m555 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how m555 ("m555", "we", "us", "our") — the operator of the online gaming and sports betting platform accessible at m555.bio — collects, processes, stores, and protects personal data relating to registered players and visitors to the m555 platform ("you", "your").

m555 is committed to protecting your privacy and handling your personal data with transparency and care. This Policy is intended to give you a clear understanding of what data we collect, why we collect it, how it is used, and what rights you have in respect of that data.

By registering an m555 account or using the m555 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not use the m555 platform.

This Policy should be read alongside m555's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Personal Data We Collect

m555 collects personal data in the following categories:

Category	Data Collected	When Collected
Identity Data	Full legal name, date of birth, national ID / CNIC number, photograph (where required for verification)	Account registration and KYC verification
Contact Data	Email address, mobile phone number, postal address	Account registration
Financial Data	Payment method details (e.g. JazzCash account, Easypaisa account, bank account / IBAN), transaction history, deposit and withdrawal records	Deposit, withdrawal, and KYC processes
Technical Data	IP address, device type, browser type and version, operating system, session identifiers, geolocation (country/city level)	Each platform session
Usage Data	Pages visited, games played, bets placed, bet amounts, session duration, login timestamps	Each platform session
Communications Data	Records of your communications with m555 support, including live chat transcripts, emails, and complaint records	Customer support interactions
Responsible Gaming Data	Self-imposed deposit limits, self-exclusion status, cooling-off period records	Where player activates responsible gaming tools

m555 does not intentionally collect sensitive personal data beyond what is required for identity verification and legal compliance. Where your CNIC or identity documentation is submitted, it is used solely for age and identity verification and stored in an access-controlled environment.

3. How We Use Your Personal Data

m555 uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your m555 account, including authentication and account security.
• Service delivery: To provide you with access to the m555 platform's betting markets, casino games, and all associated features.
• Payment processing: To process your deposits and withdrawals via your chosen payment method (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, etc.).
• Identity and age verification (KYC): To verify your identity and confirm you meet the 18+ age requirement, as required by applicable regulations.
• Anti-money laundering and fraud prevention: To monitor transactions and account activity for suspicious behaviour, in compliance with AML obligations.
• Responsible gaming: To monitor gaming activity and identify patterns that may indicate problem gambling, and to administer self-exclusion and limit requests.
• Customer support: To respond to your enquiries, resolve disputes, and communicate important account-related information.
• Platform improvement: To analyse aggregate usage data, identify technical issues, and improve the m555 platform experience.
• Marketing communications: To send you promotional offers, bonuses, and platform updates, where you have not opted out of such communications. You may opt out at any time.
• Legal compliance: To comply with applicable laws, regulations, court orders, and instructions from relevant regulatory or law enforcement authorities.

4. Legal Basis for Processing

m555 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform our obligations under the m555 Terms & Conditions (account management, payment processing, service delivery).
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and tax obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where your consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. Data Sharing and Disclosure

m555 does not sell or rent your personal data to third parties. m555 may share your data with the following categories of third parties, strictly on a need-to-know basis:

• Payment processors: JazzCash, Easypaisa, and banking partners, to process your deposits and withdrawals.
• Game studios and software providers: Where required for game functionality and RNG auditing (data shared is limited to player identifiers and session data).
• Identity verification providers: Third-party KYC service providers used to verify the authenticity of identity documents submitted by players.
• Fraud and AML monitoring services: Third-party platforms used to detect and prevent fraudulent activity and money laundering.
• IT and infrastructure providers: Cloud hosting, database, and cybersecurity providers who process data on m555's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where m555 is legally required to disclose personal data by court order, regulatory instruction, or applicable law.

All third-party data processors engaged by m555 are required to handle personal data in a manner consistent with this Policy and applicable data protection standards.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside of Pakistan where m555 or its service providers operate. Where such transfers occur, m555 takes steps to ensure that your data is afforded an adequate level of protection through appropriate contractual safeguards, including standard contractual clauses or equivalent mechanisms.

7. Data Retention

m555 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support records: Retained for 3 years from the date of the relevant interaction.
• Self-exclusion records: Retained indefinitely to prevent re-registration during exclusion periods and to comply with responsible gaming obligations.
• Technical and usage data: Retained in aggregate or anonymised form for analytical purposes, which may be indefinite.

Where personal data is no longer required for the purposes described in this Policy and retention is not required by law, m555 will securely delete or anonymise that data.

8. Cookies and Tracking Technologies

m555 uses cookies and similar technologies (web beacons, session tokens) to operate and improve the platform. Cookies used by m555 fall into the following categories:

• Essential cookies: Required for platform functionality, including session management, login authentication, and security. These cannot be disabled without impacting platform operation.
• Functional cookies: Remember your preferences (e.g. language settings, game lobby layout) to personalise your experience.
• Analytics cookies: Collect aggregate data about how visitors use the m555 platform, helping us identify performance issues and improve the user experience. No individually identifiable information is extracted from analytics data.

You may control or delete cookies through your browser settings. Note that disabling essential cookies will affect your ability to use the m555 platform. m555 does not use third-party advertising cookies or share cookie data with advertisers.

9. Security Measures

m555 implements technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and m555 servers
• Encryption of sensitive data at rest (including financial data and identity documents)
• Access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis
• Two-factor authentication available for player accounts
• Regular security audits and penetration testing of the m555 platform
• Formal incident response procedures to detect, investigate, and notify in the event of a data breach

While m555 takes all reasonable precautions, no internet transmission or electronic storage system is entirely secure. You are responsible for maintaining the confidentiality of your m555 login credentials. Do not share your password with anyone, including m555 staff, who will never ask for your password.

10. Your Data Protection Rights

Subject to applicable law, you have the following rights in respect of your personal data held by m555:

• Right of access: Request a copy of the personal data m555 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data, subject to m555's legal retention obligations (e.g. AML record-keeping). Self-exclusion records are excluded from erasure requests.
• Right to restriction: Request that m555 restrict processing of your personal data in certain circumstances (e.g. while a dispute is being investigated).
• Right to data portability: Request a copy of your personal data in a structured, machine-readable format, where processing is based on consent or contract.
• Right to object: Object to processing of your personal data based on legitimate interests, including direct marketing. If you object to marketing, m555 will cease using your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, contact m555 support via the live chat feature on the platform or by email at [email protected]. m555 will respond to all data rights requests within 30 days. Complex requests may require an additional 60-day extension, of which you will be notified.

Where m555 cannot fulfil a data rights request (e.g. due to conflicting legal obligations), you will be provided with a clear explanation of the reason.

11. Children's Privacy

The m555 platform is strictly for adults aged 18 and over. m555 does not knowingly collect personal data from individuals under the age of 18. If m555 discovers that personal data has been collected from a minor, the associated account will be immediately closed and the data deleted (subject to any legal reporting obligations). If you believe a minor has registered on m555, please contact m555 support immediately.

12. Third-Party Links

The m555 platform does not include links to external third-party websites in its main content. However, where any such link appears (for example, in game content supplied by third-party studios), m555 is not responsible for the privacy practices of those third parties. You should review the privacy policies of any third-party sites you visit independently of m555.

13. Changes to This Privacy Policy

m555 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform functionality. Where material changes are made, m555 will notify registered players via email or a prominent notice on the platform before the changes take effect. The "last updated" date at the top of this Policy will be revised accordingly.

Your continued use of the m555 platform following notification of changes constitutes acceptance of the updated Policy. If you do not accept the revised Policy, you must close your account.

14. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or m555's data processing practices, please contact the m555 Data Protection team via:

• Live chat: Available 24/7 directly on the m555 platform
• Email: [email protected] (plain text — do not send sensitive personal data by unencrypted email)

All privacy-related complaints will be acknowledged within 48 hours and investigated promptly. Where a complaint cannot be resolved to your satisfaction, you may escalate to the relevant data protection authority in your jurisdiction.