555cx Privacy Policy —
Your Data, Your Rights

1 About This Policy

1.1 This Privacy Policy ("Policy") sets out the practices of 555cx ("we", "us", "our") in relation to the collection, use, storage, disclosure, and protection of personal data belonging to players ("you", "your") who register for or use the 555cx platform accessible at 555cx.biz.

1.2 This Policy applies to all personal data processed by 555cx in connection with the operation of the 555cx platform, whether collected via the website, through customer support interactions, or through our payment processing integrations with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.

1.3 This Policy does not apply to third-party websites or services that may be referenced in communications from 555cx. You should review the privacy policies of any third-party providers independently.

1.4 The current version of this Policy takes effect on 1 January 2026 and supersedes all previous versions. The date of the most recent amendment is indicated at the top of this page.

2 Data Controller

2.1 For the purposes of applicable data protection law, the data controller responsible for your personal data is the operator of 555cx.biz, which holds an international gaming licence governing the operation of the 555cx platform.

2.2 All data protection enquiries, access requests, and complaints should be directed to the 555cx Data Protection contact at: [email protected], with the subject line "Data Protection Request".

2.3 555cx is committed to handling all personal data in a manner consistent with the requirements of its international gaming licence and applicable data protection standards, including requirements for data minimisation, purpose limitation, and storage limitation.

3 Data We Collect

555cx collects personal data across several categories depending on the stage of your interaction with the platform. The table below summarises the primary data types collected and their source:

3.1 555cx does not collect sensitive personal data such as racial or ethnic origin, religious or political beliefs, health data (except where voluntarily disclosed in responsible gaming communications), or biometric data beyond CNIC document scans required for identity verification.

3.2 Where a Player contacts 555cx support and voluntarily discloses health-related information — for example, in connection with a self-exclusion request citing a gambling addiction — such information is processed solely for the purpose of facilitating responsible gaming protections and is not used for any marketing or profiling purpose.

4 How We Use Your Data

555cx uses the personal data it collects for the following purposes:

4.1 Account Management

To create, verify, maintain, and administer your 555cx account, including processing your registration, verifying your identity via CNIC, enabling 555cx Login access, and communicating account-related notices such as security alerts, password reset confirmations, and transaction receipts.

4.2 Payment Processing

To facilitate PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to process withdrawal requests to verified payment methods. Financial data is shared with payment processors solely as necessary to complete the requested transaction and is not retained by 555cx beyond what is required for audit and anti-money laundering compliance.

4.3 Regulatory Compliance & KYC

To comply with the obligations imposed by 555cx's international gaming licence, including mandatory KYC identity verification, age verification (21+ enforcement), anti-money laundering screening, and transaction monitoring. Certain data may be required to be reported to regulatory authorities under our licence conditions.

4.4 Fraud Prevention & Security

To detect and prevent fraudulent account creation, bonus abuse, money laundering, match-fixing, use of automated betting software, and other prohibited conduct as defined in the 555cx Terms & Conditions. Device and IP data are used as part of this security monitoring framework.

4.5 Responsible Gaming Monitoring

To monitor account activity for signs of problematic gambling behaviour and to facilitate the effective operation of responsible gaming tools including deposit limits, loss caps, session reminders, cooling-off periods, and self-exclusion. Usage data and financial data are both employed for this purpose.

4.6 Service Improvement & Analytics

To analyse anonymised and aggregated usage patterns to improve the 555cx platform, game lobby, mobile performance, and payment user experience. Individual player data is not used for commercial profiling or sold to analytics companies.

4.7 Marketing Communications

Where you have provided explicit consent, to send you promotional offers, bonus announcements, cricket betting market updates, and platform news via your registered email address or Pakistani mobile number. You may withdraw marketing consent at any time without affecting your account access.

5 Legal Basis for Processing

555cx processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to deliver the services you have registered for, including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with 555cx's international gaming licence conditions, anti-money laundering obligations, and age verification requirements.
• Legitimate Interest: Processing undertaken for fraud prevention, platform security, abuse detection, and responsible gaming monitoring — where such interests are not overridden by your data protection rights.
• Consent: Processing of data for marketing communications, where you have given clear and informed consent at registration or subsequently through Account Settings. Consent is freely withdrawable.

6 Data Sharing & Disclosure

6.1 555cx does not sell, rent, or otherwise commercially transfer your personal data to third parties. Data is shared only as described in this section and only to the extent strictly necessary for the stated purpose.

6.2 Categories of third parties with whom data may be shared include:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum financial and identity data necessary to process your deposit or withdrawal transaction. All are bound by their own data protection obligations.
• KYC & Identity Verification Providers: Third-party CNIC verification services used to fulfil regulatory identity verification requirements under 555cx's international gaming licence.
• Fraud Prevention Services: Anti-fraud and anti-money laundering screening services that process limited identity and transaction data as part of 555cx's security framework.
• Game Content Providers: Certified game studios such as Evolution, Pragmatic Play, and Playtech may receive anonymised session identifiers necessary to deliver real-money game sessions. Full identity data is not shared with game studios.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or regulatory direction under 555cx's gaming licence, player data will be disclosed to competent authorities. 555cx will, where legally permissible, notify affected players of such disclosure.
• Professional Advisors: Legal counsel, auditors, and compliance consultants who require access to player data in the course of advising 555cx — all operating under professional confidentiality obligations.

6.3 In the event of a merger, acquisition, or sale of 555cx's business operations, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to data processing practices that results from it.

7 Cookies & Tracking Technologies

7.1 555cx uses cookies and similar tracking technologies on the 555cx.biz platform to maintain session state, enable platform functionality, and gather anonymised usage analytics.

7.2 The categories of cookies used by 555cx are as follows:

• Strictly Necessary Cookies: Required for the 555cx platform to function. These include session cookies that maintain your logged-in state during a visit and security tokens that prevent cross-site request forgery. These cannot be disabled without preventing platform access.
• Functional Cookies: Store your platform preferences such as language settings, last game category accessed, and responsible gaming reminder intervals. These persist between sessions to improve your experience.
• Analytics Cookies: Used to collect anonymised data about how the 555cx platform is used — including pages visited, session duration, game categories accessed, and deposit funnel performance. Data is aggregated and not linked to individual player identities.

7.3 You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing your 555cx account.

7.4 555cx does not use third-party advertising cookies or tracking pixels that link your 555cx activity to external advertising networks or social media platforms.

8 Data Retention

8.1 555cx retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory obligations under the international gaming licence.

8.2 The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of the account's active status plus a mandatory period following closure as required by anti-money laundering and gaming licence compliance obligations (typically five years post-closure).
• KYC Documents: Retained for a minimum of five years following account closure, in accordance with anti-money laundering regulatory standards. Copies are securely destroyed at the earliest permitted point.
• Transaction Records: Financial transaction records in PKR are retained for a minimum of five years to satisfy audit, anti-money laundering, and gaming licence reporting requirements.
• Customer Support Records: Chat transcripts and email correspondence are retained for two years following the closure of the support interaction, unless the subject matter relates to an ongoing dispute or regulatory matter.
• Marketing Consent Records: Records of consent and withdrawal of consent for marketing communications are retained for five years from the date of the most recent consent action.
• Self-Exclusion Records: Records of self-exclusion requests are retained indefinitely to prevent re-registration during the exclusion period and to protect the excluded Player from circumventing their own request.

8.3 Upon expiry of the applicable retention period, data is either permanently and securely deleted from 555cx systems or anonymised such that it can no longer be attributed to an identifiable individual.

9 Data Security

9.1 555cx implements a multi-layered security framework to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• TLS 1.3 encryption for all data in transit between your device and 555cx servers;
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records;
• One-way cryptographic password hashing — 555cx cannot retrieve your password in plaintext under any circumstances;
• Role-based access controls ensuring that 555cx staff can only access player data to the extent required for their specific function;
• Regular penetration testing and security audits conducted by independent security professionals;
• Automated anomaly detection systems monitoring for unusual access patterns, login attempts, and data export activities;
• Segregation of player fund data from operational systems.

9.2 Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. Players are advised to maintain strong, unique passwords for their 555cx Login credentials and to enable two-factor authentication where available.

9.3 In the event of a personal data breach that is likely to result in a high risk to Player rights or freedoms, 555cx will notify affected Players without undue delay and in accordance with the notification obligations under our international gaming licence.

10 Your Data Rights

As a registered 555cx Player, you hold the following rights in relation to your personal data. These rights may be exercised by contacting 555cx at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of all personal data that 555cx holds about you, along with information about how it is being processed. 555cx will respond within 30 calendar days.
• Right to Rectification: If any personal data held by 555cx is inaccurate or incomplete, you may request that it be corrected. Certain corrections — such as legal name changes — may require documentary evidence.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where processing is unlawful. This right does not apply where 555cx is required to retain data for legal or regulatory compliance purposes.
• Right to Restrict Processing: You may request that 555cx restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and 555cx is assessing whether its legitimate interest overrides your objection.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that your data be provided to you in a structured, machine-readable format.
• Right to Object: You may object at any time to processing of your personal data based on legitimate interest, including for responsible gaming monitoring and fraud prevention, unless 555cx can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — primarily for marketing communications — you may withdraw that consent at any time via Account Settings or by emailing [email protected]. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

11 Children & Minors

11.1 555cx operates a strict 21+ age policy. The 555cx platform is not directed at or intended for use by persons under the age of 21. 555cx does not knowingly collect personal data from minors.

11.2 Where 555cx becomes aware that personal data has been collected from a person under the age of 21, the Account will be immediately suspended, all data associated with the Account will be reviewed in accordance with our responsible gaming obligations under the international gaming licence, and any deposits will be returned to the source payment method following verification.

11.3 If you believe that a person under the age of 21 has created a 555cx account, please report this immediately to [email protected]. Such reports are treated as a matter of priority.

12 International Data Transfers

12.1 As an internationally licensed gaming platform serving Pakistani players, certain data processing activities — including game server infrastructure, KYC verification services, and fraud prevention systems — may involve the transfer of personal data to servers or service providers located outside Pakistan.

12.2 Where personal data is transferred internationally, 555cx takes appropriate measures to ensure that such transfers are subject to adequate data protection safeguards, including contractual obligations that require receiving parties to maintain data security and confidentiality standards consistent with this Privacy Policy.

12.3 Player financial data processed in connection with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank is processed within Pakistan's financial infrastructure and is not transferred internationally beyond what is required for international payment clearing where applicable.

13 Amendments to This Policy

13.1 555cx reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, regulatory requirements, or platform functionality. The effective date at the top of this page will be updated to reflect the date of each revision.

13.2 Where amendments are material — such as changes to the categories of data collected, new sharing arrangements with third parties, or changes to your data rights — 555cx will notify registered Players via their registered email address no fewer than 14 days before the changes take effect.

13.3 For non-material amendments, the updated Policy will be published at 555cx.biz/privacy-policy and will take effect immediately upon publication. Continued use of the 555cx platform following publication of an updated Policy constitutes acceptance of the revised terms.

14 Contact & Complaints

14.1 For all privacy-related enquiries, data rights requests, or complaints regarding 555cx's handling of your personal data, please contact:

14.2 If you are not satisfied with 555cx's response to a privacy complaint, you may escalate the matter to the data protection or dispute resolution body associated with 555cx's international gaming licence. Details of the applicable escalation mechanism are available upon request from [email protected].

This Privacy Policy was last reviewed and updated on 1 January 2026. 555cx is operated under an international gaming licence. 21+ only. Gamble responsibly.