Privacy Policy Cricex —
Our Commitment to Protecting Your Data

This Privacy Policy explains how Cricex (referred to as "we", "Cricex", or "the platform") collects, uses, stores, discloses, and protects your personal information when you use the Cricex website, mobile app, and all related services.

This Policy applies to all Cricex platform users — whether you registered today or have been a loyal member for years. By using the Cricex platform, you acknowledge that you have read and understood this Privacy Policy.

Cricex is committed to complying with Personal Data Protection Act 2010 (PDPA) Malaysia and all applicable data protection regulations. We regard data protection not merely as a legal obligation, but as the foundation of trust we build with every member.

Cricex collects several categories of personal information depending on how you interact with our platform. The following are the data categories we may collect:

A. Identity & Contact Information:

• Full name as stated on an official identification document (MyKad or passport).
• Malaysian Identity Card number (MyKad) or passport number.
• Date of birth and gender.
• Email address and mobile phone number.
• Current residential address.

B. Financial & Transaction Information:

• E-wallet account details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) used for deposits and withdrawals.
• Bank account details for transactions via DuitNow or FPX (Maybank2u, CIMB Clicks).
• Deposit, withdrawal, and in-platform transaction history.
• Information submitted during the KYC process, including supporting documents.

C. Usage & Technical Information:

• IP address and approximate location derived from IP.
• Device type, operating system, and web browser used.
• In-platform activity history — games played, session duration, login frequency.
• Technical log data for system debugging and security purposes.

Your personal data is collected through several key channels:

• Directly from you — when you register an account, complete your profile, contact customer support, or fill in any in-platform forms.
• Automatically — when you use the Cricex platform, our systems automatically record technical information such as your IP address, device type, and session log data.
• Through cookies and tracking technologies — please refer to Section 7 (Cookie Policy) for further details.
• From authorised third parties — in certain cases, we may receive information from licensed identity verification providers or payment service providers in Malaysia for KYC verification purposes.

In all cases, data collection is carried out for legitimate purposes and on legal bases provided under Malaysia's PDPA.

Cricex uses your personal data solely for the following legitimate and stated purposes:

• Account management: Creating and maintaining your Cricex account, including identity verification during registration and ongoing KYC processes.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and handling withdrawals to registered accounts.
• Service provision: Giving you access to all Cricex games and services, including slots, live casino, baccarat, poker, Virtual Sports, and e-sports.
• Security & fraud prevention: Detecting and preventing fraud, money laundering, multi-accounting, and other unlawful activity.
• Service communications: Sending important notifications relating to your account, transactions, policy changes, and security updates.
• Personalisation: Personalising your platform experience based on your playing habits and personal preferences.
• Promotional communications: Sending you information about Cricex promotions, bonuses, and exclusive offers — only if you have consented to receive such communications.
• Legal compliance: Fulfilling legal obligations under PDPA, AML regulations, and directives from relevant authorities.

Cricex does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, in the following limited situations, we may share your information:

• Service providers: Third parties that assist us in operating the platform — such as cloud infrastructure providers, payment service providers (DuitNow, FPX), and gaming software providers. They are bound by strict confidentiality agreements and are only permitted to process data as directed by Cricex.
• Legal authorities: When required by law, court order, or directive from a competent authority in Malaysia.
• Crime prevention: To licensed anti-fraud and anti-money laundering agencies where there are reasonable grounds to report suspected activity.
• With your consent: In other circumstances where you have given your explicit consent beforehand.

All third parties we work with are subject to binding data protection agreements and are required to uphold privacy standards no less stringent than those in this Policy.

Cricex employs comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or accidental disclosure:

• 256-bit SSL encryption for all data transmitted between your device and Cricex servers.
• Passwords are stored using bcrypt hashing, an irreversible algorithm.
• Segmented data servers with role-based access control.
• Regular security audits and penetration testing conducted by independent security specialists.
• Round-the-clock activity monitoring to detect anomalies or unauthorised access attempts.
• Two-Factor Authentication (2FA) is available for user accounts and mandatory for all internal admin accounts.

Your personal data will be retained for as long as your account remains active or as long as necessary to fulfil the purposes set out in this Policy. Upon account closure, data will be retained for the period required by law (typically 7 years for financial records) and thereafter securely deleted or anonymised.

Cricex uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device that help our platform function more effectively.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the full functionality of the Cricex platform.

Under Malaysia's PDPA and Cricex's commitment to privacy, you have the following rights with respect to your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: If your data is inaccurate or out of date, you have the right to request a correction.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data.
• Right to Object: You may object to the processing of your data for marketing purposes or in certain other circumstances.
• Right to Withdraw Consent: You may withdraw consent previously given at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another service provider.

To exercise any of these rights, please contact us by email privacy@cricex-vip.com or via the in-platform live chat support. We will endeavour to respond to your request within 14 working days.

The Cricex platform is intended for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, we will take immediate action to:

• Immediately delete all data associated with you from our systems.
• Closing the relevant account immediately.
• Returning any remaining account balance to the original payment method.

If you become aware that a minor has registered on Cricex, please notify us immediately at privacy@cricex-vip.com so that appropriate action can be taken.

Cricex reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When material changes occur, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending a notification to your registered email at least 7 days before changes take effect.
• Displaying clear notices on the platform regarding important changes.

Your continued use of the Cricex platform after any changes to this Privacy Policy take effect will be deemed as acceptance of those changes. It is your responsibility to review this Policy periodically.

If you have any questions, concerns, or complaints regarding how Cricex handles your personal data, we encourage you to contact us directly so we can resolve the matter together:

• Privacy Email: privacy@cricex-vip.com
• General Support Email: support@cricex-vip.com
• Live Chat: Available 24/7 within the Cricex platform

We are committed to responding to all privacy-related enquiries within 14 working days from the date of receipt. For more complex complaints, additional time may be required, and we will keep you informed of the expected resolution timeline.