zx555 Privacy Policy —
How We Protect Your Personal Data

1.1 This Privacy Policy ("Policy") is issued by zx555 ("the Platform," "we," "us," or "our") and applies to all personal data collected from individuals who access, browse, register with, or otherwise interact with the zx555 website at zx555.org and all associated digital touchpoints, including mobile-optimised interfaces.

1.2 This Policy applies to all registered players, prospective registrants who browse the Platform without completing registration, users of the zx555 live chat support function, and any individual who contacts zx555 via email or other communication channels.

1.3 By registering a zx555 account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. Where processing is based on consent, you have the right to withdraw that consent at any time without prejudice to the lawfulness of processing carried out prior to withdrawal.

1.4 This Policy is to be read in conjunction with the zx555 Terms and Conditions and the Responsible Gaming Policy, both of which are available on the Platform and are incorporated by reference.

2.1 For the purposes of applicable data protection legislation, zx555 acts as the data controller in respect of personal data collected from players and users through the Platform. As data controller, zx555 determines the purposes and means of processing your personal data.

2.2 zx555 operates under an internationally recognised gaming licence. The Platform's registered business address and full legal entity name are available upon written request through the support channels specified in Section 17 of this Policy, or may be confirmed through the licensing authority's public register.

2.3 Where zx555 engages third-party service providers to process personal data on our behalf — for example, payment processors for JazzCash and EasyPaisa transactions, KYC verification providers, or game software suppliers — those third parties act as data processors under written agreements that impose data protection obligations consistent with this Policy. zx555 remains accountable for such processing.

3.1 zx555 collects the following categories of personal data from registered players and Platform users:

A. Identity & Registration Data

• Full legal name as it appears on your Pakistani National Identity Card (CNIC)
• Date of birth (to verify you are 21 years of age or older)
• Gender (where voluntarily provided)
• Username selected at registration
• CNIC number and a copy of the CNIC document (front and back) submitted during KYC verification

B. Contact Data

• Email address registered to your zx555 account
• Pakistani mobile phone number
• Residential address as it appears on your CNIC or proof-of-address document

C. Financial & Transaction Data

• JazzCash or EasyPaisa wallet number associated with your account
• Bank account details (account number, bank name, account title) for HBL, UBL, or Meezan Bank transfer transactions
• Cryptocurrency wallet addresses used for USDT or BTC deposits and withdrawals
• Full history of deposits, withdrawals, bonuses claimed, and transaction timestamps
• Account balance at any given time

D. Gaming Activity Data

• Bet history across all products (cricket sportsbook, live casino, slots, E-Sports, Fortune Tree)
• Game session timestamps, duration, and frequency
• Wins, losses, and net gaming result over time
• Responsible gaming settings applied to your account (deposit limits, self-exclusion status)

E. Technical & Device Data

• IP address at each login and during active sessions
• Device type, operating system, and browser type and version
• Mobile network operator (e.g., Jazz, Telenor, Zong) where identifiable
• Geolocation data derived from IP address
• Cookie and tracking pixel data as described in Section 8

F. Communications Data

• Records of all live chat conversations with zx555 support
• Email correspondence with the support team
• Complaint and dispute records
• Feedback and survey responses where voluntarily submitted

4.1 Directly from You. The majority of personal data zx555 holds about you is provided directly by you at the point of account registration, during the KYC verification process, when making deposits or requesting withdrawals, when contacting support, or when responding to optional surveys or feedback requests.

4.2 Automatically. When you access the zx555 Platform, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, device identifiers, browser data, session timestamps, and navigation patterns within the Platform. This data is collected using cookies and similar tracking technologies, as described in Section 8.

4.3 From Third Parties. zx555 may receive personal data about you from trusted third-party sources in limited circumstances, including:

• KYC verification providers engaged to confirm your identity and age against authoritative databases;
• Payment processors (JazzCash, EasyPaisa, bank transfer gateways) who confirm the status and registered ownership of a payment method;
• Fraud prevention and anti-money laundering screening services;
• Marketing analytics partners where you have consented to data sharing through an affiliate or referral programme.

4.4 From Public Sources. Where relevant to fraud prevention or regulatory compliance, zx555 may consult publicly available records, including databases maintained by regulatory and law enforcement authorities.

5.1 zx555 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

6.1 zx555 uses the personal data we hold about you for the following specific purposes:

• Account Management: To create, maintain, secure, and where necessary close your zx555 player account; to verify your identity and confirm continued eligibility to use the Platform; and to communicate with you about your account status;
• Payment Processing: To process deposits to your zx555 account via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, USDT, or BTC; to verify that your withdrawal destination account or wallet is registered in your own name; to maintain accurate financial records of all transactions;
• KYC Compliance: To verify your identity and age (21+ enforcement) as required by our gaming licence; to retain KYC documentation in accordance with statutory retention periods;
• Fraud & AML Prevention: To screen transactions and account activity for indicators of fraud, money laundering, or other financial crime; to share data with financial intelligence and law enforcement authorities as required by applicable law;
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling; to enforce self-exclusion, deposit limits, and other responsible gaming restrictions applied to your account; to comply with responsible gaming obligations under our licence;
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of support interactions;
• Platform Security: To detect and prevent unauthorised account access, automated abuse, and other security threats; to manage login session integrity;
• Product Improvement: To analyse aggregate and anonymised gaming activity data to improve Platform performance, game selection, and user experience;
• Marketing (Consent Only): Where you have opted in, to send you promotional emails or SMS messages about zx555 bonuses, PSL special offers, new game launches, and seasonal promotions. You may withdraw marketing consent at any time.

7.1 We do not sell your personal data. zx555 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial or marketing purposes, under any circumstances.

7.2 zx555 shares your personal data with third parties only in the following limited circumstances:

• Payment Service Providers: JazzCash and Telenor Microfinance Bank, EasyPaisa and Telenor Pakistan, HBL, UBL, Meezan Bank, and cryptocurrency processing partners — shared to the minimum extent necessary to process deposits and withdrawals in your name;
• KYC & Identity Verification Providers: Licensed identity verification service providers who authenticate your CNIC details and confirm your age against authoritative databases, operating under strict contractual data processing obligations;
• Game Software Suppliers: Third-party game providers whose titles are offered within the zx555 lobby may receive your account identifier and gaming session data for game delivery and RTP auditing purposes. They do not receive your full identity or financial data;
• Fraud Prevention & AML Screening Services: Specialist financial crime prevention providers engaged to assist in detecting and preventing fraudulent activity or money laundering;
• Regulatory and Licensing Authorities: The gaming licence regulator and, where required by law, government agencies, financial intelligence units, and law enforcement authorities in response to lawful requests, court orders, or statutory obligations;
• Professional Advisors: Legal, financial, and compliance advisors bound by professional confidentiality obligations, where engagement with such advisors requires access to relevant personal data;
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the Platform's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments. You will be notified of any such transfer.

8.1 zx555 uses cookies and similar tracking technologies (including session tokens and local storage objects) to operate the Platform, maintain your login session, and analyse Platform usage. The following categories of cookies are used:

8.2 You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies will impair the core functionality of the zx555 Platform, including account login and cashier access. Disabling functional cookies may affect your user experience preferences.

8.3 zx555 does not use cookies to collect sensitive personal data such as CNIC details, financial account numbers, or password information. All sensitive data transmissions are handled via separate, encrypted secure channels.

9.1 zx555 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods which are imposed by regulatory and legal obligations:

• Account and KYC records: Minimum five (5) years from the date of account closure, as required under gaming licence anti-money laundering compliance obligations;
• Transaction records (deposits, withdrawals, bets): Minimum five (5) years from the date of each transaction, in accordance with financial record-keeping requirements;
• Support interaction records: Three (3) years from the date of each interaction, or longer where the interaction relates to a formal complaint or regulatory matter;
• Marketing consent records: Until consent is withdrawn, plus three (3) years from the date of withdrawal to evidence compliance;
• Responsible gaming records (self-exclusion, limit history): Five (5) years from the date of account closure, to support regulatory audit and player protection obligations.

9.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised aggregate data (for example, statistical reports on Platform usage) may be retained indefinitely as it does not constitute personal data.

10.1 zx555 implements and maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the zx555 Platform — including login credentials, KYC document uploads, and cashier transactions — is encrypted in transit using industry-standard 256-bit SSL/TLS protocols;
• Password Hashing: Your zx555 account password is processed through a one-way cryptographic hashing algorithm before storage. zx555 staff are unable to view your plaintext password;
• Access Controls: Access to personal data within zx555 is restricted on a need-to-know basis. Staff members can only access the specific data categories required for their role;
• Two-Factor Authentication: Optional but available for all player accounts as an additional layer of login security;
• Automated Threat Monitoring: Continuous automated monitoring for unusual login patterns, brute-force attacks, and other security threats, with automatic account lockout triggered by repeated failed authentication attempts;
• Secure Data Storage: Personal data at rest is stored on encrypted servers. Physical access to data centre infrastructure is restricted to authorised personnel only.

10.2 While zx555 employs strong security measures, no digital system is entirely immune from risk. In the event of a personal data breach that is likely to result in high risk to your rights and freedoms, zx555 will notify you without undue delay and will take immediate remedial action.

11.1 zx555 operates on infrastructure that may involve the transfer of personal data to servers or service providers located outside Pakistan. Where such transfers occur, zx555 ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to the standards described in this Policy.

11.2 Safeguards for international transfers include contractual data protection clauses in agreements with all third-party data processors, limiting data transferred to the minimum necessary for the specific processing purpose, and engaging only processors who maintain internationally recognised security standards.

11.3 By registering a zx555 account and providing personal data, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan as described in this Section, subject to the safeguards described above.

12.1 As a zx555 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the zx555 Data Protection team through the channels specified in Section 17:

• Right of Access: You have the right to request a copy of the personal data zx555 holds about you, along with information about how it is being used. This is commonly known as a Subject Access Request (SAR). zx555 will respond within thirty (30) days;
• Right to Rectification: If personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Corrections to KYC-related data require supporting documentation;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances. Note that this right is subject to overriding legal obligations — data required for regulatory compliance (AML records, KYC records) cannot be deleted before the mandatory retention period expires;
• Right to Restriction of Processing: You may request that we restrict processing of your personal data in certain circumstances, for example while an accuracy dispute is being resolved;
• Right to Data Portability: Where processing is based on your consent or on a contract and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to Object: You have the right to object to processing of your personal data that is based on legitimate interests, including profiling for marketing purposes. This right also applies to direct marketing — you may opt out at any time;
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

12.2 zx555 will not charge a fee for responding to data rights requests unless the request is manifestly unfounded or excessive. zx555 may request proof of your identity before processing any data rights request, to ensure that personal data is not disclosed to an unauthorised party.

13.1 The zx555 Platform is strictly for adults aged 21 years and over. zx555 does not knowingly collect, retain, or process personal data from any individual under the age of 21. Age is verified through mandatory CNIC-based KYC processes before any withdrawal is approved.

13.2 If zx555 becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will immediately suspend the associated account, refund any traceable deposits, forfeit any winnings generated during the period of underage use, and permanently delete the personal data, subject only to any statutory reporting obligations that may apply.

13.3 Parents and guardians of minors who may have access to devices used for gaming are strongly encouraged to use parental control software to restrict access to online gaming platforms, including zx555. If you believe a minor has accessed zx555 using your device or payment methods, please contact our support team immediately.

14.1 The zx555 Platform may contain links to third-party websites, including game supplier landing pages, payment method information pages, and affiliate partner sites. This Privacy Policy applies only to data collected directly through the zx555 Platform at zx555.org. It does not apply to any third-party website to which the Platform may link.

14.2 zx555 is not responsible for the privacy practices, data security measures, or content of any third-party website. If you follow a link from the zx555 Platform to a third-party site, you are leaving the scope of this Policy. We recommend reviewing the privacy policy of any third-party site before providing personal data to it.

15.1 zx555 sends marketing communications — including promotional emails and SMS messages about bonuses, PSL cricket betting offers, new slot game launches, and seasonal promotions — only to players who have expressly opted in to receive such communications.

15.2 You may opt in to marketing communications during the account registration process or at any subsequent time through Account Settings → Notifications & Marketing. You may withdraw your marketing consent and unsubscribe from all marketing communications at any time by:

• Clicking the unsubscribe link included in every zx555 marketing email;
• Updating your preferences in Account Settings → Notifications & Marketing;
• Contacting the support team via live chat and requesting removal from all marketing lists.

15.3 Withdrawal of marketing consent does not affect the delivery of transactional communications necessary to manage your account, including deposit confirmations, withdrawal notifications, account security alerts, KYC status updates, and responsible gaming notifications. These communications are sent on the basis of contract performance or legal obligation and cannot be unsubscribed from while your account remains active.

15.4 zx555 does not engage in marketing profiling that uses automated decision-making to determine individual advertising outcomes in ways that produce significant legal or similarly significant effects on players.

16.1 zx555 reviews and updates this Privacy Policy periodically to reflect changes in data processing practices, regulatory requirements, gaming licence obligations, Platform functionality, or applicable privacy law.

16.2 Where an update constitutes a material change to how your personal data is processed — for example, a change to the categories of data collected, a new category of data sharing, or a new legal basis for processing — registered players will be notified via their registered email address and/or via a prominent in-Platform notification. The updated Policy will be effective from the date indicated in the "Last Updated" field at the top of the document.

16.3 Your continued use of the zx555 Platform following notification of a material Policy update constitutes acceptance of the revised Policy. If you do not accept a material update, you may close your account by contacting support and requesting voluntary account closure, with withdrawal of any available real-money balance subject to standard KYC requirements.

16.4 Non-material updates — such as typographical corrections, clarifications that do not alter the substance of any data processing description, or formatting changes — may be made without individual notification. The version number in the "Last Updated" field will be incremented to reflect any update.

17.1 For any questions or concerns about this Privacy Policy or about how zx555 processes your personal data, for the exercise of any data rights described in Section 12, or to report a suspected personal data breach, please contact us through the following channels:

17.2 If you are dissatisfied with zx555's response to a privacy concern or data rights request, you have the right to escalate your complaint to the data protection supervisory authority under the governing gaming licence jurisdiction, or to any competent regulatory authority with jurisdiction over your data rights as a Pakistani data subject.

17.3 zx555 takes all data protection complaints seriously and commits to investigating each complaint fairly and transparently. Formal privacy complaints will be assigned a reference number and handled by a member of the compliance team with no prior involvement in the matter.