555x Privacy Policy – How We Protect Your Data in Pakistan

1. Introduction & Scope

This Privacy Policy ("Policy") describes how 555x ("555x", "we", "us", "our") collects, processes, stores, and protects personal information relating to individuals who register for and use the 555x online betting and gaming platform accessible at 555x.wine ("Platform"). It applies to all players, visitors, and anyone who interacts with 555x through any channel including the website, any mobile application, live chat, email, and customer support.

When we say "personal data" or "personal information" in this Policy, we mean any information that identifies you or that could reasonably be used to identify you — your name, CNIC number, phone number, email address, payment details, IP address, and so on. Information that has been fully anonymised so that no individual can be identified from it is not personal data and does not fall under this Policy.

By creating a 555x account or using the Platform in any way, you acknowledge that you have read this Policy and understand how 555x handles your personal data. This Policy should be read alongside our Terms and Conditions, which form the wider agreement governing your use of 555x.

2. Data We Collect

555x collects personal data in three main ways: information you provide directly, information generated automatically by your use of the Platform, and information received from third-party sources such as payment processors and identity verification services.

2.1 Information You Provide Directly

2.2 Data Collected Automatically

• Device & Technical Data: IP address, device type, operating system, browser type and version, device identifiers, screen resolution, and time zone setting.
• Usage Data: Pages visited, features used, betting and gaming activity including markets wagered, bet amounts, session duration, and win/loss records.
• Location Data: Country and city-level location inferred from IP address. 555x does not collect precise GPS location data.
• Cookie Data: Information stored via cookies and similar tracking technologies as described in Section 6 of this Policy.

2.3 Data From Third Parties

555x may receive personal data about you from third-party service providers including: payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, and banking networks) who confirm transaction details; identity verification services that validate CNIC and document authenticity; fraud prevention services that flag suspicious account or transaction patterns; and advertising platforms where you have clicked a 555x advertisement (limited to click attribution data only — no browsing history).

3. How We Use Your Data

555x uses personal data collected from players for clearly defined purposes. We do not use your data for purposes that are incompatible with the reasons it was collected. The primary purposes are:

• Account Management: Creating and administering your 555x account, verifying your identity, processing deposits and withdrawals in PKR, and maintaining accurate account records.
• Service Delivery: Providing access to betting markets, casino games, promotions, and customer support. Processing your bets, calculating winnings, and crediting your account correctly.
• Security and Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions. Protecting 555x and its players from financial crime.
• Legal and Regulatory Compliance: Meeting obligations under applicable financial crime regulations including Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements. Retaining transaction records as required by law.
• Responsible Gaming: Monitoring gaming patterns to identify players who may be showing signs of problem gambling and facilitating the use of responsible gaming tools including deposit limits and self-exclusion.
• Platform Improvement: Analysing aggregate, anonymised usage data to improve the performance, usability, and content of the 555x Platform.
• Communications: Sending you transaction confirmations, important account notifications, and — where you have opted in — promotional communications about offers and new features on 555x. You can opt out of marketing communications at any time.

4. Legal Basis for Processing

555x processes your personal data on the following legal bases, which vary depending on the nature and purpose of the processing activity:

• Contract Performance: Processing that is necessary to fulfil the agreement between you and 555x — including creating your account, processing bets, handling deposits and withdrawals, and providing customer support.
• Legal Obligation: Processing required for 555x to comply with applicable laws and regulations, particularly financial crime prevention obligations (AML/KYC), tax reporting, and regulatory record-keeping requirements.
• Legitimate Interests: Processing that serves the legitimate interests of 555x or third parties — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your privacy rights. 555x carries out balancing tests when relying on this basis.
• Consent: Where you have provided explicit, informed consent for a specific processing activity — most commonly for receiving marketing communications. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing & Third Parties

555x does not sell, rent, or commercially share your personal data with third parties. Data is shared with external parties only in the limited circumstances described below, and always with appropriate contractual safeguards in place.

• Payment Service Providers: To process deposits and withdrawals in PKR, 555x shares necessary transaction data with Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking networks, and Visa/Mastercard processing networks. These providers are contractually bound to use your data only for payment processing purposes.
• Identity Verification Services: To complete KYC verification, 555x may share document images and identity data with certified third-party verification providers. All such providers are bound by strict data processing agreements.
• Fraud Prevention Networks: 555x participates in industry-standard fraud prevention networks. Where suspicious activity is detected on an account, relevant data points may be shared with these networks to protect all parties. This does not include sharing your full personal profile.
• Game and Technology Suppliers: For live dealer games and certain casino products, your gaming session data is processed by the game software supplier's servers. These suppliers are bound by contractual data protection obligations.
• Legal and Regulatory Authorities: Where required by law, court order, or regulatory instruction, 555x will disclose relevant personal data to law enforcement agencies or regulatory bodies. 555x will notify you of such disclosures wherever legally permitted to do so.
• Business Transfers: If 555x undergoes a merger, acquisition, or asset sale, your personal data may be transferred to the acquiring entity as part of that transaction. You would be notified of any such transfer and the privacy terms applicable under the new entity.

6. Cookies & Tracking Technologies

555x uses cookies and similar tracking technologies on the Platform to provide essential functionality, improve performance, and understand how players use the site. Here is a straightforward breakdown of the types of cookies we use:

You can manage your cookie preferences through the cookie settings banner displayed when you first visit the 555x Platform, or through your browser settings. Note that disabling essential cookies will prevent core Platform functions from working correctly.

7. Data Security

Protecting your personal data is a technical and organisational priority at 555x. The following measures are implemented and maintained to keep your data secure:

• Encryption in Transit: All communication between your device and 555x servers is encrypted using TLS (Transport Layer Security) — the same standard used by online banks.
• Encryption at Rest: Sensitive stored data including financial records and identity documents is encrypted using AES-256 at the database level.
• Access Controls: Only authorised 555x staff with a specific operational need can access personal data. Access is logged and audited. Staff with access to sensitive data undergo background checks.
• Infrastructure Security: 555x servers are hosted in secure, access-controlled data centres. Regular security assessments and penetration testing are conducted against the Platform's infrastructure.
• Incident Response: 555x maintains a documented data breach response plan. In the event of a security incident affecting personal data, the plan is activated immediately and affected players are notified as described in Section 9.

Whilst 555x takes all reasonable technical and organisational precautions, no online platform can guarantee absolute security. You can help protect your own account by using a strong unique password, not sharing your login credentials, and enabling any two-factor authentication options offered on your 555x account.

8. Data Retention

555x retains personal data only for as long as it is necessary for the purpose it was collected, or as required by applicable regulatory and legal obligations. The following general retention periods apply:

• Active Account Data: Personal data associated with an active 555x account is retained for the lifetime of the account plus a statutory period following closure (typically 5–7 years depending on the data category and applicable regulations).
• Transaction Records: Financial transaction records including deposits, withdrawals, and bet history are retained for a minimum of 5 years following the transaction date for AML compliance and audit purposes.
• KYC / Identity Documents: Identity verification documents are retained for the period required by applicable financial crime regulations — typically 5 years from account closure.
• Customer Support Records: Live chat transcripts and email correspondence are retained for 2 years from the date of the interaction, or longer where the matter is subject to an ongoing dispute or investigation.
• Marketing Opt-In Records: Records of your consent to receive marketing communications are retained for the duration of your consent plus 2 years, to demonstrate compliance.

When data reaches the end of its retention period, it is securely deleted or anonymised. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

9. Your Privacy Rights

As a 555x player you have the following rights in relation to the personal data we hold about you. These rights can be exercised at no charge by contacting 555x support through the channels described in Section 13.

10. Children's Privacy

555x is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Age verification is conducted at registration and as part of the KYC process.

If 555x becomes aware that an account has been registered by or on behalf of a minor, the account will be immediately suspended, all funds will be frozen pending investigation, and personal data associated with the account will be deleted except where retention is required for legal or fraud prevention purposes. Parents and guardians who are concerned about a minor's access to 555x should use parental control software on shared devices and contact us if they have any specific concerns.

11. International Data Transfers

555x's primary operations and data infrastructure are focused on serving Pakistani players, and we aim to keep personal data within appropriate jurisdictions wherever possible. However, some of our third-party service providers — including certain game software suppliers and fraud prevention services — may process data outside Pakistan.

Where personal data is transferred internationally, 555x ensures that appropriate safeguards are in place to protect your data to at least the standard described in this Policy. These safeguards include contractual data processing agreements that impose data protection obligations equivalent to those we apply ourselves, and technical measures such as encryption to protect data in transit across borders.

If you would like specific information about a particular international data transfer, you can request this through the contact channels described in Section 13.

12. Changes to This Privacy Policy

555x may update this Privacy Policy from time to time to reflect changes in our data practices, new product features, or updates to applicable laws and regulations. When we make material changes — meaning changes that meaningfully affect your rights or how we handle your data — we will notify you at least 14 days before the changes take effect by email to your registered address and/or through a prominent notice on the Platform.

For minor, non-material updates such as clarifications of existing practice, we may update the Policy immediately with the revised effective date shown at the top. The current effective date and version number are always displayed at the top of this page. Continued use of 555x after updated Policy terms come into effect constitutes acceptance of the revised Policy.

13. Contact & Data Requests

For any questions about this Privacy Policy, to exercise any of your data rights described in Section 9, or to report a privacy concern, you can contact 555x through the following channels:

• Live Chat: Available 24/7 through your logged-in 555x account — the fastest channel for most requests.
• General Support Email: support@555x.wine — general privacy questions and account-level data requests. Response within 24 hours.
• Data Requests Email: privacy@555x.wine — specifically for formal data subject requests (access, erasure, portability). 555x will acknowledge receipt within 2 business days and provide a full response within 30 days.

555x takes privacy complaints seriously. If you raise a concern with us and are not satisfied with the response, you have the right to escalate to the relevant data protection authority in your jurisdiction. 555x will cooperate with any regulatory inquiry in good faith.