xg555 Privacy Policy

xg555 collects personal data from you in the following ways: directly from you when you register an account or contact our support team; automatically when you use the platform; and from trusted third-party service providers such as payment processors and identity verification partners.

Registration Data: When you create your xg555 account, we collect your full legal name, date of birth, email address, mobile number, and a chosen username and password. This information is required to create and secure your account.

KYC Verification Data: Before processing any withdrawal, xg555 requires you to complete identity verification. This involves submitting a copy of your valid Pakistani National Identity Card (CNIC) and, in some cases, additional documentation such as proof of address or source of funds. KYC data is handled with the highest level of care and stored in encrypted form.

Payment Data: When you deposit or withdraw funds, we collect payment references associated with your JazzCash account, EasyPaisa account, or bank account at HBL, UBL, or Meezan Bank. xg555 does not store full bank account credentials — only the reference information needed to identify and reconcile transactions.

Automatically Collected Data: When you access xg555.app, our systems automatically collect certain technical data including your IP address, device type, browser version, operating system, referring URL, and the pages you visit on the platform. This data is collected via server logs and session cookies and is used to maintain platform security and improve the user experience.

Usage and Betting Data: We maintain records of all gaming activity on your account — including games played, bets placed, bet amounts in PKR, outcomes, session durations, and responsible gaming tool activations. This data is essential for platform operation, dispute resolution, and our regulatory obligations.

xg555 uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and secure your xg555 account, and to verify your identity in accordance with our KYC obligations.
• Transaction Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, and supported bank channels, and to maintain accurate financial records.
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other security threats to the xg555 platform and its users.
• Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML) regulations, including maintaining transaction records and reporting suspicious activity to relevant authorities where legally required.
• Customer Support: To respond to your support queries, resolve disputes, and maintain records of our communications with you.
• Responsible Gaming: To monitor usage patterns that may indicate problem gambling behaviour and to implement responsible gaming tools such as deposit limits and self-exclusion at your request or, where warranted, at xg555's discretion.
• Platform Improvement: To analyse aggregate, anonymised usage data in order to improve the xg555 platform, fix technical issues, and develop new features relevant to Pakistani users.
• Marketing Communications: To send you promotional offers, bonus notifications, and xg555 news — but only where you have opted in to receive such communications. You may withdraw your consent at any time via your account settings.

xg555 processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and xg555 — including operating your account, processing transactions, and providing access to games and the sportsbook.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, age verification requirements, and cooperation with law enforcement where legally compelled.
• Legitimate Interests: Processing carried out in the legitimate interests of xg555, including fraud prevention, platform security, and improving the user experience — provided these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — in particular, the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

xg555 does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transaction data required to execute deposits and withdrawals on your behalf. These parties operate under their own privacy policies and are bound by applicable financial regulations.
• Identity Verification Partners: Third-party KYC service providers receive your identity documents for the purpose of verifying your age and identity. These providers are contractually bound to process your data only for the purposes specified by xg555.
• Technology Providers: Cloud hosting, fraud detection, and analytics platforms that form part of the xg555 technical infrastructure may process certain categories of your data. All such providers are selected on the basis of their security standards and are bound by data processing agreements.
• Regulatory and Law Enforcement Authorities: xg555 will disclose personal data to government agencies, regulators, or law enforcement bodies where we are legally required to do so — for example, in response to a valid court order or as part of our AML reporting obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of the xg555 business or its assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy protections.

In all cases, xg555 takes reasonable steps to ensure that third parties to whom data is disclosed handle it in a manner consistent with the principles set out in this Privacy Policy.

xg555 uses cookies and similar tracking technologies to operate the platform and provide a reliable, secure user experience. A cookie is a small text file placed on your device by a website when you visit it. Cookies are not used to identify you personally on their own — they identify your browser or device.

xg555 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are required for the xg555 platform to function. They manage your login session, maintain your account authentication state, and enable basic security features. These cookies cannot be disabled without disrupting platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised information about how users interact with xg555.app — which pages are visited most, where users experience errors, and how long sessions last. This data helps us improve the platform. We do not use third-party advertising analytics.
• Fraud Prevention Cookies: These cookies help xg555 detect and prevent fraudulent account activity by identifying unusual device or session characteristics. They are essential to maintaining a safe gaming environment.

xg555 does not deploy third-party advertising cookies, social media tracking pixels, or cross-site behavioural tracking. You can control cookie behaviour through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging in to or using the xg555 platform.

xg555 retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, and for as long as required by applicable law. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your account with xg555, plus a minimum period of five (5) years following permanent account closure, as required by our AML obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in line with financial crime compliance requirements.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of five (5) years from the date of the transaction.
• Support Communications: Email and chat records related to support interactions are retained for three (3) years from the date of the interaction.
• Technical and Log Data: Server logs and session data are retained for a maximum of twelve (12) months, after which they are anonymised or deleted.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever comes first.

Once the applicable retention period expires, xg555 will securely delete or anonymise your data so that it can no longer be associated with you as an individual.

As an xg555 user, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with your registered username and a description of your request.

• Right of Access: You may request a copy of the personal data xg555 holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. For identity data, corrections may require re-submission of KYC documentation.
• Right to Erasure: You may request deletion of your personal data where we no longer have a legal basis for retaining it. Note that data subject to regulatory retention requirements — such as transaction records and KYC documents — cannot be deleted until the applicable retention period has expired.
• Right to Restriction: You may request that xg555 restrict the processing of your data while a dispute regarding its accuracy or the lawfulness of its processing is being resolved.
• Right to Portability: Where processing is based on your consent or a contract, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on xg555's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent — in particular, marketing communications — you may withdraw that consent at any time without penalty.

xg555 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS (Transport Layer Security) encryption for all data in transit between your device and xg555 servers
• Encryption of sensitive data at rest, including KYC documents and financial records
• Strict access controls — only authorised personnel with a legitimate operational need can access personal data
• Regular security audits and penetration testing of the xg555 platform infrastructure
• Two-factor authentication available for all xg555 user accounts
• Continuous monitoring for suspicious login activity and account takeover attempts

While xg555 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also have a role to play in keeping your account safe — use a strong, unique password, enable two-factor authentication, and never share your login credentials with anyone. If you suspect unauthorised access to your xg555 account, contact us immediately at [email protected].

Data Breach Notification: In the event of a data breach that is likely to result in a risk to your rights and freedoms, xg555 will notify affected users without undue delay and will take immediate steps to contain and remediate the breach.

The xg555 platform is strictly for adults aged 21 years and above. xg555 does not knowingly collect or process personal data belonging to any person under the age of 21. Age verification via CNIC is a mandatory step in the xg555 account verification process, and accounts are reviewed for compliance on an ongoing basis.

If you are a parent or guardian and believe that a minor in your care has registered an xg555 account or provided personal data to xg555 without your knowledge, please contact us immediately at [email protected]. We will investigate the report promptly and, where the account is found to belong to a minor, will close it immediately and securely delete the associated data to the extent permitted by our legal obligations.

xg555 recommends that parents and guardians use appropriate parental control software to prevent minors from accessing online gambling platforms. The responsibility for supervising minors' internet access lies with parents and guardians, but xg555 takes its own obligations in this area extremely seriously.

xg555 reserves the right to update or revise this Privacy Policy at any time. When we make material changes — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will notify you by email to your registered address and/or via a prominent notice on the xg555 platform upon your next login.

The effective date at the top of this Privacy Policy will always reflect when the policy was last updated. We encourage you to review this page periodically so that you remain informed about how xg555 handles your personal data. If you disagree with a material change to this policy, you have the right to close your account and request deletion of your data to the extent permitted by our retention obligations.

Minor changes — such as clarifications of existing practices, corrections to typographical errors, or updated contact information — may be made without advance notice, though the effective date will be updated accordingly.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way xg555 handles your personal data, please contact the xg555 Data Protection team. We take all privacy enquiries seriously and aim to resolve them promptly and fairly.

You can reach us at: [email protected]

Please include your registered username, a clear description of your query or concern, and any relevant account details to allow us to assist you efficiently. We will acknowledge your message and provide a substantive response within a reasonable timeframe.

Complaints: If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction. xg555 will cooperate fully with any regulatory investigation arising from a privacy complaint made in good faith.