is restricted on a need-to-know basis. Only the specific team members required to service your account have access to your personal information.
• Cricada's systems are monitored around the clock for anomalies, intrusion attempts and security incidents.
• In the event of a data breach that poses a risk to your rights and freedoms, Cricada will notify affected members without undue delay.

While Cricada takes all reasonable technical and organisational measures to protect your data, no online platform can guarantee 100% security. You can help protect your own account by using a strong, unique password, enabling any two-factor authentication options available, and never sharing your login credentials with anyone.

Cricada retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable laws and regulations. The following general retention periods apply:

• Active account data: Retained for the duration of your membership and for a period of five years following account closure, in compliance with anti-money laundering and financial record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five years from the date of verification, as required by applicable regulations.
• Transaction records: Deposit, withdrawal and bet history is retained for a minimum of five years from the date of the transaction.
• Customer support communications: Support chat logs and email correspondence are retained for two years from the date of the interaction, or longer if the communication is related to an ongoing dispute.
• Marketing data: Contact information used for marketing purposes is retained until you opt out, after which it is removed from active marketing lists within 30 days.

When personal data is no longer required and no legal obligation exists to retain it, Cricada securely deletes or anonymises it. Anonymised data — which cannot be linked back to any individual — may be retained indefinitely for statistical and analytical purposes.

As a Cricada member, you have the following rights over your personal data. To exercise any of these rights, contact privacy@cricada.net and we will respond within 30 days.

Cricada's platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18 years of age. Age verification checks are carried out as part of the registration and KYC process.

If Cricada discovers that personal data has been collected from a person under 18, that account will be immediately suspended, all associated data will be deleted, and any balance will be returned via the original payment method. If you are a parent or guardian and believe your child may have registered on Cricada, please contact privacy@cricada.net immediately with details so we can investigate and act promptly.

Cricada may send you promotional messages about bonuses, odds boosts, new games and platform features if you have opted in to receive marketing communications at registration or subsequently through your account settings.

You can unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email from Cricada
• Updating your communication preferences in your Cricada account settings
• Sending a request to privacy@cricada.net with the subject line "Unsubscribe"

Unsubscribe requests are processed within 5 business days. After this period, you will no longer receive unsolicited marketing messages from Cricada. Note that opting out of marketing does not affect transactional communications — you will still receive messages about your account, deposits, withdrawals and security alerts.

Cricada reviews this Privacy Policy regularly and updates it when our data practices change, when new legal requirements come into effect, or when we add significant new features to the platform. The date at the top of this document always reflects when the policy was last updated.

When material changes are made to this Privacy Policy, Cricada will notify registered members by email or by displaying a prominent notice on the platform. Your continued use of Cricada after a policy update is published constitutes your acknowledgement of the updated terms. If you have concerns about any change, please contact our privacy team before continuing to use the platform.

If you have any questions, concerns or requests relating to your personal data and how Cricada handles it, please get in touch with our dedicated Privacy team:

• Privacy enquiries: privacy@cricada.net — all privacy requests handled within 30 days
• General support: support@cricada.net or live chat on the Cricada platform
• Data deletion requests: privacy@cricada.net with subject line "Data Deletion Request"
• Data access requests: privacy@cricada.net with subject line "Data Access Request"