a 555 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy explains how a 555, the online betting and gaming platform operating at a555.run ("a 555", "we", "us"), collects, uses, stores, and protects the personal data of its users — particularly players based in Pakistan. This policy applies to all personal data processed in connection with your use of the a 555 platform, including the website, mobile interface, customer support channels, and any related services.

a 555 is committed to handling your personal information with transparency and care. We do not collect data for its own sake. Everything we ask for has a specific, legitimate purpose — whether that is to verify your identity, process your PKR deposits and withdrawals, detect fraud, or provide you with relevant customer support. This policy tells you exactly what that purpose is for each category of data we hold.

By registering an account or using any service on a 555, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any aspect of how we process personal data, please do not register an account, and if you already have one, contact our support team to discuss your options.

a 555 collects personal data from you through several channels: information you provide directly when you register and use the platform, information generated automatically by your use of the site, and in some cases information from third-party sources used to verify your identity. Here is a full breakdown:

a 555 does not collect sensitive categories of personal data (such as religious beliefs, ethnicity, or health data) unless directly required by applicable law or regulation in a specific circumstance, which would be communicated to you at the time of collection.

Every piece of data a 555 collects is used for a specific, legitimate purpose. We do not process personal data speculatively or hold data "just in case." The following table sets out the primary purposes for which we use your information:

• Account creation and management: We use your identity and contact data to create and maintain your a 555 account, verify your age and eligibility, and communicate important account notifications to you.
• Processing deposits and withdrawals: Your financial data is used to process PKR transactions via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard. We pass necessary payment details to our payment processing partners solely to execute transactions — see Section 6 for more detail.
• Providing gaming and betting services: Transaction and usage data is used to display your betting history, manage your account balance, settle bets accurately, and provide personalised features within the a 555 platform.
• Identity verification and fraud prevention: a 555 uses identity data, financial data, and technical data to verify that you are who you say you are, to detect multi-accounting, to identify unusual activity patterns consistent with fraud or money laundering, and to comply with Know Your Customer (KYC) obligations.
• Customer support: Communications data and account data are used to resolve your support queries, investigate complaints, and maintain records of interactions for quality assurance.
• Responsible gaming monitoring: Usage data and transaction data are analysed to identify signs of problematic gambling behaviour and to enforce any limits or restrictions you have placed on your a 555 account.
• Platform improvement: Anonymised and aggregated usage data helps a 555's product team understand how the platform is being used and where improvements can be made. This data does not identify individual users.
• Marketing communications: Where you have opted in, we use your contact data to send you information about a 555 promotions, bonuses, and new features. You can opt out at any time — see Section 12.

a 555 processes personal data on the following legal bases, depending on the purpose of processing:

• Contract performance: Processing necessary to provide the services you have signed up for — including operating your account, processing bets, and handling payments. Without this processing, a 555 cannot fulfil its obligations to you.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, KYC obligations, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing necessary for a 555's legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and analytics — provided these interests are not overridden by your own rights and interests.
• Consent: Where processing requires your affirmative agreement — primarily marketing communications — we will always ask for your explicit consent and will not send marketing materials without it. You may withdraw consent at any time.

a 555 does not sell your personal data to any third party. We share data only where there is a legitimate purpose and only to the extent necessary. The categories of recipients are as follows:

• Payment processors: We share necessary financial details with payment service providers (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processing banks, and card networks) strictly for the purpose of processing your deposits and withdrawals in PKR. These providers are bound by their own data protection obligations.
• Identity verification providers: KYC and document verification may involve third-party identity checking services. These providers receive only the minimum data required to complete verification checks and are contractually prohibited from using your data for any other purpose.
• Game providers: Some casino and crash game titles on a 555 are provided by third-party software studios. These providers may process anonymised session data to ensure game integrity. They do not receive your personally identifiable information unless technically unavoidable and contractually bound.
• Analytics and infrastructure providers: a 555 uses industry-standard tools for platform analytics, customer support software, and hosting infrastructure. These providers process data on our behalf and under strict data processing agreements.
• Regulatory and law enforcement authorities: a 555 will disclose personal data to regulators, courts, law enforcement agencies, or other public authorities when required to do so by applicable law, regulation, or lawful order. We will notify you of such disclosures where legally permitted to do so.
• Fraud prevention networks: In cases of suspected fraud, multi-accounting, or AML concerns, we may share relevant data with fraud prevention agencies or other gaming operators participating in shared risk monitoring schemes.

Given that a 555 processes real-money transactions in PKR for Pakistani players, the handling of payment and identity data deserves specific attention. Here is exactly how it works:

Payment data: a 555 does not store full card numbers or sensitive authentication data on its own servers. Card transactions are processed via PCI-DSS compliant payment partners. Mobile wallet numbers (Easypaisa, JazzCash) and bank account numbers provided for IBFT transfers are stored in encrypted form and used only for executing the specific transactions they are associated with. We retain payment method references for withdrawal processing and for audit purposes.

KYC documents: Identity documents — including CNIC copies, passport scans, and selfie photographs — are stored in an encrypted document management system with access restricted to the a 555 compliance team. These documents are used exclusively for identity verification and AML compliance purposes. They are never used for advertising, profiling, or shared with any party other than contracted KYC verification providers.

When KYC is required: a 555 may request KYC documentation at the time of account registration, before processing a withdrawal above certain thresholds, when unusual account activity is detected, or at any time as required by our compliance obligations. Players are expected to respond to KYC requests within a reasonable timeframe — typically 7 days. Failure to complete KYC may result in withdrawal restrictions until verification is complete.

a 555 uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help the platform function properly, remember your preferences, and provide analytics data. Here is what we use and why:

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging into your a 555 account and using core platform features. Disabling analytics cookies does not affect your ability to use the platform — it simply means we receive less data about aggregate platform usage patterns.

a 555 does not use cookies to build individual advertising profiles for sale to third parties, and we do not participate in cross-site tracking networks that follow you across other websites.

a 555 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

If a 555 becomes aware of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify you and the relevant regulatory authority within the timeframes required by applicable law. We will describe the nature of the breach, the data involved, the likely consequences, and the steps we are taking to address it.

You are also responsible for the security of your own a 555 account. Keep your password confidential, do not share your login credentials, enable two-factor authentication if offered, and contact support immediately if you suspect your account has been accessed without your permission.

a 555 does not keep personal data for longer than is necessary for the purpose for which it was collected, subject to overriding legal retention requirements. Here are the main retention periods we apply:

When your data is no longer required and the applicable retention period has passed, a 555 securely deletes or anonymises it. Where anonymisation is used, the resulting data can no longer be linked to you as an individual and is not subject to the same privacy protections.

As a user of a 555, you have the following rights over your personal data. To exercise any of these rights, contact our Data Protection contact as described in Section 14. a 555 will respond to all verified requests within 30 days:

a 555 is strictly for adults aged 18 and over. The platform does not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a child has provided personal data to a 555 or opened an account on the platform, please contact us immediately at support@a555.run. We will take immediate steps to verify the situation, close the account if confirmed, delete any data collected, and refund any deposits where this is possible.

a 555 operates age verification checks at registration and may request additional proof of age at any stage. We take underage gambling extremely seriously — both as an ethical responsibility and as a legal obligation — and will act swiftly on any report of a potential underage account.

a 555 sends promotional emails, SMS notifications, and in-platform messages about bonuses, new features, and special offers to players who have explicitly opted in to marketing communications. We do not send unsolicited marketing messages. If you registered on a 555 before a specific marketing preference was introduced, your status defaults to opted-out until you actively choose to subscribe.

You can opt out of marketing communications from a 555 at any time through any of the following methods:

• Click the unsubscribe link in any marketing email from a 555
• Update your notification preferences in your a 555 account settings
• Contact support at support@a555.run and request removal from marketing lists

Opting out of marketing does not affect your ability to receive important account communications from a 555 — transactional emails (deposit confirmations, withdrawal notifications, account security alerts, KYC requests) are sent regardless of your marketing preference as they are necessary for operating your account.

a 555 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify registered players via the email address on their a 555 account and post a prominent notice on the platform before the changes take effect.

Minor or non-material updates — such as clarifying existing language or correcting typographical errors — may be made without direct notification. The "Last Updated" date at the top of this page always reflects when the most recent version was published. We encourage you to review this Privacy Policy periodically so you stay informed about how a 555 handles your personal data.

If you disagree with the updated Privacy Policy, you have the right to close your a 555 account before the revised policy takes effect. Continuing to use a 555 after the effective date of any updated Privacy Policy constitutes your acceptance of the changes.

If you have any questions about this Privacy Policy, how a 555 handles your personal data, or if you wish to exercise any of your privacy rights, please get in touch using the channels below. Our team handles all privacy-related enquiries with priority and will respond within 30 days at the latest.