Privacy Policy

This Privacy Policy ("Policy") describes how xc555, operating the website at https://xc555.cam ("Platform", "we", "us", "our"), collects, processes, stores, shares and protects the personal data of individuals ("User", "you", "your") who access or use the Platform.

xc555 is an English-language online gaming information and entertainment platform serving users in Pakistan and other markets. We are committed to handling personal data in a manner that is transparent, lawful, fair and proportionate to the purposes described herein.

This Policy is incorporated by reference into our Terms & Conditions. By using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

In this Policy, the following terms have the meanings set out below:

For the purposes of applicable data protection law, xc555 acts as the Data Controller in respect of Personal Data collected through the Platform. xc555 determines the purposes for which Personal Data is processed and the manner in which such processing takes place.

Where xc555 engages third-party service providers (for example, payment processors, KYC verification services, analytics tools or cloud hosting infrastructure) that process Personal Data on its behalf, those parties act as Data Processors under binding contractual data-processing agreements that require them to maintain confidentiality and implement appropriate technical and organisational security measures.

For all data protection enquiries, including the exercise of User rights described in Section 11, please contact us using the details in Section 17.

xc555 collects Personal Data across several categories, depending on how you interact with the Platform:

xc555 processes Personal Data only where a valid lawful basis exists. The primary bases we rely upon are:

• Contractual Necessity: Processing required to perform the contract between xc555 and the User — for example, creating and maintaining an Account, processing transactions and delivering platform functionality.
• Legal Obligation: Processing required to comply with applicable laws — including AML (Anti-Money Laundering) obligations, age verification requirements and regulatory record-keeping mandates.
• Legitimate Interests: Processing carried out for xc555's legitimate business interests, such as fraud detection, platform security, product improvement and analytical research, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where xc555 relies on your consent for a specific processing activity (such as marketing communications), you will be informed explicitly and provided with a clear mechanism to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

Personal Data collected by xc555 is used for the following purposes:

• Account Management: Creating, maintaining and securing User accounts, including authentication and session management.
• Identity Verification (KYC): Confirming User identity and age in compliance with responsible-gambling and AML requirements.
• Payment Processing: Facilitating deposits and withdrawals via supported payment channels, including contextual references to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah where applicable.
• Fraud & AML Monitoring: Detecting, investigating and preventing fraudulent activity, money laundering and other illicit conduct.
• Customer Support: Responding to enquiries, resolving disputes and providing 24/7 assistance in English and Urdu.
• Platform Improvement: Analysing usage patterns to improve content quality, navigation, game information and overall User experience.
• Legal Compliance: Meeting legal and regulatory obligations in the relevant jurisdiction.
• Security: Maintaining platform integrity and protecting against unauthorised access, abuse or technical vulnerabilities.
• Communications: Sending service-related notifications, updates to this Policy or Terms, and — where consent is given — promotional communications.

xc555 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the site.

You may manage cookie preferences through your browser settings. Disabling cookies classified as "strictly necessary" may affect your ability to use certain Platform features. For analytics and marketing cookies, you will be presented with a consent mechanism on your first visit.

xc555 does not share Personal Data with third parties except in the following circumstances:

• Service Providers (Data Processors): Third-party companies engaged to provide specific services on behalf of xc555, such as KYC verification platforms, payment processing infrastructure, cloud hosting services, analytics tools and customer support software. All such providers are bound by contractual data-processing agreements requiring appropriate security measures and prohibiting independent use of the data.
• Legal & Regulatory Disclosure: Where xc555 is required by law, court order or competent regulatory authority to disclose Personal Data, we will comply with such obligations. Where permitted, we will notify the affected User prior to disclosure.
• Fraud Prevention & AML: Personal Data may be shared with financial intelligence units, law enforcement agencies or other operators (in accordance with applicable AML law) where there is a reasonable basis to suspect fraudulent activity or money laundering.
• Business Transfers: In the event of a merger, acquisition or sale of assets involving xc555, Personal Data may be transferred as part of the transaction. Affected Users will be notified via a Platform notice or email before Personal Data becomes subject to a materially different privacy policy.

xc555 may transfer Personal Data to, or process it in, countries outside of Pakistan or your country of residence where service providers or infrastructure are located. Such transfers will only occur where appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by relevant data protection authorities.
• Adequacy decisions confirming that the recipient jurisdiction provides an equivalent level of data protection.
• Binding corporate rules or other legally recognised transfer mechanisms.

Where Personal Data is transferred internationally, xc555 ensures that the same level of protection afforded under this Policy is maintained. If you would like more information about the specific safeguards applicable to international transfers of your data, please contact us using the details in Section 17.

xc555 retains Personal Data only for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable law. The following general retention principles apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or rendered permanently anonymous in a manner that prevents re-identification.

Subject to applicable data protection law and certain legal exceptions, you have the following rights in respect of your Personal Data held by xc555:

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request. We may require verification of your identity before processing the request to prevent unauthorised disclosure.

xc555 implements a range of technical and organisational security measures to protect Personal Data against unauthorised access, loss, destruction, alteration or disclosure. These measures include:

• HTTPS / SSL Encryption: All communications between your browser and our servers are encrypted using 256-bit TLS/SSL protocols.
• Access Controls: Access to Personal Data is strictly limited to authorised personnel with a demonstrable need-to-know, governed by role-based access policies.
• Secure Document Handling: KYC documents are processed through an encrypted verification pipeline. Staff with access to identity documents are subject to confidentiality obligations.
• Intrusion Detection: Platform infrastructure is monitored for suspicious activity, with automated alerting and response protocols in place.
• Regular Security Reviews: Security controls are reviewed and updated on a regular basis to reflect the evolving threat landscape.
• Data Breach Response: In the event of a personal data breach that poses a risk to User rights and freedoms, xc555 will notify affected Users and relevant authorities in accordance with applicable law without undue delay.

The xc555 Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect Personal Data from individuals below the applicable minimum age.

If we have reason to believe that Personal Data has been submitted by a person below the applicable minimum age, we will take immediate steps to verify age, suspend the Account pending verification, and permanently delete any collected data if the User is confirmed to be underage.

If you are a parent or legal guardian and believe that a minor has provided Personal Data to xc555, please contact us immediately at [email protected].

The Platform may contain references to or descriptions of third-party services, including payment providers (such as Easypaisa, JazzCash, Raast and bank transfer options) and game operators, provided for contextual and educational purposes.

xc555 has no control over the privacy practices of third-party websites or services. This Policy applies solely to data processed by xc555 through the Platform. If you navigate to a third-party service (for example, an operator's platform), you should review that party's privacy policy independently.

xc555 does not embed third-party tracking pixels, social media widgets or advertising scripts on the Platform without disclosure in this Policy and, where applicable, a valid consent mechanism.

xc555 acknowledges that Pakistani data subjects have rights under applicable law, including the Personal Data Protection Act and any other relevant provincial or federal legislation governing the collection and use of personal information.

xc555 does not hold or claim a gambling licence issued by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan or any provincial authority. The processing of personal data described in this Policy is conducted by xc555's operating entity in accordance with the laws of the jurisdiction in which that entity is incorporated or licensed.

Pakistani users are reminded that gambling is subject to restrictions under the Prevention of Gambling Act, 1977 and other applicable laws. xc555 does not determine the lawfulness of gambling for individual users and this Policy does not constitute legal advice. Users are encouraged to seek independent legal guidance regarding their obligations under Pakistani law.

xc555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or platform functionality. The "Last Updated" date at the top of this Policy will be revised accordingly.

Where changes are material — meaning they significantly alter the way we collect, use or share Personal Data — we will provide advance notice through a prominent Platform notice or by email to registered Users at least 14 days before the changes take effect.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and may request deletion of your Personal Data in accordance with Section 11.

For any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact xc555 through the following channel: