o555 Privacy Policy
How We Handle Your Personal Data

For the purposes of this Privacy Policy, the data controller responsible for your personal data is o555 ("the Platform", "we", "us", "our"). o555 operates the online casino and sports betting platform accessible at https://o555.app and is responsible for determining the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through the o555 platform, including data collected during account registration, identity verification, payment processing, gameplay, customer support interactions, and marketing communications.

Any questions regarding this Privacy Policy or o555's data processing activities may be directed to our support team via the live chat facility available 24/7 on the platform, or by email to the address listed in the footer of this page.

o555 collects personal data from you through several channels: directly when you register and use the platform, automatically through your device and browser as you interact with the site, and in some cases from third-party verification and payment providers. The categories of data we collect are as follows:

o555 processes your personal data for the following specific purposes. Each purpose is tied to a legitimate basis for processing, which is detailed in Section 4 of this policy:

• Account Creation and Management: To register your account, verify your identity, and maintain accurate account records throughout your time as an o555 player.
• Age and Identity Verification: To confirm you are at least 21 years of age and that the identity you have registered is genuine, in compliance with o555's licensing obligations.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, USDT TRC20, and Retail Cash, and to maintain a complete and accurate transaction record.
• Platform Operation and Game Delivery: To provide access to cricket betting, slots, live casino, colour prediction, Super Keno, and all other o555 game products in a technically functional manner.
• Fraud and Risk Management: To detect, investigate, and prevent fraud, money laundering, bonus abuse, multi-accounting, and other prohibited activities as defined in the o555 Terms and Conditions.
• Customer Support: To respond to your queries, resolve account disputes, and process complaints in a timely and accurate manner.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to enforce self-exclusion, deposit limits, and cooling-off periods requested by players.
• Regulatory Compliance: To meet record-keeping, reporting, and audit obligations imposed by applicable licensing and anti-money laundering frameworks.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have explicitly opted in to receive such communications.
• Platform Improvement: To analyse aggregated usage data in order to improve platform performance, game selection, and user experience for all Pakistani players.

Every instance of personal data processing carried out by o555 rests on one of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and o555, including account management, payment processing, and game delivery. Without this processing, o555 cannot provide its services to you.
• Legal Obligation: Processing required to comply with applicable laws and licensing conditions, including KYC identity verification, AML transaction monitoring, and regulatory record-keeping obligations.
• Legitimate Interests: Processing carried out on the basis of o555's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided these interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent, primarily in the context of optional marketing communications. You may withdraw this consent at any time via your account settings or by contacting support.

Where o555 relies on legitimate interests as the legal basis for processing, a balancing assessment is conducted to ensure that the processing does not disproportionately impact your fundamental privacy rights.

o555 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties strictly as necessary to operate the platform and meet our legal obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, and USDT TRC20 gateway providers receive transaction data necessary to execute your deposits and withdrawals. Each of these providers operates under their own privacy and data security frameworks.
• Identity Verification Providers: Third-party KYC and AML screening services that assist o555 in verifying player identity and conducting sanctions and watchlist checks as required by licensing conditions.
• Game Content Providers: Software providers that supply casino games, slot titles, and live dealer products may receive anonymised session data necessary to ensure game integrity and technical functionality.
• Fraud Prevention Services: Specialist risk management and fraud detection platforms that analyse transaction and behavioural data to identify suspicious activity.
• Regulatory and Law Enforcement Authorities: o555 will disclose personal data to relevant authorities where required by law, court order, regulatory direction, or where disclosure is necessary to protect the rights, property, or safety of o555 or its players.
• IT Infrastructure and Hosting Providers: Cloud hosting and data centre providers that store platform data on o555's behalf, subject to strict contractual data processing agreements.

o555 retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, to meet AML record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction in compliance with financial regulatory standards.
• KYC and Verification Documents: Retained for five (5) years following account closure or the completion of the relevant verification process, whichever is later.
• Customer Support Communications: Retained for three (3) years following the closure of the relevant support case.
• Marketing Consent Records: Retained until consent is withdrawn, plus one (1) year following withdrawal to evidence the consent history.
• Technical and Usage Data: Typically retained for thirteen (13) months in an identifiable form, after which it may be retained in anonymised or aggregated form indefinitely for analytical purposes.

Once a retention period expires, data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to technical system constraints, the data will be isolated and protected from further active processing until deletion can be completed.

o555 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• TLS 1.2 or higher encryption for all data in transit between your device and o555 servers
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment details
• Role-based access controls ensuring that only authorised staff with a genuine operational need can access personal data
• Multi-factor authentication requirements for internal staff accessing player data systems
• Continuous automated monitoring of platform systems for intrusion attempts, anomalous access patterns, and security vulnerabilities
• Regular penetration testing and security audits conducted by independent third-party specialists
• Formal data breach response procedures including defined timelines for internal escalation and, where applicable, regulatory notification

o555 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain your login session, and analyse how players interact with different areas of the site. The categories of cookies used by o555 are as follows:

• Strictly Necessary Cookies: Essential to the operation of the platform. These cookies enable core functions such as session authentication, security checks, and load balancing. They cannot be disabled without rendering the platform non-functional.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and recently accessed game categories, to personalise your experience on return visits.
• Analytical Cookies: Used to collect aggregated data about how players navigate the o555 platform, which pages are most visited, and where technical errors occur. This data is used exclusively to improve platform performance and user experience.
• Session Cookies: Temporary cookies that exist only for the duration of your browser session and are deleted automatically when you close your browser.

o555 does not use third-party advertising or behavioural tracking cookies that would allow external advertising networks to build a profile of your browsing activity across other websites.

o555 respects your rights over your own personal data. The following rights are available to you as an o555 player:

o555 is strictly prohibited for use by any person under the age of 21. The platform does not knowingly collect personal data from individuals under this age. Age verification is a mandatory step in the account registration process, and o555 reserves the right to request documentary proof of age at any point during a player's account lifetime.

If o555 discovers that personal data has been collected from an individual under the age of 21 — whether through registration, gameplay, or any other means — the following actions will be taken immediately:

• The relevant account will be permanently closed with no possibility of reinstatement
• All personal data associated with the underage account will be deleted as soon as the mandatory investigation period has concluded
• Any funds deposited by the underage individual will be returned to the original deposit source after investigation
• No winnings or bonuses accrued by an underage account will be paid out under any circumstances

o555 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, o555 will notify registered players via the email address associated with their account and by posting a prominent notice on the platform for a reasonable period following the update.

The "Last Updated" date displayed at the top of this page will be revised each time this policy is amended. It is your responsibility to review this policy periodically to stay informed of how o555 processes your personal data.

Continued use of the o555 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with any changes to this policy, you should cease using the platform and may request account closure and data deletion as outlined in Section 9.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how o555 handles your personal information, please contact the o555 support team through any of the following channels:

• Live Chat: Available 24/7 directly on the o555 platform — the fastest route for urgent data queries.
• Support Email: The support email address is listed in the footer of every page on this site. Please include your registered account username and the nature of your request in your message.

o555 is committed to resolving all privacy-related enquiries promptly and fairly. If you are not satisfied with o555's response to your complaint or data rights request, you may escalate your concern to the relevant data protection authority or gaming regulator in your jurisdiction.

o555 will acknowledge all privacy-related correspondence within 72 hours and provide a substantive response within 30 calendar days of receiving a verified request. Complex requests may require additional time, in which case o555 will inform you of the extended timeline and the reasons for it.