gx555 Privacy Policy — How We Protect Your Personal Information

1 Definitions

Throughout this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly. This includes but is not limited to name, CNIC number, date of birth, mobile number, residential address, IP address, device identifiers, and financial account information.
• "Processing" means any operation performed on Personal Data, whether or not by automated means, including collection, recording, storage, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Controller" means gx555, the entity that determines the purposes and means of processing Personal Data collected through the gx555 platform.
• "Third Party" means any person or entity that is not you and not gx555, including payment processors, identity verification providers, and regulatory authorities.
• "PKR" means Pakistani Rupee, the primary transaction currency on the gx555 platform.

2 Data We Collect

gx555 collects Personal Data in the following categories. We collect only what is necessary for the stated purpose:

3 How We Collect Your Data

gx555 collects Personal Data through the following mechanisms:

• Direct submission: Data you provide when registering a gx555 account, submitting identity verification documents, initiating a PKR deposit or withdrawal, or contacting the support team via live chat or email.
• Automated technical collection: Data collected automatically when you access the gx555 platform, including IP addresses, device identifiers, cookie data, and session logs. This collection occurs regardless of whether you are logged in.
• Third-party verification providers: Identity and age verification data obtained from authorised third-party KYC (Know Your Customer) service providers engaged by gx555 to fulfil its regulatory compliance obligations.
• Payment processors: Transaction confirmation data shared by payment platforms (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) solely to confirm deposit and withdrawal status.

4 Legal Basis for Processing

gx555 processes your Personal Data only where a valid legal basis exists. The legal bases applicable to gx555's processing activities are:

1. Contractual necessity: Processing required to fulfil the gx555 user agreement — including account creation, PKR transaction processing, game delivery, and withdrawal execution.
2. Legal obligation: Processing required to comply with applicable gaming regulations, anti-money laundering (AML) laws, Know Your Customer (KYC) requirements, and any other regulatory obligations imposed on gx555 as a licensed gaming operator.
3. Legitimate interests: Processing necessary for gx555's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement, provided such interests are not overridden by your fundamental privacy rights.
4. Consent: Processing based on your freely given, specific, and informed consent, such as receiving promotional communications from gx555. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 How We Use Your Data

gx555 uses Personal Data for the following purposes:

• To establish and manage your gx555 player account, including identity verification and age confirmation (minimum 21 years).
• To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate transaction records.
• To deliver the gaming services you request, including casino games, sports betting markets (including PSL and international cricket), and arcade titles available on the gx555 platform.
• To communicate with you regarding your account, including deposit confirmations, withdrawal status, OTP verification codes, and responsible gaming notifications.
• To detect, investigate, and prevent fraud, money laundering, underage gambling, multiple account registration, and other prohibited activities, in accordance with our Terms & Conditions.
• To monitor usage patterns for responsible gaming purposes, including identifying potential indicators of problem gambling behaviour and presenting appropriate responsible gaming tools.
• To improve the gx555 platform's technical performance, user interface, and game library through analysis of aggregated, anonymised usage data.
• To fulfil legal and regulatory reporting obligations imposed on gx555 as an internationally licensed gaming operator.
• To send you promotional communications about gx555 offers, bonuses, and new features — only where you have consented to receive such communications and have not subsequently withdrawn that consent.

6 Data Sharing & Disclosure

gx555 does not sell, rent, or commercially trade your Personal Data to any third party. We share data with external parties only in the limited circumstances described below, and always under contractual data protection obligations:

1. Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive only the transaction reference data necessary to process your PKR deposit or withdrawal. gx555 does not transmit your full gx555 account profile to payment providers.
2. Identity verification providers: Third-party KYC service providers engaged by gx555 receive your identity documents solely for the purpose of verifying your age and identity in accordance with our regulatory obligations. These providers are contractually prohibited from using your data for any other purpose.
3. Regulatory and law enforcement authorities: gx555 will disclose Personal Data to governmental, regulatory, or law enforcement bodies where required to do so by a legally binding order, warrant, or regulatory directive. We will notify you of such disclosure to the extent permitted by applicable law.
4. Gaming licence authority: Our international gaming licence authority may require periodic reporting on player activity as part of the conditions of our licence. Such reporting uses aggregated or pseudonymised data wherever possible.
5. Business continuity: In the event of a merger, acquisition, or restructuring of the gx555 operating entity, Personal Data held at the time of the transaction may be transferred to the successor entity, subject to the same privacy obligations as set out in this Policy. Affected players will be notified in advance.

7 Cookies & Tracking Technologies

The gx555 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. The categories of cookies used by gx555 are as follows:

• Strictly necessary cookies: Required for the gx555 platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences, such as display language, remembered login (where you have selected "Remember Me"), and responsible gaming notification settings. Disabling these cookies may impair your user experience but will not prevent access to the platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how players interact with the gx555 platform, including which games are most frequently accessed and which sections of the site are visited most. This data is used exclusively to improve gx555's services and does not identify individual players.
• Security cookies: Used by gx555's fraud detection systems to analyse behavioural patterns and identify unusual account access activity. These are essential to protecting your gx555 account from unauthorised use.

You may manage cookie preferences through your browser settings. Deleting existing cookies or blocking future cookies may affect certain platform features. gx555 does not use third-party advertising cookies or cross-site tracking technologies.

8 Data Retention

gx555 retains Personal Data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active account data: Retained for the duration of your active gx555 account and for a period of five (5) years following permanent account closure, to meet regulatory, AML, and dispute resolution obligations.
• Financial transaction records: PKR deposit, withdrawal, and wagering records are retained for seven (7) years from the date of the transaction in accordance with applicable financial record-keeping requirements.
• KYC and identity verification documents: Retained for the period specified by the gaming licence authority under which gx555 operates, typically five (5) years from account closure.
• Support and communication records: Live chat transcripts and email correspondence are retained for three (3) years to support dispute resolution and quality assurance processes.
• Technical and usage logs: Anonymised or pseudonymised technical logs are retained for up to thirteen (13) months for security analysis purposes.

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

9 Data Security

gx555 implements a layered security architecture to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. The key components of our security programme include:

• Transport layer encryption: All data transmitted between your device and the gx555 platform is encrypted using TLS 1.3 with 256-bit AES encryption. This is the same encryption standard applied by major Pakistani commercial banks to protect online banking sessions.
• Password and credential protection: gx555 stores account passwords using one-way cryptographic hashing algorithms. No gx555 employee, system administrator, or support agent has the ability to read your account password in plain text.
• Access controls: Internal access to Personal Data is restricted to gx555 personnel who require it to perform their specific job functions. Access privileges are reviewed regularly and revoked immediately upon role change or departure.
• Fraud detection systems: Automated systems monitor gx555 accounts in real time for unusual login patterns, anomalous wagering activity, and suspicious financial transactions. Alerts trigger immediate investigation.
• Third-party security audits: gx555 engages independent security professionals to conduct penetration testing and vulnerability assessments of our platform infrastructure on a regular basis.

While gx555 takes all commercially reasonable steps to protect your data, no online platform can guarantee absolute security against all threats. You are responsible for maintaining the security of your own login credentials. If you suspect unauthorised access to your gx555 account, contact our support team immediately via live chat.

10 Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights regarding your Personal Data held by gx555:

To exercise any of the above rights, please contact the gx555 Data Protection team at [email protected]. Please include your full name, registered mobile number, and a description of your request. gx555 will acknowledge your request within five (5) business days and will fulfil it within fourteen (14) business days, except where a longer period is permitted by applicable law or regulatory obligation.

11 Children & Minors

The gx555 platform is strictly restricted to individuals who are twenty-one (21) years of age or older. gx555 does not knowingly collect Personal Data from any person under the age of 21. Age verification is a mandatory component of the gx555 account registration process, and accounts found to belong to underage individuals will be immediately closed with all deposited funds returned to the original payment method.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered a gx555 account, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay. For information on parental controls and responsible gaming tools, please visit our Responsible Gaming page.

12 Amendments to This Policy

gx555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes — those that affect the nature of data collected, the purposes for which it is used, or the rights available to players — will be communicated to registered gx555 players via SMS notification to their registered Pakistani mobile number and/or by a prominent notice on the gx555 platform at least seven (7) days prior to the amendment taking effect.

Your continued use of the gx555 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must close your gx555 account and cease using the platform. The date of the most recent revision is displayed at the top of this page. We recommend reviewing this Policy periodically to remain informed of how gx555 protects your Personal Data.