Privacy Policy
x5555 Online Gaming Platform

This Privacy Policy ("Policy") is issued by x5555 ("x5555", "we", "us", or "our") and applies to all personal data collected from individuals ("you", "the Player", or "the User") who access, register on, deposit funds into, or otherwise interact with the x5555 online gaming platform available at x5555.pro.

x5555 operates as an online gaming platform serving players primarily located in Pakistan, including those based in Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, Multan, Peshawar, and Quetta. This Policy governs the collection, use, storage, sharing, and protection of personal data in connection with the provision of x5555's gaming services — including live casino, certified slots, PSL and cricket sports betting, and fishing arcade games.

By registering an account or using any x5555 service, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must not register an account or use the x5555 platform.

This Policy should be read alongside the x5555 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

x5555 collects the following categories of personal data from Players. Collection is limited to what is necessary for the stated purposes described in Section 04 of this Policy.

x5555 does not intentionally collect sensitive personal data beyond what is listed above. We do not collect biometric data, religious affiliation, political opinions, or medical information from Players.

x5555 collects personal data through the following channels and mechanisms:

• Direct Registration: When you create an x5555 account via the x5555 Login page, you directly provide your name, mobile number, email address, date of birth, and preferred password. This data is submitted voluntarily as a condition of account creation.
• KYC Verification Process: During mandatory Know Your Customer (KYC) verification, you upload CNIC images and may submit additional identity or address verification documents. These documents are processed through our secure verification pipeline.
• Payment Transactions: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan, SadaPay, Raast, or USDT TRC20, x5555 receives transaction reference data and account identifiers from the relevant payment processor necessary to complete and record the transaction.
• Platform Usage: x5555 automatically records technical and gaming data as you use the platform — including game rounds played, bets placed, session durations, and device/browser information. This data is generated as a natural consequence of platform interaction.
• Cookies and Tracking Technologies: x5555 uses cookies and similar technologies on the x5555.pro website. See Section 07 for full details of cookies used and your control options.
• Customer Support Interactions: When you contact x5555 via live chat or email, your communications are recorded and associated with your account for support quality, training, and dispute resolution purposes.
• Third-Party Verification Services: x5555 may receive identity verification results from regulated third-party KYC and AML screening providers who cross-reference your submitted data against public and regulatory databases.

x5555 processes personal data for the following specific and legitimate purposes:

• Account Creation and Management: To register your x5555 account, maintain your PKR wallet, verify your identity and age (21+), and manage the ongoing account relationship including password resets and account security.
• Service Delivery: To provide access to live casino, certified slot games, PSL and cricket sports betting, and fishing arcade services — and to process the bets, game rounds, and transactions associated with your gameplay.
• Payment Processing: To process PKR deposits and withdrawals via your chosen Pakistani payment method, to maintain accurate transaction records, and to return funds to verified payment accounts upon withdrawal requests.
• Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML) requirements, including KYC verification, source-of-funds checks, and transaction monitoring. x5555 is legally required to maintain records of player identity and financial activity.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other conduct prohibited under the x5555 Terms & Conditions. Technical data including IP addresses is central to this function.
• Responsible Gaming: To operate responsible gaming tools including deposit limits, session timers, loss limits, and self-exclusion. Gaming data is used to identify potential problem gambling patterns and to fulfil our duty-of-care obligations to Pakistani players.
• Customer Support: To assist you with account queries, payment issues, technical problems, game disputes, and responsible gaming requests through the x5555 support team.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the x5555 platform, optimising game performance, and enhancing the user experience for Pakistani players.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS — but only where you have explicitly opted in to receive such communications. You may opt out at any time.

x5555 processes your personal data on the following legal bases, applied on a purpose-by-purpose basis:

• Contractual Necessity: Processing required to create and maintain your x5555 account, deliver gaming services, and process PKR transactions is carried out on the basis that it is necessary for the performance of the contract between you and x5555.
• Legal Obligation: KYC verification, AML transaction monitoring, age verification (21+), and regulatory record-keeping are carried out because x5555 is legally required to do so under applicable international gaming licensing standards and financial compliance obligations.
• Legitimate Interests: Fraud detection, platform security, responsible gaming monitoring, customer support quality management, and aggregated analytics are processed on the basis of x5555's legitimate interests in operating a safe, secure, and compliant gaming platform — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Marketing communications (email and SMS) are sent only where you have provided clear, specific, and freely given consent. You may withdraw this consent at any time by contacting x5555 support or using the unsubscribe mechanism in any marketing communication.

x5555 shares personal data with third parties only to the extent necessary to deliver our services, meet legal obligations, or protect the security and integrity of the platform. The categories of third parties with whom data may be shared are listed below:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 network providers receive the minimum transaction data necessary to process your deposits and withdrawals. These entities are independent data controllers subject to their own privacy policies.
• KYC & AML Verification Providers: Regulated identity verification and anti-money laundering screening services receive your CNIC data and personal identifiers for the purpose of verifying your identity and screening against applicable watchlists. All such providers are contractually bound to process data only for the stated purpose.
• Game Content Providers: The third-party providers of slot titles, live casino tables, and fishing arcade games integrated into x5555 receive session and game round data necessary to render game outcomes and record results. These providers are subject to regulatory certification requirements.
• Cloud Infrastructure Providers: x5555 uses secure cloud hosting and data storage infrastructure. Providers operating server infrastructure on behalf of x5555 are engaged under data processing agreements that restrict their use of data strictly to infrastructure provision.
• Regulatory and Law Enforcement Authorities: x5555 will disclose personal data to competent legal, regulatory, or law enforcement authorities where required to do so by law, court order, or regulatory instruction. We will notify you of any such disclosure where legally permitted to do so.
• Professional Advisors: Legal counsel, auditors, and compliance consultants may have access to personal data on a strictly need-to-know basis and under professional confidentiality obligations.

In all cases where x5555 shares data with third-party processors, we maintain contractual controls requiring those processors to implement appropriate security measures and to process your data only for the specified purpose and duration.

x5555 uses cookies and similar tracking technologies on the x5555.pro website to ensure the platform functions correctly, to maintain session security, and to understand how Players interact with the site. The following categories of cookies are used:

x5555 does not use third-party advertising cookies or permit advertising networks to place tracking cookies on the x5555.pro domain. You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your x5555 account.

x5555 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable legal or regulatory obligations. The following retention schedule applies:

• Active Account Data: Identity, contact, financial, account, and gaming data is retained for the duration of your active x5555 account relationship, plus a minimum of five years following account closure to satisfy AML record-keeping requirements.
• KYC Documents: CNIC copies and supporting identity verification documents are retained for a minimum of five years following the closure of the associated x5555 account, in accordance with international gaming licensing and financial compliance standards.
• Transaction Records: All deposit, withdrawal, and gaming transaction records are retained for a minimum of five years following the date of the transaction.
• Customer Support Records: Live chat transcripts and email correspondence are retained for a period of three years following the resolution of the relevant support interaction.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for as long as your account is active and for three years following account closure, to demonstrate compliance with consent obligations.
• Technical / Log Data: Server logs and technical access records are retained for a maximum of 12 months, after which they are deleted or anonymised.

Upon the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with x5555's internal data disposal procedures.

x5555 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• Encryption in Transit: All data transmitted between your device and the x5555 platform is encrypted using TLS 1.3. This applies to all account interactions, payment submissions, and KYC document uploads.
• Encryption at Rest: Sensitive personal data — including CNIC information, payment account details, and hashed passwords — is stored in encrypted form in x5555's database infrastructure. Encryption keys are managed under strict access controls.
• Access Controls: Access to personal data within x5555's systems is restricted to authorised personnel on a strict need-to-know basis. Role-based access controls and multi-factor authentication are enforced for all internal system access.
• Password Security: Player passwords are stored as salted cryptographic hashes using industry-standard algorithms. x5555 personnel cannot retrieve your plaintext password. If you forget your password, a secure reset process via your registered Pakistani mobile number is provided.
• Intrusion Detection: x5555's infrastructure is monitored around the clock for anomalous access patterns, attempted intrusions, and data exfiltration attempts.
• Vendor Security Assessments: Third-party processors and infrastructure providers are assessed for security compliance before engagement and are subject to contractual security obligations.

While x5555 applies rigorous security controls, no online platform can guarantee absolute security against all possible threats. In the event of a data security incident that poses a risk to your rights and freedoms, x5555 will notify affected Players and relevant authorities in accordance with our incident response procedures.

As a Player on the x5555 platform, you hold the following rights with respect to your personal data. These rights may be exercised by contacting x5555 support via live chat or by emailing [email protected].

x5555 aims to respond to all privacy rights requests within 30 days of receipt. Where requests are complex or numerous, we may extend this period by up to a further 60 days with written notice. x5555 will not charge a fee for standard requests, though we reserve the right to charge a reasonable administrative fee for manifestly unfounded or repetitive requests.

The x5555 platform is strictly intended for adults aged 21 years and over. x5555 does not knowingly collect personal data from any individual under the age of 21.

x5555 employs mandatory age verification as part of the KYC process, requiring submission of a valid CNIC which confirms the Player's date of birth. Where x5555 discovers or reasonably suspects that an account has been registered by or on behalf of a person under the age of 21, the following steps will be taken immediately:

• The account will be suspended pending investigation.
• All funds in the account will be frozen and returned to the originating payment method after verification.
• All personal data associated with the underage account will be securely deleted following the resolution of any legal or regulatory obligations arising from the incident.
• The incident will be reported to relevant licensing and regulatory authorities as required.

x5555 operates under international gaming licensing standards and may use cloud infrastructure, game content providers, or KYC verification services whose servers are located outside of Pakistan. Where personal data is transferred to countries that may not offer the same level of data protection as Pakistan, x5555 ensures that appropriate safeguards are in place, including:

• Standard Contractual Clauses: Data processing agreements incorporating standardised contractual protections requiring the recipient to handle data in accordance with applicable privacy standards.
• Adequacy Assessments: Prior to transferring data to any new third-party processor located outside Pakistan, x5555 conducts a data transfer impact assessment to evaluate the legal framework and data protection standards of the recipient jurisdiction.
• Encryption: All data transferred internationally is encrypted in transit using TLS 1.3, ensuring that data cannot be intercepted or read during transmission regardless of the jurisdiction through which it passes.

By using the x5555 platform and submitting your personal data, you acknowledge that your data may be transferred to and stored in jurisdictions outside Pakistan for the purposes described in this Policy. x5555 takes all reasonable steps to ensure that such transfers are lawful and that your data remains protected to the same standard as described herein.

x5555 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. The version number and "Last Updated" date at the top of this Policy will be updated whenever a material change is made.

Where changes are material — meaning they significantly affect your rights or how your data is used — x5555 will notify registered Players via email or an in-platform notification at least 14 days before the amended Policy takes effect. Continued use of the x5555 platform after the effective date of an amended Privacy Policy constitutes acceptance of the revised terms.

If you do not accept a material change to this Privacy Policy, you may close your x5555 account before the effective date by contacting our support team. Account closure requests will be processed in accordance with the x5555 Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or x5555's handling of your personal data, you may contact our Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the x5555 platform. This is the fastest way to reach our support team for urgent privacy matters.
• Email: [email protected] — Please include "Privacy Request" in your subject line and your registered x5555 username to help us locate your account promptly.
• Response Time: x5555 acknowledges all privacy-related contact within 3 business days and aims to resolve standard requests within 30 days.

When submitting a privacy rights request, please provide your registered email address, your x5555 username, and a description of your request. We may need to verify your identity before processing certain requests — particularly access, erasure, or portability requests — to ensure we do not disclose or delete data belonging to the wrong person.