555h Privacy Policy

555h is the data controller responsible for your personal data collected through the 555h platform. As data controller, 555h determines the purposes and means by which your personal data is processed. All data processing activities described in this Policy are carried out by 555h or by third-party processors acting strictly under 555h's instruction and on 555h's behalf.

If you have any questions or concerns about how your personal data is handled, you may contact the 555h Data Protection team directly at [email protected]. We aim to respond to all privacy-related enquiries within five business days.

555h collects personal data across several categories depending on how you interact with the platform. The categories below describe what we collect and why each category is necessary:

555h does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where identity document scans are required strictly for KYC and AML compliance purposes.

555h collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the 555h platform, including through cookies, server logs, and session tracking tools.
• Third-party sources: Data received from KYC verification providers (to confirm the authenticity of identity documents), payment processors (to confirm transaction status), and fraud prevention partners (to assess risk signals associated with your device or payment method).

555h does not collect personal data from social media platforms or data brokers. All data collection is limited to what is necessary for the purposes described in this Policy.

555h uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your 555h player account.
• Service delivery: Processing bets, deposits, withdrawals, and bonus transactions across cricket betting, live casino, slots, and sportsbook products.
• Identity and age verification: Confirming that you meet the 21+ age requirement and that your identity matches the information provided at registration.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, account takeover attempts, and other security threats.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and to action responsible gaming tools (deposit limits, self-exclusion) that you request.
• Legal and regulatory compliance: Meeting anti-money laundering (AML) obligations, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records required under our international gaming license.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the 555h platform, fix bugs, and develop new features.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have not opted out. See Section 11 for your opt-out rights.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.

555h processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 555h — including account creation, game play, deposits, and withdrawals.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and gaming license conditions.
• Legitimate interests: Processing necessary for 555h's legitimate business interests, including fraud prevention, platform security, and product improvement, where those interests are not overridden by your data protection rights.
• Consent: Where 555h relies on your consent — for example, for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

555h does not sell your personal data. We share data only in the following limited circumstances:

• KYC and identity verification providers: To verify your identity and age in compliance with our gaming license obligations. These providers process your data only for verification purposes and are contractually prohibited from any further use.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Bank Alfalah, MCB, and USDT processing partners receive transaction data strictly as required to process deposits and withdrawals.
• Fraud prevention and security partners: To detect and prevent fraudulent activity on the platform. Data shared is limited to technical identifiers and transaction metadata.
• Regulatory and law enforcement authorities: Where 555h is legally required to disclose data in response to a valid legal order, warrant, or regulatory request. 555h will notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 555h's business, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer and of any changes to how your data will be handled.

All third-party processors engaged by 555h are subject to data processing agreements that require them to implement appropriate technical and organisational security measures and to process data only on 555h's documented instructions.

555h retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and our gaming license obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account plus a minimum of five years following account closure, in accordance with standard AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction.
• Support communications: Retained for three years from the date of the communication or resolution of the relevant issue, whichever is later.
• Marketing preferences: Retained until you opt out, after which a record of your opt-out is kept indefinitely to ensure we honour your preference.
• Technical and usage data: Retained for 12 months on an identifiable basis, after which it is anonymised and may be retained indefinitely for aggregate analytics purposes.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with you.

555h implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• TLS 1.2 or higher encryption for all data transmitted between your browser or app and the 555h platform.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial account details.
• Role-based access controls ensuring that 555h staff can only access personal data that is strictly necessary for their job function.
• Two-factor authentication (2FA) enforced for all internal 555h staff accounts with access to production systems.
• Regular independent security audits and penetration testing of the 555h platform infrastructure.
• Incident response procedures that require 555h to notify affected users of any data breach within 72 hours of becoming aware of it, where such notification is required by applicable law.

555h uses cookies and similar tracking technologies on the platform. A cookie is a small text file placed on your device that allows the platform to recognise you across sessions and pages. The cookies we use fall into the following categories:

• Strictly necessary cookies: Essential for the 555h platform to function. These include session authentication cookies, CSRF protection tokens, and load balancing cookies. These cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: Used to understand how players interact with the 555h platform — which pages are most visited, where errors occur, and how quickly pages load. Data collected is aggregated and anonymised. These cookies are optional and can be disabled through your browser settings.
• Functional cookies: Remember your preferences such as language setting, last visited game category, and responsible gaming notification preferences. Disabling these will affect your personalised experience.

555h does not use third-party advertising or retargeting cookies. You may manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to your 555h account.

As a 555h player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with your full name, registered email address, and a description of your request:

• Right of Access: Request a copy of all personal data 555h holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: Request correction of any personal data that is inaccurate or incomplete. Minor corrections (such as a spelling error in your registered name) can also be made via your account settings.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that some data must be retained to comply with AML and gaming license obligations even after an erasure request.
• Right to Restrict Processing: Request that 555h restricts the processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Request a machine-readable export of personal data you have provided to 555h where that data is processed on the basis of consent or contractual necessity.
• Right to Object: Object to processing based on legitimate interests, including profiling for marketing purposes. Where you object to marketing, we will stop processing immediately.
• Rights related to automated decision-making: Request human review of any automated decision that significantly affects you, as described in Section 4.

555h will respond to all verified data rights requests within 30 calendar days. Where a request is complex or we have received a high volume, we may extend this period by a further 60 days, in which case we will notify you of the extension within the initial 30-day period.

With your consent at registration, 555h may send you promotional communications about bonuses, new games, sports betting markets, and platform features via email, SMS, and push notifications. Each marketing communication includes a clear and functional unsubscribe or opt-out mechanism.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email from 555h.
• Updating your notification preferences in your 555h account settings.
• Contacting 555h support at [email protected] with a written opt-out request.

Opting out of marketing does not affect transactional communications such as deposit confirmations, withdrawal notifications, KYC status updates, or account security alerts. These are sent regardless of your marketing preference as they are necessary for the operation of your account.

If 555h discovers or has reasonable grounds to suspect that a player is under 21 years of age, the account will be immediately suspended pending age verification. If the player is confirmed to be under 21, the account will be permanently closed, all winnings will be voided, and any deposits will be returned via the original payment method after deducting the value of any bonuses used.

If you are a parent or guardian and believe that a minor has registered an account on 555h using false information, please contact us immediately at [email protected]. We will investigate and act within 24 hours of receiving a verified report.

As an online platform operating under an international gaming license, 555h may transfer your personal data to processors located in jurisdictions outside Pakistan. Where such transfers occur, 555h ensures that appropriate safeguards are in place to protect your data, including:

• Data processing agreements incorporating standard contractual clauses that impose equivalent data protection obligations on the recipient.
• Transfer only to jurisdictions that provide an adequate level of data protection as assessed under applicable standards.
• Encryption of data in transit and at rest regardless of the jurisdiction in which it is processed.

You may request further information about international transfer safeguards specific to your data by contacting [email protected].

555h reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. When material changes are made — meaning changes that significantly affect how your data is used or your rights in relation to it — 555h will notify registered players by email to the address on file at least 14 days before the changes take effect.

Non-material changes such as clarifications, typographical corrections, or formatting updates may be applied immediately. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the 555h platform after the effective date of any revision constitutes acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 555h handles your personal data, please contact the 555h Data Protection team:

When submitting a data rights request, please include your full registered name, the email address associated with your 555h account, and a clear description of your request. This helps us locate your records and process your request as efficiently as possible.

You also have the right to lodge a complaint with the relevant data protection authority or regulatory body applicable under 555h's international gaming license if you are not satisfied with our response to your privacy concern.