Privacy Policy — r555 Pakistan Player Data Protection

This Privacy Policy is published by r555 ("r555," "we," "us," or "our"), the operator of the online gaming and sports betting platform accessible at r555.world. r555 is licensed under a valid international gaming licence and operates as the data controller for the personal information of all registered players on its platform.

r555 is a platform designed and operated specifically for the Pakistani market. Our player base is located primarily across Pakistan — in cities including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Peshawar, Multan, Hyderabad, and beyond. The data practices described in this Privacy Policy reflect our commitment to treating Pakistani players' information with the same respect and security that any responsible online platform should provide.

By registering an account on r555, making a deposit, or otherwise interacting with the platform, you acknowledge that you have read and understood this Privacy Policy. If you have questions about how r555 handles your data at any point, the r555 support team is available 24/7 and can be reached at support@r555.world.

r555 collects only the personal data that is necessary to operate the platform, process payments, verify identity, prevent fraud, and comply with licensing obligations. The categories of data r555 may hold about you include:

Identity Data: Your full legal name, date of birth, CNIC number or passport number, nationality, and gender as provided during registration or KYC verification.

Contact Data: Your email address, mobile phone number, and residential address. These are used for account communications, support, and — where you have opted in — marketing messages.

Financial Data: Your deposit and withdrawal history on r555, transaction reference numbers, and the identity of the payment methods you use (Easypaisa, JazzCash, NayaPay, SadaPay, bank account, or card). r555 does not store full card numbers — payment card data is handled directly by our certified payment processing partners.

Gaming & Betting Data: A record of your bets, game sessions, win/loss history, bonus usage, wagering progress, and gameplay preferences on r555. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

Technical Data: Your IP address, device type, browser type and version, operating system, session timestamps, and general location derived from your IP. This data is collected automatically when you access r555.

Verification Documents: Copies of identity documents (CNIC, passport), proof of address documents, and payment method confirmation submitted as part of the r555 KYC process.

Communications Data: Records of your interactions with r555 support — including live chat transcripts, emails, and any complaints — for quality assurance and dispute resolution purposes.

r555 collects personal data through the following channels:

• Direct Registration: When you create an r555 account, you provide identity and contact data directly through the registration form.
• KYC Submission: When you submit documents to verify your identity before a withdrawal or as part of a periodic account review.
• Deposits and Withdrawals: Transaction data is generated and recorded each time you move funds in or out of your r555 wallet.
• Gameplay: r555's systems automatically record your gaming and betting activity while you are logged in to the platform.
• Device and Browser: Technical data is collected automatically by r555's servers when you access the website, including your IP address, device identifiers, and session information.
• Cookies and Tracking Technologies: r555 uses cookies and similar technologies to recognise returning users, maintain sessions, analyse platform usage, and improve the player experience. See Section 9 for full details.
• Support Interactions: When you contact r555 support, your communications are recorded and stored for quality assurance and audit purposes.
• Third-Party Sources: In limited circumstances, r555 may receive data from third-party identity verification or fraud prevention services to confirm the accuracy of information you have provided.

r555 uses the personal data we collect for the following specific purposes. The table below provides a concise overview:

r555 does not use your personal data for any purpose that is not listed above. Where a new processing purpose arises, r555 will update this Privacy Policy and notify you as required.

r555 processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contract Performance: Processing that is necessary to operate your r555 account and deliver the services you have signed up for — including account setup, game access, and payment processing.
• Legal Obligation: Processing required to comply with r555's licensing conditions, anti-money laundering (AML) regulations, and other applicable legal requirements — including KYC identity verification and financial record-keeping.
• Legitimate Interest: Processing that serves r555's genuine business interests while not overriding your rights — including fraud prevention, platform security, responsible gaming monitoring, and platform analytics.
• Consent: Processing that you have explicitly agreed to, such as receiving marketing emails and SMS from r555. Where consent is the basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

r555 accepts deposits and processes withdrawals in Pakistani Rupees (PKR) through Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer (IBFT), Visa, and Mastercard. The financial data generated through these transactions is treated with the highest level of security and is processed only for the purposes of completing your transaction and maintaining required financial records.

Payment Card Data: r555 does not store full card numbers on its own servers. When you make a card payment, the transaction is handled by a certified Payment Card Industry Data Security Standard (PCI-DSS) compliant payment gateway. r555 receives only a tokenised representation of your card details sufficient to process future transactions and verify payment method ownership.

Mobile Wallet Data: When you deposit via Easypaisa, JazzCash, NayaPay, or SadaPay, r555 records the mobile number associated with the transaction and the transaction reference number. This is stored for payment reconciliation and withdrawal matching purposes.

KYC Documents: Identity and address verification documents submitted to r555 are stored securely for the duration of your account plus a post-closure retention period of seven years, in line with standard financial regulatory requirements. These documents are accessible only to the r555 compliance and trust teams and are never shared with third parties except where required by a court order or regulatory authority.

r555 does not sell, rent, or trade your personal data with third parties. However, certain limited data sharing is necessary for r555 to operate and comply with its obligations. The categories of third parties with whom r555 may share your data are as follows:

• Payment Processors: Information necessary to process your deposits and withdrawals is shared with our certified payment processing partners. These partners process data under their own privacy policies and are contractually required to handle your data securely.
• Identity Verification Services: r555 may use third-party KYC and AML screening services to verify your identity and screen against sanctions lists. These services receive only the minimum data required for the verification task.
• Game Providers: Certain technical data (such as session identifiers) may be shared with licensed game providers (Pragmatic Play, Evolution Gaming, etc.) to facilitate game loading and session management. Game providers do not receive your full identity profile.
• Regulatory Authorities: r555 may be required by its operating licence or by court order to disclose player information to relevant regulatory or law enforcement authorities. r555 will comply with such lawful requirements and, where permitted, will notify the affected player.
• IT and Infrastructure Providers: r555's platform is hosted on third-party server infrastructure. These providers process data as data processors under strict contractual data processing agreements.

All third parties that process personal data on behalf of r555 are required to do so under binding data processing agreements that obligate them to maintain confidentiality and security standards equivalent to those r555 applies internally.

r555 retains personal data only for as long as it is necessary for the purposes described in this Privacy Policy. The specific retention periods that apply to the main categories of data are:

• Account Data (active accounts): Retained for the full duration of your active r555 account relationship.
• Account Data (closed accounts): Retained for 7 years following account closure, in compliance with financial record-keeping requirements under applicable licensing conditions.
• Transaction and Financial Records: Retained for 7 years from the date of each transaction, as required by financial regulations.
• KYC Documents: Retained for 7 years from the date of account closure.
• Support Communications: Retained for 3 years from the date of the last interaction, unless the communication relates to a dispute or legal matter, in which case it is retained until the matter is fully resolved.
• Technical and Session Data: Retained for 13 months from collection, after which it is aggregated and anonymised for analytics purposes.
• Marketing Preferences: Retained until you withdraw consent or until 3 years of inactivity, whichever occurs first.

When the applicable retention period expires, r555 securely deletes or anonymises the relevant data. Anonymised data (data from which individual identification is not possible) may be retained indefinitely for aggregate analytics purposes.

r555 uses cookies and similar tracking technologies to operate the platform, recognise returning players, and improve the overall experience. The types of cookies r555 uses are described below.

As an r555 player, you have the following rights with respect to your personal data. These rights can be exercised at any time by contacting r555 support at support@r555.world. r555 will respond to all data rights requests within 30 days.

r555 is strictly intended for adults aged 18 and above. r555 does not knowingly collect personal data from individuals under the age of 18. If r555 discovers during KYC verification or at any other point that a registered player is under 18, the account will be immediately suspended, all funds will be returned to the source payment method, and all associated data will be deleted.

r555 uses age verification measures during registration and conducts periodic KYC checks to enforce this policy. If you have reason to believe that a minor has registered on r555, please contact support@r555.world immediately. r555 takes underage gambling prevention very seriously and cooperates fully with parents, guardians, and regulatory bodies on such matters.

r555 implements technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the r555 platform is encrypted in transit using industry-standard TLS encryption.
• Encrypted Data Storage: Sensitive data fields — including CNIC numbers, payment references, and KYC document metadata — are encrypted at rest within r555's database infrastructure.
• Access Controls: Access to player personal data is restricted on a strict need-to-know basis. r555 staff who do not require access to personal data for their job function are not granted it. Access permissions are reviewed quarterly.
• Audit Logging: r555 maintains comprehensive audit logs of all access to player personal data. These logs are reviewed regularly for anomalous activity.
• Two-Factor Authentication (2FA): r555 offers 2FA for player account login, which we strongly encourage all players to enable to protect against unauthorised account access.
• Security Testing: r555 conducts regular vulnerability assessments and penetration tests of its platform infrastructure to identify and remediate security weaknesses.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, r555 will notify affected players and the relevant supervisory authority within the timeframes required by applicable law.

Where you have opted in during registration or subsequently updated your preferences, r555 may send you marketing communications about new games, promotions, bonuses, and seasonal offers. r555 sends marketing via email and SMS to registered Pakistani players who have consented to receive them.

Marketing communications from r555 are sent only to the contact details you have registered on your account. r555 does not use your personal data to serve third-party advertisements on external websites or social media platforms.

You can update your marketing preferences at any time by:

• Logging in to your r555 account and navigating to Account Settings → Notification Preferences.
• Clicking the unsubscribe link in any r555 marketing email.
• Replying STOP to any r555 marketing SMS.
• Contacting r555 support at support@r555.world with your preference change request.

Withdrawing consent for marketing will not affect your access to your r555 account or your ability to receive transactional communications (deposit confirmations, withdrawal notifications, account security alerts). These service messages are necessary for account operation and cannot be opted out of while your account is active.

r555 may update this Privacy Policy periodically to reflect changes in data processing practices, regulatory requirements, or platform features. When changes are made, the updated Policy will be published at r555.world/privacy-policy with a revised "Last Updated" date.

Where changes are material — meaning they significantly affect how r555 processes your personal data or your rights under this Policy — r555 will notify registered players by email at least 14 days before the changes take effect, giving you the opportunity to review the updates and, if necessary, close your account before the new practices apply.

Minor clarifications, corrections of typographical errors, or changes that do not affect the substance of data processing may be made without individual notification. r555 recommends checking this page periodically to stay informed of the current Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way r555 processes your personal data, please contact the r555 Data Protection team using the following details:

• Email: support@r555.world (mark your message "Privacy / Data Request")
• Live Chat: Available 24/7 through r555.world

r555 aims to respond to all privacy-related queries within 5 business days and to complete all formal data rights requests within 30 calendar days of receipt.

If you believe r555 has handled your personal data improperly and have not received a satisfactory response from the r555 team, you have the right to raise a complaint with the relevant supervisory or regulatory authority under whose jurisdiction r555 operates. Details of the applicable authority are available on request from r555 support.

For questions about your r555 account terms more broadly, please review the Terms and Conditions. For support with responsible gaming tools, visit the Responsible Gaming page. For answers to common questions, see the FAQ.