xc555 Privacy Policy

01 Introduction

This Privacy Policy ("Policy") explains how xc555 ("xc555", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "User") who access or use the xc555 online gaming platform at https://xc555.app (the "Platform"), including all associated products and services such as cricket betting, live casino, slots, lottery, and Bingo Adventure.

xc555 is committed to handling your personal data responsibly and in accordance with applicable data protection principles. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy applies to all personal data processed in connection with your use of the xc555 Platform, regardless of whether you access the Platform from Karachi, Lahore, Islamabad, Faisalabad, or any other location in Pakistan. If you do not agree with the terms of this Policy, you must not register an account or use the xc555 Platform.

02 Data Controller

xc555 acts as the data controller in respect of all personal data collected from users of the Platform. As data controller, xc555 determines the purposes for which and the means by which your personal data is processed.

For any questions, requests, or concerns relating to the processing of your personal data, you may contact the xc555 Data Privacy team using the contact details provided in Section 14 of this Policy. xc555 aims to respond to all data-related enquiries within 30 calendar days of receipt.

03 Data We Collect

xc555 collects the following categories of personal data from users of the Platform:

xc555 does not collect special categories of sensitive personal data (such as biometric data, health information, or political opinions) except where expressly required by regulatory obligations and with your explicit consent.

04 How We Collect Data

xc555 collects your personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, server logs, and similar tracking technologies as described in Section 9 of this Policy.
• Third-party sources: Identity verification data from KYC service providers, fraud screening data from risk management partners, and payment data from payment processors such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.
• Publicly available sources: Information that is lawfully available from public records where this is relevant to fraud prevention or regulatory compliance obligations.

05 Purpose & Legal Basis for Processing

xc555 processes your personal data only for specific, legitimate purposes. The following table sets out the purposes for which your data is used and the legal basis on which xc555 relies for each type of processing:

Where xc555 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact xc555 support via live chat or email.

06 Data Sharing

xc555 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your personal data may be shared only in the following circumstances and only to the extent strictly necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard, for the purpose of processing your PKR deposits and withdrawals.
• Identity and KYC verification providers: Third-party services engaged by xc555 to verify your identity, age, and the authenticity of documents submitted during the verification process.
• Game software providers: Licensed game studios and software developers whose games are integrated into the xc555 Platform. These providers may receive pseudonymised usage data necessary to operate and maintain their games.
• Fraud prevention and risk management partners: Third-party services used by xc555 to screen transactions and identify potentially fraudulent or suspicious account activity.
• Regulatory and law enforcement authorities: Where xc555 is required by applicable law, court order, or regulatory direction to disclose personal data. xc555 will notify you of any such disclosure where legally permitted to do so.
• Professional advisers: Legal, financial, and compliance advisers engaged by xc555 on a confidential basis where necessary for the conduct of xc555's business.

07 Data Retention

xc555 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulatory requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, to comply with financial record-keeping obligations.
• Customer support communications: Retained for a period of three (3) years from the date of the last interaction, or longer if the communication relates to an unresolved dispute.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, to demonstrate compliance.
• Technical and usage data: Retained in identifiable form for up to two (2) years, after which it may be anonymised and retained for statistical and analytical purposes without limitation.

Upon expiry of the applicable retention period, xc555 will securely delete or anonymise your personal data. Where deletion is not immediately possible due to technical constraints, the data will be isolated and protected from further processing until deletion is completed.

08 Data Security

xc555 implements appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the xc555 Platform.
• Encrypted storage of sensitive personal and financial data at rest using industry-standard encryption protocols.
• Role-based access controls ensuring that only authorised xc555 personnel with a documented business need may access personal data.
• Regular security audits and penetration testing conducted by independent cybersecurity specialists.
• Multi-factor authentication (MFA) for internal xc555 systems that hold or process personal data.
• Incident response procedures to detect, report, and remediate personal data breaches in a timely manner. Where a breach is likely to result in a risk to your rights and freedoms, xc555 will notify you without undue delay.

09 Cookies & Tracking Technologies

xc555 uses cookies and similar tracking technologies (collectively, "Cookies") on the Platform. A cookie is a small text file placed on your device when you visit the Platform. Cookies help xc555 operate the Platform effectively, remember your preferences, and understand how users interact with the site.

xc555 uses the following categories of Cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session management cookies that keep you logged into your xc555 account and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as your preferred language, game lobby view, and responsible gaming settings. Disabling these may affect your experience on the Platform.
• Analytics cookies: Used by xc555 to understand how users navigate the Platform, which games are most popular, and where technical issues occur. This data is used in aggregate and pseudonymised form to improve the xc555 experience for Pakistani users.
• Marketing cookies: Used to serve relevant promotions and offers within the xc555 Platform based on your activity. xc555 does not use marketing cookies to serve advertisements on third-party websites.

You can manage or disable non-essential Cookies through your browser settings at any time. Please note that disabling certain Cookies may impact the functionality and performance of the xc555 Platform. For detailed instructions on managing Cookies in your browser, please refer to your browser's help documentation.

10 Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by xc555:

• Right of Access: You may request a copy of the personal data xc555 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held by xc555. You can update basic account details directly through your xc555 account settings or by contacting support.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. Note that xc555 may be required by law to retain certain data regardless of an erasure request.
• Right to Restrict Processing: You may request that xc555 restrict the processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that xc555 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing based on xc555's legitimate interests, including direct marketing communications. xc555 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the xc555 Data Privacy team via live chat or at the email address listed in Section 14. xc555 will respond to all valid requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, and you will be notified accordingly.

11 Minors & Age Policy

The xc555 Platform is strictly intended for persons aged 21 years and above. xc555 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the xc555 registration and KYC process and is enforced using CNIC verification.

If xc555 becomes aware that personal data has been collected from a user who is under the age of 21, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the xc555 Platform, please contact xc555 support immediately via live chat so that the matter can be investigated and resolved without delay.

12 International Data Transfers

xc555 may transfer your personal data to countries outside Pakistan where xc555's service providers, game software partners, or hosting infrastructure are located. Where such transfers occur, xc555 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring the recipient to protect your personal data to standards equivalent to those applied by xc555.
• Data processing agreements with all third-party processors that handle personal data on xc555's behalf.
• Transfer only to jurisdictions that maintain adequate data protection frameworks, or where supplementary safeguards have been implemented.

By using the xc555 Platform and agreeing to this Policy, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan. xc555 will always ensure that such transfers are conducted in accordance with applicable data protection requirements and that your rights are protected regardless of where your data is processed.

13 Changes to This Privacy Policy

xc555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or xc555's data processing practices. The most current version of this Policy will always be published on this page, with the effective date prominently displayed at the top of the document.

Where changes are material — meaning they significantly affect how your personal data is processed or your rights in relation to it — xc555 will notify registered users via email or an in-Platform notification at least seven (7) days before the revised Policy takes effect. Your continued use of the xc555 Platform after the revised Policy has taken effect constitutes your acceptance of the updated terms.

We encourage all xc555 users to review this Policy periodically to stay informed about how their personal data is handled. If you have any concerns about a proposed change to this Policy, please contact xc555 support before the change takes effect.

14 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or xc555's data processing practices, please contact the xc555 Data Privacy team using the following details:

• Live Chat: Available 24/7 via the xc555 Platform — the fastest way to reach our support team in Urdu or English.
• Email: [email protected] (plain text — not a clickable link)
• Response Time: xc555 aims to respond to all privacy-related enquiries within 30 calendar days of receipt.
• Languages: Support available in Urdu and English for all Pakistani users, including those in Karachi, Lahore, Islamabad, Faisalabad, and across the country.

If you are not satisfied with xc555's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection or regulatory authority in the jurisdiction applicable to your circumstances. xc555 will cooperate fully with any regulatory investigation into its data processing practices.