y555 Privacy Policy — How We Collect, Use and Protect Your Data

y555 does not sell, rent or trade your personal data. We share data only in the following limited circumstances:

• Payment processors: To execute deposits and withdrawals, your payment method identifiers (mobile wallet number, bank account or card details) are shared with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank for IBFT, or Visa/Mastercard's processing network. These providers handle your data under their own privacy policies and are bound by applicable financial data protection standards.
• Identity verification services: If a third-party verification tool is used to validate your CNIC, the document data is shared solely for that verification purpose and is not retained by the verification service beyond what their policy requires.
• Game software providers: Third-party game providers whose titles appear on y555 receive session data (stake amounts, game outcomes) to operate their games. No personally identifiable information beyond a pseudonymous player ID is shared with game providers.
• Legal and regulatory authorities: y555 will disclose personal data to law enforcement or regulatory bodies when legally compelled to do so, and to cooperate with investigations into fraud, money laundering or other criminal activity. Where legally permissible, y555 will notify affected players of such disclosures.
• Internal group operations: If y555 operates within a group of related entities, data may be shared internally for the purposes of platform administration and fraud prevention. All group entities handling your data are bound by equivalent privacy standards.

y555 uses cookies and similar browser storage technologies to keep you logged in, remember your preferences and understand how the platform is used so it can be improved. The cookies y555 uses fall into the following categories:

You can manage optional cookies through your browser settings. Blocking required cookies will affect your ability to log in and use the platform. y555 does not use third-party advertising cookies or cross-site tracking technologies.

y555 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by law. The key retention periods are:

• Account and identity data: Retained for the lifetime of your active account plus five years after account closure, to comply with standard financial record-keeping obligations.
• Transaction records: Deposit, withdrawal and betting records are retained for five years from the date of each transaction.
• Technical logs (IP, device): Retained for 90 days, after which they are automatically purged unless required as part of a fraud or security investigation in progress.
• Support communications: Live chat transcripts and emails are retained for two years from the date of the last message in a thread.
• Marketing consent records: Records of when you opted in or out of marketing are retained for five years as evidence of consent status.

When the applicable retention period expires, y555 permanently deletes or anonymises the data. Deletion requests submitted by you (see Section 8) are processed within 30 days, subject to any legal holds that prevent immediate deletion of certain records.

As a y555 account holder, you have the following rights over your personal data. To exercise any of these rights, contact y555 at privacy@y555.click or through live chat support. y555 will respond within 30 days of receiving a valid request.

y555 takes the security of player data seriously. The following technical and organisational measures are in place to protect your information:

• TLS encryption on all data in transit between your device and y555 servers. All API endpoints are HTTPS-only; HTTP connections are redirected automatically.
• Password hashing using industry-standard one-way hashing algorithms. y555 cannot retrieve your plaintext password — if forgotten, it must be reset via OTP.
• OTP-based authentication for login and high-value transactions, adding a second layer of verification through your registered Pakistani mobile number.
• Access controls ensuring that internal y555 staff access to player data is role-based and logged. Only staff with a defined operational need can access personal data.
• Fraud monitoring systems that flag unusual login patterns, IP anomalies and transaction irregularities in real time, triggering account review processes before damage can occur.
• Regular security reviews of platform infrastructure to identify and address vulnerabilities proactively.

Despite these measures, no online system is completely immune to risk. If you become aware of any suspicious activity on your y555 account, contact support immediately via live chat. y555 will investigate and, where necessary, secure your account while the investigation is underway.

y555 may update this Privacy Policy to reflect changes in platform functionality, data processing practices or applicable legal requirements. When changes are made, the "Last updated" date at the top of this page and in the hero banner will be revised.

For material changes — those that meaningfully affect how your data is used or what rights you have — y555 will notify active account holders at least 7 days before the changes take effect, via their registered mobile number or email address.

If you continue using y555 after an updated Privacy Policy takes effect, you are deemed to have acknowledged the updated version. If you have concerns about any change, contact the y555 Data Team at privacy@y555.click before the effective date.