Privacy Policy

1.1 For the purposes of this Privacy Policy, the data controller responsible for the processing of your personal information is cx555, operating the platform accessible at cx555.net ("cx555", "we", "us", "our"). cx555 determines the purposes and means by which personal data is processed in connection with the online casino, sportsbook, and related services offered on our platform.

1.2 cx555 operates under international gaming regulations. Our compliance obligations under those regulations inform certain mandatory data collection and processing activities described in this Policy, including identity verification, transaction monitoring, and record-keeping requirements.

1.3 This Policy applies to all personal data collected through cx555.net, including data submitted during registration, KYC verification, payment processing, customer support interactions, and general use of the platform. It applies equally to members based in Karachi, Lahore, Islamabad, Faisalabad, and all other locations from which cx555 services are accessed.

2.1 cx555 collects personal data from you directly (when you register, verify your identity, make a deposit, or contact support), automatically (through cookies and technical tracking), and indirectly (from payment processors and KYC verification partners). The categories of personal data we collect are set out in the table below:

2.2 cx555 does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation, except where you voluntarily disclose such information in a support communication, in which case it will be processed only to the extent necessary to resolve your query.

3.1 cx555 processes your personal data only where a valid legal basis exists. The primary legal bases on which cx555 relies are as follows:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to provide the online casino, sports betting, deposit, withdrawal, and customer support services you have signed up for.
• Legal Obligation: cx555 is required by international gaming regulations and anti-money laundering frameworks to verify member identities, retain transaction records, and report suspicious activity to relevant authorities. We process your data to meet these mandatory legal obligations.
• Legitimate Interests: cx555 processes certain technical and gaming activity data on the basis of its legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services. We have assessed that these interests do not override your rights and freedoms.
• Consent: Where cx555 processes your data for marketing communications or optional analytics, we will obtain your explicit consent beforehand. You may withdraw consent at any time by contacting [email protected].

4.1 cx555 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your cx555 member account, including processing login credentials and account settings.
• Identity Verification: To verify that you meet the 21+ age requirement and to complete Know Your Customer (KYC) and Enhanced Due Diligence (EDD) checks required under our regulatory obligations.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and other supported payment methods; to match withdrawal requests to verified payment methods; and to maintain transaction records.
• Gaming Services Delivery: To record and settle bets, manage bonus accounts, calculate and credit winnings, and maintain the integrity of game results across cricket betting, slots, and live casino titles.
• Fraud Prevention & Security: To detect and prevent fraudulent account activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct using device fingerprinting, IP analysis, and behavioural monitoring.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, to apply member-requested limits and exclusions, and to comply with responsible gaming obligations under our licence.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Legal & Regulatory Compliance: To fulfil cx555's obligations under applicable anti-money laundering legislation, gaming regulations, and court orders; and to report suspicious transactions where legally required.
• Platform Improvement: To analyse aggregated usage patterns and technical performance in order to improve the cx555 platform. This analysis uses anonymised or pseudonymised data wherever possible.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent to receive such communications.

4.2 cx555 will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

5.1 cx555 does not sell your personal data to any third party. We may share your personal data with the following categories of recipients only where strictly necessary and under appropriate data protection safeguards:

• KYC & Identity Verification Providers: Third-party identity verification services used to validate CNIC documents, cross-reference sanctions lists, and perform biometric checks. These providers act as data processors under contract with cx555.
• Payment Processing Partners: JazzCash, EasyPaisa, bank transfer processors, and USDT payment gateways require limited personal and financial data to execute transactions and meet their own regulatory obligations.
• Game Content Providers: Licensed game studios and live dealer solution providers may receive pseudonymised player identifiers (not your full identity) to deliver game content and manage RNG certification requirements.
• Fraud Prevention & Security Vendors: Specialist third-party services used to detect multi-accounting, device fraud, and bot activity receive technical data (IP addresses, device fingerprints) under strict contractual data processing agreements.
• Regulatory Authorities: Where required by law, court order, or a competent gaming regulatory authority, cx555 will disclose member data without prior notice to you.
• Professional Advisers: Legal, accounting, and auditing firms acting as data processors in the delivery of their professional services to cx555 may access limited personal data under appropriate confidentiality obligations.

6.1 cx555 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including meeting any legal, regulatory, or reporting requirements. The retention periods applicable to the main categories of data are summarised below:

6.2 Upon expiry of the applicable retention period, cx555 will securely delete or anonymise your personal data such that it can no longer be linked to you. Where complete deletion is not immediately technically feasible (e.g., data in encrypted backups), we will ensure the data is isolated and protected until deletion is possible.

7.1 cx555 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your browser or app and cx555 servers is encrypted using 256-bit SSL/TLS protocols. Look for the padlock icon in your browser address bar when accessing cx555.net.
• Encryption at Rest: Sensitive data at rest — including KYC document scans, financial account identifiers, and password hashes — is encrypted using AES-256 encryption.
• Access Controls: Access to member personal data is restricted to cx555 personnel who have a specific operational need to access it. Role-based access controls are enforced and all data access is logged and audited.
• Two-Factor Authentication (2FA): cx555 strongly recommends that all members enable 2FA on their accounts. cx555 staff accounts that access personal data are required to use 2FA without exception.
• Penetration Testing: cx555 conducts regular security assessments and penetration testing of its platform infrastructure to identify and remediate vulnerabilities proactively.
• Incident Response: cx555 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, cx555 will notify affected members promptly and report to the relevant regulatory authority as required.

8.1 cx555 uses cookies and similar tracking technologies (including local storage and session identifiers) on cx555.net to ensure the platform functions correctly, to maintain your login session, to prevent fraud, and to improve user experience.

8.2 The categories of cookies used by cx555 are as follows:

• Strictly Necessary Cookies: These cookies are essential for cx555 to function and cannot be disabled. They include session cookies that maintain your login state, security tokens that prevent cross-site request forgery, and load-balancing cookies. No personal data is processed through strictly necessary cookies beyond what is required for the immediate session.
• Functional Cookies: These cookies remember your preferences — such as language settings, game lobby view, and responsible gaming limits display — to personalise your cx555 experience. These cookies do not track your activity across other websites.
• Performance & Analytics Cookies: cx555 uses pseudonymised analytics to understand how members navigate the platform, which features are most used, and where technical errors occur. This data is aggregated and does not identify individual members.
• Security & Fraud Prevention Cookies: Device fingerprinting tokens and risk-scoring identifiers are stored locally to detect multi-accounting, bot activity, and suspicious login patterns.

8.3 cx555 does not use third-party advertising or retargeting cookies. No cx555 cookie data is shared with advertising networks or social media platforms.

8.4 You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the cx555 platform. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

9.1 As a cx555 member, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request":

• Right of Access: You have the right to request a copy of the personal data cx555 holds about you, along with information about how it is processed. We will respond within 30 days of receiving a valid request.
• Right to Rectification: If any personal data cx555 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your cx555 account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that cx555 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Please note that cx555 is required to retain certain data for regulatory compliance periods as set out in Section 6 — erasure requests cannot override these mandatory retention obligations.
• Right to Restriction of Processing: You may request that cx555 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing pending verification of our legitimate interests.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where cx555 relies on legitimate interests as its legal basis. cx555 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10.1 cx555 services are strictly available to persons who are 21 years of age or older. cx555 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. Age verification is a mandatory step in the cx555 registration and KYC process, and accounts found to belong to minors will be immediately suspended and all funds returned to the verified source of payment.

10.2 If you believe that a minor has registered on the cx555 platform or that cx555 has inadvertently collected personal data relating to a minor, please notify us immediately at [email protected]. We will investigate the matter promptly and take all necessary remedial action, including permanent account closure and secure erasure of all associated personal data.

10.3 cx555 urges all adult members to take appropriate measures to prevent minors in their household from accessing online gambling platforms — including using device-level parental controls and keeping cx555 login credentials strictly private.

11.1 cx555 operates internationally and may transfer your personal data to service providers and data processors located outside Pakistan. This may include KYC verification providers, cloud infrastructure operators, game content providers, and fraud prevention vendors whose systems are hosted in jurisdictions other than Pakistan.

11.2 Where personal data is transferred outside Pakistan, cx555 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that applied within Pakistan. These safeguards may include contractual data processing agreements incorporating standard contractual clauses, adequacy decisions applicable to the receiving jurisdiction, or binding corporate rules where the recipient is a member of the cx555 corporate group.

11.3 By using cx555 services, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan, including countries whose data protection laws may differ from those in Pakistan. cx555 will always ensure that such transfers are subject to appropriate safeguards as described above.

11.4 You may request further information about the specific safeguards cx555 applies to international data transfers by contacting [email protected].

12.1 cx555 reserves the right to update or amend this Privacy Policy at any time in order to reflect changes in our data processing practices, regulatory requirements, or platform features. The "Effective Date" at the top of this Policy will be updated whenever a material change is made.

12.2 Where a change is material — meaning it affects your rights or the way in which cx555 processes your personal data in a significant manner — cx555 will notify registered members via email or via a prominent notice on the cx555.net platform at least 14 days before the change takes effect. Your continued use of the cx555 platform after the effective date of the revised Policy constitutes acceptance of the updated terms.

12.3 cx555 recommends that you review this Privacy Policy periodically to stay informed about how we protect your personal data. If you do not agree with any amendment to this Policy, you have the right to close your cx555 account and request erasure of your data in accordance with Section 9, subject to mandatory retention obligations described in Section 6.

13.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or cx555's data processing practices, please contact our dedicated privacy support team:

• Support Email: [email protected]
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
• Response Time: cx555 aims to acknowledge all privacy enquiries within 5 Pakistan Standard Time business days.
• Languages: Privacy enquiries may be submitted in English. Our team will respond in English.

13.2 cx555 takes all privacy complaints seriously. If you submit a formal complaint, cx555 will investigate the matter thoroughly and provide a substantive written response within 30 calendar days. If you are not satisfied with cx555's response, you may be entitled to escalate your complaint to the relevant regulatory or data protection authority in your jurisdiction.

13.3 For members located in Pakistan, cx555 encourages the resolution of privacy disputes directly through our support channel in the first instance, as this is typically the fastest and most effective route to resolution.