Privacy Policy

This Privacy Policy ("Policy") describes how xs555, operating the website at https://xs555.cam (the "Platform"), collects, processes, stores and discloses personal information obtained from users ("you", "User") in connection with your access to and use of the Platform and its associated services.

xs555 is an online entertainment information platform providing transparent guidance on live casino, sports betting and game-show products, primarily for English-speaking Pakistani users. We take our obligations regarding personal data seriously and are committed to handling all information in a responsible, proportionate and secure manner.

By accessing or using the Platform, registering an account or submitting any personal information, you confirm that you have read and understood this Policy and consent to the data practices described herein. If you do not agree to this Policy, you must discontinue use of the Platform immediately.

This Policy should be read in conjunction with the Terms & Conditions and the Responsible Gambling Policy, both of which form part of the overall agreement between you and xs555.

xs555 collects the following categories of personal and non-personal data in the ordinary course of operating the Platform:

We collect personal data through the following means:

xs555 uses your personal data for the following specific purposes:

• Account Management: Creating, maintaining and administering your user account, including authentication, settings and preference storage.
• Identity & Age Verification: Confirming that you meet the minimum age requirement (18+ or higher where the operator/licence jurisdiction requires) and verifying your identity in compliance with KYC and AML obligations.
• Transaction Processing: Facilitating deposits and withdrawals in PKR or other currencies, processing requests and maintaining transaction records.
• Responsible Gambling: Monitoring gameplay patterns to identify potential problem gambling indicators; enforcing deposit, loss and time limits set by you; facilitating self-exclusion requests.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, duplicate accounts, bonus abuse, money laundering, fraud and other prohibited conduct.
• Legal Compliance: Meeting obligations under applicable AML regulations, licence conditions and any lawful requests from regulatory or law enforcement authorities.
• Customer Support: Responding to queries, resolving disputes and improving support quality through communication analysis.
• Platform Improvement: Analysing aggregated usage data to improve game offerings, navigation, load performance and the overall user experience.
• Marketing Communications: Sending promotional offers and updates where you have given explicit consent. You may withdraw marketing consent at any time through account settings or by contacting support.

Where applicable data protection law requires xs555 to identify a lawful basis for processing your personal data, we rely on the following grounds:

xs555 does not sell, rent or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual protections:

• Identity Verification Providers: Third-party KYC and AML service providers who verify identity documents and screen against sanctions and watchlists.
• Payment Processors: Entities that facilitate deposit and withdrawal transactions. Payment data shared is limited to what is strictly required to complete a transaction.
• Fraud Prevention Services: Risk management platforms that help detect and prevent fraudulent activity, duplicate accounts and bonus abuse.
• Technology & Hosting Partners: Cloud infrastructure and software providers hosting and maintaining Platform systems, bound by data processing agreements.
• Analytics Providers: Tools used to analyse aggregated, anonymised usage data for Platform improvement. No personally identifiable information is shared for general analytics purposes.
• Regulatory & Law Enforcement Authorities: Where required by law, court order or regulatory direction, xs555 may disclose personal data to competent public authorities.

xs555 requires all third-party processors to maintain appropriate security standards and to process personal data only in accordance with documented instructions.

xs555 operates internationally and your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not offer the same level of data protection as your home jurisdiction.

Where such transfers occur, xs555 implements appropriate safeguards to ensure your data is protected to a standard equivalent to that required in the originating jurisdiction. These safeguards may include contractual clauses, binding corporate rules or reliance on adequacy decisions where applicable.

xs555 uses cookies and similar technologies to operate and improve the Platform. The following categories of cookies may be used:

You may adjust cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.

xs555 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any legal or regulatory obligations requiring longer retention periods. The following general retention principles apply:

• Active Account Data: Retained for the duration of the account and for a minimum period after account closure, as required by applicable law and AML obligations.
• Transaction Records: Financial transaction records are typically retained for a minimum of five (5) years following the transaction date to meet AML and regulatory requirements.
• KYC Documents: Identity verification documents are retained for the period required by the operator's licence conditions and AML obligations — typically five (5) years from account closure.
• Support Communications: Customer support interaction records are retained for up to three (3) years to support dispute resolution and quality assurance.
• Analytics Data: Anonymised, aggregated usage data may be retained indefinitely for statistical purposes as it is no longer personally identifiable.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with xs555's data disposal procedures.

Subject to applicable law and any legal obligations that require us to retain or continue processing your data, you have the following rights regarding your personal information held by xs555:

To exercise any of these rights, please contact xs555 support via live chat or the email address listed in Section 16. We will respond within a reasonable timeframe, typically within 30 days. In certain circumstances, we may need to verify your identity before processing a rights request. Requests that are manifestly unfounded or excessive may be refused or subject to an administrative fee.

xs555 implements age verification as part of the registration and KYC process. If xs555 discovers that personal data has been collected from a user who is below the applicable minimum age, that data will be deleted promptly and the associated account will be closed.

Parents and guardians who believe that a minor has submitted personal data to the Platform are encouraged to contact xs555 support immediately so that appropriate action can be taken without delay.

xs555 implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration and disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Role-based access controls limiting internal access to personal data on a need-to-know basis.
• Multi-factor authentication options for user accounts and internal administrative systems.
• Regular security assessments and vulnerability monitoring.
• Incident response procedures to detect, contain and notify affected parties of data breaches in accordance with applicable legal timelines.

While xs555 applies robust security practices, no internet-based system is entirely immune to security risks. Users are encouraged to protect their own credentials, use strong and unique passwords and report any suspected unauthorised account activity to xs555 support immediately.

xs555 serves users across Pakistan, including those based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and other cities. Pakistani users should be aware of the following:

xs555 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations or the Platform's features. The "Last updated" date at the top of this page will be revised whenever a change is made.

For material changes that significantly affect how your data is processed, xs555 will provide advance notice via email or an in-platform notification prior to the changes taking effect, where practically feasible. Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically to stay informed of how xs555 protects and uses your information.

If you have any questions, concerns or requests relating to this Privacy Policy or the personal data xs555 holds about you, please contact us through the following channels:

xs555 is committed to resolving data-related concerns promptly and transparently. If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in the jurisdiction where the Platform is licensed.