y555 Privacy Policy —
Your Data, Handled With Respect

1 Who We Are

y555 is an online betting and gaming platform operating at y555.im, designed specifically for Pakistani players and running entirely in Pakistani Rupees (PKR). For the purposes of this Policy, y555 is the data controller — meaning we are the entity responsible for deciding how your personal data is collected and used.

For all privacy-related enquiries, data access requests or complaints, contact us at support@y555.im with "Privacy Request" in the subject line. We aim to respond to all privacy-related emails within three working days.

2 Data We Collect

y555 collects the minimum personal data necessary to operate your account securely, process your PKR transactions, comply with legal obligations and provide you with a functioning platform experience. The categories of data we collect are:

y555 does not collect sensitive personal data such as biometric identifiers, health information, religious beliefs or political opinions. The CNIC number collected during KYC is used solely for identity verification and is stored in an encrypted format with access strictly limited to the verification team.

3 How We Collect Data

y555 collects personal data through the following channels:

• Registration Form: When you create a y555 account you provide your name, date of birth, email address, mobile number and password directly through the registration form at y555.im/register.
• KYC Submission: When you request your first withdrawal or when y555 initiates a verification check, you upload identity documents through a secure upload facility within your account portal.
• Payment Transactions: When you make a deposit or withdrawal, your payment provider shares transaction confirmation data — including the payment method type, amount and reference number — with y555. Raw card numbers and full wallet credentials are never transmitted to y555 servers.
• Platform Use: As you browse, play games and interact with y555, our servers automatically log technical data including your IP address, device identifiers, session start and end times, pages visited and game activity.
• Support Interactions: When you contact y555 via live chat or email, the content of those communications is recorded and associated with your account for quality assurance and dispute resolution purposes.
• Cookies & Tracking Technologies: y555 uses cookies and similar technologies as described in Section 7 of this Policy.

4 Why We Use Your Data

y555 uses your personal data for the following specific purposes. We do not use data for purposes beyond those listed here without obtaining fresh consent or notifying you in advance.

• Account Creation and Management: To set up, operate and maintain your y555 account and to authenticate your identity each time you log in.
• Payment Processing: To process deposits and withdrawals in PKR through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payment providers.
• Identity Verification (KYC): To confirm your identity and age, as required before processing your first withdrawal, and to comply with anti-money-laundering obligations.
• Fraud and Security: To detect, investigate and prevent fraudulent transactions, unauthorised account access, duplicate accounts and other security threats using account activity and technical data.
• Responsible Gaming: To monitor account activity for indicators of problem gambling behaviour and to operate the deposit limits, session timers and self-exclusion tools available in your account settings.
• Customer Support: To respond to your queries, resolve complaints and provide assistance with your account or transactions.
• Platform Improvement: To analyse aggregate, anonymised usage patterns in order to improve the y555 platform experience — this analysis does not involve reviewing your individual activity without cause.
• Legal Compliance: To fulfil obligations under applicable law, including retention of financial transaction records and cooperation with lawful requests from Pakistani regulatory or law enforcement authorities.
• Promotional Communications: To send you information about y555 bonuses and promotions — only if you have opted in to receive such communications. You can opt out at any time.

5 Legal Basis for Processing

y555 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing your identity data, contact data and financial data is necessary to fulfil the contractual relationship established when you register a y555 account and agree to our Terms and Conditions. Without this processing, y555 cannot provide you with an account.
• Legal Obligation: KYC verification, AML transaction monitoring and retention of financial records are required by applicable law. y555 cannot waive these obligations regardless of any player preference.
• Legitimate Interests: Processing technical data for fraud prevention and security monitoring, and processing account activity data for responsible gaming purposes, is carried out on the basis of y555's legitimate interest in operating a safe and compliant platform.
• Consent: Processing your contact data for the purpose of sending promotional communications is done on the basis of your explicit opt-in consent. You may withdraw this consent at any time by contacting support@y555.im or by using the unsubscribe option in any promotional email.

6 Data Sharing & Third Parties

y555 does not sell, rent or trade personal data. We share data only in the following strictly controlled circumstances:

• Payment Providers: Transaction reference data is shared with Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors and card networks solely for the purpose of processing your deposit or withdrawal. These providers have their own privacy policies and data processing is governed by their terms.
• KYC/Identity Verification Services: If y555 uses a third-party KYC platform to assist with identity document verification, your submitted documents are processed through that platform. All such providers are contractually required to handle your data securely and only for the purpose of verification.
• Game Software Providers: Third-party game providers such as Pragmatic Play, Evolution Gaming and others may receive your Player ID (a pseudonymous identifier, not your name or contact details) in order to manage game sessions and resolve technical disputes. They do not receive your full personal profile.
• Legal Authorities: y555 will disclose personal data to Pakistani regulatory, law enforcement or judicial authorities when lawfully required to do so. We do not volunteer data beyond what is specifically required by a lawful request.
• Business Transfers: In the event of a merger, acquisition or sale of the y555 platform, player data may be transferred to the acquiring entity. Registered players will be notified in advance of any such transfer and given the opportunity to close their accounts if they do not consent.

In all cases where data is shared with third parties, y555 applies appropriate contractual safeguards to ensure the data is handled in a manner consistent with this Policy.

7 Cookies & Tracking Technologies

y555 uses cookies — small text files stored on your device — and similar tracking technologies to enable core platform functionality, analyse usage patterns and, where applicable, support marketing attribution. The cookies used by y555 fall into the following categories:

You can control cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using y555 but may affect the accuracy of preference settings and analytics features. Disabling essential cookies will impair core platform functionality including login sessions.

8 Data Security

y555 implements the following technical and organisational security measures to protect your personal data:

• Encryption in Transit: All data transmitted between your device and y555 servers is encrypted using TLS (Transport Layer Security). This applies to login sessions, payment confirmations, support chat and all other platform interactions.
• Encryption at Rest: Personal data stored in y555 databases — including identity data, contact data and KYC documents — is encrypted at rest using industry-standard encryption.
• Access Controls: Access to personal data within y555 is restricted on a strict need-to-know basis. Support agents have access only to the data necessary to resolve your query. KYC documents are accessible only to the dedicated verification team.
• No Payment Credential Storage: y555 does not store your full card number, Easypaisa PIN, JazzCash password or any other payment credential on its servers. All payment authentication occurs through the respective provider's secure infrastructure.
• Security Monitoring: y555 operates continuous security monitoring to detect unusual access patterns, potential data breaches and system intrusions. In the event of a confirmed data breach that affects your personal data, y555 will notify you within a reasonable timeframe and explain what data was affected and what steps we are taking.

9 Data Retention

y555 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected or to comply with legal obligations. The general retention periods applied by y555 are as follows:

• Active Account Data: Retained for the duration of your active account relationship with y555, plus a period of up to five years following account closure to satisfy financial record-keeping and AML compliance requirements.
• Financial Transaction Records: Retained for a minimum of five years from the transaction date, as required for anti-money-laundering compliance.
• KYC Documents: Retained for five years following the verification date or account closure, whichever is later, in line with standard financial compliance requirements.
• Support Communications: Retained for up to two years following the resolution of a query or complaint, for dispute resolution and quality assurance purposes.
• Technical / Log Data: Retained for up to 12 months from collection for security monitoring and fraud investigation purposes, then deleted or anonymised.
• Marketing Consent Records: Retained for as long as you hold a y555 account or until you withdraw consent, whichever is sooner.

When a retention period expires, personal data is either securely deleted or anonymised so that it can no longer be associated with an identified individual.

10 Your Rights Over Your Data

As a y555 player, you have the following rights in relation to your personal data. To exercise any of these rights, email support@y555.im with "Data Request" in the subject line. y555 will respond within five working days and will not charge a fee for standard requests.

11 Children's Privacy

y555 is strictly an adult platform. Persons under 18 years of age are not permitted to register an account, make a deposit or use any service on y555.im under any circumstances. y555 does not knowingly collect personal data from children under 18.

If y555 identifies or is notified that an account holder is under 18, the account will be closed immediately, all funds will be returned to the payment method used for the deposit and the minor's personal data will be deleted as quickly as our legal obligations permit. If you believe a minor has registered a y555 account, please contact support@y555.im immediately.

Age verification is conducted as part of the KYC process. y555 may request proof of age at any point — not only at the time of the first withdrawal. Accounts that cannot satisfy age verification will be suspended until verification is completed.

12 Changes to This Policy

y555 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law or improvements in how we explain our data practices. When changes are made, the "Last Updated" date at the top of this page will be revised.

Where changes are material — meaning they significantly affect how we collect or use your personal data — y555 will notify registered players via their registered email address before the changes take effect, giving you the opportunity to review the updated Policy and, if you disagree, to close your account and request deletion of your data.

Minor changes such as clarifications of existing wording, correction of typographic errors or addition of explanatory notes will be made without advance notice, though the updated date will always be accurate. We encourage you to review this Policy periodically.

13 Contact Us About Privacy

For all privacy-related matters — including data access requests, correction requests, deletion requests, complaints about how y555 has handled your data, or simply questions about this Policy — please contact us through the following channels:

• Email: support@y555.im — Subject line: "Privacy Request"
• Live Chat: Available 24/7 at y555.im — ask to speak to the privacy team for data-related matters
• FAQ: y555.im/faq — for general questions about data handling and account management

y555 aims to respond to all privacy requests within five working days. For complex requests — particularly large data access exports or formal deletion requests requiring legal review — the response period may extend up to 30 days, and we will inform you if this is the case.