x55 Privacy
Policy

1Who We Are

This Privacy Policy is issued by x55, the operator of the online gaming platform accessible at x55.today (the "Platform"). References in this policy to "x55", "we", "us", or "our" refer to the operator of the x55 Platform. References to "you", "your", or "Player" refer to any individual who registers an account on x55 or who accesses or uses the Platform in any capacity.

x55 acts as the data controller in respect of personal data collected from Players through the Platform. As data controller, x55 is responsible for determining the purposes and means by which personal data is processed and for ensuring that such processing complies with applicable data protection law and the commitments set out in this Privacy Policy.

2Personal Data We Collect

x55 collects personal data from Players at the point of account registration, during the operation of the account, and through your use of the Platform. The categories of personal data collected by x55 are set out in the table below.

x55 does not collect sensitive personal data (such as racial or ethnic origin, health data, religious beliefs, or biometric data) beyond what is strictly required for identity verification purposes where mandatory under applicable KYC regulations.

3How We Collect Your Data

x55 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting x55 support.
• Automated collection: Technical data collected automatically when you access the x55 Platform, including IP address, device identifiers, browser information, and session data collected via cookies and server logs.
• Payment providers: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and other integrated PKR payment channels when you make deposits or receive withdrawals.
• Third-party verification services: Identity and address verification data received from KYC and AML screening service providers used by x55 to fulfil regulatory obligations.
• Platform activity: Betting history, game session data, wallet transaction logs, and other activity data generated through your use of the x55 Platform.

4Lawful Basis for Processing

x55 processes your personal data on the following lawful bases, depending on the purpose for which the data is being used:

• Contractual necessity: Processing required to fulfil the agreement between you and x55, including account management, payment processing, and the delivery of gaming services.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML transaction monitoring, age verification, and tax reporting obligations.
• Legitimate interests: Processing carried out for x55's legitimate business interests, including fraud prevention, platform security, improving service quality, and responsible gaming monitoring — provided such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in the context of optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5How We Use Your Personal Data

x55 uses the personal data collected from Players for the following specific purposes:

• To create, manage, and administer your x55 account, including processing deposits and withdrawals in PKR via JazzCash, EasyPaisa, and other supported payment channels.
• To verify your identity and age as part of the KYC process, in accordance with responsible gaming and anti-money laundering obligations.
• To process your bets, wagers, and casino game sessions and to settle winnings accurately to your x55 Wallet.
• To detect, investigate, and prevent fraud, money laundering, account abuse, and other prohibited conduct on the Platform.
• To monitor your gaming activity for responsible gaming purposes, including identifying indicators of problem gambling behaviour and applying account restrictions where appropriate.
• To communicate with you about your account, including transactional notifications, security alerts, and support responses via live chat and email.
• To send you promotional communications about x55 bonuses and offers, where you have consented to receive such communications.
• To improve and personalise the x55 Platform experience, including presenting relevant game recommendations and relevant betting markets based on your activity history.
• To comply with legal obligations, including responding to lawful requests from regulatory authorities and law enforcement agencies.
• To resolve disputes between Players and x55, using account activity and communications data as evidence where required.

6Data Sharing & Disclosure

x55 does not sell your personal data to any third party. x55 may share your personal data with the following categories of recipients, strictly for the purposes outlined in this Privacy Policy and only to the extent necessary for those purposes:

• Payment processing partners: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and other PKR payment channel providers require the sharing of necessary financial data to process your deposit and withdrawal transactions.
• KYC and AML service providers: Third-party identity verification and anti-money laundering screening providers engaged by x55 to fulfil mandatory regulatory obligations.
• Game content providers: Live casino game providers such as Evolution Gaming and Ezugi receive session data necessary to operate live dealer game sessions. These providers operate under their own data protection obligations.
• IT infrastructure and hosting providers: Cloud hosting and platform infrastructure service providers who process data on behalf of x55 under data processing agreements with strict confidentiality and security obligations.
• Legal and regulatory authorities: x55 may be required to disclose personal data to law enforcement agencies, financial regulators, or courts of competent jurisdiction in response to lawful requests, court orders, or regulatory requirements. x55 will notify affected Players of such disclosures where legally permitted to do so.
• Professional advisers: Lawyers, accountants, and auditors engaged by x55 for legitimate business purposes, subject to professional confidentiality obligations.

7Cookies & Tracking Technologies

x55 uses cookies and similar tracking technologies to operate the Platform, maintain your login session, and improve your experience. Cookies are small text files placed on your device by the x55 Platform. The categories of cookies used by x55 are as follows:

• Strictly necessary cookies: Required for the Platform to function, including session management, login authentication, and security token validation. These cookies cannot be disabled without preventing you from using the Platform.
• Functional cookies: Store your platform preferences such as language, display settings, and betting interface configurations to provide a consistent experience across sessions.
• Analytical cookies: Collect aggregated, anonymised data about how Players use the Platform, including which pages are visited most frequently and where errors occur, to help x55 improve the service. No personally identifiable information is captured in analytical cookies.
• Responsible gaming cookies: Track session duration and gaming activity to support x55's responsible gaming monitoring obligations and to enforce session time limits where applicable.

You may configure your mobile browser or device to refuse or delete cookies. Please note that refusing strictly necessary cookies will prevent you from logging into and using the x55 Platform. Refusing functional or analytical cookies will not prevent Platform access but may affect the quality of your experience.

8Data Retention

x55 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your active x55 account and for such period thereafter as required by applicable legal and regulatory obligations.

• Account and identity data is retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with AML and KYC record-keeping obligations.
• Financial transaction records are retained for a minimum of five (5) years following the date of the transaction, as required by applicable financial regulations.
• Responsible gaming and session data is retained for the duration of your account and for two (2) years following account closure to support the enforcement of self-exclusion obligations.
• Support and communications data is retained for two (2) years from the date of the last communication, or for the duration of any ongoing dispute where relevant as evidence.
• Technical and usage data collected via server logs and cookies is retained for up to twelve (12) months, after which it is anonymised or deleted.

9Data Security

x55 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and the x55 Platform servers.
• Encryption at rest for all personal data stored in x55 databases.
• Password hashing using bcrypt or equivalent strong one-way hashing algorithm — plain text passwords are never stored by x55.
• Two-factor authentication (2FA) available to all registered Players to provide an additional layer of account security.
• Access controls limiting internal x55 staff access to personal data on a strictly need-to-know basis, with access logs maintained and audited.
• Regular security assessments and penetration testing of the x55 Platform infrastructure.
• Incident response procedures to detect, contain, and notify Players of any data breach that poses a risk to their rights and freedoms.

While x55 implements robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. If you suspect that your x55 account has been accessed without your authorisation, contact x55 support via live chat immediately.

10Your Data Rights

As a Player whose personal data is processed by x55, you have the following rights in relation to your personal data. To exercise any of these rights, contact x55 support via live chat or email at [email protected]. x55 will respond to valid requests within thirty (30) calendar days.

11Children & Minors

The x55 Platform is strictly intended for individuals who are 21 years of age or older. x55 does not knowingly collect personal data from individuals under the age of 21. Age verification is applied as part of the account registration and KYC process to enforce this requirement.

x55 recommends that adult players who share devices with minors use device-level parental control software to prevent underage access to the x55 Platform. x55 support can provide guidance on appropriate parental control tools on request.

12International Data Transfers

The x55 Platform is operated for Pakistani users and the majority of personal data processing occurs within the jurisdictions where x55 operates its infrastructure. However, certain third-party service providers engaged by x55 — including live casino game content providers and cloud infrastructure partners — may process data in jurisdictions outside Pakistan.

Where personal data is transferred internationally, x55 takes appropriate steps to ensure that such transfers are subject to adequate safeguards, including contractual data processing agreements that impose data protection obligations equivalent to those applied within x55's own operations. x55 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate contractual safeguards.

13Changes to This Privacy Policy

x55 reserves the right to update this Privacy Policy from time to time to reflect changes in applicable law, changes in x55's data processing practices, or improvements to the Platform. When material changes are made to this Privacy Policy, x55 will update the "Last Updated" date at the top of this document and, where the changes are significant, will notify registered Players through the Platform or via the email address associated with their x55 account.

Your continued use of the x55 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised policy. x55 encourages you to review this Privacy Policy periodically to stay informed about how your personal data is being protected.

14Contact & Privacy Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how x55 handles your personal data, please contact the x55 privacy team through the following channel:

If you are not satisfied with x55's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. x55 will cooperate fully with any such regulatory enquiry.