xs555 Privacy Policy

xs555 is an internationally licensed online sportsbook and casino platform operated for players across Pakistan. References to "xs555", "we", "us", or "our" throughout this Privacy Policy refer to the xs555 operating entity and its authorised service affiliates responsible for the xs555 platform accessible at https://xs555.app.

xs555 acts as the data controller in respect of all personal data collected from players and visitors to the xs555 platform. As a data controller, xs555 determines the purposes and means by which personal data is processed and bears full responsibility for ensuring that such processing is carried out in accordance with applicable data protection obligations imposed by our international gaming licence and general best-practice data governance standards.

xs555 collects personal data from you in several ways: directly when you register an account, make a deposit, contact support, or use platform features; automatically through your use of the xs555 website and mobile platform; and from third parties where permitted by law, such as payment processors and fraud-prevention services.

The categories of personal data xs555 may collect include, but are not limited to, the following:

xs555 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, or health information unless you voluntarily disclose such information in the context of a responsible gaming support request, in which case it is treated with the highest level of confidentiality.

xs555 uses your personal data for the following specific purposes:

• Account creation and management: To register your xs555 account, verify your identity, and maintain your player profile in accordance with our licence obligations.
• Transaction processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment methods accurately and securely.
• KYC and AML compliance: To verify your identity and source of funds as required by our international gaming licence's anti-money-laundering obligations. xs555 is legally required to carry out these checks before processing withdrawals above defined thresholds.
• Service delivery: To provide you with access to sports betting markets, including PSL, international cricket, UFC, and football, as well as xs555 Casino games and live dealer tables.
• Customer support: To respond to your queries, resolve disputes, and maintain records of support interactions for quality and compliance purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, and other forms of prohibited conduct on the xs555 platform.
• Responsible gaming: To monitor your gambling activity for signs of problem gambling, enforce self-exclusion and deposit limits, and contact you if your account activity triggers responsible gaming alerts.
• Platform improvement: To analyse aggregated usage data and improve the functionality, speed, and content of the xs555 platform for all Pakistani players.
• Legal compliance: To meet our obligations under applicable laws and the terms of our gaming licence, including responding to lawful requests from regulatory or law enforcement authorities.

xs555 will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or establishing a separate legal basis for such processing.

xs555 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to deliver the xs555 platform services under the Player Agreement you accept upon registration, including account management, betting services, and payment processing.
• Legal obligation: Processing required to comply with AML legislation, KYC requirements, gaming licence conditions, and any lawful regulatory or governmental directive applicable to xs555's operations.
• Legitimate interests: Processing carried out in xs555's legitimate interests, including fraud detection, platform security, responsible gaming monitoring, and internal analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where xs555 relies on your consent as the legal basis for processing (for example, for direct marketing communications), you have the right to withdraw that consent at any time by contacting [email protected] or using the preference settings in your account dashboard.

xs555 does not sell or rent your personal data to third parties. xs555 may share your personal data with the following categories of recipients only where strictly necessary and subject to appropriate data protection safeguards:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card scheme operators, solely to process your PKR transactions and comply with financial verification requirements.
• Identity verification and KYC providers: Third-party services that assist xs555 in verifying the identity documents and financial information submitted during the KYC process.
• Fraud and security vendors: Specialist providers that assist xs555 in detecting suspicious account activity, device fingerprinting, and IP reputation checks to protect the integrity of the platform.
• Game content providers: Casino software studios whose games are hosted on xs555 Casino may receive anonymised session data necessary for game delivery and return-to-player verification. These providers do not receive personally identifiable information for marketing purposes.
• Regulatory and law enforcement authorities: xs555 may disclose your personal data to licensing regulators, financial intelligence units, or law enforcement agencies when required to do so by a valid legal obligation, court order, or regulatory direction.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by xs555 under appropriate confidentiality obligations.

xs555 supports PKR-denominated transactions via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard. When you initiate a deposit or withdrawal, the relevant financial data — including your wallet ID, bank account reference, or masked card number — is transmitted securely to the applicable payment processor using TLS encryption.

xs555 does not store complete card numbers or full mobile wallet credentials on its own servers. Full payment credentials are tokenised by our PCI-DSS compliant payment partners and replaced with secure tokens for ongoing transaction reference purposes. xs555 retains only the minimum financial metadata required for transaction records, dispute resolution, and AML reporting obligations.

All withdrawal requests above defined PKR thresholds are subject to mandatory KYC review before funds are released. This is a regulatory requirement under xs555's gaming licence and is not discretionary. xs555 takes no commercial benefit from KYC review delays.

xs555 uses cookies and similar tracking technologies on the xs555 website and mobile platform. A cookie is a small text file stored on your device that allows the xs555 platform to recognise your browser session, maintain your login state, and remember your preferences.

xs555 uses the following categories of cookies:

• Strictly necessary cookies: Required for the xs555 platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. You cannot opt out of strictly necessary cookies without disabling the platform entirely.
• Functional cookies: Used to remember your language preferences, display settings, and odds format selections across sessions.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the xs555 platform, which pages are most visited, and where errors occur. This data is used exclusively for internal platform improvement and is not shared with external advertising networks.
• Fraud-prevention cookies: Device fingerprinting and session-integrity tokens used to identify and block suspicious activity including multi-accounting and automated bot traffic.

xs555 does not use advertising cookies, social media tracking pixels, or cross-site behavioural targeting technologies. You can manage cookie preferences through your browser settings at any time, though disabling functional or analytics cookies may affect your platform experience.

xs555 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods mandated by our gaming licence or applicable legal obligations.

• Active account data: Retained for the full duration of your registered xs555 account plus a minimum post-closure period required by our licence.
• KYC and identity documents: Retained for a minimum of five (5) years from account closure or from the date of the last transaction, whichever is later, in compliance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years to satisfy accounting, tax, and AML audit trail obligations.
• Support communication records: Retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.
• Technical and usage logs: Typically retained for up to twelve (12) months for security monitoring and fraud investigation purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, xs555 will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with your identity.

As a registered xs555 player, you have the following rights in respect of your personal data held by xs555. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request":

• Right of access: You may request a copy of the personal data xs555 holds about you, along with information about how it is being processed.
• Right to rectification: You may request that xs555 correct any inaccurate or incomplete personal data held in your account record.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to xs555's legal retention obligations under its gaming licence and AML requirements.
• Right to restriction: You may request that xs555 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being investigated.
• Right to data portability: You may request that xs555 provide your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to object: You may object to xs555's processing of your personal data where that processing is based on legitimate interests, including direct marketing communications.
• Right to withdraw consent: Where xs555 relies on your consent as the legal basis for processing, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

xs555 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our technical and organisational security measures include:

• 256-bit TLS/SSL encryption for all data in transit between your device and xs555 servers.
• AES-256 encryption for sensitive data fields stored at rest in xs555 databases.
• Role-based access controls limiting employee access to personal data strictly to those with a verified operational need.
• Two-factor authentication (2FA) available for all xs555 player accounts and mandatory for all internal staff accounts with data access privileges.
• Regular third-party penetration testing and vulnerability assessments of the xs555 platform infrastructure.
• Automated intrusion detection and 24/7 security monitoring of platform infrastructure.
• Formal incident response procedures, including mandatory breach notification to affected players and relevant regulatory authorities where a reportable data breach occurs.

Notwithstanding the above, no internet-based platform can guarantee absolute security. xs555 strongly recommends that all players use a unique, strong password for their xs555 account and enable two-factor authentication from their account security settings.

xs555 is strictly an adults-only platform. Registration and use of the xs555 sportsbook and casino is permitted only for individuals who are 21 years of age or older. xs555 does not knowingly collect personal data from any person under the age of 21.

All new registrations are subject to age verification as part of the xs555 KYC process. If xs555 discovers that personal data has been collected from an individual under the age of 21, the account will be immediately suspended, all funds will be returned in accordance with our Terms & Conditions, and the personal data in question will be deleted from our systems without undue delay.

xs555 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. The current version of this Privacy Policy, along with its effective date, is always accessible at https://xs555.app/privacy-policy.

Where xs555 makes a material change to this Privacy Policy that affects the way in which your personal data is processed, we will notify you via the email address registered to your xs555 account at least fourteen (14) days before the change takes effect. Your continued use of the xs555 platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms.

If you do not agree with any material update to this Privacy Policy, you may close your xs555 account by contacting our support team prior to the effective date of the change.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way xs555 processes your personal data, please contact our compliance and data team using the details below. All privacy enquiries are handled by trained staff and treated with full confidentiality.

xs555's support team is available 24 hours a day, 7 days a week via live chat on the xs555 platform and via email. For urgent data security concerns — such as suspected unauthorised access to your account — please use live chat for the fastest response.