xg555 Privacy Policy

1 Introduction

xg555 ("xg555", "we", "us", "our") operates the online sports betting and casino platform accessible at xg555.org ("Platform"). As the operator of the Platform, xg555 is the data controller responsible for the personal data of registered players and site visitors ("you", "your").

We understand that Pakistani players value their privacy, and we are committed to being fully transparent about the personal data we collect, the reasons we collect it, and the ways in which it is used and protected. This Privacy Policy has been drafted in plain, clear English so that it is easy to understand, while also meeting the standards expected of a licensed online gaming operator.

This Privacy Policy applies to:

• All registered xg555 account holders;
• Visitors browsing the xg555 website without a registered account;
• Individuals who contact xg555 customer support;
• Anyone who participates in an xg555 promotion, survey, or competition.

This Policy should be read alongside the xg555 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and xg555.

2 Personal Data We Collect

xg555 collects different categories of personal data depending on how you interact with the Platform. The main categories are set out in the table below:

xg555 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless such data is voluntarily provided by you in the context of a responsible gaming self-exclusion request or similar process.

3 How We Collect Your Data

3.1 Directly From You

The majority of personal data xg555 holds is provided directly by you when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our customer support team, or participate in a promotion. You are always informed at the point of collection what data is required and why.

3.2 Automatically via Technology

When you visit and use the xg555 platform, certain technical and usage data is collected automatically through cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser information, and your interaction with pages and games on the Platform. Please refer to Section 9 (Cookies Policy) for full details.

3.3 From Third Parties

xg555 may receive personal data about you from the following third-party sources:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and SadaPay may share transaction confirmation data with xg555 to facilitate deposit and withdrawal processing.
• Identity Verification Services: xg555 may use third-party KYC verification providers to cross-check identity documents against official databases. These providers are bound by strict data processing agreements.
• Fraud Prevention Agencies: xg555 may receive fraud-related data from specialist agencies to help identify and prevent fraudulent activity on the Platform.
• Analytics Providers: Aggregated and anonymised usage data may be received from analytics platforms to help xg555 understand how the Platform is used and improve its services.

4 How We Use Your Personal Data

xg555 uses your personal data for the following specific purposes:

• Account Creation & Management: To register your xg555 account, verify your identity, and manage your account settings throughout the lifecycle of your membership.
• Processing Transactions: To process your PKR deposits via JazzCash, EasyPaisa, SadaPay, HBL, UBL, and Meezan Bank, and to process withdrawal requests to your verified payment method.
• Regulatory Compliance: To meet our legal obligations under anti-money laundering (AML) regulations, know your customer (KYC) requirements, and the conditions of our international online gaming licence.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, match fixing, and other prohibited conduct on the Platform.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance when you contact the xg555 support team.
• Responsible Gaming: To monitor your gaming activity for signs of problematic gambling behaviour and to apply any responsible gaming tools you have activated on your account, such as deposit limits or self-exclusion.
• Personalisation: To tailor your xg555 experience, including presenting relevant cricket betting markets, PSL odds, and slot game recommendations based on your prior activity and preferences.
• Marketing Communications: Where you have given your consent, to send you promotional emails and notifications about xg555 bonuses, new games, and PSL betting offers. You may withdraw your consent to marketing communications at any time via your account settings.
• Platform Improvement: To analyse usage patterns and identify areas where the xg555 platform can be improved, made faster, or made more reliable for Pakistani users.
• Legal Claims: To establish, exercise, or defend legal claims in the event of a dispute between you and xg555.

5 Legal Basis for Processing

xg555 processes your personal data under the following legal bases, in accordance with applicable data protection law:

5.1 Performance of a Contract

The processing of your identity data, contact data, and financial data is necessary for xg555 to perform its contractual obligations to you as a registered player — including operating your account, processing deposits and withdrawals, and settling bets.

5.2 Legal Obligation

xg555 is legally required to process certain categories of your personal data to comply with AML regulations, KYC requirements, and the conditions of its international gaming licence. This processing cannot be opted out of; it is a mandatory condition of holding an account on the xg555 platform.

5.3 Legitimate Interests

xg555 processes certain technical and usage data on the basis of its legitimate interests in operating a secure, reliable, and commercially viable online gaming platform. This includes fraud prevention, platform security, and internal analytics. xg555 has assessed that these legitimate interests are not outweighed by your fundamental rights and freedoms.

5.4 Consent

Where xg555 sends you marketing communications or uses non-essential cookies, this processing is based on your freely given, specific, and informed consent. You have the right to withdraw your consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

6 Data Sharing & Third Parties

xg555 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients only where strictly necessary:

6.1 Payment Service Providers

Your financial data is shared with payment service providers including JazzCash, EasyPaisa, SadaPay, HBL, UBL, and Meezan Bank solely for the purpose of processing your deposit and withdrawal transactions. These providers act as independent data controllers for their own services and are subject to their own privacy policies.

6.2 KYC & Identity Verification Partners

Identity documents and personal data submitted during the KYC verification process may be shared with third-party identity verification service providers who assist xg555 in validating your identity documents and cross-checking them against relevant databases. All such providers are bound by data processing agreements requiring them to handle your data securely and only for the stated purpose.

6.3 Game Technology Providers

The casino games, live dealer tables, and fishing games on the xg555 platform are powered by third-party game technology providers. These providers may receive limited technical data about game sessions for the purpose of game delivery, technical support, and RNG certification audits. They do not receive your full personal profile.

6.4 Regulatory & Law Enforcement Authorities

xg555 may be legally required to disclose your personal data to regulatory bodies, law enforcement agencies, or other governmental authorities where required by applicable law, court order, or the conditions of our gaming licence. This includes reporting obligations under anti-money laundering regulations.

6.5 Professional Advisers

xg555 may share your personal data with its legal advisers, auditors, or insurers where necessary for the provision of professional services. All such advisers are bound by professional duties of confidentiality.

7 Data Retention

xg555 retains your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guideline:

After the applicable retention period has expired, xg555 will securely delete or anonymise your personal data so that it can no longer be associated with you. Anonymised or aggregated data that cannot be linked back to any individual may be retained indefinitely for statistical and analytical purposes.

8 Security Measures

xg555 takes the security of your personal data very seriously and has implemented a comprehensive range of technical and organisational security measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and xg555 servers is encrypted using industry-standard SSL/TLS technology.
• Data Encryption at Rest: Sensitive personal data and financial data stored on xg555 servers is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): xg555 offers optional 2FA for player accounts and enforces 2FA for all internal staff access to systems containing personal data.
• Access Controls: Personal data is accessible only to xg555 employees and contractors who have a legitimate operational need to access it. Access is governed by role-based permission controls and is subject to audit logging.
• Penetration Testing: xg555's platform infrastructure undergoes regular independent security penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: xg555 maintains a documented data breach response procedure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, xg555 will notify affected players and the relevant regulatory authority within the timeframes required by applicable law.

9 Cookies Policy

The xg555 platform uses cookies and similar tracking technologies to enhance your user experience, maintain session security, and gather analytical data that helps us improve the Platform. A cookie is a small text file stored on your device by your web browser when you visit a website.

9.1 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the xg555 platform to function. They manage your login session, maintain your betting cart, and ensure platform security. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences such as language settings, preferred cricket betting markets, and display options to provide a more personalised experience.
• Analytics Cookies: These cookies collect aggregated, anonymised data about how visitors use the xg555 platform — which pages are visited most, how long sessions last, and where users navigate from. This data helps xg555 improve the platform experience for Pakistani users.
• Performance Cookies: These cookies monitor the technical performance of the xg555 platform and help us identify and resolve slowness, errors, or downtime issues.

9.2 Managing Your Cookie Preferences

You can manage your cookie preferences at any time via the cookie settings panel on the xg555 platform. You may also configure your web browser to block or delete cookies. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging into your account. Disabling functional or analytics cookies will not affect your ability to place bets or access your account.

9.3 Cookie Retention

Session cookies are deleted automatically when you close your browser. Persistent cookies are stored on your device for a defined period (typically between 30 days and 12 months) or until you manually delete them, depending on the specific cookie's function.

10 Your Data Rights

As a player on the xg555 platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at the details provided in Section 14.

xg555 will respond to all data rights requests within 30 calendar days of receiving a verified request. In complex cases, this period may be extended by up to a further 60 days, in which case xg555 will notify you of the extension and the reason for it. There is no charge for exercising your data rights, though xg555 reserves the right to charge a reasonable fee for manifestly unfounded or excessive requests.

11 Minors & Age Policy

The xg555 platform is strictly intended for adults aged 21 years and above. xg555 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step of the xg555 registration and KYC process, and xg555 uses a combination of self-declaration and document verification to ensure that all registered players meet the minimum age requirement.

If xg555 becomes aware that it has inadvertently collected personal data from a person under the age of 21, we will take immediate steps to close that account, void any associated bets or gaming activity, and securely delete the personal data collected, subject to any legal obligations to retain evidence of the breach for regulatory reporting purposes.

If you are a parent or guardian and you have reason to believe that your child has registered on the xg555 platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

12 International Data Transfers

As an internationally licensed online gaming operator, xg555 may transfer your personal data to countries outside of Pakistan for the purpose of operating the Platform. This includes transfers to the jurisdiction in which xg555 holds its gaming licence, as well as transfers to data centres and technology service providers located in other countries.

Where xg555 transfers your personal data internationally, it takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that which would apply within Pakistan. These safeguards may include:

• Standard contractual data protection clauses incorporated into agreements with international service providers;
• Transfers to countries or organisations that have been assessed as providing an adequate level of data protection;
• Binding corporate rules where xg555 transfers data within a group of related entities.

You may request further information about the specific safeguards in place for any international transfer of your personal data by contacting the xg555 privacy team at the details in Section 14.

13 Changes to This Privacy Policy

xg555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our business operations, or the services offered on the Platform. The "Last Updated" date at the top of this page will be revised accordingly whenever a material change is made.

Where a change to this Privacy Policy is material — meaning it significantly affects your rights or the way in which xg555 processes your personal data — xg555 will provide you with reasonable advance notice via email to the address associated with your account, or via a prominent notice on the xg555 platform. Continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically so that you are always aware of the most current version and how xg555 handles your personal data.

14 Contact Us & Privacy Enquiries

If you have any questions, concerns, or complaints about this Privacy Policy or the way in which xg555 handles your personal data, or if you wish to exercise any of your data rights described in Section 10, please contact the xg555 privacy team using the details below:

xg555 aims to resolve all privacy enquiries and data rights requests within 30 calendar days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the regulatory body that oversees xg555's international gaming licence.