Privacy Policy

Introduction

This Privacy Policy is issued by cx778 ("we", "us", "our"), the operator of the online gaming information platform accessible at https://cx778.cam. It sets out the manner in which cx778 collects, holds, processes, discloses and protects personal information provided by users ("you", "the User") who access or interact with the Platform.

cx778 is an English-language online gaming information platform specifically designed for Pakistani users. We recognise that users in Pakistan have legitimate expectations regarding the privacy and security of their personal data, and we are committed to handling that data responsibly, transparently and in accordance with applicable data protection standards under the operator's licensing jurisdiction.

This Privacy Policy applies to all data processing activities carried out by cx778 in connection with the Platform, including account registration, identity verification (KYC), financial transactions, customer support interactions, marketing communications (where consented to) and general website usage analytics.

Definitions

The following definitions apply throughout this Privacy Policy:

Personal Data We Collect

cx778 collects the following categories of personal data, depending on how you interact with the Platform:

We do not intentionally collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data or biometric data beyond liveness-check selfies for identity verification). If such data is incidentally submitted, it will be deleted as soon as reasonably practicable, subject to any legal hold requirement.

How We Collect Personal Data

We collect personal data through the following channels:

• Direct submission: Data you provide during account registration, KYC verification, deposit or withdrawal requests, support interactions, promotional opt-ins and any other forms on the Platform;
• Automated technical collection: Data collected automatically when you use the Platform, including via cookies, server logs, session tracking and device fingerprinting technologies;
• Third-party verification providers: Identity verification data may be cross-referenced with third-party KYC service providers and document verification databases as part of the KYC process;
• Payment processors: Transaction-related data returned by payment processors following deposit or withdrawal operations. Note that payment providers such as Easypaisa, JazzCash, Raast or bank transfer services (HBL, UBL, Meezan Bank, Bank Alfalah) are referenced here as familiar local payment contexts only — they are independent entities with their own privacy policies and cx778 does not control the data they hold;
• Fraud and AML screening: Data from sanctions lists, politically exposed person (PEP) databases and fraud detection networks as required by the operator's licensing and AML obligations.

Purposes of Processing

cx778 processes your personal data for the following specific purposes:

• Account management: To create, maintain, verify and administer your cx778 account, including processing login authentication and managing account security;
• KYC and age verification: To verify your identity, confirm you meet the minimum age requirement (18+ or higher), and comply with the operator's anti-money laundering (AML) and counter-terrorist financing (CTF) obligations;
• Transaction processing: To process deposits, withdrawals and account balance management in PKR and, where applicable, other currencies;
• Responsible gambling: To monitor gaming behaviour for risk indicators, administer self-imposed limits and exclusions, and implement platform-initiated protective measures where required;
• Customer support: To handle queries, complaints and account issues submitted through live chat or email;
• Platform improvement: To analyse usage patterns, test new features and improve the overall platform experience for Pakistani users;
• Marketing communications: To send promotional communications where you have given your explicit consent. You may withdraw consent at any time;
• Legal and regulatory compliance: To meet the operator's obligations under its licensing jurisdiction's laws, including record-keeping, reporting and data disclosure requirements;
• Fraud prevention and security: To detect, investigate and prevent fraudulent activity, cheating, collusion, money laundering and other forms of abuse.

Legal Bases for Processing

cx778 processes personal data on the following legal bases, as recognised under the data protection framework applicable in our operating jurisdiction:

Data Sharing & Disclosure

cx778 does not sell your personal data. We may share your personal data with the following categories of third parties, strictly for the purposes described in this policy:

• KYC and identity verification providers: Third-party identity verification platforms that process document scans and liveness checks to fulfil AML and age-verification obligations;
• Payment processing partners: Payment gateways and processors that facilitate deposits and withdrawals. Data shared is limited to what is necessary to complete the transaction;
• Technology infrastructure providers: Cloud hosting, content delivery, database management and cybersecurity vendors who process data on our behalf under appropriate data processing agreements;
• Fraud prevention and AML screening services: Third-party databases and screening tools used to detect fraud, sanctions violations, PEP status and money laundering risk indicators;
• Regulatory and law enforcement authorities: We may disclose data to competent regulatory bodies, law enforcement agencies or courts where required by applicable law, court order or lawful regulatory demand;
• Professional advisers: Legal counsel, auditors and compliance consultants where necessary for the operation and protection of our business, under professional confidentiality obligations.

All third-party data processors with whom cx778 shares personal data are required to maintain the confidentiality of that data and to process it only in accordance with our documented instructions and applicable data protection standards.

International Data Transfers

As cx778 operates internationally, your personal data may be transferred to and stored on servers located in jurisdictions outside Pakistan. These may include the jurisdiction in which cx778 is licensed, as well as the data centre locations of our hosting and KYC technology partners.

Where data is transferred internationally, cx778 takes appropriate steps to ensure that an adequate level of data protection applies, including through:

• Contractual safeguards with data processors, incorporating data protection obligations equivalent to those applicable in our licensing jurisdiction;
• Selecting processors operating in jurisdictions with recognised data protection frameworks;
• Applying technical and organisational security measures to data in transit and at rest.

Pakistani data protection law does not currently provide for an equivalent level of formal adequacy determination processes as found in some other jurisdictions. Users in Pakistan should be aware that their data may be processed in jurisdictions with different legal frameworks than those applicable in Pakistan. cx778 does not make any representation regarding the equivalence of foreign data protection standards to Pakistani law.

Data Retention

cx778 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with legal, regulatory and operational requirements. The following retention principles apply:

• Active account data: Retained for the duration of your account and for a defined period following account closure, in accordance with the operator's licensing retention obligations (typically five to seven years for KYC and financial records, subject to the specific jurisdiction);
• KYC documentation: Retained for the minimum period required by the operator's AML compliance obligations, which may extend to five years from the date of the last transaction or account activity;
• Support communications: Retained for a period sufficient to address follow-up queries and comply with any dispute resolution requirements, typically two years from the date of correspondence;
• Marketing consent records: Retained until consent is withdrawn, and for a reasonable period thereafter as evidence of the consent;
• Usage and analytics data: Typically retained in aggregated or anonymised form beyond the standard retention period, once individual identifiers have been removed.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where deletion is not immediately practicable due to technical constraints, the data will be placed in restricted access storage pending secure deletion.

Cookies & Tracking Technologies

cx778 uses cookies and similar tracking technologies to make the Platform function correctly, to understand how users interact with our content, and to improve the experience for Pakistani players. A cookie is a small text file placed on your device when you visit the Platform.

We use the following categories of cookies:

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling essential cookies will impair Platform functionality. Your browser's Help section provides guidance on cookie management for your specific browser version.

User Rights

Subject to applicable law and any legal retention obligations, you have the following rights in relation to your personal data held by cx778:

To exercise any of these rights, please contact our support team via email at [email protected] (plain text — not a clickable link) or through the in-platform live chat. We will acknowledge your request promptly and respond within the timeframe required by applicable law, subject to identity verification to protect your account from unauthorised data requests.

Children's Privacy

cx778 is strictly for adults aged 18 years and over, or the higher minimum age required by the applicable operator or jurisdiction. The Platform is not intended for use by minors, and we do not knowingly collect personal data from individuals under the age of 18.

If cx778 discovers or has reason to believe that an account has been registered or used by an individual under the minimum age, the account will be suspended immediately, all balances forfeited, and any personal data associated with the account will be deleted as soon as legally permissible.

If you are a parent or guardian and believe that your child may have registered an account on cx778, please contact us immediately at [email protected] (plain text — not a clickable link). We will investigate and act promptly.

Security Measures

cx778 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• 256-bit TLS/SSL encryption applied to all data in transit between your device and the Platform;
• Encryption at rest for sensitive personal data, including identity documents and financial information, stored on our servers;
• Access controls limiting internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging;
• Multi-factor authentication (MFA) options available to users for enhanced account security;
• Regular security assessments including vulnerability scanning and penetration testing of Platform infrastructure;
• Incident response procedures for detecting, containing and reporting data security incidents in accordance with applicable legal notification requirements.

Notwithstanding the above, no internet-based system can be guaranteed to be completely secure. cx778 cannot warrant absolute security of your data. You are also responsible for maintaining the security of your own account credentials — please use a strong, unique password and do not share your login details with anyone.

Pakistan-Specific Privacy Notice

cx778 serves Pakistani users across cities including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. We recognise that Pakistani users have specific privacy expectations shaped by local cultural norms and the evolving domestic legal framework.

Pakistan's primary data protection framework is currently being developed at the legislative level. The Personal Data Protection Bill has been under consideration, though as of the effective date of this policy, comprehensive data protection legislation analogous to international frameworks has not been fully enacted and commenced in Pakistan. cx778 complies with the data protection requirements of its licensing jurisdiction and applies international best practices as described in this policy.

Pakistani users should be aware of the following:

• Your personal data may be processed and stored on servers located outside Pakistan, in the jurisdiction where cx778 is licensed or where its technology providers operate;
• cx778 does not share user data with Pakistani government authorities, the State Bank of Pakistan, the Pakistan Telecommunication Authority or any other Pakistani regulator unless required to do so by a binding legal order;
• Payment references in your account — whether relating to Easypaisa, JazzCash, Raast transfers, HBL, UBL, Meezan Bank or Bank Alfalah — involve independent data controllers. Each payment provider maintains its own privacy policy and cx778 is not responsible for their data practices;
• cx778 does not provide legal advice on the interaction between this Privacy Policy and Pakistani law. Users with specific concerns about data rights under Pakistani law are encouraged to seek independent legal counsel.

Changes to This Privacy Policy

cx778 reserves the right to update, revise or replace this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, our data processing activities or Platform operations. The updated Privacy Policy will be published on this page with a revised effective date.

Where changes are material — meaning they significantly affect your rights or our obligations in relation to your personal data — we will endeavour to notify registered users by email or via an on-site notification prior to the changes taking effect, where reasonably practicable.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not accept the revised policy, you should discontinue use of the Platform and contact support to request account closure and data deletion.

Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact the cx778 privacy team using the following details:

cx778 does not operate a dedicated postal address for Pakistani users. All privacy-related communications should be directed via email or live chat. We do not accept privacy requests submitted through third-party channels or social media platforms.