Privacy Policy — GB555

1. Introduction

GB555 ("we", "us", "our") is committed to protecting the privacy and security of all personal data processed in connection with your use of the GB555 platform, accessible at https://gb555.cam (the "Platform"). This Privacy Policy ("Policy") describes how we collect, use, store, share and safeguard your personal data, and explains the rights available to you as a data subject.

This Policy applies to all visitors, registered account holders, and any person who interacts with the Platform in any capacity, including users based in Pakistan and all other jurisdictions where the Platform is accessible. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, each of which is incorporated by reference.

2. Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, GB555.
• "Data Processor" means any third party that processes personal data on behalf of GB555 under a contractual arrangement.
• "KYC" means Know Your Customer — the identity and age verification process required before withdrawal processing.
• "Cookies" means small text files placed on your device by the Platform to store session and preference information.
• "User" means any natural person who accesses or uses the Platform.

3. Data Controller

GB555 acts as the Data Controller in respect of all personal data collected through the Platform. Enquiries relating to this Policy, data subject access requests, or requests to exercise any rights described in Section 10 should be directed to our support team using the contact details set out in Section 15.

4. Data We Collect

4.1 Registration Data

When you create an account on the Platform, we collect: full legal name, date of birth, email address, residential address (including city — for example Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar), phone number, chosen username and password (stored in encrypted form).

4.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify that users meet the minimum age requirement, we may collect: copies of government-issued identity documents (such as a Pakistani CNIC or passport), proof of address documents, and payment method ownership evidence. This data is processed through our KYC verification workflow and stored securely.

4.3 Financial Data

We collect information about deposits, withdrawals and transaction history on the Platform. Payment method details (such as bank account references or mobile wallet identifiers associated with services like Easypaisa, JazzCash or Raast) are processed in connection with deposit and withdrawal requests. GB555 does not store full card numbers on its servers; payment processing is handled by contracted third-party payment processors subject to applicable security standards.

4.4 Usage Data

We automatically collect technical and behavioural data when you use the Platform, including: IP address, browser type and version, operating system, device identifiers, session duration, pages visited, game sessions played, bet history, login timestamps and error logs.

4.5 Communications Data

When you contact GB555 support via live chat, email or any other channel, we retain records of those communications, including timestamps and the content of each interaction.

5. Data Processing & Legal Basis

GB555 processes personal data on the following legal bases:

6. Cookies & Tracking Technologies

6.1 Types of Cookies Used

GB555 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for platform functionality, session authentication and security. These cannot be disabled without impairing Platform operation.
• Performance Cookies: Used to collect aggregate, anonymised data about how users interact with the Platform, helping us improve performance and usability.
• Functional Cookies: Store preferences such as language selection and display settings to personalise your experience.
• Analytics Cookies: Enable aggregate analysis of user behaviour to inform product development decisions. No individually identifiable data is shared with analytics providers.

6.2 Cookie Retention

Session cookies expire when you close your browser. Persistent cookies are retained for periods ranging from 30 days to 24 months depending on their function. You may manage or delete cookies through your browser settings; however, disabling strictly necessary cookies will impair Platform functionality.

7. Data Sharing & Disclosure

GB555 does not sell your personal data. We may share personal data with the following categories of third parties, strictly as necessary:

• KYC Verification Providers: Identity verification services contracted to support account onboarding and age verification.
• Payment Processors: Third-party payment service providers engaged to process deposits and withdrawals. Payment provider names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are referenced for Pakistani users as local payment familiarity context only; their inclusion does not imply a data-sharing arrangement with any specific provider unless applicable.
• Regulatory & Law Enforcement Authorities: Where legally required, GB555 will disclose personal data to competent authorities, including in the context of anti-money laundering investigations or court orders.
• IT Infrastructure & Security Providers: Cloud hosting, cybersecurity and fraud detection vendors who process data solely under GB555's instruction and are bound by data processing agreements.
• Corporate Transactions: In the event of a merger, acquisition or asset sale, personal data may be transferred to the successor entity, with users notified in advance where legally required.

8. International Data Transfers

GB555 may transfer your personal data to countries outside your jurisdiction of residence, including jurisdictions that may not offer the same level of data protection as your home country. Where such transfers occur, GB555 ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent transfer mechanisms — to protect your data during transit and at rest.

9. Retention Periods

GB555 retains personal data for the following periods, or for longer where required by applicable law:

• Account and registration data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years in line with applicable financial regulations.
• Support communications: Retained for two (2) years from the date of the last interaction.
• Usage and analytics data: Aggregate data retained indefinitely in anonymised form; individually attributable usage data retained for up to two (2) years.

10. User Rights

Subject to applicable law, you have the following rights in respect of your personal data held by GB555:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that your data be provided in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact GB555 support using the details in Section 15. We will respond to verified requests within 30 days. Identity verification may be required before your request is actioned.

11. Minors & Age Verification

The GB555 Platform is strictly intended for users who are at least 18 years of age — or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect personal data from individuals under this age. Where we discover that personal data has been submitted by a minor, we will delete that data promptly and close the associated account.

Age verification is a mandatory component of the GB555 KYC process. Users who cannot satisfy age verification requirements will be unable to access deposit, withdrawal or gameplay functionality.

12. Security Measures

GB555 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• 256-bit TLS/SSL encryption for all data in transit;
• Encryption of sensitive data fields at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing;
• Multi-factor authentication for administrative access to core systems;
• Incident response procedures for prompt detection and notification of any data breach.

While GB555 employs robust security standards, no digital platform can guarantee absolute security. You should use a strong, unique password for your GB555 account and notify support immediately if you suspect unauthorised access.

13. Third-Party Links & Services

The Platform may contain references to third-party payment services, sports leagues (including PSL, ICC and other cricket and sports organisations) and other external services for contextual and informational purposes. These references do not constitute endorsement of or affiliation with those third parties. GB555 is not responsible for the privacy practices of any third-party website or service, and this Policy does not apply to them.

14. Policy Amendments

GB555 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, we will provide reasonable notice through the Platform or by email to your registered address. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Platform following notification of any change constitutes your acceptance of the revised Policy.

15. Contact Us

For privacy-related enquiries, data subject access requests or to exercise any rights described in Section 10, please contact the GB555 Data Privacy team:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Response Time: We aim to acknowledge all privacy requests within 5 business days and resolve them within 30 days.
• Languages: English and Urdu support available

If you are unsatisfied with our response to a privacy request, you may have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. Pakistani users may wish to monitor the progress of data protection legislation in Pakistan for guidance on applicable domestic remedies.