555d Privacy Policy — How We Collect, Use, and Protect Your Personal Data in Pakistan

1. Personal Data We Collect at 555d

555d collects personal data from Pakistani players through several channels. The information collected depends on the stage of your relationship with the platform — some data is collected at registration, some during KYC verification, and some through your ongoing use of the platform.

Registration data: When you create your 555d account, we collect your full legal name, date of birth, email address, phone number, and the password you choose. This is the minimum set of information required to open an account and it cannot be omitted or substituted with fictitious details.

KYC verification data: Before processing your first withdrawal, 555d is required by financial regulatory standards to verify your identity. This involves collecting a copy of your CNIC (Computerised National Identity Card), a recent selfie or a utility bill confirming your address, and in some cases additional supporting documentation. KYC data is stored encrypted and accessed only by authorised 555d compliance staff.

Transaction data: Every deposit and withdrawal processed through your 555d account is logged with transaction metadata including the amount in PKR, the date and time, the payment method used (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card), and a transaction reference number. 555d does not store your full mobile wallet PIN, full card number, or online banking credentials on its own servers.

Gaming activity data: 555d maintains a record of your betting history — games played, stakes placed, results, bonuses claimed and their wagering progress. This data is used for account management, responsible gaming monitoring, dispute resolution, and fraud detection.

Technical data: When you access 555d via browser or mobile device, we collect technical data including your IP address, device type and model, operating system, browser version, and session timestamps. This data is used for security purposes, to detect unauthorised access, and to optimise the platform for the devices Pakistani players actually use.

2. How 555d Uses Your Personal Data

Every piece of data 555d collects has a specific purpose. We don't collect information for its own sake. The table below summarises how different categories of data are used:

555d uses contact details (email and phone number) to send transactional communications including deposit confirmations, withdrawal notifications, account security alerts, and responsible gaming prompts. We may also send promotional communications about new games, bonuses, or platform features — you can opt out of promotional communications at any time through your account settings or by emailing support@555d.biz without affecting your ability to use the platform.

3. Who 555d Shares Your Personal Data With

555d shares personal data only with parties that have a genuine operational need to receive it, and only to the extent necessary for the specific purpose. We never sell personal data.

• Payment processors: When you deposit or withdraw, your transaction details are shared with the relevant payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, your bank for IBFT, or your card network). This is unavoidable — the payment cannot be processed without sharing some data with the payment system. Each payment provider operates under its own privacy policy and security standards.
• Game providers: When you launch a game from a third-party provider such as Pragmatic Play, Spribe, or Evolution, a session token is shared with that provider so the game can function correctly under your 555d account. Game providers do not receive your full personal profile — only the session credentials required to run the game and record results.
• KYC and identity verification services: 555d uses third-party KYC verification services to validate identity documents. These providers receive only the documents and data necessary for the specific verification check and are contractually bound to use the data exclusively for that purpose.
• Regulatory authorities: 555d is required by law to report suspicious transaction patterns to relevant financial intelligence authorities as part of anti-money-laundering (AML) compliance obligations. This reporting is mandatory and does not require your consent.
• Legal proceedings: If 555d receives a valid legal order from a Pakistani court or competent authority requiring disclosure of account data, we will comply. We will notify the account holder where legally permitted to do so.

4. Cookies and Tracking Technologies at 555d

555d uses cookies and similar tracking technologies to make the platform function correctly and to understand how Pakistani players use it so we can improve the experience. Cookies are small data files stored on your device by your browser.

To manage or delete cookies from 555d, go to your browser settings and navigate to the cookies or privacy section. Most modern browsers allow you to block all third-party cookies while permitting essential first-party cookies — this is the approach we recommend if you want to maintain 555d functionality while minimising tracking. Please note that disabling essential session cookies will prevent you from logging in.

5. Data Security Measures at 555d

555d implements multiple layers of technical and organisational security to protect the personal data of Pakistani players.

• SSL/TLS Encryption in Transit: All data transmitted between your device and 555d servers uses TLS 1.2 or higher encryption. This prevents interception of data by third parties on the network path between you and 555d.
• AES-256 Encryption at Rest: Personal data — including KYC documents, account details, and transaction records — is encrypted at rest on 555d servers using AES-256, the same standard used by financial institutions.
• Access Controls: Access to personal data within 555d is restricted to authorised staff on a strict need-to-know basis. Access logs are maintained and audited regularly. No 555d staff member can access account data outside the scope of their job function.
• Password Security: Account passwords are stored as salted cryptographic hashes — 555d cannot retrieve your actual password in plaintext. This is why our support team will never ask for your password and why a password reset always requires email verification.
• Anomaly Detection: 555d's security systems monitor login patterns for unusual behaviour — logins from new devices, unusual geographical access patterns, rapid sequential login attempts — and will flag or temporarily suspend accounts where suspicious activity is detected.

Despite these measures, no online platform can provide an absolute guarantee against all security incidents. In the event of a data breach affecting personal data of 555d players, we will notify affected players within 72 hours of becoming aware of the breach, describe the nature of the data involved, and outline the steps we are taking to contain and remediate the incident.

6. Your Data Rights as a 555d Player

As a registered player at 555d, you have the following rights over your personal data. To exercise any of these rights, email support@555d.biz from the email address registered on your 555d account. We will respond within 30 days.

7. Data Retention — How Long 555d Keeps Your Data

555d retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to minimum legal retention requirements.

• Active account data: While your 555d account is active, we retain all account and transaction data to operate your account correctly, maintain gaming history, and comply with financial regulations.
• Post-closure retention: After your account is closed, 555d retains your KYC documents and financial transaction records for a minimum of five years as required by anti-money-laundering regulations. This retention is mandatory and cannot be waived.
• Technical and session data: IP logs and session data are retained for 90 days for security purposes and then deleted or anonymised.
• Communication records: Support communications are retained for 24 months for quality assurance and dispute resolution purposes.

When the applicable retention period expires, 555d permanently deletes or irreversibly anonymises the data so that it can no longer be linked to you as an individual. You can request early deletion of data that is not subject to mandatory retention obligations by contacting support@555d.biz.

8. KYC Verification and Anti-Money-Laundering Compliance

555d is required to conduct Know Your Customer (KYC) verification on all players before processing withdrawal requests above a certain threshold. This is not a formality — it is a regulatory requirement that applies to all financial platforms handling real-money transactions, including online gaming operators.

The KYC process at 555d involves: confirming your identity against your CNIC, confirming your address, and in some cases confirming the ownership of your payment accounts. The specific documents required depend on the verification level and may include:

• A clear copy of your CNIC (front and back)
• A recent selfie holding your CNIC
• A utility bill or bank statement confirming your address (dated within 3 months)
• In some cases, a screenshot or statement confirming ownership of your Easypaisa or JazzCash account

KYC documents submitted to 555d are used exclusively for identity verification purposes. They are stored in an encrypted document store with strictly controlled access. They are not shared with any commercial third parties.

555d also operates an Anti-Money-Laundering (AML) monitoring system that flags unusual patterns of deposits and withdrawals for manual review. This monitoring is required by law. Accounts that trigger AML flags may have withdrawals held pending investigation. 555d will communicate with the account holder throughout any AML review and will resolve matters as quickly as possible while meeting our legal obligations.

9. Updates to This Privacy Policy

555d reviews and updates this Privacy Policy periodically to reflect changes in how we operate, changes in applicable law, or changes in the privacy landscape generally. When we make material changes to this policy — changes that meaningfully affect your rights or how we use your data — we will notify registered 555d players by email and display a prominent notification on the platform for at least 14 days before the changes take effect.

Minor amendments — corrections to typographical errors, clarifications that don't change the substance of any provision, or changes required by technical updates — may be made without prior notification. The "Last Updated" date at the top of this policy will always reflect the date of the most recent revision, regardless of whether it was material or minor.

If you disagree with any changes to this Privacy Policy, you should stop using 555d before the effective date of the change and request closure of your account. Continued use of 555d after the effective date constitutes acceptance of the revised policy.

Privacy Enquiries: For any questions about this Privacy Policy or to exercise your data rights, contact 555d's privacy team at support@555d.biz. Include your full name, your 555d registered email address, and a clear description of your request. We respond within 30 days.