r555 Privacy Policy

r555 operates the online gaming platform accessible at r555.blog (the "Platform"), offering live casino games, sports betting, slot machines, arcade games, and related entertainment services to registered players. In this Privacy Policy, references to "r555", "we", "us", or "our" refer to the r555 platform and its operating entity.

r555 acts as the data controller for personal data collected through the Platform. This means r555 determines the purposes and means by which your personal data is processed. Where r555 engages third-party service providers to process data on its behalf, those providers act as data processors under contractual obligations that are consistent with this policy.

For all data protection enquiries, players may contact r555 directly at the email address specified in Section 15 of this policy. r555 is committed to responding to data-related requests within 30 days of receipt.

r555 collects personal data through several channels: directly from players during registration and account use, automatically through platform interaction, and from third-party verification and payment providers. The categories of data collected include:

2.1 Registration Data

When you create an r555 account, we collect: full legal name, date of birth, email address, Pakistani mobile number, preferred username, and the password you set (stored in hashed, non-recoverable form). This data is mandatory — an r555 account cannot be created without it.

2.2 Identity Verification (KYC) Data

Before processing withdrawals, r555 requires identity verification. KYC data collected includes: a copy of your CNIC (Computerised National Identity Card) or passport, a recent proof of address document, and in some cases a selfie or liveness check. This data is processed solely for the purposes of verifying your identity and complying with anti-money laundering obligations.

2.3 Financial Transaction Data

r555 collects records of all deposits, withdrawals, and in-platform transactions, including: payment method used (e.g., JazzCash account number, EasyPaisa number, bank account details), transaction amounts in PKR, timestamps, and transaction reference numbers. r555 does not store full card numbers — payment tokenisation is applied where card methods are used.

2.4 Gaming Activity Data

r555 records all gaming and betting activity on the platform, including: games played, bets placed, amounts wagered, wins and losses, session durations, and betting patterns. This data is used for account management, bonus administration, responsible gaming monitoring, and fraud detection.

2.5 Technical and Device Data

r555 automatically collects technical data when you access the platform, including: IP address, device type and operating system, browser type and version, screen resolution, session timestamps, page navigation paths, and login location data. This data is used for security monitoring, fraud prevention, and platform optimisation.

2.6 Communications Data

When you contact r555 support, we retain records of those communications including the content of emails, chat transcripts, and support ticket history. This data is used to resolve your queries, improve service quality, and maintain an audit trail of customer interactions.

r555 uses the personal data described in Section 2 for the following specific purposes:

• Account Administration: Creating and maintaining your r555 account, processing r555 login requests, managing your wallet balance, and providing access to all platform features.
• Payment Processing: Processing your JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment method transactions, verifying payment source, and settling withdrawals to your nominated account.
• Identity Verification: Conducting KYC checks as required prior to withdrawal processing, and ongoing compliance with anti-money laundering and counter-terrorism financing regulations applicable to licensed gaming operators.
• Fraud Detection and Security: Monitoring account activity for unusual patterns, detecting and preventing unauthorised access, investigating suspected fraud or collusion, and maintaining the integrity of the r555 platform.
• Responsible Gaming: Monitoring gaming behaviour to identify players who may be exhibiting signs of problem gambling, enforcing self-imposed limits set by players, and administering cooling-off and self-exclusion requests.
• Bonus and Promotion Administration: Verifying eligibility for r555 promotions, tracking wagering requirement completion, and detecting bonus abuse.
• Customer Support: Responding to your queries, resolving account issues, processing complaints, and maintaining service quality records.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the r555 platform, optimise game offerings, and enhance user experience for Pakistani players.
• Legal Compliance: Meeting obligations under applicable laws, responding to lawful requests from regulatory authorities, and maintaining records required by our international gaming licence.
• Marketing Communications: Sending you promotional emails and notifications about r555 bonuses, new games, and platform updates — only where you have opted in or where permitted by applicable law. See Section 12 for opt-out instructions.

r555 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the contract between r555 and you as a registered player — including account creation, payment processing, gameplay, and customer support.
• Legal Obligation: Processing required to comply with applicable laws, regulatory requirements, and the conditions of r555's international gaming licence — including KYC identity verification, AML monitoring, and record-keeping obligations.
• Legitimate Interests: Processing carried out for r555's legitimate business interests where those interests are not overridden by your rights — including fraud detection, platform security, abuse prevention, and service analytics.
• Consent: Processing based on your explicit consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

r555 does not sell your personal data to any third party. Data is shared only in the following limited circumstances:

5.1 Payment Processors

To process your JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment transactions, r555 shares the minimum required financial data with those payment providers. These providers operate under their own privacy policies and applicable financial regulations.

5.2 Identity Verification Providers

r555 uses third-party KYC and identity verification services to validate CNIC and passport documents. These providers process your identity documents solely for verification purposes under data processing agreements that bind them to confidentiality and data security obligations.

5.3 Game Content Providers

r555 integrates live casino and slot content from providers including Evolution Gaming, Pragmatic Play, and others. These providers may receive anonymised session data (such as session ID and bet amounts) for game operation purposes. They do not receive identifiable personal data such as your name, CNIC, or contact details.

5.4 Regulatory and Legal Disclosure

r555 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required by applicable law or the conditions of our gaming licence. r555 will notify you of any such disclosure where legally permitted to do so.

5.5 Corporate Transactions

In the event of a merger, acquisition, or transfer of assets involving r555, personal data held on the platform may form part of the transferred assets. Players will be notified of any such change and given the opportunity to request data deletion prior to transfer where applicable.

r555 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for the platform to function — including maintaining your r555 login session, remembering your language preference, and enabling secure access. These cannot be disabled without affecting platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the platform, which pages are most visited, and how features are used. This data helps r555 improve platform performance and game discovery for Pakistani players.
• Security Cookies: Used to detect fraudulent activity, identify unusual login patterns, and protect player accounts from unauthorised access.
• Preference Cookies: Store your platform settings such as display preferences, notification settings, and deposit limit configurations.

You may manage non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of some platform features. r555 does not use third-party advertising cookies or cross-site tracking technologies.

r555 retains personal data for as long as is necessary to fulfil the purposes described in this policy, and in accordance with applicable legal requirements:

• Active Account Data: Retained for the duration of your r555 account and for a period of five years following account closure, in compliance with anti-money laundering record-keeping requirements applicable to licensed gaming operators.
• KYC Documents: Retained for a minimum of five years from the date of verification, as required by AML compliance obligations.
• Transaction Records: All deposit, withdrawal, and gaming transaction records are retained for a minimum of five years following the transaction date.
• Support Communications: Retained for three years from the date of the last interaction, to provide context for future support requests and to maintain service quality records.
• Marketing Consent Records: Retained for the duration of your r555 account plus two years, to demonstrate compliance with consent-based marketing obligations.
• Anonymised Analytics Data: May be retained indefinitely in anonymised, aggregated form that cannot be linked back to any individual player.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised using industry-standard data destruction procedures.

r555 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the r555 platform is encrypted in transit using TLS 1.2 or higher — the same standard used by international banking institutions.
• Password Hashing: Account passwords are stored using a one-way cryptographic hashing algorithm (bcrypt). r555 staff cannot access your password in plain text, and passwords are never transmitted in recoverable form.
• Two-Factor Authentication (2FA): r555 offers two-factor authentication for all accounts, adding a second layer of security to the r555 login process via one-time SMS codes.
• Access Controls: Access to personal data within r555's systems is restricted to authorised personnel on a need-to-know basis, with role-based access controls and audit logging applied throughout.
• Penetration Testing: The r555 platform undergoes regular security assessments and penetration testing by independent security professionals to identify and remediate vulnerabilities.
• Incident Response: r555 maintains a documented data breach response procedure. In the event of a data breach that is likely to result in a risk to player rights, affected players will be notified within 72 hours of discovery where technically feasible.

r555 operates under an international gaming licence, and some of the third-party service providers used by r555 — including game studios, KYC providers, and cloud infrastructure partners — may process data in jurisdictions outside Pakistan.

Where personal data is transferred internationally, r555 ensures that appropriate safeguards are in place, including:

• Contractual data transfer agreements that impose data protection obligations consistent with this policy on the receiving party.
• Use of service providers that maintain independently certified security standards (such as ISO 27001 or SOC 2 Type II).
• Regular assessments of third-party data handling practices to verify ongoing compliance.

r555 does not transfer personal data internationally unless a legitimate purpose exists and appropriate protections are confirmed to be in place.

As an r555 player, you have the following rights in relation to your personal data. All requests can be submitted to r555 support at the contact details provided in Section 15, and will be responded to within 30 days:

• Right of Access: You may request a copy of the personal data r555 holds about you, including a summary of how that data is being used.
• Right to Rectification: If any personal data r555 holds about you is inaccurate or incomplete, you may request that it be corrected. Note that changes to KYC-verified identity data require re-verification.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data. Note that this right is subject to r555's legal obligations — data that must be retained for AML compliance, regulatory record-keeping, or dispute resolution cannot be deleted until the relevant retention period expires.
• Right to Restrict Processing: You may request that r555 restrict processing of your data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request that r555 provide your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though r555 may continue processing if it can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on consent (primarily marketing communications), you may withdraw that consent at any time without penalty.

The r555 platform is strictly intended for users aged 21 years and above. r555 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted at registration through date-of-birth collection, and again at the withdrawal stage through KYC identity document review.

If r555 becomes aware that personal data has been collected from a person under the age of 21 — whether through direct registration or account misuse by a minor — that account will be immediately suspended, all associated data will be reviewed, and the account will be permanently closed. Any funds deposited by an underage user will not be returned in line with r555's Terms & Conditions.

If a parent or guardian becomes aware that their child under 21 has accessed r555 or provided personal information to the platform, they are encouraged to contact r555 support immediately at the address in Section 15.

r555 may send you promotional communications about platform bonuses, new game releases, PSL betting offers, and other r555 news by email or SMS, where you have:

• Opted in to marketing communications during registration or account settings, or
• Previously engaged with r555 promotions and not opted out of further communications.

You may opt out of r555 marketing communications at any time by:

• Clicking the "Unsubscribe" link in any r555 marketing email, or
• Updating your notification preferences in your r555 account settings, or
• Contacting r555 support at the address in Section 15 and requesting removal from marketing lists.

Opting out of marketing communications does not affect transactional communications — r555 will continue to send account-related notices such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts regardless of marketing preferences.

The r555 platform may contain links to third-party websites or services — for example, links to game provider information pages or licensing authority verification portals. r555 is not responsible for the privacy practices of any third-party website. Visiting a third-party website from a link on r555 is subject to that website's own privacy policy.

r555 recommends that players review the privacy policy of any third-party website before providing personal information to it. The presence of a link on r555 does not constitute an endorsement of that website's data practices.

r555 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a change to the categories of data collected, a new data sharing arrangement, or a change in retention periods — r555 will notify registered players by email to their registered address at least 14 days before the change takes effect.

Non-material changes (such as clarifications to existing practices or corrections of typographical errors) may be made without advance notice. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Continued use of the r555 platform following notification of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised policy, you must cease using r555 and may request account closure and data deletion.

For any questions, requests, or concerns regarding this Privacy Policy or r555's data handling practices, players may contact the r555 data team at:

Email: [email protected]

Please include "Privacy Request" in the subject line of your email, along with your registered r555 username and a brief description of your enquiry. r555 aims to acknowledge all privacy-related requests within 48 hours and to resolve them within 30 days.