CXWelcome Privacy Policy – How We Handle Your Personal Data in Pakistan

CXWelcome ("we", "us", "our") operates the online gaming platform available at cxwelcome.bid. We are the data controller responsible for the personal information collected through this platform. This Privacy Policy applies to all registered players, visitors to cxwelcome.bid and anyone who interacts with CXWelcome through our platform, customer support channels or promotional communications.

CXWelcome is built specifically for Pakistani players. We understand the importance of data privacy in the Pakistani digital context and take our obligations seriously. If you have any questions about this Privacy Policy or how CXWelcome handles your personal data, please contact our support team — details are provided in Section 13.

CXWelcome collects only the personal data that is necessary to operate your account, process payments and comply with applicable legal and regulatory requirements. We do not collect data speculatively or beyond what serves a clear and necessary purpose.

We do not collect sensitive categories of personal data such as religious beliefs, ethnicity or political opinions. We do not store full payment card numbers — only masked identifiers are retained after a transaction is processed.

CXWelcome collects personal data through the following means:

• Registration: When you create a CXWelcome account, you directly provide your name, date of birth, mobile number and email address.
• Identity Verification: When CXWelcome requests verification, you may submit a copy of your CNIC or other government-issued identification. This is transmitted securely and stored only for as long as required.
• Deposits and Withdrawals: When you make a payment transaction, relevant payment method details are passed through our payment processor partners. CXWelcome does not directly handle or store raw payment credentials.
• Platform Usage: Technical data including your IP address, device information and session activity is collected automatically when you access cxwelcome.bid. This happens through standard web server logging and first-party cookies.
• Customer Support: When you contact CXWelcome support via live chat or email, the content of your communication is retained to allow us to resolve your issue and maintain a service history.
• Referral Programme: If a friend refers you to CXWelcome, we receive only the information necessary to attribute the referral — no additional personal data about you is passed to the referring player.

CXWelcome uses personal data only for the following purposes. Each purpose has a defined legal basis, which is described in Section 5.

• Account management: To create, maintain and secure your CXWelcome player account, including login authentication and account recovery.
• Payment processing: To facilitate deposits and withdrawals in PKR through Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT and card payments.
• Identity verification: To verify your age and identity in accordance with our Terms and Conditions and any applicable legal requirements before processing large withdrawals or activating certain features.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, account takeover attempts and other misuse of the CXWelcome platform.
• Responsible gaming: To monitor gaming patterns for signs of problem gambling behaviour and to administer self-exclusion, deposit limit and cooling-off requests.
• Customer support: To respond to your queries, resolve disputes and maintain a service history.
• Platform improvement: Aggregated, anonymised technical and behavioural data is used to improve CXWelcome's interface, game loading performance and overall user experience.
• Marketing communications: Where you have opted in, to send you relevant promotional offers from CXWelcome. You can opt out of marketing communications at any time by contacting support.
• Legal compliance: To meet obligations under applicable law and to respond to requests from regulators or law enforcement authorities.

CXWelcome processes your personal data on the following legal bases depending on the purpose:

• Contractual necessity: Processing that is required to fulfil our obligations to you as a registered player — including account management, payment processing and customer support.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring and platform performance improvement, where these interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including identity verification and co-operation with law enforcement where required by law.
• Consent: Processing for optional marketing communications, where you have actively opted in. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.

CXWelcome does not sell your personal data to any third party. We do not share your information with advertisers or data brokers. We share personal data only in the following limited circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT partners and card processing networks receive the minimum payment information required to complete your deposit or withdrawal transaction. These providers operate under their own privacy policies and security standards.
• Identity verification providers: When identity verification is required, a third-party verification service processes the documents you submit. These providers are contractually bound to use your data only for the verification purpose and to maintain appropriate security standards.
• Game providers: Third-party game providers whose titles are hosted on CXWelcome may receive a player identifier and session token necessary to authenticate your game session. Game providers do not receive your name, payment details or contact information.
• Regulatory and law enforcement authorities: CXWelcome will disclose personal data to government bodies, regulators or law enforcement agencies where required by applicable law or in response to a lawful request. We will not notify you of such disclosures where doing so would be unlawful.
• Service providers: Companies that provide technical services to CXWelcome — such as cloud hosting, email delivery and analytics platforms — may process personal data on our behalf. These providers are governed by data processing agreements that restrict their use of your information to the services they perform for CXWelcome.

CXWelcome uses cookies and similar technologies on cxwelcome.bid. Cookies are small text files stored on your device that help the platform function correctly, remember your preferences and understand how the platform is used. We use the following types of cookies:

• Strictly necessary cookies: Required for the platform to function. These enable login sessions, security tokens and basic platform features. They cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences such as language selection and game display settings to provide a more personalised experience on subsequent visits to CXWelcome.
• Analytics cookies: Collect anonymised data about how players use cxwelcome.bid — which pages are visited, how long sessions last and where players navigate within the platform. This data is used to improve the user experience and does not identify you personally.

CXWelcome does not use third-party advertising or tracking cookies. You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may affect the functionality of your CXWelcome account. For most players, the default cookie settings provide the best platform experience.

CXWelcome takes data security seriously and implements a range of technical and organisational measures to protect your personal information:

• SSL/TLS encryption: All data transmitted between your device and cxwelcome.bid is encrypted using industry-standard SSL/TLS protocols. This applies to login, deposits, withdrawals and all account interactions.
• Encrypted data storage: Sensitive personal data — including payment identifiers and identity documents — is stored in encrypted form. Encryption keys are managed separately from the data they protect.
• Access controls: Personal data is accessible only to CXWelcome staff who need it to perform their job functions. Access is role-based and logged. Former employees have access immediately revoked upon departure.
• Fraud monitoring: Automated and manual monitoring systems scan for unusual account activity, unauthorised access attempts and suspicious transaction patterns.
• Incident response: CXWelcome maintains an incident response plan for potential data breaches. In the event of a breach that creates risk to players, we will notify affected individuals promptly in accordance with applicable requirements.

While CXWelcome implements robust security measures, no online platform can guarantee absolute security. Players can help protect their accounts by using a strong, unique password and not sharing login credentials with anyone.

CXWelcome retains your personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the lifetime of your CXWelcome account and for a period of up to five years following account closure, to meet legal and regulatory record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years following the date of the transaction in accordance with standard financial record-keeping requirements.
• Identity verification documents: Retained for up to five years following account closure or the completion of the verification process, whichever is later.
• Customer support records: Retained for up to three years following the resolution of the support interaction.
• Marketing consent records: Retained until you withdraw consent or for up to three years from the date of consent, whichever comes first.

When personal data is no longer required, CXWelcome securely deletes or anonymises it so that it can no longer be linked to an individual player.

As a CXWelcome player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at support@cxwelcome.bid. We will respond to all requests within 30 days.