Privacy Policy — How x5555 Collects, Uses & Safeguards Your Personal Data

01 Introduction

This Privacy Policy ("Policy") is issued by x5555 ("we", "us", "our", or "the Platform") and applies to all personal data collected from users ("you", "your") who access, register on, or interact with the x5555 online casino and sports betting platform — including through the x5555 website, mobile application, and any related customer service channels.

x5555 is committed to processing personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. We only collect the data we genuinely need, we keep it only for as long as is necessary, and we never sell it to third-party advertisers.

This Policy should be read alongside our Terms & Conditions, which form part of the overall agreement governing your relationship with x5555. By registering an account with x5555, you confirm that you have read, understood, and accept the practices described in this Policy.

02 Data Controller

For the purposes of applicable data protection legislation, x5555 acts as the data controller — meaning x5555 determines the purposes and means by which your personal data is processed. All requests relating to your personal data should be directed to x5555 using the contact details set out in Section 14 of this Policy.

In certain circumstances, x5555 engages third-party service providers who process personal data on our behalf as data processors. These relationships are governed by formal data processing agreements that obligate processors to handle your data only as directed by x5555 and in accordance with applicable data protection standards.

03 Data We Collect

x5555 collects personal data across several categories depending on the nature of your interaction with the Platform. The table below provides a clear breakdown of the categories of data we collect and examples of the specific data points within each category.

04 How We Collect Your Data

x5555 collects personal data through the following channels:

4.1 Direct Interactions

The majority of your personal data is collected directly from you when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or update your account profile. You provide this data knowingly and voluntarily as part of using the Platform.

4.2 Automated Technologies

When you browse or use the x5555 Platform, certain technical data is collected automatically through cookies, web beacons, server logs, and similar technologies. This includes your IP address, device identifiers, session duration, pages visited, and in-game interaction patterns. See Section 10 for our full Cookie Policy.

4.3 Third-Party Sources

In certain circumstances, x5555 may receive personal data about you from third-party sources including: KYC and identity verification providers (who confirm the authenticity of documents you submit); fraud prevention databases; and payment processors (who confirm transaction statuses). We only use data received from third parties in conjunction with data you have already provided to us.

05 How We Use Your Data

x5555 processes your personal data only for specific, legitimate purposes. We will never use your data for purposes incompatible with those listed below:

• Account creation and management — to register your account, verify your identity, and maintain your account throughout its lifecycle.
• Transaction processing — to process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Allied Bank, and SadaPay, and to process withdrawal requests to your verified payment methods.
• KYC and AML compliance — to fulfil our legal obligations under international anti-money laundering regulations and licensing conditions, including document verification and transaction monitoring.
• Responsible gaming monitoring — to identify potentially harmful gambling behaviour patterns, apply self-imposed limits you request, and enforce mandatory cooling-off or self-exclusion periods.
• Customer support — to respond to your queries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
• Platform security and fraud prevention — to detect and prevent unauthorised access, account takeover attempts, bonus abuse, collusion, and other fraudulent or prohibited activity.
• Platform improvement — to analyse aggregated usage data and improve the overall quality, performance, and features of the x5555 Platform.
• Marketing communications — to send you relevant promotional offers, PSL season campaigns, and bonus notifications, but only where you have given explicit consent to receive such communications. You may withdraw consent at any time.
• Legal compliance and regulatory reporting — to fulfil any legal obligations imposed on x5555 by its licensing authority, including the production of audit trails and submission of regulatory reports.

06 Legal Basis for Processing

x5555 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

6.1 Contractual Necessity

Processing that is necessary to provide the services you have contracted with x5555 for — including account registration, transaction processing, and game access — is carried out on the basis of contractual necessity. Without this processing, x5555 cannot provide the Platform services to you.

6.2 Legal Obligation

Certain processing activities — including KYC identity verification, AML transaction monitoring, and the retention of financial records — are carried out because x5555 is legally required to do so under the terms of its international gaming licence and applicable financial regulations.

6.3 Legitimate Interests

x5555 processes certain categories of technical and gameplay data on the basis of our legitimate interests in operating a secure, fair, and commercially viable gaming platform. This includes fraud detection, security monitoring, and Platform analytics. We have assessed that these legitimate interests are not overridden by your fundamental privacy rights.

6.4 Consent

Where x5555 processes data for marketing communications or uses non-essential cookies, we do so on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

07 Data Sharing & Third Parties

x5555 does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing agencies under any circumstances. Your data is only shared in the specific, limited circumstances described below:

7.1 Payment Processors

To process your PKR deposits and withdrawals, x5555 shares the minimum necessary financial data with our regulated payment processing partners, including JazzCash, EasyPaisa, and banking partners (HBL, UBL, Allied Bank). These partners are independently regulated and are contractually prohibited from using your data for any purpose other than transaction processing.

7.2 KYC and Identity Verification Providers

x5555 uses third-party identity verification services to validate the CNIC documents and selfies you submit during account verification. These providers process your verification data solely for the purpose of confirming document authenticity and returning a pass/fail result to x5555.

7.3 Licensing and Regulatory Authorities

As a condition of operating under our international gaming licence, x5555 may be required to disclose account data, transaction records, and gameplay history to the relevant licensing authority upon formal request. Such disclosures are mandatory and non-negotiable under our licensing obligations.

7.4 Legal and Law Enforcement Requests

x5555 will disclose personal data to law enforcement agencies, courts, or other governmental authorities where required by a valid legal order, warrant, or other compulsory legal process. In such cases, x5555 will disclose only the minimum data required to comply with the legal obligation.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of x5555's assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified prior to any such transfer via a prominent notice on the Platform.

08 Data Retention

x5555 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Account and identity data — retained for the duration of your active account plus five (5) years following account closure, in compliance with AML record-keeping requirements.
• Financial transaction data — retained for a minimum of five (5) years from the date of the transaction, as required by international financial regulations.
• KYC verification documents — retained for the duration of your active account plus five (5) years post-closure.
• Gameplay and betting records — retained for three (3) years from the date of the session or bet, or longer if required for an active dispute or investigation.
• Customer support communications — retained for two (2) years from the date of the interaction.
• Marketing consent records — retained for the duration of your account or until consent is withdrawn, whichever is earlier.
• Technical logs and IP data — retained for twelve (12) months from the date of collection, subject to security investigation requirements.

Upon expiry of the applicable retention period, x5555 will securely delete or anonymise your personal data so that it can no longer be associated with your identity.

09 Data Security

x5555 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following measures:

• Encryption in transit — all data transmitted between your device and x5555's servers is protected using industry-standard TLS 1.2 or higher encryption protocols.
• Encryption at rest — sensitive personal data and financial records stored on x5555's servers are encrypted at rest using AES-256 encryption.
• Access controls — access to personal data is strictly limited to x5555 personnel who require it for their specific job function. All staff access is governed by role-based access control policies and is logged for audit purposes.
• Two-factor authentication — x5555 offers and encourages the use of two-factor authentication (2FA) on all player accounts to prevent unauthorised access.
• Regular security assessments — x5555's systems are subject to regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response — x5555 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, you will be notified within 72 hours of x5555 becoming aware of the breach, where required by applicable law.

10 Cookies & Tracking Technologies

x5555 uses cookies and similar tracking technologies to operate the Platform effectively, improve user experience, and where you have consented, to deliver relevant promotional content. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly and cannot be switched off. They enable core functionality such as user authentication, session management, fraud detection, and load balancing. No consent is required for these cookies as they are necessary to deliver the service you have requested.

10.2 Performance and Analytics Cookies

These cookies collect anonymised information about how users navigate the Platform — which pages are visited most frequently, where users encounter errors, and how long sessions last. This data is used in aggregate form to improve Platform performance and is not linked to individual user profiles without consent.

10.3 Functional Cookies

Functional cookies remember your preferences such as language settings, preferred display options, and previously selected filters within the game lobby. Disabling these cookies may result in a reduced or less personalised experience on the Platform.

10.4 Managing Cookies

You can manage your cookie preferences through the cookie settings panel available in your x5555 account settings, or through your browser's built-in cookie management tools. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing certain features.

11 Your Data Protection Rights

As an x5555 account holder, you hold the following rights in respect of your personal data. x5555 will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case you will be informed of the extension and the reason for it.