xx5555 Privacy Policy — How We Handle Your Personal Data

1 Introduction

This Privacy Policy describes how xx5555 ("xx5555", "we", "us", "the Platform") collects, uses, stores, shares, and protects the personal information of individuals ("you", "Player", "User") who register for an account, make deposits, place bets, or otherwise interact with the xx5555 platform at xx5555.biz.

At xx5555, we take the privacy of our Pakistani players seriously. We collect only the data we genuinely need, we protect it with industry-standard security measures, and we give you meaningful control over your own information. This policy is designed to be readable — not a document full of legal language that obscures what's actually happening with your data.

By registering an account on xx5555, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside our Terms and Conditions, which govern the overall use of the xx5555 platform.

2 Who We Are — The Data Controller

For the purposes of data protection, xx5555 is the data controller responsible for your personal information collected through the xx5555.biz platform. As the data controller, xx5555 determines the purposes for which your personal data is processed and the manner in which it is processed.

xx5555 is a digital gaming platform operated specifically for the Pakistani market. Our operations are focused entirely on providing online casino, live dealer, crash games, sports betting, and related gaming services to players based in Pakistan. All financial transactions on the platform are conducted in Pakistani Rupees (PKR).

If you have any questions about how xx5555 handles your personal data, or if you wish to exercise any of the rights described in this policy, you can contact us at any time via:

• Live Chat: Available 24/7 from the xx5555 website — responses in Urdu and English
• Email: support@xx5555.biz — formal data requests and complaints are acknowledged within 48 hours

3 Personal Data We Collect

xx5555 collects personal data in three ways: information you provide directly when registering and using the platform, information collected automatically during your use of the platform, and information received from third-party verification and payment services. The specific categories of data collected are described below.

Data You Provide Directly

• Full legal name (as it appears on your CNIC or passport)
• Date of birth (for age verification)
• Mobile number registered to your account
• Email address
• Identity documents submitted for KYC verification (CNIC front and back, selfie with CNIC, or passport)
• Payment account details — Easypaisa number, JazzCash number, NayaPay/SadaPay account reference, bank account details for IBFT, or card details for Visa/Mastercard transactions
• Communications you send to xx5555 support, including chat transcripts and email correspondence

Data Collected Automatically

• IP address and approximate geographic location derived from IP
• Device information — device type, operating system version, browser type and version
• Session data — login times, session duration, pages visited within the xx5555 platform
• Gameplay data — games played, bet amounts, win/loss records, betting patterns
• Technical logs — error reports, crash logs, and platform performance data tied to your session
• Cookie and local storage data (described further in Section 7)

Data Received From Third Parties

• Identity verification results from KYC service providers (pass/fail status and document authenticity confirmation)
• Transaction confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay, and banking payment processors
• Fraud screening results from anti-fraud and anti-money laundering service providers

4 How xx5555 Uses Your Personal Data

The personal data xx5555 collects is used exclusively for the following defined purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent.

xx5555 does not use automated decision-making — including profiling — to make decisions that produce significant legal or financial effects on individual players without human review. Account restrictions and suspension decisions are reviewed by a member of the xx5555 team before being enacted.

5 Legal Basis for Processing

xx5555 processes personal data on the following legal grounds, depending on the specific processing activity involved:

• Contract performance: Processing necessary to deliver the gaming services you signed up for — account management, game access, payment processing, and customer support.
• Legal obligation: Processing required for compliance with applicable laws — age verification (KYC), anti-money laundering (AML) checks, and transaction record-keeping obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and anonymised platform analytics — where our legitimate interest is balanced against your privacy rights.
• Consent: Processing for marketing communications — SMS, push notifications, and promotional emails. You can withdraw this consent at any time without affecting your ability to use the xx5555 platform.

6 Sharing Your Personal Data

xx5555 does not sell, rent, or trade your personal data to any third party for their own independent use. We share your data only in the following specific, controlled circumstances:

• Payment processors: Your payment account details are shared with Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners solely for the purpose of processing your deposits and withdrawals. These processors operate under their own data protection policies and are contractually prohibited from using your data for any purpose beyond the transaction itself.
• KYC and identity verification providers: Your identity documents are shared with third-party KYC verification services to confirm your age and identity. These services return a verification outcome to xx5555 — your documents are not retained by them beyond the verification process.
• Anti-fraud and AML services: Transaction data and account information may be shared with fraud screening and anti-money laundering services as required by applicable regulations. This is a legal obligation for any platform handling financial transactions.
• Game software providers: When you play a game on xx5555, limited session data (a pseudonymous player ID and bet data) is transmitted to the game provider to enable gameplay. Game providers do not receive your name, contact details, or payment information.
• Regulatory and law enforcement authorities: xx5555 will disclose personal data to regulatory bodies or law enforcement agencies when legally required to do so — for example, in response to a valid legal order or in connection with a financial crime investigation.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the xx5555 business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance if such a transfer would materially affect your privacy rights.

7 Cookies & Tracking Technologies

xx5555 uses cookies and similar local storage technologies to operate the platform, remember your preferences, maintain your login session, and understand how the platform is being used. The categories of cookies used by xx5555 are described below.

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that help protect your account. You cannot opt out of essential cookies while using the platform.
• Preference cookies: Remember settings you have chosen — such as your preferred language, interface layout, or table stakes preferences — so you don't need to reset them each visit.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the xx5555 platform — which pages are visited most, how long sessions last, which games are most popular. This data is used to improve the platform experience and is not tied to individual identifiable players.
• Performance cookies: Monitor platform speed, error rates, and game loading performance to help our technical team identify and resolve issues quickly.

xx5555 does not use third-party advertising cookies or social media tracking pixels. Your browsing behaviour on xx5555 is not shared with external advertising platforms.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of some parts of the xx5555 platform — particularly session management features.

8 Data Security — How xx5555 Protects Your Information

xx5555 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. Our security infrastructure includes:

• TLS/SSL encryption (256-bit): All data transmitted between your device and the xx5555 platform is encrypted using industry-standard TLS encryption. This applies to every page, every login, and every payment transaction — not just the payment step.
• Encrypted data storage: Sensitive personal data — including identity documents and payment details — is stored in encrypted form. Encryption keys are managed separately from the encrypted data itself.
• Access controls: Internal access to personal player data is strictly limited to xx5555 staff members who require it for their specific operational role. Access is logged and periodically audited.
• Two-factor authentication options: xx5555 supports optional two-factor authentication (2FA) for player account logins — available via SMS to your registered Pakistani mobile number. We strongly recommend enabling 2FA.
• Regular security audits: The xx5555 platform undergoes periodic third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures: xx5555 maintains documented data breach response procedures. In the event of a breach affecting your personal data, we will notify affected players within 72 hours of becoming aware of the incident.

9 Data Retention — How Long We Keep Your Information

xx5555 retains personal data only for as long as it is needed for the purpose it was collected, or as long as required by applicable law. The retention periods for the main categories of personal data are as follows:

• Account registration data (name, contact details, date of birth): Retained for the duration of your account plus a minimum of five years after account closure, as required for AML record-keeping obligations.
• Identity verification documents (CNIC, passport, selfie): Retained for five years after completion of the KYC process, in compliance with financial sector regulatory requirements applicable to gaming platforms.
• Payment transaction records: Retained for a minimum of five years from the date of each transaction, as required by financial record-keeping regulations.
• Gameplay records: Retained for three years from the date of each session. Aggregated, anonymised gameplay analytics may be retained indefinitely.
• Customer support communications: Retained for three years from the date of the last communication, to support dispute resolution and quality assurance.
• Marketing consent records: Retained for three years from the date consent was given or withdrawn, to demonstrate compliance with marketing communication rules.

When personal data is no longer required within these retention windows, it is securely deleted or irreversibly anonymised. Deletion requests submitted by players are processed within 30 days, except where retention is required by law — in which case you will be informed of the specific legal basis for continued retention.

10 Your Rights Over Your Personal Data

As a player on xx5555, you have the following rights regarding the personal data we hold about you. These rights can be exercised at any time by contacting xx5555 support via live chat or email at support@xx5555.biz.

• Right of access: You can request a copy of all personal data xx5555 holds about you. We will provide this within 30 days of a verified request, free of charge for the first request in any 12-month period.
• Right to correction: If any personal data we hold about you is inaccurate or out of date, you have the right to request that it be corrected. For account details, many fields can be updated directly in your account settings.
• Right to erasure ("right to be forgotten"): You can request that xx5555 delete your personal data. We will action this request where no legal retention obligation applies. Where some data must be retained by law, we will explain which data and on what basis.
• Right to restrict processing: You can request that xx5555 limit how your data is used — for example, if you are disputing the accuracy of data we hold while a correction is being processed.
• Right to data portability: You can request that xx5555 provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service if you wish.
• Right to object to marketing: You can withdraw consent for marketing communications at any time — via account settings, by using the unsubscribe link in any xx5555 marketing email, or by contacting support directly.
• Right to human review: If xx5555 takes an automated decision that significantly affects you, you have the right to request that a human member of the team reviews that decision.

11 Children's Privacy

The xx5555 platform is strictly for users aged 18 years and above. xx5555 does not knowingly collect, store, or process personal data from individuals under the age of 18. If we discover or are informed that an account holder is under 18, we will immediately close the account, delete all associated personal data, and handle any deposits in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that a minor under your care has registered on xx5555, please contact our support team immediately at support@xx5555.biz. We will treat all such reports as a priority and take action within 24 hours of a confirmed minor account being identified.

xx5555 employs age gate mechanisms at registration and carries out identity document verification to prevent underage access. We take our responsibility to protect minors from gambling platforms seriously and do not accept "I didn't know they were underage" as an adequate excuse for allowing a minor to use a gaming platform account.

12 Third-Party Links & Services

The xx5555 platform may contain links or references to third-party services — for example, game providers, payment processors, or responsible gaming support organisations. When you click through to a third-party website or service, that site operates under its own privacy policy and data practices, which are entirely separate from this policy.

xx5555 is not responsible for the privacy practices of third-party platforms and cannot control how they collect or use your information. We recommend reviewing the privacy policy of any third-party service before providing them with personal data.

Where xx5555 shares data with third parties (as described in Section 6), those parties are bound by data processing agreements that restrict how they may use your information — limited strictly to the purpose for which the data was shared.

13 Changes to This Privacy Policy

xx5555 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will:

• Update the "Last Updated" date shown at the top of this page
• Notify registered players via SMS to their registered Pakistani mobile number and/or via the email address on their account
• Display a prominent notice within the xx5555 platform for a period following the update

Minor clarifications that do not materially alter your rights or our data practices may be made without individual notification. The version of this policy published at xx5555.biz/privacy-policy is always the current operative version. Continued use of the xx5555 platform after a notified update constitutes acceptance of the revised policy. If you disagree with any material change, you should stop using the platform and contact us to request account closure and any applicable balance withdrawal.

14 Contact Us & Complaints

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a complaint about how xx5555 has handled your personal data, please contact us through either of the following channels:

• Live Chat: Available 24/7 from the xx5555 website. Responses in Urdu and English. Routine privacy queries are resolved within minutes.
• Email: support@xx5555.biz — formal data rights requests and complaints receive a written acknowledgement within 48 hours and a substantive response within 30 days.

When submitting a data rights request, please include your registered xx5555 mobile number or email address so we can verify your identity before actioning the request. This verification step protects you from someone else submitting requests on your behalf without your knowledge.

xx5555 takes data privacy complaints seriously. If you submit a formal complaint and are not satisfied with the resolution provided, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction.

For responsible gaming concerns specifically — including self-exclusion requests, limits, and problem gambling support — please visit our dedicated Responsible Gaming page.