Your Data, Protected.

1. Overview & Data Controller

// CLAUSE 1.1–1.5

1.1 This Privacy Policy ("Policy") describes how hs555 ("we", "us", "our", "the Platform") collects, uses, stores, protects, and discloses personal data relating to players and visitors who access the hs555 website at hs555.club or use any hs555 service in any capacity ("you", "your").

1.2 hs555 is the data controller for all personal data processed under this Policy. As data controller, hs555 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection legislation.

1.3 This Policy applies to all personal data collected via: (a) the hs555 website and any hs555-authorised mobile application; (b) the account registration and KYC verification processes; (c) deposits, withdrawals, and all financial transactions; (d) gameplay and betting activity across all hs555 products including sportsbook, live casino, slots, and table games; and (e) communications between you and the hs555 support team.

1.4 This Policy is incorporated by reference into the hs555 Terms & Conditions. By accepting the Terms & Conditions, you simultaneously accept this Privacy Policy. If you do not agree with this Policy, you must not register an account or use any hs555 service.

1.5 The effective date of this version of the Privacy Policy is 1 January 2026. The document version is 3.1. Previous versions are archived and available on request by contacting [email protected].

2. Personal Data We Collect

// CLAUSE 2.1–2.6

2.1 Data You Provide Directly: When you register an account with hs555, you provide us with identity data (full name, date of birth, CNIC or passport number), contact data (email address, mobile phone number, city of residence), and in some cases, employment or source-of-funds information where required for enhanced due diligence purposes.

2.2 KYC Documentation: Prior to processing your first withdrawal, hs555 requires you to complete KYC verification. This involves uploading scanned or photographed copies of your CNIC or passport, a recent proof-of-address document (such as a utility bill or bank statement), and in some cases a selfie photograph taken alongside your identity document.

2.3 Financial & Payment Data: When you make a deposit or request a withdrawal, hs555 and its payment partners collect the financial information necessary to complete the transaction. For JazzCash and EasyPaisa this includes your registered mobile number and account reference. For bank IBFT this includes your account title, account number, and bank name. For USDT transactions, your wallet address is recorded. Full payment card or account numbers are never stored on hs555 servers.

2.4 Gaming Activity Data: hs555 automatically records all gaming and betting activity conducted through your account. This includes every bet placed, game session started, deposit made, withdrawal requested, bonus claimed, and responsible gaming tool activated. This data is retained for operational, regulatory compliance, and dispute resolution purposes.

2.5 Technical & Device Data: hs555 automatically collects certain technical data when you access the platform, including your IP address, device identifier, browser type and version, operating system, screen resolution, and connection type. This data is used primarily for fraud detection, security monitoring, and platform performance optimisation.

2.6 Communications Data: All communications between you and hs555 — including live chat transcripts, support emails, and any written submissions — are recorded and retained. This data supports dispute resolution, quality assurance, and regulatory compliance obligations.

3. How We Use Your Personal Data

// CLAUSE 3.1–3.8

3.1 Account Operation: The primary purpose of collecting your personal data is to create and maintain your hs555 player account, verify your identity, process your deposits and withdrawals, and deliver the gaming services you have registered to use.

3.2 Legal Compliance: hs555 is legally required to collect and retain certain categories of personal data to comply with its obligations under applicable anti-money laundering (AML) regulations, counter-terrorism financing (CTF) requirements, KYC standards, and international gaming licence conditions. Processing for these purposes is mandatory and cannot be waived by a player request.

3.3 Fraud Prevention & Security: hs555 uses technical data, financial data, and gaming activity data to detect, investigate, and prevent fraud, bonus abuse, money laundering, account takeover, and other prohibited activities. This processing is carried out in hs555's legitimate interests as a regulated gaming operator.

3.4 Responsible Gaming: Gaming activity data and responsible gaming preference data are used to monitor player behaviour for indicators of problem gambling. Where such indicators are identified, hs555 may proactively contact affected players to offer support resources or apply platform protections. This processing is carried out to protect player welfare and to meet responsible gaming obligations under hs555's gaming licence.

3.5 Customer Support: Communications data and account data are used to respond to your support queries, resolve disputes, process complaints, and improve the quality of hs555's customer service team.

3.6 Platform Improvement: Aggregated and anonymised usage and behavioural data is used to analyse how players interact with the hs555 platform, identify areas for improvement, test new features, and optimise the user experience across different devices and connection types common in Pakistan.

3.7 Marketing Communications: Where you have provided explicit consent to receive marketing communications, hs555 may use your contact data and gaming preference data to send you information about relevant promotions, new game launches, PSL cricket betting specials, and seasonal bonus offers. You may withdraw consent at any time by updating your notification preferences in your account settings or by contacting [email protected].

3.8 Legal Claims: In the event of a dispute, investigation, or legal proceeding involving your account, hs555 may use any relevant personal data as evidence or in correspondence with legal advisers, regulatory bodies, or courts.

4. Data Sharing & Third-Party Disclosure

// CLAUSE 4.1–4.7

4.1 hs555 does not sell your personal data to any third party under any circumstances. Data sharing is limited strictly to the categories and purposes described in this section.

4.2 Payment Processors: To process your JazzCash, EasyPaisa, HBL IBFT, UBL, Meezan Bank, Raast, or USDT transactions, hs555 shares the minimum financial and identity data necessary with the relevant payment gateway or banking partner. All such partners are contractually bound to process your data only for the specified transaction purpose and to maintain appropriate security standards.

4.3 KYC & Identity Verification Providers: hs555 uses specialist third-party identity verification services to validate the authenticity of KYC documents submitted by players. These providers process your identity documentation under strict contractual data processing agreements and are not permitted to use your data for any purpose other than identity verification on hs555's behalf.

4.4 Fraud Prevention & AML Screening: hs555 shares certain personal and transactional data with fraud prevention networks and AML screening databases as part of its regulatory compliance programme. This sharing is mandatory under hs555's gaming licence obligations and cannot be restricted by player preference.

4.5 Responsible Gaming Databases: Where a player self-excludes from hs555, relevant data may be shared with cross-operator responsible gaming registers to prevent the player from circumventing their self-exclusion by registering with affiliated platforms.

4.6 Regulatory & Law Enforcement Authorities: hs555 will disclose personal data to gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies where required to do so by applicable law, court order, or regulatory directive. hs555 is not required to notify you before making such a disclosure where prior notification would compromise a legal investigation.

4.7 Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of hs555's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to your data being transferred.

5. Data Retention

// CLAUSE 5.1–5.4

5.1 hs555 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by applicable law or regulatory obligation.

5.2 Active Account Data: While your hs555 account remains active, all associated personal, financial, and gaming activity data is retained in full. This data is necessary to operate your account, process transactions, and meet ongoing KYC and AML compliance requirements.

5.3 Post-Closure Retention: Following account closure — whether voluntary or initiated by hs555 — the following retention periods apply: (a) Identity and KYC data: retained for a minimum of five (5) years from the date of account closure to satisfy AML record-keeping requirements; (b) Financial transaction records: retained for a minimum of five (5) years; (c) Gaming activity logs: retained for a minimum of three (3) years; (d) Communications records: retained for two (2) years unless relevant to an ongoing dispute or investigation; (e) Marketing preference records: deleted within 30 days of account closure.

5.4 At the expiry of the applicable retention period, hs555 will securely delete or anonymise your personal data in accordance with its data destruction policy. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

6. Security Measures

// CLAUSE 6.1–6.5

6.1 hs555 implements a comprehensive information security programme designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security posture is reviewed and updated on a continuous basis in response to the evolving threat landscape.

6.2 Encryption: All data transmitted between your device and hs555 infrastructure is encrypted using TLS 1.3. Sensitive data stored at rest — including KYC documents, payment references, and authentication credentials — is encrypted using AES-256.

6.3 Access Controls: Access to personal data within hs555 is governed by strict role-based access control policies. Only employees and contractors with a legitimate operational need are granted access to specific categories of personal data. All data access is logged and subject to regular audit.

6.4 Penetration Testing: hs555 engages independent third-party security firms to conduct regular penetration tests and vulnerability assessments of its platform infrastructure. Critical vulnerabilities identified during testing are remediated within defined SLA windows.

6.5 Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, hs555 will notify affected players without undue delay and, where required, will report the breach to the relevant supervisory authority. Notifications will be sent to the email address registered on your account.

7. Cookies & Tracking Technologies

// CLAUSE 7.1–7.5

7.1 hs555 uses cookies and similar tracking technologies — including pixel tags, web beacons, and local storage objects — to operate and improve the platform, maintain your session, detect fraud, and understand how players use the hs555 website.

7.2 Essential Cookies: These cookies are strictly necessary for the hs555 platform to function. They maintain your login session, remember your responsible gaming settings, and enable core security features such as fraud detection. These cookies cannot be disabled without preventing you from using the platform.

7.3 Functional Cookies: These cookies remember your preferences — such as language, preferred payment method, and game category — to personalise your experience on subsequent visits. You may disable functional cookies via your browser settings, though some platform features may be affected.

7.4 Analytics Cookies: hs555 uses analytics cookies to collect aggregated, anonymised data about how players navigate the platform. This data helps the hs555 product team identify areas for improvement. Individual player data is never shared with third-party analytics providers in identifiable form.

7.5 Managing Cookies: You can control and delete cookies through your browser settings. Instructions for the most common browsers are available through your browser's help documentation. Note that disabling essential cookies will prevent you from logging in to your hs555 account.

8. Your Privacy Rights

// CLAUSE 8.1–8.7

8.1 Subject to applicable law and the regulatory retention obligations described in Clause 5.3, you hold the following rights in respect of your personal data held by hs555:

8.2 Right of Access: You may request a copy of all personal data hs555 holds about you at any time. hs555 will provide this information within 30 days of receiving a verified request. The first access request per 12-month period is provided free of charge.

8.3 Right to Rectification: If any personal data hs555 holds about you is inaccurate or incomplete, you have the right to request its correction. You may update basic account information directly through your account settings; other corrections can be requested via [email protected].

8.4 Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no overriding legal obligation requires its retention. Requests for erasure will be assessed against hs555's regulatory retention obligations; where retention is mandatory, hs555 will inform you accordingly.

8.5 Right to Restrict Processing: You may request that hs555 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.

8.6 Right to Object: You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on hs555's legitimate interests, though hs555 may demonstrate compelling grounds to continue such processing.

8.7 Exercising Your Rights: To exercise any of the rights described above, contact hs555 at [email protected] with the subject line "Privacy Rights Request". hs555 will acknowledge your request within 5 business days and provide a substantive response within 30 days.

9. Minors & Age Verification

// CLAUSE 9.1–9.3

9.1 hs555 is strictly an adults-only platform. The minimum age to register an account or use any hs555 service is twenty-one (21) years. hs555 does not knowingly collect personal data from persons under the age of 21.

9.2 Age verification is conducted at registration through a declaration of date of birth and is formally confirmed during the KYC process through documentary evidence. Where hs555 has reasonable grounds to suspect that a registered player may be under 21, the account is suspended immediately pending age verification.

9.3 If hs555 discovers that personal data has been collected from a person under the age of 21, all such data will be permanently deleted and the associated account will be closed. Any funds deposited by a player subsequently found to be underage will be returned to the original payment source. If you believe that a minor has registered with hs555, please report this immediately to [email protected].

10. Cross-Border Data Transfers

// CLAUSE 10.1–10.3

10.1 hs555 operates infrastructure and uses service providers that may be located outside Pakistan. As a result, your personal data may be transferred to and processed in jurisdictions outside Pakistan, including countries that may not have data protection laws equivalent to those applicable in your jurisdiction of residence.

10.2 Where such transfers occur, hs555 implements appropriate safeguards to protect your personal data, including contractual data processing agreements with all international service providers that impose data protection obligations equivalent to those described in this Policy.

10.3 Payment data related to JazzCash, EasyPaisa, Raast, and domestic bank IBFT transactions is processed within Pakistan by the respective local payment providers and is subject to Pakistani financial regulations applicable to those providers.

11. Changes to This Privacy Policy

// CLAUSE 11.1–11.2

11.1 hs555 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Material changes — meaning changes that significantly affect how your personal data is used or your rights in respect of it — will be communicated to registered players via email at least seven (7) days before the changes take effect.

11.2 Non-material changes, including typographical corrections and clarifications that do not alter the substance of any data processing activity, take effect immediately upon publication. The version number and effective date at the top of this Policy will always reflect the current version. Continued use of the hs555 platform following notification of changes constitutes acceptance of the revised Policy.

12. Contact Us — Data & Privacy Queries

// CLAUSE 12.1–12.3

12.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by hs555, please contact our dedicated privacy team using the details below. All privacy-related correspondence is handled by a dedicated team and is treated with the highest level of confidentiality.

12.2 Email: [email protected] — please use the subject line "Privacy Query" or "Data Rights Request" so your message is routed to the correct team member without delay.

12.3 hs555 aims to acknowledge all privacy-related correspondence within five (5) business days and to provide a full substantive response within thirty (30) calendar days. Where a request is complex or where you have submitted multiple simultaneous requests, hs555 may extend the response period by a further thirty (30) days, in which case you will be informed of the extension and the reason for it.