Privacy Policy – cxwelcome Data & Security Practices

1. Overview

This Privacy Policy applies to all users of the cxwelcome platform, including the website and mobile app. It covers all personal data collected when you browse the platform, register an account, make a deposit or withdrawal, place bets, use the live casino or contact customer support.

By creating a cxwelcome account and using the platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your data as described here. If you do not agree, please do not use the platform.

cxwelcome is committed to handling your personal information with care. We collect the minimum data necessary, store it securely and only use it for the purposes described in this policy. We do not share your data with advertisers, data brokers or unrelated third parties.

2. Data We Collect

cxwelcome collects personal data in the following categories depending on how you interact with the platform:

We do not collect sensitive data such as racial or ethnic origin, political opinions, religious beliefs or health information. We do not knowingly collect data from persons under 18 years of age.

3. How We Use Your Data

cxwelcome uses the data we collect for specific, clearly defined purposes. We do not use your data for any purpose beyond what is described below without first obtaining your consent.

• Account management: To create and maintain your cxwelcome account, verify your identity and manage your login security.
• Transaction processing: To process PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, Bank Transfer and other supported payment channels.
• Platform operation: To enable sports betting, live casino, slots and all other features of the platform to function correctly for your session.
• Fraud prevention and security: To monitor account activity for signs of fraud, unauthorised access, bonus abuse or money laundering and to take action when suspicious behaviour is detected.
• Responsible gaming: To identify patterns of play that may indicate problem gambling behaviour and to make responsible gaming tools available to you when appropriate.
• Customer support: To respond to your queries, resolve disputes and handle complaints efficiently.
• Legal and regulatory compliance: To fulfil any legal obligations that apply to the operation of the platform.
• Platform improvement: To analyse aggregated usage data and improve the performance, design and features of the platform over time.
• Marketing communications: To send you promotional offers, bonus notifications and platform updates — but only if you have opted in to receive these. You can opt out at any time through your account settings.

4. Payment Data & PKR Transactions

All financial transactions on cxwelcome are processed in PKR. The platform integrates directly with JazzCash, Easypaisa, Raast, bank channels and card networks to handle deposits and withdrawals. When you initiate a transaction, the relevant payment provider receives the information needed to process it.

cxwelcome does not store full card numbers, JazzCash PINs, Easypaisa PINs or online banking passwords. We retain a transaction reference, amount, date and the associated account identifier solely for the purposes of processing, reconciliation and dispute resolution.

Payment data is transmitted using encrypted connections at all times. Stored financial records are protected by access controls and are accessible only to authorised staff for legitimate operational purposes such as withdrawal processing or fraud investigation.

If a payment dispute arises, we may need to share limited transaction details with the relevant payment provider to resolve it. This sharing is strictly limited to what is necessary for resolution.

5. Cookies & Tracking Technologies

cxwelcome uses cookies and similar technologies to keep the platform working correctly, remember your session preferences and understand how users navigate the site. Cookies do not contain your personal details such as your name or payment information — they contain small identifiers that allow the platform to recognise your browser across a session.

The categories of cookies used on cxwelcome are:

• Essential cookies: Required for the platform to function. These handle login sessions, security tokens and basic site navigation. They cannot be disabled without breaking core platform features.
• Functional cookies: Remember your language preference, display settings and other personalisation choices so you do not have to reset them each visit.
• Analytics cookies: Collect anonymised data about which pages are visited, how long sessions last and where users encounter issues. This data is used to improve the platform experience.
• Security cookies: Help detect and prevent fraudulent login attempts and unusual account activity.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to log in and use the platform normally.

6. Data Sharing

cxwelcome does not sell, rent or trade your personal data. We do not share your information with advertisers or unrelated third parties for commercial purposes. Data is only shared in the following specific circumstances:

• Payment processors: JazzCash, Easypaisa, Raast and banking partners receive the minimum data necessary to process your PKR transactions.
• Identity verification providers: When KYC verification is required, your identity documents and personal details may be shared with a certified identity verification service.
• Fraud prevention services: Anonymised or pseudonymised data may be shared with fraud detection partners to identify and prevent fraudulent activity across the platform.
• Technology infrastructure providers: Cloud hosting and technical service providers that support platform operations are bound by data processing agreements that restrict their use of your data.
• Legal obligations: Where required by applicable law or a valid legal process, cxwelcome may disclose personal data to comply with that requirement. We will only disclose the minimum data required.

All third parties who receive your data from cxwelcome are contractually required to keep it confidential, use it only for the specified purpose and handle it securely.

7. Data Retention

cxwelcome retains your personal data for as long as your account is active and for a defined period after account closure. The retention period for different categories of data is determined by the purpose for which it was collected and any applicable legal requirements.

• Account and identity data is retained for the lifetime of your account plus a period of up to five years after closure to satisfy legal and regulatory record-keeping requirements.
• Financial transaction records are retained for up to seven years to comply with standard financial record-keeping obligations.
• Support communications are retained for up to three years to allow for dispute resolution and service quality review.
• Technical and usage data collected for analytics purposes is typically retained in anonymised form and does not carry a fixed deletion date.

When data is no longer needed for any of the purposes described in this policy, cxwelcome deletes or anonymises it securely. You may request early deletion of specific data by contacting the support team, subject to any overriding legal retention obligations.

8. Data Security

cxwelcome takes the security of your personal data seriously and maintains technical and organisational measures proport ionate to the risk involved. Key security measures include:

• SSL/TLS encryption: All data transmitted between your browser or app and the cxwelcome servers is encrypted using industry-standard TLS protocols. You will always see a secure connection indicator when using the platform.
• Password hashing: Account passwords are never stored in plain text. They are hashed using modern cryptographic algorithms so that even internal staff cannot read your password.
• Access controls: Personal data is accessible only to staff members who need it to perform their legitimate job functions. All staff access is logged and audited.
• Two-factor authentication: cxwelcome supports additional login verification to help protect your account from unauthorised access even if your password is compromised.
• Regular security reviews: Platform infrastructure and data handling processes are reviewed periodically to identify and address vulnerabilities.

Despite these measures, no online platform can guarantee absolute security. If you suspect your account has been accessed without your permission, contact support immediately and change your password. cxwelcome will investigate all reported security incidents promptly.

9. Your Rights

As a cxwelcome user you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team with your request and we will respond within a reasonable timeframe.

• Right to access: You can request a copy of the personal data cxwelcome holds about you at any time.
• Right to correction: If any of your personal data is inaccurate or incomplete, you can ask us to correct it. You can also update basic account details directly from your account settings.
• Right to deletion: You can request that we delete your personal data. Note that we may be unable to delete certain records where we have a legal obligation to retain them, such as financial transaction records.
• Right to restrict processing: You can ask us to limit how we use your data while a correction or objection request is being reviewed.
• Right to data portability: You can request a copy of your data in a structured, commonly used format so that you can transfer it to another service if you choose.
• Right to withdraw consent: Where processing is based on your consent — for example, receiving marketing communications — you can withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

Please note that some requests may require identity verification before they can be processed, to protect your account from third-party data requests made without your knowledge.

10. Children's Privacy

cxwelcome is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not use the platform or provide any personal information.

If we become aware that personal data has been collected from a person under 18, we will delete that data promptly and close the associated account. If you are a parent or guardian and believe your child has created an account on cxwelcome, please contact us immediately so we can take action.

11. Policy Updates

cxwelcome may update this Privacy Policy from time to time to reflect changes in how we operate, changes in technology or changes in applicable law. When we make updates, the revised policy will be published on this page with a new effective date at the top.

For significant changes that affect how your data is used, we will make reasonable efforts to notify you directly — either through a platform notification or via the email address registered to your account. We encourage you to review this page periodically so you are always aware of the current policy.

Continued use of the cxwelcome platform after an updated policy has been published constitutes your acceptance of the changes. If you disagree with an updated policy, you should stop using the platform and contact support to arrange account closure and data handling in accordance with your preferences.

12. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights or need to report a privacy concern, please reach out to the cxwelcome support team. We are available 24 hours a day, 7 days a week and will respond to all privacy-related queries as promptly as possible.

For general account support, you can also use the live chat feature available within the platform when you are logged in. For privacy and data requests specifically, email is the preferred channel so that we can create a proper record of your request and respond securely.