x555 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy applies to the x555 platform, accessible at x555-khelo.com, and all associated mobile applications and digital services operated under the x555 brand. References to "x555", "we", "us", or "our" in this policy refer to the x555 platform and its operating entity.

x555 is an online gaming platform built specifically for Pakistani players, offering sports betting, live casino games, Aviator, poker, and Ludo. All transactions on x555 are conducted in Pakistani Rupees (PKR). Our primary payment channels are Pakistani mobile wallets — Easypaisa, JazzCash, NayaPay, and SadaPay — alongside Bank IBFT and Visa/Mastercard card payments.

x555 acts as the data controller for all personal information collected from registered players and website visitors. If you have any questions about how x555 handles your data, you can reach the x555 privacy team at support@x555-khelo.com.

x555 collects personal data through several channels: information you provide directly during registration, data generated by your use of the platform, and technical data collected automatically by our systems. Here is a breakdown of what we collect and why:

x555 does not intentionally collect sensitive personal data such as biometric information, health data, or religious beliefs. If such data is ever incidentally included in a document you submit for verification, x555 will not record or process it beyond what is necessary to complete identity verification.

x555 uses your personal data for the following specific purposes. We do not use your data for any purpose not listed here without first updating this policy and, where required by law, obtaining your consent.

• Account management: Creating, maintaining, and securing your x555 account. This includes authentication, password recovery, and enforcing the one-account-per-person rule.
• Payment processing: Executing deposits and withdrawals in PKR via your chosen payment method. Financial data is shared with payment processors only to the extent necessary to complete the transaction.
• Identity and age verification: Confirming that you are aged 18 or over and that the identity you have registered with x555 is accurate. This is a legal obligation for x555 as a gaming platform.
• Legal and regulatory compliance: Fulfilling anti-money-laundering (AML) obligations, responding to lawful requests from authorities, maintaining transaction records as required by financial regulations.
• Security and fraud prevention: Detecting suspicious login activity, unusual transaction patterns, bot usage, account sharing, and multi-account behaviour. This protects both x555 and other players on the platform.
• Customer support: Resolving your queries, complaints, and disputes. Support communications are retained as described in Section 8.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with x555, identify technical problems, and improve game performance and navigation. This analysis does not identify you individually.
• Responsible gaming: Monitoring play patterns to identify potential problem gambling behaviours and, where necessary, proactively reaching out to players who show signs of harmful play as part of x555's Responsible Gaming obligations.

x555 processes your personal data on the following legal grounds, depending on the purpose:

• Contract performance: Processing your data is necessary to provide the services you have signed up for — account creation, game access, deposits, and withdrawals. Without this processing, x555 cannot fulfil its obligations to you as a registered player.
• Legal obligation: Certain processing — particularly age verification, AML checks, and transaction record keeping — is required by law. x555 must perform this processing regardless of your preferences and cannot offer an opt-out for these activities.
• Legitimate interests: x555 processes some data on the basis of legitimate business interests, including fraud detection, platform security, and improving the overall service experience. Where we rely on legitimate interests, we have assessed that our interests do not override your privacy rights.
• Consent: For optional data uses such as marketing communications (if applicable), x555 will ask for your explicit consent before processing. You may withdraw consent at any time by contacting support@x555-khelo.com, without affecting the lawfulness of processing that occurred before withdrawal.

x555 does not sell, rent, or trade your personal data. We share data only in the following limited and necessary circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive the transaction data necessary to process your deposits and withdrawals. These partners process your data under their own privacy policies and are contractually required to keep it confidential.
• Identity verification services: Where x555 uses a third-party KYC (Know Your Customer) service to verify identity documents, your identity data is shared with that provider for verification purposes only and is not retained by them beyond the verification process.
• Anti-fraud and security partners: x555 works with anti-fraud services to detect bot activity, multi-accounting, and unusual transaction patterns. These partners receive anonymised or hashed data and are bound by strict confidentiality agreements.
• Legal authorities: x555 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by law, court order, or to protect the legal rights of x555 or its players. x555 will notify affected players where legally permitted to do so.
• Business transfers: In the event that x555's business or assets are acquired, merged, or transferred to another entity, player data may form part of the transferred assets. x555 will notify players of any such change and ensure the acquiring entity is bound by equivalent privacy protections.

All third-party partners with whom x555 shares data are selected based on their data security standards and are contractually obligated to use your data only for the specific purpose for which it was shared.

Payment security is something x555 takes particularly seriously, given that the platform handles real PKR transactions on behalf of Pakistani players every day. Here is how x555 handles financial data specifically:

x555 does not store full card numbers on its own servers. Card payment data is handled by PCI-DSS compliant payment processors. x555 stores only a tokenised reference that allows you to select a saved payment method — the actual card details are held by the processor, not x555.

Mobile wallet identifiers (your Easypaisa or JazzCash registered number) are stored by x555 to facilitate repeat deposits and to route withdrawals to the correct account. This data is encrypted at rest and is accessible only to the x555 payments team under audit-logged conditions.

Transaction history — deposits, withdrawals, bonuses credited, and bets settled — is retained on x555 systems for a minimum of five years to comply with financial record-keeping obligations. You can view your own transaction history at any time from within your x555 account dashboard.

x555 uses cookies and similar tracking technologies on its website and mobile applications. Cookies are small data files stored on your device that help x555 deliver a functional, personalised, and secure experience. Here is a breakdown of the cookies x555 uses:

x555 does not use advertising or tracking cookies that follow you across other websites. x555 has no third-party advertising partnerships and does not participate in retargeting networks. The only cookies on x555 are those described in the table above.

You can manage cookie preferences through your browser settings or mobile device privacy settings. Blocking essential cookies will prevent x555 from functioning correctly — you will not be able to log in or process payments without them.

x555 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data (name, contact details, CNIC): Retained for the duration of your account plus a minimum of five years after account closure, to comply with AML record-keeping requirements.
• Transaction records (deposits, withdrawals, bet history): Retained for a minimum of five years from the date of the transaction, as required by financial regulations applicable to x555.
• KYC and identity verification documents: Retained for the duration of your account and five years post-closure. Physical copies (if submitted) are securely destroyed after verification is completed.
• Support communications: Retained for three years from the date of the most recent interaction in a support thread, unless the communication forms part of an open dispute or legal proceeding, in which case it is retained until the matter is resolved.
• Analytics data: Aggregated and anonymised after 13 months. Anonymised data is no longer personal data and may be retained indefinitely for statistical purposes.
• Dormant accounts: If your account has been inactive for 12 months, x555 will send a notification before taking any action. Data associated with dormant accounts follows the same retention periods as active accounts.

When data reaches the end of its retention period, x555 either deletes it securely or anonymises it so that it can no longer be linked to you as an individual.

x555 implements a layered security approach to protect your personal data. This includes technical measures, operational procedures, and staff training. Key security controls in place at x555 include:

• SSL/TLS encryption: All data in transit between your device and x555 servers is encrypted. The padlock icon in your browser confirms this protection is active when you visit x555-khelo.com.
• Encryption at rest: Sensitive data fields — including CNIC numbers, payment identifiers, and account credentials — are encrypted in the x555 database using industry-standard algorithms.
• Two-factor authentication: x555 supports OTP (one-time password) verification for login and for payment operations, adding a layer of protection beyond your password.
• Access controls: Internal access to player data is restricted by role. Customer support agents can see your contact details and account history but cannot access payment credentials. The payments team can access transaction data but not support chat logs. Access to all sensitive systems is logged and audited.
• Regular security reviews: x555 conducts regular internal security reviews and engages external assessments to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no digital platform can guarantee absolute security. In the unlikely event of a data breach that affects your personal data, x555 will notify affected players promptly — within 72 hours of becoming aware of the breach — and will take immediate steps to contain and remediate the incident.

x555 respects your rights as a data subject. As a registered player on x555, you have the following rights with respect to your personal data. To exercise any of these rights, contact support@x555-khelo.com with the subject line "Data Rights Request".

x555 is strictly for adults aged 18 and over. x555 does not knowingly collect personal data from persons under the age of 18. Age verification is a mandatory part of the x555 registration and KYC process precisely to enforce this requirement.

If x555 becomes aware that a registered account belongs to a person under 18, the account will be immediately suspended, any balance will be forfeited, and all data associated with the account will be deleted except where retention is required by law for fraud prevention purposes.

If you are a parent or guardian and believe your child has registered on x555, please contact support@x555-khelo.com immediately. x555 will investigate and act on verified reports within 24 hours.

x555 strongly encourages parents and guardians to use parental control software on shared devices to prevent access to online gaming platforms. x555 does not have visibility into whether a device is shared between adults and minors in a household — this is a household-level responsibility.

x555 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements to our data handling practices. The "Last Updated" date at the top of this page is updated every time a revision is made.

For changes that are minor — such as clarifications that do not affect your rights or how your data is used — x555 will simply update this page. For material changes that significantly affect your privacy rights or the way x555 uses your data, we will notify registered players via their registered email address or via an in-platform notification at least 7 days before the change takes effect.

Your continued use of x555 after the effective date of a policy update constitutes your acceptance of the revised policy. If you do not accept the updated policy, you should close your account before the effective date. Your real money balance will be returned to your registered payment method upon voluntary account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or how x555 handles your personal data, please get in touch via:

• Email: support@x555-khelo.com — Subject line: "Privacy Policy Query" or "Data Rights Request"
• Live Chat: Available 24/7 from within your x555 account — the quickest route for urgent data security concerns

x555 acknowledges all privacy-related emails within 48 hours and aims to fully resolve data rights requests within 30 calendar days. For complex or multi-faceted requests, x555 may extend this period by up to an additional 30 days and will inform you of the extension before the initial 30-day deadline.

If you are not satisfied with x555's response to your privacy concern, you have the right to escalate the matter to the x555 complaints team by explicitly requesting escalation in a follow-up email. The complaints team will review your case independently and provide a final decision within 14 business days.