sx555 Privacy Policy

1. Who We Are

sx555 is an online casino and sports betting platform accessible at sx555.net. For the purposes of this Privacy Policy, sx555 is the data controller responsible for the personal data of registered players. Our platform serves English-speaking players with particular focus on the Pakistani market, offering games, cricket betting, live dealer tables, and related financial services denominated in PKR.

References to "sx555", "we", "us", or "the Platform" throughout this document refer to the operating entity behind sx555.net and its associated services.

2. Data We Collect

sx555 collects personal data across the following categories. The specific data points collected depend on which services you use and at what stage of the player lifecycle you are.

We do not collect sensitive personal data beyond what is strictly necessary for KYC compliance, such as biometric data, religious affiliation, or health information, unless required by a specific legal obligation.

3. How We Use Your Data

3.1 Account Management. Identity, contact, and address data are used to create and maintain your sx555 account, authenticate your identity at login, and communicate important account-related notifications via SMS or email.

3.2 KYC & Regulatory Compliance. sx555 is required to verify the identity of players before processing withdrawals. CNIC scans and address documents are processed solely for identity confirmation and compliance with anti-money-laundering obligations. These documents are not used for any marketing or profiling purpose.

3.3 Payment Processing. Financial data – including your JazzCash or Easypaisa reference and bank account details – is used exclusively to process deposits and withdrawals in PKR. This data is passed to our payment processor partners under strict data processing agreements and is not retained longer than legally necessary.

3.4 Platform Operation & Security. Technical data (IP address, device fingerprint, session data) is used to detect fraud, prevent unauthorised account access, identify suspicious betting patterns, and protect the integrity of the sx555 platform and its players.

3.5 Responsible Gaming. Gaming data is analysed to identify behavioural patterns that may indicate problem gambling. Where such patterns are identified, sx555 may proactively reach out to offer responsible gaming tools or apply mandatory cooling-off measures where required.

3.6 Service Improvement. Aggregated, anonymised technical and gaming data may be used internally to improve platform performance, game selection, and user experience. This data cannot be linked back to any individual player.

3.7 Legal Obligations. sx555 may process and retain data as required by applicable law, regulatory orders, or court orders. In such cases, we will inform you unless legally prohibited from doing so.

4. Legal Basis for Processing

sx555 processes personal data on the following legal bases:

• Contract Performance: Processing necessary to fulfil the Terms & Conditions agreement, including account creation, deposits, withdrawals, and bet settlement.
• Legal Obligation: Processing required to comply with KYC, anti-money-laundering, and responsible gaming obligations.
• Legitimate Interests: Fraud detection, platform security, abuse prevention, and service improvement, provided such interests do not override your fundamental privacy rights.
• Consent: Where we rely on consent (e.g., for promotional communications), you may withdraw that consent at any time without affecting processing carried out before withdrawal.

5. Data Sharing

5.1 Payment Processors. Financial data is shared with our payment processor partners (JazzCash, Easypaisa, and bank transfer intermediaries) solely to execute transactions. These partners are bound by their own regulatory obligations and data processing agreements with sx555.

5.2 KYC Verification Partners. Identity documents may be shared with third-party identity verification service providers for automated document checking. These providers act as data processors under contractual obligation to handle data only as instructed by sx555.

5.3 Game Providers. When you play a game from a third-party studio, your account identifier and session data are shared with that studio to deliver the game. Game providers do not receive your full identity profile or payment data.

5.4 Legal Disclosures. sx555 may disclose personal data to law enforcement, regulatory authorities, or courts where required to do so by applicable law or a valid legal process. We will challenge requests that we believe to be overly broad or legally unsound.

5.5 No Marketing Data Sales. sx555 does not sell, rent, or share your personal data with advertising networks, data brokers, or any third parties for their own marketing purposes. This is an unconditional commitment.

6. Data Retention

sx555 retains personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulatory obligations. Specific retention periods are as follows:

• Identity & KYC documents: Retained for a minimum of five (5) years following account closure, in line with standard AML retention requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming history: Retained for the duration of the account and for two (2) years after closure, or longer if required by a legal obligation.
• Technical logs (IP, session data): Retained for up to ninety (90) days for security and fraud detection purposes, then deleted unless flagged for investigation.
• Support communications: Retained for three (3) years from the date of the last communication, unless the communication relates to an ongoing dispute.

Upon expiry of the applicable retention period, data is securely deleted or anonymised.

7. Security Measures

sx555 applies a layered approach to data security:

• All data in transit is encrypted using TLS 1.2 or higher.
• Sensitive stored data fields (CNIC numbers, financial references) are encrypted at rest using AES-256 encryption.
• Access to player data within sx555's systems is restricted to authorised personnel on a strict need-to-know basis.
• All access is logged and subject to regular audit.
• Two-factor authentication is required for all internal system access with player data privileges.
• Regular penetration testing and vulnerability assessments are conducted on the Platform infrastructure.

In the event of a data breach that poses a risk to your rights, sx555 will notify affected players and relevant authorities within seventy-two (72) hours of becoming aware of the breach, to the extent permitted and required by applicable law.

8. Cookies & Tracking

sx555 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly Necessary Cookies: Session management and authentication. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remembering your language preference, session timer settings, and responsible gaming configurations.
• Analytics Cookies: Aggregated, anonymised usage data to understand how players interact with the Platform. No individual player can be identified from this data.
• Security Cookies: CSRF tokens and device fingerprinting to prevent fraud and unauthorised account access.

sx555 does not use third-party advertising cookies or behavioural tracking cookies. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair your ability to use the Platform.

9. Your Rights

As a registered player at sx555, you have the following rights in relation to your personal data, subject to applicable law and the Platform's legitimate interests and legal obligations:

• Right of Access: Request a copy of the personal data sx555 holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete data in your profile.
• Right to Erasure: Request deletion of your data where it is no longer necessary for the purposes for which it was collected and no legal retention obligation applies.
• Right to Restriction: Request that processing of your data be restricted in certain circumstances, such as while a dispute is being investigated.
• Right to Data Portability: Request a structured, machine-readable copy of data you have actively provided to sx555.
• Right to Object: Object to processing based on legitimate interests. sx555 will cease processing unless compelling legitimate grounds override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, withdraw that consent at any time without affecting past processing.

To exercise any of the above rights, contact the sx555 support team using the email address provided in the footer of this page. We will respond within thirty (30) days of receiving a verifiable request.

10. Children's Privacy

The sx555 Platform is strictly for users aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we discover or are notified that a registered account belongs to a minor, that account will be suspended immediately, all associated activity will be reviewed, and the account will be permanently closed. If you believe a minor has registered on sx555, please contact us immediately using the support details in the footer.

11. Changes to This Policy

sx555 reserves the right to update this Privacy Policy at any time to reflect changes in law, regulatory requirements, or Platform practices. Material changes will be communicated to registered players via their registered mobile number or email at least seven (7) days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the most recent revision. Continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact the sx555 Data Protection team. Our contact email address is displayed as plain text in the footer of this page. We aim to acknowledge all privacy-related enquiries within forty-eight (48) hours and to resolve them within thirty (30) days.

For responsible gaming support, please visit our Responsible Gaming page. For general account and platform questions, please visit our FAQ page.