cr444 Privacy Policy

cr444 ("we," "us," "our," "the Company") is the operator of the online casino and sports betting platform accessible at cr444.im. cr444 is Pakistan's premier online gaming destination, offering cricket betting, live casino games, slots, fishing games and a range of other entertainment products to registered players.

For the purposes of this Privacy Policy, cr444 acts as the data controller in respect of personal data collected from players and visitors to the cr444 Platform. As data controller, cr444 determines the purposes for which and the manner in which personal data is processed.

This Privacy Policy applies to all individuals who register an account with cr444, visit the cr444 website, interact with cr444 customer support, or use any cr444 service in any capacity. It should be read alongside our Terms & Conditions, which govern your overall use of the Platform.

cr444 collects the following categories of personal data. The specific data collected depends on how you interact with the Platform and what services you use:

cr444 collects personal data through the following channels and mechanisms:

• Direct Interactions: Information you provide when registering an account, completing your profile, submitting KYC documents, making deposits or withdrawals, contacting customer support or responding to promotions.
• Automated Technologies: When you visit or use the cr444 Platform, we automatically collect certain technical and usage data through cookies, server logs and similar tracking technologies. See Section 7 for full details on our cookie practices.
• Payment Processors: When you transact via JazzCash, EasyPaisa, HBL, UBL or Meezan Bank, we receive transaction confirmation data from the relevant payment processor. We do not receive your full payment credentials — only the information necessary to confirm the transaction.
• Identity Verification Providers: Where cr444 uses third-party identity verification services to confirm your identity during KYC, those providers may return verified identity data to cr444 that supplements or confirms information you have provided directly.
• Fraud Prevention Services: cr444 may receive data from third-party fraud detection and anti-money laundering services as part of our compliance obligations.

cr444 processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to fulfil our contractual obligations to you as a registered cr444 player — including account management, payment processing and game provision — is carried out on the basis of contractual necessity.
• Legal Obligation: cr444 is subject to regulatory requirements including anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming obligations. Processing carried out to comply with these obligations is undertaken on the basis of legal compliance.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, network integrity and improving the cr444 service is undertaken on the basis of cr444's legitimate interests, where those interests are not overridden by your privacy rights.
• Consent: Where cr444 sends you direct marketing communications or uses non-essential cookies, we do so on the basis of your explicit consent. You may withdraw consent at any time through your Account settings or by contacting support.

cr444 uses the personal data collected from players for the following purposes:

• Account Management: Creating and maintaining your cr444 Account, processing your cr444 login, resetting credentials and managing your profile information.
• Service Delivery: Providing access to casino games, sports betting markets, live dealer tables, fishing games, slots and all other cr444 Platform features.
• Payment Processing: Facilitating deposits via JazzCash, EasyPaisa and bank transfers, processing PKR withdrawal requests, and maintaining transaction records.
• Identity Verification: Conducting KYC checks to verify your identity, age (minimum 21 years) and the ownership of payment methods you use, as required by regulatory standards.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling indicators, administering player-set limits, processing self-exclusion requests, and sending responsible gaming notifications where appropriate.
• Fraud Prevention & Security: Detecting, investigating and preventing fraudulent transactions, money laundering, bonus abuse, multi-accounting and other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: Responding to your support queries, resolving disputes, processing complaints and communicating account-relevant information.
• Marketing (Consent-Based): Sending promotional offers, bonus notifications and platform updates where you have opted in to receive such communications. You may opt out at any time.
• Analytics & Improvement: Analysing aggregated, anonymised usage data to understand how players use the cr444 Platform and to identify areas for improvement.
• Legal Compliance: Meeting cr444's obligations under applicable gaming regulations, AML requirements and any lawful requests from regulatory or law enforcement authorities.

cr444 does not sell your personal data to third parties. We do not share your data with advertisers, data brokers or unaffiliated marketing companies. Your data may be shared with the following categories of recipients only where necessary and on a lawful basis:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and cryptocurrency processing services, solely to process your deposit and withdrawal transactions. These providers receive only the data necessary to complete the transaction.
• Identity Verification Providers: Third-party KYC and identity verification services that assist cr444 in confirming player identities and ages as required under our regulatory obligations.
• Fraud Prevention & AML Services: Specialist third-party providers that assist cr444 in detecting fraudulent activity and complying with anti-money laundering obligations.
• Game Technology Providers: Licensed game suppliers whose software powers the games available on cr444. These providers may receive anonymised gameplay data necessary to deliver game functionality. They are contractually prohibited from using this data for any other purpose.
• Regulatory and Law Enforcement Authorities: Where cr444 is legally required to disclose personal data to regulatory bodies, courts or law enforcement agencies, we will comply with such requirements and, where permitted, will notify you of the disclosure.
• Professional Advisors: Legal counsel, auditors and compliance advisors who require access to certain data in the course of providing professional services to cr444, all of whom are bound by confidentiality obligations.

cr444 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us provide a functional, personalised and secure experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These cookies enable you to log in, maintain your session, and use core Platform features. They cannot be disabled without significantly impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game lobby layout and responsible gaming limit configurations, improving your experience across sessions.
• Analytics Cookies: Collect anonymised information about how visitors use the cr444 Platform — which pages are visited most frequently, where users encounter errors, and how sessions progress. This data helps cr444 improve the Platform experience.
• Security Cookies: Used for fraud detection, bot prevention and session integrity protection. These cookies help cr444 identify unusual activity patterns that may indicate unauthorised Account access.

You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will affect Platform functionality. Disabling analytics cookies will not impair your ability to use cr444 but will limit our ability to improve the Platform based on aggregated usage data.

cr444 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to regulatory requirements that may mandate longer retention periods. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your Account and for a period of five years following Account closure, in accordance with anti-money laundering regulatory requirements.
• Transaction Records: Financial transaction data is retained for a minimum of five years from the date of the transaction, as required by applicable AML and gaming regulatory standards.
• KYC Documentation: Identity verification documents are retained for the period required by the applicable licensing authority, typically five years from Account closure.
• Support Communications: Customer support correspondence is retained for three years from the date of the interaction, unless related to an ongoing dispute or regulatory matter.
• Technical and Usage Data: Log files and session data are retained for up to 12 months, after which they are anonymised or deleted.
• Marketing Data: Where you have opted in to marketing communications, we retain your marketing preferences until you opt out or request deletion.

Following the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical purposes.

As a cr444 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact cr444 support via the live chat facility or by email at the address provided in Section 14.

cr444 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the cr444 Platform
• Encryption at rest for sensitive stored data including identity documents and financial records
• Two-factor authentication (2FA) available to all Account holders and mandatory for cr444 administrative access
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need
• Regular penetration testing and security audits of the cr444 Platform infrastructure
• Intrusion detection systems monitoring the Platform for suspicious access patterns in real time
• Staff data protection training covering handling of player personal data

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, cr444 will notify affected players and relevant regulatory authorities in accordance with applicable breach notification obligations.

While cr444 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the security of your Account credentials and for notifying cr444 immediately if you suspect unauthorised access to your Account.

cr444 is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 21. Registration on the cr444 Platform is prohibited for anyone below this age threshold, and cr444 operates mandatory age verification procedures to enforce this restriction.

If cr444 becomes aware that it has inadvertently collected personal data from an individual who is under 21 years of age, we will take immediate steps to delete that data and close the associated Account. Any funds held in an Account subsequently found to belong to an underage individual will be handled in accordance with our regulatory obligations and the provisions set out in our Terms & Conditions.

If you believe that a minor may have registered an Account with cr444, please contact our support team immediately via live chat or at the email address in Section 14.

The cr444 Platform does not include links to external third-party websites for the purpose of outbound navigation. However, to the extent that payment processor interfaces or game provider content is presented within the Platform environment, those third parties operate under their own privacy policies, which cr444 does not control.

cr444 is not responsible for the privacy practices of its payment processors, game suppliers or other service providers. We recommend reviewing the privacy policies of JazzCash, EasyPaisa, HBL, UBL and Meezan Bank if you wish to understand how those providers handle your payment data.

cr444 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations or Platform functionality. Where updates are material, cr444 will provide notice via email to the address registered on your Account or through a prominent notice on the Platform homepage.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the cr444 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

We recommend that you review this Privacy Policy periodically to remain informed about how cr444 protects your personal data. Previous versions of the Privacy Policy may be requested from cr444 support.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how your personal data is being handled by cr444, please contact us via one of the following channels:

• Live Chat: Available 24/7 via the cr444 Platform — click the support icon in the bottom-right corner of any page.
• Email: [email protected] (please include "Privacy Request" in the subject line for data rights requests)

All privacy-related enquiries will be handled by our dedicated data protection team. We aim to respond to all queries within 48 hours, with full resolution of data rights requests within 30 calendar days as outlined in Section 9.