xc555 Privacy Policy

01 Who We Are

xc555 is an online gaming platform operating at xc555.org, offering cricket betting, live dealer casino games, premium slot titles, and fishing games including Caishen Fishing and Dragon Fishing 2. The platform is operated by the xc555 group of entities holding a valid international online gaming licence. For the purposes of this Privacy Policy, xc555, "we", "us", and "our" refer collectively to the platform operator and its data processing entities.

xc555 acts as the data controller in relation to the personal data of registered players. This means xc555 determines the purposes and means by which your personal data is processed. Where xc555 appoints third-party service providers to process data on its behalf, those providers act as data processors and are bound by contractual obligations to handle your data only in the manner directed by xc555.

02 Data We Collect

xc555 collects personal data from you directly when you register, use the platform, or contact support, and also automatically through your use of the website. The categories of personal data we collect are detailed below.

2.1 Registration Data

When you create an xc555 account, we collect the following information that you provide directly:

• Full legal name as it appears on your government-issued identification;
• Date of birth (for the purpose of verifying you are at least 21 years of age);
• Email address;
• Pakistani mobile number;
• Chosen username and encrypted password (we never store passwords in plain text);
• City of residence (e.g. Karachi, Lahore, Islamabad, Faisalabad).

2.2 KYC Verification Data

To comply with our international gaming licence obligations and anti-money laundering (AML) requirements, xc555 may request the following verification documents:

• Scanned copy or photograph of a government-issued photo ID — National Identity Card (CNIC), Passport, or Driver's Licence;
• Proof of address document dated within 90 days (utility bill, bank statement header);
• Proof of payment method (JazzCash wallet screenshot, EasyPaisa account confirmation, HBL or UBL bank statement header);
• Source of funds documentation for deposits exceeding applicable thresholds.

2.3 Financial Transaction Data

xc555 records all deposit and withdrawal transactions associated with your account, including transaction amounts in PKR, payment method used, transaction timestamps, and transaction reference identifiers. This data is retained for regulatory reporting and AML compliance purposes.

2.4 Gaming Activity Data

We record detailed logs of your gaming activity on the xc555 platform, including games played, bet amounts, game outcomes, session durations, and bonus usage. This data is used for account administration, responsible gaming monitoring, dispute resolution, and platform improvement.

2.5 Technical and Device Data

When you access xc555, our servers automatically record certain technical information, including:

• IP address and approximate geolocation (country/city level);
• Device type, operating system, and browser version;
• Pages visited, time spent on each page, and navigation paths;
• Referring URL (the page or link that directed you to xc555);
• Cookie identifiers and session tokens.

2.6 Communication Data

If you contact xc555 via Live Chat, email, or any other communication channel, we retain records of those communications — including the content of messages, timestamps, and the resolution of any queries or complaints — for quality assurance and dispute resolution purposes.

03 How We Use Your Data

xc555 uses the personal data it collects for the following purposes. We only use your data for purposes that are consistent with the reason it was originally collected.

• Account Administration: Creating and managing your xc555 account, processing login requests, and maintaining accurate account records.
• Identity and Age Verification: Confirming that you meet the minimum age requirement of 21 years and that your identity is as declared during registration.
• Payment Processing: Facilitating deposits and withdrawals via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, SadaPay, or USDT TRC20) and maintaining accurate transaction records in PKR.
• Responsible Gaming Monitoring: Analysing your gaming activity patterns to identify potential indicators of problem gambling behaviour, and proactively offering responsible gaming tools where appropriate.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, account takeover attempts, bonus abuse, money laundering, and other prohibited conduct as defined in the xc555 Terms & Conditions.
• Customer Support: Responding to your enquiries, processing complaints, and resolving disputes in a timely and fair manner.
• Regulatory Compliance: Fulfilling xc555's obligations under its international gaming licence, including KYC verification, AML reporting, and maintaining records as required by the licensing authority.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the xc555 platform, optimise game offerings, and enhance the overall player experience.
• Marketing Communications: Sending promotional emails, bonus notifications, and platform updates to players who have consented to receive such communications. You may withdraw this consent at any time.

04 Legal Basis for Processing

xc555 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contract Performance: Processing that is necessary to fulfil our contractual obligations to you as a registered xc555 player — including account management, payment processing, and game operation — is carried out on the basis of contract performance.
• Legal Obligation: Processing that is required to comply with xc555's obligations under its international gaming licence — particularly KYC verification, age verification, AML reporting, and regulatory record-keeping — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of xc555's legitimate interests, provided those interests are not overridden by your own rights and interests.
• Consent: Processing for marketing communications and the use of non-essential cookies is carried out on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

05 Data Sharing & Disclosure

xc555 does not sell, rent, or trade your personal data. We share your data only in the following limited and controlled circumstances:

5.1 Service Providers

xc555 works with carefully selected third-party service providers who process data on our behalf to help operate the platform. These include payment processing partners (such as JazzCash and EasyPaisa integrations), identity verification providers, cloud hosting infrastructure providers, customer support tools, and gaming software suppliers. All service providers are bound by data processing agreements that prohibit them from using your data for any purpose other than the specific service they provide to xc555.

5.2 Regulatory and Law Enforcement Authorities

xc555 may disclose personal data to regulatory bodies, law enforcement agencies, or other government authorities where we are legally required to do so — for example, in response to a lawful court order, a regulatory audit under our gaming licence, or an AML investigation. xc555 will only disclose the minimum data necessary to satisfy the legal obligation in question.

5.3 Corporate Transactions

In the event that xc555's business or a part thereof is acquired by, merged with, or transferred to another entity, your personal data may be transferred as part of that transaction. In such circumstances, xc555 will endeavour to ensure that the acquiring entity maintains equivalent or higher data protection standards, and registered players will be notified prior to any such transfer taking effect.

06 Cookies & Tracking Technologies

xc555 uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve your experience. The categories of cookies used are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account preferences, and ensure the security of your session. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: These cookies collect aggregated, anonymised data about how players use the xc555 platform — such as which pages are visited most frequently and how players navigate between sections. This data is used solely to improve the platform and does not identify individual players. Analytics cookies require your consent.
• Preference Cookies: These cookies remember your settings and preferences — such as language selection and display preferences — so you do not need to re-enter them on each visit.
• Marketing Cookies: Where you have consented to receive marketing communications, xc555 may use cookies to track the effectiveness of promotional campaigns delivered to your device. You may withdraw consent for marketing cookies at any time via the cookie settings panel on the platform.

You can manage your cookie preferences at any time by accessing the cookie settings panel available in the footer of the xc555 website, or through your browser's built-in cookie management tools. Please note that disabling strictly necessary cookies will impair your ability to use the platform.

07 Data Retention

xc555 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your registered account with xc555, plus a minimum post-closure retention period as required by our licensing authority.
• KYC and Identity Documents: Retained for a minimum of five years following account closure, in accordance with international AML standards applicable under xc555's gaming licence.
• Financial Transaction Records: Retained for a minimum of five years following the date of the transaction, for regulatory reporting and AML compliance purposes.
• Gaming Activity Logs: Retained for a minimum of three years following the session date, for dispute resolution and responsible gaming monitoring purposes.
• Customer Support Communications: Retained for a minimum of two years following the resolution of the relevant enquiry or complaint.
• Marketing Consent Records: Retained for as long as you hold an active xc555 account or until you withdraw your consent, whichever is earlier.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with xc555's internal data disposal procedures. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and analytical purposes.

08 Data Security

xc555 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS Encryption in Transit: All data transmitted between your device and xc555's servers is protected by Transport Layer Security (TLS) encryption. You can verify this by checking that the xc555.org URL begins with "https://".
• AES-256 Encryption at Rest: Sensitive data fields — including KYC documents, payment method details, and identity records — are encrypted at rest using AES-256, the same standard used by international financial institutions.
• Access Controls: Access to personal data within xc555's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their specific role, and all access events are logged.
• Two-Factor Authentication: xc555 offers two-factor authentication (2FA) for player accounts and mandates it for all internal staff accounts with access to player data.
• Regular Security Audits: xc555's platform and infrastructure undergo periodic security assessments and penetration testing conducted by qualified independent professionals.
• Incident Response: In the event of a data security incident that affects your personal data, xc555 has a documented incident response procedure. Affected players will be notified promptly in accordance with our obligations under applicable law.

09 Your Data Rights

As a registered xc555 player, you hold the following rights in relation to your personal data. xc555 is committed to facilitating the exercise of these rights without unnecessary delay — typically within 30 days of a verified request.

To exercise any of the above rights, please contact xc555 via Live Chat or email at [email protected] with the subject line "Data Rights Request". xc555 may require you to verify your identity before processing a data rights request, to ensure that data is not disclosed to an unauthorised party. xc555 will not charge a fee for standard data rights requests unless they are manifestly unfounded or excessive in nature.

10 Children & Minors

xc555 maintains a strict minimum age policy of 21 years for all registered players. The xc555 platform is not intended for, directed at, or accessible to individuals under the age of 21. xc555 does not knowingly collect, process, or retain personal data relating to minors.

During the registration process, xc555 collects date of birth information and uses this — in conjunction with KYC document verification — to confirm that all players meet the minimum age requirement. Where xc555 identifies or reasonably suspects that a registered player is under the age of 21, the account will be suspended immediately pending investigation. If the player is confirmed to be underage, the account will be permanently closed and the matter handled in accordance with our licensing authority's requirements.

If you are a parent or guardian and have reason to believe that a minor under your care has registered an account with xc555, please contact our support team immediately via Live Chat so that we can investigate and take appropriate action.

11 Marketing Communications

xc555 sends promotional emails, bonus notifications, and platform update messages to players who have consented to receive such communications during the registration process or subsequently through account settings. Marketing communications from xc555 may include information about new games, deposit bonuses, PSL cricket betting promotions, free spin offers, and platform feature announcements.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in the footer of every marketing email xc555 sends;
• Updating your communication preferences in your xc555 account settings dashboard;
• Contacting the xc555 support team via Live Chat and requesting removal from marketing communications.

Withdrawal of marketing consent does not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, and KYC request notices — which are necessary for the operation of your account and cannot be disabled while your account remains active.

12 Third-Party Links

The xc555 platform may contain links to game provider information pages or other content hosted by third parties. This Privacy Policy applies solely to personal data collected and processed by xc555. xc555 has no control over the data practices of third-party websites or services and is not responsible for their privacy policies or data handling practices. We encourage you to review the privacy policy of any third-party service before providing personal data to it.

13 Updates to This Privacy Policy

xc555 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform operations. The effective date at the top of this Policy indicates when it was last updated.

Where a material change is made to this Privacy Policy — meaning a change that meaningfully affects the way in which your personal data is collected, used, or shared — xc555 will notify all registered players via email to the address on file at least 14 days before the updated Policy takes effect. A prominent notice will also be displayed on the xc555 platform during the notification period.

Your continued use of the xc555 platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you have the right to close your account before the updated Policy takes effect by contacting the support team via Live Chat.

14 Contact & Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or xc555's data practices, please contact the xc555 Data Protection team through any of the following channels:

• Live Chat: Available 24/7 directly on the xc555 platform — the fastest channel for privacy enquiries from players across Pakistan.
• Email: [email protected] — include "Privacy Enquiry" or "Data Rights Request" in the subject line for prompt routing to the appropriate team.

xc555 aims to acknowledge all privacy-related correspondence within 48 hours and to provide a substantive response within 30 calendar days. For complex data rights requests, this period may be extended by a further 60 days where reasonably necessary, in which case xc555 will notify you of the extension and the reason for it within the initial 30-day period.