Privacy Policy – xx5 Pakistan Online Gaming Platform

1 Introduction

xx5 is an online gaming and sports betting platform built specifically for Pakistani players. When you create an account, make a PKR deposit via JazzCash or Easypaisa, place a bet on a PSL match or spin a slot in the casino, you are sharing certain personal information with us. This Privacy Policy explains how that information is handled.

We are committed to handling your data responsibly and transparently. The goal of this document is to give you a clear, plain-English explanation of our data practices — not a legal document designed to be confusing. If you have questions about anything in this policy, the support team is reachable via live chat inside your account or by email at [email protected].

By registering an account on xx5 and using the platform, you acknowledge that you have read this Privacy Policy and understand how your personal data will be used. This policy should be read alongside our Terms and Conditions.

2 Data We Collect

xx5 collects only the personal data that is necessary to operate your account safely and deliver the platform services. Below is a breakdown of the categories of data we collect:

We do not collect sensitive personal data such as biometric data, religious beliefs or political opinions. We do not collect data from your device beyond what is described above.

3 How We Collect Your Data

xx5 collects personal data through several channels, all of which are tied directly to your use of the platform:

• Direct submission: When you register an account, complete identity verification, contact support or update your account profile, you provide data directly to us.
• Automated collection: When you browse the platform or log in, our systems automatically record technical data such as your IP address, device type and session information for security and fraud prevention.
• Payment providers: When you deposit or withdraw via JazzCash, Easypaisa, Raast or bank transfer, the relevant payment provider shares transaction reference data with us to confirm the payment. We do not receive your full financial credentials from these providers.
• Cookies and similar technologies: Our platform uses cookies to maintain your session, remember your preferences and analyse platform usage. See Section 10 for full details on cookies.
• Third-party verification services: Where identity or age verification is required, we may use third-party services to cross-check the information you have provided. These services do not retain your data beyond the verification process.

4 How We Use Your Data

Your personal data is used exclusively in connection with the operation of xx5. The specific purposes are:

• Creating and managing your xx5 account, including login, balance management and account history.
• Processing PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer and other approved payment methods.
• Verifying your identity and age to comply with the platform's 18+ policy and to prevent fraud.
• Settling sports bets, casino rounds, bingo games and other gaming activity on your account.
• Providing customer support and resolving disputes, including maintaining records of support interactions.
• Detecting and preventing fraud, money laundering, multi-accounting and other prohibited activities described in our Terms and Conditions.
• Monitoring gaming patterns to support responsible gaming — for example, identifying accounts that may benefit from deposit limit recommendations.
• Sending account-related communications such as verification emails, security alerts and transaction confirmations. These are not optional as they relate to your account security.
• Sending promotional communications about bonuses and new platform features, where you have opted in to receive such messages. You can opt out at any time from your account settings.
• Improving platform performance, fixing bugs and understanding how Pakistani players use different sections of xx5.

5 Legal Basis for Processing

xx5 processes your personal data under the following legal bases:

• Contractual necessity: Processing your data is necessary to fulfil the contract between you and xx5 — specifically, to operate your account, process PKR transactions and deliver gaming services.
• Legitimate interests: xx5 has a legitimate interest in detecting fraud, preventing money laundering, maintaining platform security and improving the service for all players.
• Legal obligation: Certain data processing — such as identity verification and record-keeping — may be required to comply with applicable laws and regulations.
• Consent: Where data processing is based on consent — such as sending marketing communications — you have the right to withdraw that consent at any time without affecting other processing activities.

6 Payment Data & PKR Transactions

All financial transactions on xx5 are conducted in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast or any other supported method, the payment is processed through that provider's own secure systems.

xx5 receives only the transaction reference, amount and status confirmation from your payment provider. We do not store your full JazzCash account credentials, complete bank account numbers or card details on our servers. Payment data is retained in the form of transaction records for account management and compliance purposes.

All deposits must come from a payment method registered in your own name. This is a requirement to prevent fraud and to ensure that withdrawals can be returned to the correct person. If a payment is flagged as potentially involving a third-party source, the account will be reviewed and the deposit may be reversed pending investigation.

7 Data Sharing & Third Parties

xx5 does not sell your personal data. We do not share your information with advertising networks, data brokers or unrelated third parties. The only circumstances under which your data is shared with any external party are:

• Payment providers: JazzCash, Easypaisa, Raast and other payment processors receive the minimum data required to process your PKR transactions.
• Identity verification services: Where third-party verification is used to confirm your identity or age, only the specific data required for that check is passed to the verification provider.
• IT and infrastructure providers: xx5 uses third-party hosting, security and software services to operate the platform. These providers operate under strict data processing agreements and are not permitted to use your data for any purpose other than delivering those services to xx5.
• Legal and regulatory authorities: If xx5 receives a valid legal request from law enforcement or a competent authority, we may be required to disclose specific account data. We will only do so to the extent required by the applicable legal obligation.
• Fraud and security networks: In cases of suspected fraud or money laundering, xx5 may share relevant account data with fraud prevention services or financial intelligence units as required.

When data is shared with any third party, it is limited to what is strictly necessary for the purpose and the third party is bound by obligations to protect it.

8 Data Retention

xx5 retains your personal data for as long as your account is active and for a reasonable period after closure, in order to fulfil legal obligations, resolve disputes and enforce agreements.

• Account and identity data is retained for the duration of your account plus a standard period after closure to meet compliance requirements.
• Financial transaction records — including PKR deposit and withdrawal history — are retained for a minimum period as required by applicable financial record-keeping obligations.
• Support communications are retained for a reasonable period to allow dispute resolution and quality review.
• Technical and usage data logs are retained for a shorter period consistent with their purpose — generally for security monitoring and platform analytics.

Once data is no longer required for any of the above purposes, it is securely deleted or anonymised. Anonymised data that cannot be linked back to any individual may be retained for platform analytics indefinitely.

9 Data Security

xx5 takes the security of your personal data seriously. The platform uses a combination of technical and operational controls to protect your information from unauthorised access, loss or misuse:

• All data transmitted between your device and the xx5 platform is encrypted using TLS (Transport Layer Security).
• Passwords are stored in hashed form — xx5 staff cannot see your plaintext password at any point.
• Access to player data within xx5 is restricted to staff members who require it for their specific role, and all staff access is logged.
• Regular security assessments are conducted to identify and address vulnerabilities in the platform.
• Suspicious login attempts and unusual account activity trigger automated alerts and may result in a temporary account lock to protect you.

While xx5 takes every reasonable precaution, no online platform can guarantee absolute security. You also have a role to play — keep your password unique and private, do not share your account credentials with anyone and contact support immediately if you suspect unauthorised access to your account.

10 Cookies & Tracking

xx5 uses cookies and similar browser technologies to make the platform work correctly and to understand how players use it. Cookies are small text files stored on your device when you visit the platform.

The types of cookies used on xx5 are:

• Essential cookies: Required for the platform to function. These maintain your login session, remember your language preferences and keep your account secure. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to understand which sections of the platform are most used, how long players spend on different pages and where they encounter issues. This data is aggregated and not linked to your personal identity.
• Preference cookies: Store your optional settings such as notification preferences and display options so you do not have to reset them each visit.

xx5 does not use third-party advertising cookies or allow advertising networks to place tracking pixels on the platform. You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to log in and use the platform normally.

11 Your Data Rights

As a player on xx5, you have the following rights in relation to your personal data. To exercise any of these rights, contact the support team via live chat or at [email protected].

xx5 will respond to data rights requests within a reasonable timeframe. In some cases, requests may need to be verified before they are actioned to protect your account from unauthorised data requests.

12 Minors & Under-18 Protection

xx5 is strictly an adults-only platform. Players must be 18 years of age or older to register an account, make a PKR deposit or participate in any gaming activity on the platform. We do not knowingly collect personal data from anyone under the age of 18.

If xx5 becomes aware that personal data has been collected from a person under 18, that account will be suspended immediately, the data will be reviewed and, where appropriate, deleted. Any deposits associated with an underage account will be returned and any winnings will be forfeited in accordance with our Terms and Conditions.

Parents and guardians who are concerned that a minor may have accessed xx5 should contact the support team immediately via live chat. We take underage access seriously and will act promptly on any such report.

13 Changes to This Privacy Policy

xx5 reserves the right to update this Privacy Policy at any time to reflect changes to the platform, applicable laws or our data handling practices. When material changes are made, the "Last updated" date shown on this page will be revised accordingly.

For significant changes that affect how your data is used, xx5 may additionally notify active players via email or an in-platform notification. In all cases, the most current version of this Privacy Policy is the one published on this page. Continued use of the platform after any update constitutes acceptance of the revised policy.

We recommend checking this page periodically, particularly if you are a regular player on xx5. If you have questions about any change to the policy, contact support before continuing to use the platform.

14 Contact & Data Queries

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or need to report a potential data concern, you can reach the xx5 team through the following channels:

• Live chat: Available 24/7 inside your xx5 account — the fastest way to get a response.
• Email: [email protected] — for written queries, data access requests and formal complaints.

Support is provided in Pakistan English and the team is familiar with local payment methods including JazzCash, Easypaisa and Raast. For questions specifically about responsible gaming tools such as deposit limits or self-exclusion, visit our Responsible Gaming page.