GX555 Privacy Policy

This Privacy Policy (the "Policy") describes how GX555 (the "Platform", "we", "us" or "our"), accessible at https://gx555.cam, collects, processes, stores and protects personal data relating to users ("you" or "User") who access or use the Platform's services, including sports betting, live casino and slot products.

GX555 is committed to protecting the privacy and personal data of all Users. This Policy sets out our data practices in transparent and plain English so that users across Pakistan — whether in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar — can understand how their information is handled.

By registering an account on GX555, making a deposit or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree to this Policy, you must not use the Platform.

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, postal address, phone number, financial details and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, GX555 acts as the Data Controller in respect of personal data collected through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller, under written instruction and appropriate contractual safeguards.
• "KYC" — Know Your Customer; the identity verification process required to comply with anti-money laundering and related legal obligations.
• "Consent" — a freely given, specific, informed and unambiguous indication of a User's agreement to the processing of their personal data for a stated purpose.
• "Sensitive Data" — personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, health or financial condition, to the extent applicable under relevant law.

GX555 collects personal data in the following categories:

GX555 does not knowingly collect special category data (such as health data or biometric data) unless this is incidental to a KYC document submission and strictly necessary for identity verification purposes.

GX555 processes personal data on the following legal bases:

• Contractual Necessity — processing required to fulfil the contract between GX555 and the User, including account management, transaction processing and delivery of gaming services.
• Legal Obligation — processing required to comply with applicable KYC, AML, anti-fraud and regulatory obligations binding on the operator.
• Legitimate Interests — processing carried out in the legitimate interests of GX555, including platform security, fraud detection, service improvement and responsible gambling monitoring, where these interests are not overridden by your rights and freedoms.
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

GX555 processes personal data for the following specific purposes:

• Account Registration & Management — creating and maintaining your GX555 account, authenticating login sessions and enabling access to Services.
• Identity Verification (KYC/AML) — verifying your identity, age and address in compliance with applicable anti-money laundering obligations. Verification is mandatory prior to withdrawal processing and on reaching defined transaction thresholds.
• Transaction Processing — facilitating deposits, withdrawals and in-play financial settlements. Payment method references (including contextual references to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are used only as necessary to facilitate your chosen payment method where it is operationally available. No endorsement of these providers is implied.
• Responsible Gambling Compliance — monitoring account activity to identify patterns consistent with problem gambling behaviour, applying self-imposed limits and facilitating self-exclusion requests.
• Fraud Prevention & Security — detecting and preventing fraudulent activity, multi-accounting, bonus abuse and any other conduct that breaches the GX555 Terms & Conditions.
• Customer Support — responding to enquiries, complaints and technical support requests submitted through live chat, email or other support channels.
• Platform Improvement — analysing aggregated usage data to improve the functionality, performance and content of the Platform.
• Marketing Communications (with consent) — sending promotional offers, bonus notifications and product updates where you have opted in. You may unsubscribe at any time.
• Legal Compliance — meeting reporting, record-keeping and disclosure obligations required by applicable law or a competent authority.

GX555 uses cookies and similar tracking technologies to operate and improve the Platform, maintain session security and understand how Users interact with our services. The following categories of cookies may be used:

• Strictly Necessary Cookies — essential for the Platform to function correctly. These cannot be disabled without impairing core functionality such as login sessions and account management.
• Performance & Analytics Cookies — used to collect anonymised data on page visits, session duration and navigation patterns, helping GX555 improve platform performance.
• Functional Cookies — remember your preferences and settings (such as display language and odds format) to provide a more personalised experience.
• Marketing Cookies (with consent only) — used to deliver relevant promotional content. These are only deployed where you have given explicit consent.

GX555 does not sell, rent or trade personal data to third parties. Personal data may be shared with the following categories of recipients only to the extent strictly necessary for the purposes described in this Policy:

• KYC/AML Verification Providers — third-party identity verification services engaged to validate government-issued documents and screen against financial crime databases.
• Payment Processors — entities involved in facilitating deposits and withdrawals. Only the minimum data necessary to process the relevant transaction is shared.
• Fraud Prevention & Security Services — providers of anti-fraud tools, device fingerprinting and risk scoring services used to protect the Platform and its Users.
• Regulatory & Law Enforcement Authorities — where GX555 is legally required or otherwise obligated to disclose personal data to a competent authority, regulator, law enforcement agency or court of competent jurisdiction.
• IT & Infrastructure Providers — cloud hosting, database and security providers engaged under appropriate data processing agreements to support the operational infrastructure of the Platform.

All third-party Data Processors engaged by GX555 are bound by written data processing agreements requiring them to process personal data only on GX555's documented instructions and to maintain appropriate security measures.

As an internationally operated platform, GX555 may transfer personal data to countries outside Pakistan and outside the jurisdiction in which the Platform is licensed. Where such transfers occur, GX555 will ensure that appropriate safeguards are in place — such as contractual data transfer clauses or transfers to jurisdictions recognised as providing adequate data protection.

GX555 does not claim that Pakistan's data protection framework applies to Platform operations, nor that any transfer of personal data is governed by Pakistani law. Users in Pakistan should be aware that data they provide to GX555 may be processed in other jurisdictions subject to different legal frameworks.

GX555 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, AML/KYC or licensing obligations.

• Active Accounts — personal data is retained for the duration of your active account relationship with GX555.
• Closed Accounts — following account closure, data required for legal, AML/KYC or dispute resolution purposes is retained for the applicable statutory period, typically five (5) years or as otherwise mandated by the operator's licensing jurisdiction.
• Marketing Data — where consent for marketing communications is withdrawn, relevant marketing data will be suppressed within a reasonable period, though basic account data may be retained for legal purposes.
• Support Communications — correspondence with GX555 support is retained for a period sufficient to resolve the relevant matter and to meet applicable dispute resolution obligations.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with GX555's data management procedures.

GX555 implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• HTTPS/TLS encryption for all data transmitted between your device and the Platform.
• Access controls limiting staff access to personal data on a strict need-to-know basis.
• Two-factor authentication options for user account login.
• Regular security assessments and vulnerability monitoring of Platform infrastructure.
• Contractual requirements on all Data Processors to maintain equivalent security standards.

Depending on the data protection laws applicable in your jurisdiction, you may have the following rights regarding your personal data held by GX555. Please contact us using the details in Section 15 to exercise any of these rights.

GX555 will respond to verified data rights requests within a reasonable period, subject to applicable legal requirements and identity verification. Some rights may be limited where processing is necessary to comply with legal obligations — such as AML/KYC retention requirements.

GX555 is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 18 — or the higher minimum age required by the operator's licence jurisdiction. Age verification is applied as part of the KYC process during account registration and review.

Where GX555 becomes aware that personal data has been provided by an individual below the minimum age threshold, we will take immediate steps to close the relevant account, void any associated transactions and delete the data as soon as reasonably practicable, subject to any legal retention obligations.

If you believe that a minor has registered on the GX555 Platform, please contact us immediately at [email protected].

GX555 is an English-language platform designed for users in the Pakistan market. Pakistani users should be aware of the following:

• GX555 does not claim that this Policy or Platform operations are governed by Pakistani data protection or privacy law. Pakistan's data protection framework is evolving and users should seek independent advice if they have specific concerns about their rights under local law.
• GX555 does not represent that any Pakistani payment provider — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah — has approved, endorsed or partnered with GX555. References to these providers are contextual only, relating to payment methods familiar to Pakistani users.
• GX555 does not claim endorsement, oversight or approval from any Pakistani government body, the Pakistan Telecommunication Authority (PTA) or the State Bank of Pakistan.
• The Platform may process personal data in jurisdictions other than Pakistan. By using GX555, you accept that your data may be transferred and processed internationally in accordance with this Policy.

GX555 reserves the right to amend this Privacy Policy at any time. Where changes are material, we will provide reasonable notice to registered Users — typically via in-platform notification — and update the "Last Updated" date at the top of this page.

Your continued use of the Platform following notification of material changes to this Policy constitutes your acceptance of the revised terms. If you do not agree to the amended Policy, you must cease using the Platform and may contact support to request account closure and applicable data deletion.

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data by GX555, please contact our Data Protection team using the details below. All correspondence must be submitted in English.

GX555 aims to respond to all data protection requests within thirty (30) calendar days. Complex or high-volume requests may take longer, in which case we will notify you of the expected timeline.