Privacy Policy — y5555 Data Handling Commitment

This Privacy Policy (hereinafter "Policy") is issued by y5555, the operator of the online betting and casino information platform accessible at https://y5555.cam (hereinafter "the Platform", "we", "us" or "our"). This Policy describes how y5555 collects, uses, stores, shares and protects the personal data of individuals who access, register on, or interact with the Platform (hereinafter "User", "you" or "your").

y5555 is committed to handling personal data responsibly and in accordance with applicable data protection principles. This Policy is written in plain English to ensure clarity for our primary user base in Pakistan and is made available on the Platform at all times without restriction.

By accessing or registering on the y5555 Platform, you acknowledge that you have read, understood and accepted the data handling practices described in this Policy. This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform overall.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, phone number, government identity number (CNIC), IP address and financial account details.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, amendment and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, y5555.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a contractual arrangement.
• "Consent" means a freely given, specific, informed and unambiguous indication by the User that they agree to the processing of their personal data for a stated purpose.
• "KYC" (Know Your Customer) means the identity and address verification process carried out by y5555 as part of its compliance obligations.
• "Cookie" means a small text file placed on your device by the Platform to enable session management, preferences and analytics.

y5555 collects the following categories of personal data from Users:

y5555 does not intentionally collect special categories of sensitive data (such as health information, religious beliefs or biometric data) unless strictly required for responsible gambling assessment or legal compliance, in which case explicit consent will be sought.

4.1 Information You Provide Directly

The majority of personal data we hold is provided directly by you during registration, KYC submission, deposit/withdrawal transactions, support interactions, promotional participation and completion of responsible gambling tool configurations.

4.2 Automatically Collected Data

When you access the Platform, technical data is automatically collected by our systems — including your IP address, device identifiers, browser type and session activity. This data is used for security monitoring, fraud detection and platform performance analysis.

4.3 Cookies and Tracking Technologies

The Platform uses cookies and similar technologies to manage user sessions, store preferences and collect anonymised usage analytics. See Section 10 for full details of our cookie practices.

4.4 Third-Party Sources

In limited circumstances, y5555 may receive data about you from third-party sources, including identity verification service providers (for KYC purposes), fraud prevention databases and payment processors. Data received from these sources is used only for the purpose for which it was shared and is handled in accordance with this Policy.

y5555 processes personal data only where a valid legal basis exists. The applicable bases for the processing activities described in this Policy are:

• Contractual Necessity: Processing required to perform the contract between y5555 and the User — including account management, payment processing, withdrawal fulfilment and customer support.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC/AML requirements, age verification and financial record-keeping.
• Legitimate Interests: Processing necessary for y5555's legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring and business analytics — where those interests are not overridden by the User's privacy rights.
• Consent: Processing based on your explicit consent, such as the receipt of promotional communications and non-essential cookies. Consent may be withdrawn at any time.

y5555 uses collected personal data for the following purposes:

• Account Management: Creating, maintaining and administering your y5555 account, including authentication and session management.
• Payment Processing: Facilitating deposits and withdrawals via available payment methods in PKR, including verification of payment method ownership.
• Identity and Age Verification (KYC): Confirming your identity, age and eligibility to use the Platform in compliance with operator requirements.
• Responsible Gambling: Monitoring account activity patterns to identify signs of problem gambling, applying limits set by you, and administering self-exclusion requests.
• Fraud and Security: Detecting, investigating and preventing fraudulent transactions, money laundering, abuse of promotional offers and unauthorised account access.
• Customer Support: Responding to support enquiries, resolving complaints, and maintaining communication records for quality assurance.
• Legal Compliance: Meeting regulatory, reporting and record-keeping obligations applicable to the Platform's operating licence.
• Marketing Communications: Sending promotional offers, platform updates and relevant betting information — only where you have provided consent. Opt-out options are available at all times.
• Platform Analytics: Analysing aggregated, anonymised usage data to improve Platform performance, user experience and product development.

y5555 does not sell, rent or commercially transfer personal data to third parties. Personal data may be shared with the following categories of recipients only where strictly necessary and subject to appropriate data protection safeguards:

• Payment Processors: To facilitate deposit and withdrawal transactions. Shared data is limited to the minimum required to execute the payment and verify method ownership.
• KYC and Identity Verification Providers: Third-party services used to verify the identity, age and address of Users as required by the Platform's compliance obligations.
• Fraud Prevention Services: Industry databases used to detect and prevent fraudulent activity, money laundering and bonus abuse.
• Technology and Hosting Providers: Infrastructure and software partners who support Platform operation, all of whom are bound by data processing agreements restricting use of your data to the specified purpose.
• Responsible Gambling Services: Where necessary to administer self-exclusion programmes or cross-platform exclusion schemes applicable to the operator's licence.
• Legal and Regulatory Authorities: Where required by applicable law, court order, regulatory direction or to protect the rights, property and safety of y5555, its users or the public.

As a user of the y5555 Platform, you hold the following rights in respect of the personal data we process about you. These rights may be subject to limitations where data retention is required for legal compliance purposes.

• Right of Access (Subject Access Request): You may request a copy of all personal data y5555 holds about you. We will provide this in a structured, readable format within a reasonable period.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held in your account.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where: (a) it is no longer necessary for the purpose collected; (b) you have withdrawn consent and no other legal basis applies; (c) you object to processing and no overriding legitimate interest exists; or (d) the data has been unlawfully processed.
• Right to Restriction of Processing: You may request that we limit processing of your data while a dispute or accuracy query is pending.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request your data in a machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or carried out for direct marketing purposes.
• Rights Regarding Automated Decision-Making: Where decisions affecting you are made solely by automated means, you may request human review of that decision.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact [email protected] with the subject line "Data Rights Request". Please include your full name and registered email address to enable us to locate your records. We will respond within a reasonable period and may need to verify your identity before processing the request.

y5555 retains personal data only for the period necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

• Account Registration and KYC Data: Retained for the duration of the active account relationship and for a period thereafter as required by the operator licence's record-keeping obligations (typically five years from account closure).
• Financial Transaction Records: Retained for the period required under applicable anti-money laundering and financial compliance obligations, typically a minimum of five years from the date of the transaction.
• Customer Support Communications: Retained for up to three years from the date of the interaction, or longer if the communication relates to a pending dispute or legal matter.
• Technical and Session Logs: Retained for up to twelve months for security and fraud prevention purposes, after which they are anonymised or deleted.
• Marketing Preferences and Consents: Retained for the duration of the consent or until withdrawn, with a record of consent history retained for compliance demonstration purposes.

At the expiry of the applicable retention period, personal data is securely deleted or, where deletion is technically impractical in the short term, anonymised so that it can no longer be linked to an identifiable individual.

The y5555 Platform uses cookies and similar tracking technologies to deliver core platform functionality, manage user sessions and gather anonymised analytics. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for platform operation — maintaining your logged-in session, language preferences and security tokens. These cannot be disabled without affecting core Platform functionality.
• Performance and Analytics Cookies: Collect anonymised data on how users navigate the Platform — pages visited, time on site, error events. This data is used exclusively for platform improvement and is never linked to individual identity.
• Preference Cookies: Store your Platform preferences such as display settings and notification configurations so they are retained between sessions.
• Marketing and Tracking Cookies: Used with your consent to present relevant promotional content and measure the effectiveness of promotional campaigns. These may involve third-party marketing technology providers bound by data processing agreements.

You may manage your cookie preferences through your browser settings. Blocking all cookies may affect the Platform's ability to maintain your session. Where consent-based cookies are used, a consent prompt will be displayed on your first visit.

The y5555 Platform is strictly intended for adults aged 18 or older, or the higher minimum age required by the applicable operator/license jurisdiction. y5555 does not knowingly collect, process or store personal data from individuals under the age of 18.

Where y5555 discovers or has reasonable grounds to believe that personal data has been collected from a minor, the relevant account will be immediately closed, all associated data will be deleted as far as legally permissible, and any deposits made through the account will be returned via the original payment method subject to applicable terms and verification.

As an online platform serving users globally, y5555 may need to transfer your personal data to countries or jurisdictions outside of Pakistan, including to the jurisdiction in which y5555 is incorporated or licensed, and to the locations of our technology and processing partners.

Where personal data is transferred internationally, y5555 ensures that appropriate safeguards are in place to protect your data, including the use of standard contractual clauses, data processing agreements with transfer restrictions, and transfers to jurisdictions with equivalent or superior data protection frameworks where possible.

Users who require information about the specific international transfer mechanisms applicable to their personal data may request this by contacting support.

y5555 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These include but are not limited to:

• TLS/SSL encryption for all data transmitted between Users and the Platform;
• Encryption at rest for sensitive stored data including identity documents and payment details;
• Role-based access controls limiting internal data access to staff with a legitimate need;
• Multi-factor authentication options for User accounts;
• Regular security assessments and vulnerability monitoring;
• Incident response procedures for detecting and responding to data security events.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. Users are encouraged to protect their own account credentials and to report any suspected security incidents to support immediately.

y5555 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or platform functionality. Where amendments are material — that is, they substantively affect User rights or the way we handle personal data — y5555 will provide advance notice via your registered email address and/or a prominent notice on the Platform prior to the changes taking effect.

Continued use of the Platform after the effective date of an amended Privacy Policy constitutes your acceptance of the revised terms. The "Last Updated" date at the top of this Policy reflects the most recent revision. We recommend reviewing this Policy periodically to stay informed of how your data is handled.

Previous versions of this Policy are archived and available on request by contacting our support team.

If you have any questions, concerns or complaints regarding this Privacy Policy or the way y5555 handles your personal data, please contact us using the details below. All privacy-related queries are treated with priority and handled in accordance with our internal data protection procedures.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the data protection supervisory authority applicable in the operator's jurisdiction of incorporation. Details of the relevant authority are available on request.