Privacy Policy — ch555

1 Introduction

This Privacy Policy (hereinafter "Policy") sets out the principles and practices governing the collection, processing, storage, disclosure and protection of personal data by ch555 (hereinafter "Platform", "Operator", "we", "us" or "our") in connection with your use of the ch555 website at https://ch555.cam and all associated services, applications and features (collectively, the "Services").

ch555 is an English-language online gaming information and services platform directed primarily at Pakistani users, covering topics including sports betting, live casino, cricket wagering, PSL markets and responsible gambling. We recognise that the personal information you entrust to us is sensitive and that handling it responsibly is both a legal obligation and a matter of fundamental respect for our users.

This Policy applies to all individuals who register an Account with ch555, visit the Platform, interact with our Support channels or otherwise engage with our Services, regardless of whether they are located in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or elsewhere.

By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should cease using the Services immediately. This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, national identity number (CNIC), payment details and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction, whether by automated or manual means.
• "Data Controller" means ch555, the entity that determines the purposes and means of processing Personal Data.
• "Data Subject" means the individual to whom the Personal Data relates — i.e., you, the user or account holder.
• "Third Party" means any natural or legal person other than ch555 and the Data Subject, including payment processors, KYC verification service providers and analytics partners.
• "Cookies" means small text files placed on your device by the Platform to facilitate functionality, analytics and personalisation.
• "KYC" means Know Your Customer — the identity and age verification process conducted by or on behalf of the Operator.
• "Sensitive Data" means Personal Data that warrants heightened protection, including identity document images (CNIC, passport), financial information and, where applicable, information relating to health or responsible-gambling status.

3 Personal Data We Collect

ch555 collects Personal Data across several categories, each described below. We collect only the data that is necessary for the specified purpose and do not retain data for longer than required (see Section 9).

3.1 Registration & Account Data

• Full legal name
• Date of birth (for age verification purposes)
• Email address and/or mobile number
• Username and encrypted password credentials
• Country and city of residence (e.g., Karachi, Lahore, Islamabad)
• Preferred currency (e.g., PKR)

3.2 Identity Verification (KYC) Data

• Scanned copies or photographs of government-issued identity documents (e.g., CNIC, Pakistani Passport)
• Proof of address documentation where required (e.g., utility bill, bank statement)
• Liveness check or selfie imagery as directed by the verification flow
• Source-of-funds documentation where required by AML procedures

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts and timestamps
• Payment method identifiers (partial account references — full payment credentials are handled by third-party payment processors and are not stored by ch555 in full)
• Account balance history
• Bonus and promotional redemption records

3.4 Betting & Gaming Activity Data

• Wager records, including amounts, markets selected, odds accepted and outcomes
• Game session logs, including session duration, rounds played and RTP-relevant data
• Responsible gambling tool selections (deposit limits, self-exclusion requests)

3.5 Technical & Device Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system and browser version
• Session timestamps, login history and access logs
• Cookie identifiers and analytics data (see Section 8)

3.6 Communications Data

• Support chat transcripts and email correspondence with ch555 Support
• Feedback, complaint and dispute records
• Marketing preferences and communication opt-in/opt-out records

4 How We Collect Your Data

ch555 collects Personal Data through the following channels and mechanisms:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, place a wager, contact Support, or update your Account settings.
• Automatically: Through cookies, log files, web beacons and similar tracking technologies as you interact with the Platform. This includes IP address capture, session analytics and device fingerprinting for fraud prevention purposes.
• From third-party service providers: KYC verification partners, payment processors and fraud detection services may share data with us as part of account verification and transaction processing workflows.
• From publicly available sources: In limited circumstances (e.g., AML screening), we may cross-reference information against publicly available databases, sanction lists or fraud-prevention registries.

5 Legal Basis for Data Processing

ch555 processes Personal Data only where a recognised legal basis exists. The applicable bases depend on the nature of the processing activity:

6 How We Use Your Personal Data

ch555 uses the Personal Data we collect for the following purposes:

6.1 Service Delivery

To create and manage your Account, verify your identity and age, process deposits and withdrawals, settle bets and game outcomes, and deliver all features of the Platform to you in accordance with our Terms & Conditions.

6.2 Legal & Regulatory Compliance

To comply with applicable operator licensing requirements, anti-money laundering (AML) obligations, counter-terrorism financing (CTF) regulations and any other legal or regulatory obligations to which ch555 is subject under its licensing framework.

6.3 Fraud Prevention & Security

To detect, investigate and prevent fraudulent activity, account takeover attempts, money laundering, bonus abuse, collusion and other prohibited conduct as defined in our Terms & Conditions. IP addresses, device fingerprints and transaction pattern analysis are used for this purpose.

6.4 Responsible Gambling

To monitor gaming activity for indicators of potential problem gambling behaviour, enforce player-set deposit limits, loss limits and self-exclusion requests, and comply with responsible gambling obligations under the Operator's licence.

6.5 Customer Support

To respond to your queries, complaints and account requests submitted via Live Chat, Help Centre or email. Support interaction records are retained to maintain quality, continuity and dispute resolution capability.

6.6 Marketing & Personalisation

Where you have provided explicit consent, to send you promotional communications about offers, bonuses and relevant updates relating to ch555 Services. You may withdraw consent and unsubscribe from marketing communications at any time via your Account settings or by contacting Support. Withdrawing marketing consent does not affect the lawfulness of prior processing.

6.7 Platform Analytics & Improvement

To analyse aggregated and anonymised usage data to understand how the Platform is used, identify performance issues and improve the overall user experience for Pakistani users across all device types.

7 Data Sharing & Third-Party Disclosure

ch555 does not sell, rent or trade your Personal Data to third parties for independent marketing purposes. We may share Personal Data with carefully selected third parties only in the following circumstances:

• Payment Processors: To facilitate deposit and withdrawal transactions, relevant transaction data is shared with the payment service providers you select. Familiar local payment method names referenced on ch555 (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are cited as contextual references only; actual payment processing is governed by the terms and privacy policies of the respective providers. These references do not imply any endorsement of gambling services by these providers.
• KYC & Identity Verification Partners: Identity and age verification data, including CNIC or passport images, is shared with our contracted KYC service provider for the sole purpose of verifying your eligibility to use the Services.
• Fraud & AML Service Providers: Transaction data and device information may be shared with specialist fraud prevention and AML compliance partners for screening and risk assessment purposes.
• Regulatory & Law Enforcement Authorities: We are obligated to disclose Personal Data to competent regulatory bodies, law enforcement agencies or courts where required by applicable law, a valid legal order or to protect the rights and safety of ch555, its users or third parties.
• Technology & Infrastructure Partners: Cloud hosting, platform infrastructure and analytics vendors may process data on our behalf under data processing agreements that bind them to confidentiality and security standards consistent with this Policy.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of ch555's business, Personal Data may be transferred as part of that transaction. Affected users will be notified prior to data being subject to a materially different privacy policy.

All third parties with whom ch555 shares Personal Data are contractually required to process that data solely for the agreed purpose and to maintain appropriate technical and organisational security measures.

8 Cookies & Tracking Technologies

ch555 uses cookies and similar tracking technologies to operate the Platform, maintain session continuity, detect fraud and analyse usage patterns. The following categories of cookies may be in use:

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair the functionality of the Platform. Clearing your browser cookies does not delete Personal Data held on our servers.

9 Data Retention

ch555 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law or the Operator's licensing obligations, whichever is the longer period.

• Account Data: Retained for the duration of the Account relationship and for a period thereafter as required by applicable law (typically five years following account closure, subject to AML regulatory requirements).
• KYC Documents: Retained for the minimum period required by the Operator's licensing and AML obligations, typically five years from the date of verification or account closure.
• Transaction Records: Retained for a minimum of five years from the date of each transaction, in accordance with standard financial record-keeping requirements.
• Support Communications: Retained for up to three years from the date of the interaction, or longer where the communication relates to an unresolved dispute.
• Marketing Preferences: Retained until consent is withdrawn or the Account is closed, whichever comes first.
• Analytics Data: Aggregated and anonymised analytics data may be retained indefinitely as it does not constitute Personal Data in identifiable form.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised in accordance with our internal data lifecycle management procedures.

10 Data Security

ch555 implements appropriate technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• HTTPS encryption for all data transmitted between your device and the Platform
• Encrypted storage of sensitive data fields, including passwords and financial identifiers
• Access controls ensuring that Personal Data is accessible only to authorised personnel with a legitimate need
• Regular security assessments and penetration testing of Platform infrastructure
• Two-factor authentication options available to Account holders to protect account access
• Formal data breach response procedures, including timely notification to affected users and regulatory authorities where required

Notwithstanding the above, no system of data transmission or storage over the internet can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your Account login credentials and for ensuring that your device is reasonably protected against unauthorised access.

11 Your Rights as a Data Subject

Subject to applicable law and the Operator's legal obligations, you hold the following rights in relation to your Personal Data held by ch555. Requests may be submitted through the Help Centre or by emailing our Support team (contact details in Section 16). We will endeavour to respond within 30 calendar days.

Please note that certain rights may be subject to limitations where ch555 is required to retain or continue processing data to comply with legal obligations — for example, AML record-keeping requirements that supersede erasure requests. We will explain any such limitations clearly when responding to your request.

12 Children's Privacy

The ch555 Platform is strictly intended for individuals aged 18 years or older — or the higher minimum age prescribed by the Operator's licence jurisdiction. We do not knowingly collect Personal Data from individuals under the applicable minimum age. If we become aware that Personal Data has been collected from an underage individual, we will promptly delete such data and close the associated Account.

If you believe that a minor has accessed the Platform or submitted Personal Data, please contact ch555 Support immediately via the Help Centre or email.

13 International Data Transfers

ch555's infrastructure and some of its third-party service providers may be located outside Pakistan. Where Personal Data is transferred internationally, ch555 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within the Platform's primary operating jurisdiction. Such safeguards may include contractual data processing agreements with standardised data protection clauses.

By using the Services, you acknowledge that your Personal Data may be transferred to, stored and processed in jurisdictions outside your country of residence. Where such transfers are required for the delivery of Services (e.g., payment processing or KYC verification), they are carried out on the legal basis of contractual necessity.

14 Third-Party Links & Services

The ch555 Platform may contain references to third-party services (such as payment providers or responsible gambling support organisations). This Policy applies solely to Personal Data collected and processed by ch555. Where third-party services are involved — including payment processors handling your deposit or withdrawal — those services are governed by their own privacy policies, over which ch555 has no control and for which ch555 accepts no responsibility.

We encourage you to review the privacy notices of any third-party service you interact with in connection with your use of ch555.

15 Policy Amendments

ch555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, Platform functionality or data processing practices. The "Last Updated" date at the top of this document indicates the date of the most recent revision.

Where amendments are material — meaning they significantly affect how we collect, use or share your Personal Data — we will notify registered Account holders by email to their registered address prior to the amendment taking effect, and/or display a prominent notice on the Platform. Your continued use of the Services following the effective date of an amendment constitutes your acceptance of the revised Policy.

We recommend reviewing this Policy periodically to remain informed about how ch555 protects your information.

16 Contact Us & Complaints

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact ch555 through the following channels. All contact references below are plain text — do not send identity documents or sensitive files via email. Use only the in-platform KYC verification flow for document submissions.

• Live Chat: Available within your Account portal — the fastest route for privacy-related queries.
• Help Centre: The self-service knowledge base includes guidance on data access requests and account management.
• Email: [email protected] — for formal written privacy requests. This is a plain-text reference only.

We aim to acknowledge all formal written data-subject requests within five (5) business days and to provide a substantive response within thirty (30) calendar days, subject to the complexity of the request. Where a longer timeframe is required, we will notify you and provide a revised expected response date.

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant supervisory authority under the Operator's licensing jurisdiction. Details of the applicable supervisory authority are available from the Help Centre upon request.