Privacy Policy — How a5555 Handles Your Personal Data

This Privacy Policy ("Policy") is issued by a5555 ("the Platform", "we", "us", "our") and applies to all personal data collected in connection with your use of the a5555 online sports betting and live casino platform, accessible at https://a5555.cam and any associated subdomains or applications ("the Platform").

This Policy sets out: (a) the categories of personal data we collect; (b) the purposes for which that data is processed and the legal bases on which processing relies; (c) the circumstances under which data may be shared with third parties; (d) the rights you hold in relation to your personal data; and (e) the security and retention practices we apply to protect your information.

By registering an account on a5555, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which govern the overall agreement between you and the Platform.

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, email address, device identifiers or financial account details.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, alteration or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, a5555.
• "Data Processor" means a third party that processes personal data on behalf of and under the instruction of the Data Controller.
• "Consent" means a freely given, specific, informed and unambiguous indication of the data subject's agreement to the processing of their personal data for a stated purpose.
• "KYC" (Know Your Customer) means the identity verification process conducted to confirm account holder identity, age and payment method ownership.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, analyse usage and, where consent is given, deliver personalised content.
• "User" / "you" means any person who accesses, registers with or uses the a5555 Platform.

a5555 acts as the Data Controller in respect of personal data processed in connection with the Platform. As Data Controller, a5555 is responsible for determining the purposes and means of processing and for ensuring that processing activities comply with applicable data protection laws in the operator's license jurisdiction.

Where a5555 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers or game studio operators), those providers act as Data Processors and are bound by contractual obligations that restrict their use of your data to the specific services they provide for the Platform.

For all data protection queries and rights requests, please contact us using the details in Section 17 (Contact Us) of this Policy.

We collect personal data from you in the following categories and circumstances:

4.1 Registration Data. When you create an account on a5555, we collect: full legal name, date of birth, residential address (including city — which may include Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar, or any other location), email address, and mobile phone number. This information is necessary to create and manage your account and to fulfil our KYC obligations.

4.2 Identity Verification (KYC) Data. To comply with anti-money laundering (AML) obligations and to verify eligibility, we collect copies of government-issued identity documents (such as a CNIC, passport or driving licence), proof of address documents, and payment method verification documents. This data is processed strictly for KYC and compliance purposes.

4.3 Financial Data. We collect data relating to your payment transactions on the Platform, including deposit amounts, withdrawal requests and the payment methods used — which may include references to mobile wallet services (such as Easypaisa or JazzCash), Raast transfers, or bank accounts with institutions such as HBL, UBL, Meezan Bank or Bank Alfalah. We do not store full card numbers or banking passwords; payment processing is handled by certified third-party providers. Payment-provider names are referenced as contextual identifiers only and do not imply endorsement.

4.4 Betting & Gaming Activity Data. We collect records of your betting and gaming activity on the Platform, including: sports markets selected (including cricket, PSL, ICC tournaments, football and other markets), bet amounts, odds accepted, game sessions, outcomes and win/loss history. This data is used for account management, dispute resolution, responsible gambling monitoring and fraud prevention.

4.5 Technical & Device Data. When you access the Platform, we automatically collect: IP address, device type and operating system, browser type and version, session timestamps, pages visited, and referral source. This data is used to ensure Platform security, detect fraudulent access and improve user experience.

4.6 Communications Data. If you contact our support team — via email, live chat or any other channel — we retain records of those communications, including the content of messages and any attachments provided, for customer service and compliance purposes.

4.7 Preference & Consent Data. Where you have opted in to marketing communications or configured responsible gambling settings (such as deposit limits or self-exclusion), we record those preferences and the dates on which they were set or modified.

Summary of Data Categories:

a5555 processes personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and a5555 — including account creation, deposit processing, bet settlement, withdrawal handling and customer support.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, KYC verification requirements, and any reporting obligations imposed by the operator's license jurisdiction.
• Legitimate Interests: Processing carried out in pursuit of legitimate business interests, where those interests do not override your fundamental rights — including fraud prevention, platform security, responsible gambling monitoring and internal analytics for Platform improvement.
• Consent: Processing for purposes that require your prior agreement, primarily the sending of direct marketing communications. Where processing relies on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The personal data we collect is used for the following specific purposes:

• Account Management: Creating and maintaining your account, verifying login credentials, managing account settings and preferences, and communicating important account updates or notifications.
• Identity Verification (KYC): Confirming your identity, verifying your age (to ensure compliance with the 18+ or higher age requirement), verifying payment method ownership and conducting AML screening checks.
• Transaction Processing: Facilitating deposits and withdrawals, communicating transaction status, resolving payment queries and managing refunds where applicable.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, unauthorised account access, multi-accounting, money laundering and any other activity that breaches our Terms & Conditions.
• Responsible Gambling Monitoring: Monitoring betting and gaming behaviour patterns to identify potential signs of harmful gambling activity, applying responsible gambling tools at your request and fulfilling any regulatory obligations related to player protection.
• Customer Support: Responding to enquiries, resolving complaints and maintaining records of support interactions for quality assurance and compliance purposes.
• Legal Compliance: Meeting reporting, record-keeping and audit obligations imposed by applicable law or the operator's license conditions.
• Platform Improvement: Analysing aggregated and anonymised usage data to understand how the Platform is used and to identify opportunities for improvement — this does not involve the use of identifiable personal data for profiling purposes beyond what is described in this Policy.
• Marketing Communications (where consent given): Sending promotional offers, bonus notifications and platform updates by email or other channels, where you have opted in to receive such communications. You may withdraw consent at any time.

a5555 uses cookies and similar tracking technologies to enable core Platform functionality, improve user experience, and — where consent is given — deliver personalised content and analyse usage patterns.

The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens and preference storage cookies. These cannot be disabled without impairing the Platform's core functionality.
• Functional Cookies: Enable enhanced features such as remembering your language preference, account settings and responsible gambling limit configurations between sessions.
• Analytics Cookies: Used to collect anonymised data about how users interact with the Platform — such as pages visited, session duration and navigation paths — to help us understand and improve Platform performance. Consent is required for analytics cookies.
• Marketing Cookies: Used to deliver relevant promotional content and track the effectiveness of marketing campaigns, where you have given consent. These may involve third-party providers operating under separate privacy policies.

You may manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the availability or performance of Platform features. Where the Platform implements a cookie consent tool, your preferences will be recorded and honoured for subsequent visits.

We do not sell your personal data to third parties. We share personal data with external parties only where necessary for the delivery of Platform services, for legal compliance, or to protect the legitimate interests of the Platform and its users.

Categories of third parties with whom we may share your data include:

• Payment Service Providers: Third-party providers that facilitate deposit and withdrawal processing. These providers receive transaction data necessary to process payments and are subject to their own data protection and regulatory obligations. References to services such as Easypaisa, JazzCash, Raast or bank transfers via HBL, UBL, Meezan Bank or Bank Alfalah are contextual; the nature and extent of any data shared with payment providers is determined by the specific payment method used.
• KYC and AML Service Providers: Third-party identity verification and screening services that process identity documents and conduct checks on our behalf as part of our compliance obligations.
• Game Studio Providers: Software providers that supply casino and sports betting products to the Platform. These providers may process session and wagering data as part of game delivery, subject to their own data processing agreements with a5555.
• IT and Infrastructure Providers: Cloud hosting, data storage and platform infrastructure providers who process data on our behalf under strict contractual data protection obligations.
• Regulatory and Law Enforcement Authorities: Where we are legally required to disclose information to a competent authority — including in connection with AML reporting, fraud investigations or legal proceedings — we will do so in accordance with applicable law.
• Professional Advisers: Legal counsel, auditors and compliance consultants who may require access to data in the course of providing professional services, subject to confidentiality obligations.

Given that a5555 operates within an international online gaming environment, personal data may be transferred to, stored in or processed in countries outside the jurisdiction in which you are located — including countries that may not have equivalent data protection standards to those in the operator's license jurisdiction.

Where such transfers occur, a5555 takes steps to ensure that appropriate safeguards are in place to protect your personal data during the transfer and in the receiving jurisdiction. These safeguards may include: contractual clauses requiring the recipient to maintain equivalent data protection standards; the use of certified third-party providers that operate under recognised data protection frameworks; or other mechanisms appropriate to the circumstances of the transfer.

For users in Pakistan, be aware that data processed by this Platform may be stored in servers located outside Pakistan. a5555 does not claim that this processing is regulated by the State Bank of Pakistan or any other Pakistani authority. By using the Platform and accepting this Policy, you acknowledge the international nature of data processing described herein.

a5555 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable legal or regulatory obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active account is retained for the duration of the account relationship and for a period thereafter as required for legal, compliance and dispute resolution purposes.
• KYC and AML Records: Identity verification documents and AML screening records are retained for the period required by applicable AML regulations in the operator's license jurisdiction, which typically extends to five years following the end of the account relationship or the date of the relevant transaction.
• Transaction Records: Financial transaction records are retained for the period required for accounting, audit and regulatory purposes.
• Betting Activity Records: Wagering history is retained for the period required for dispute resolution, responsible gambling monitoring and regulatory compliance.
• Support Communications: Records of customer support interactions are retained for a period sufficient to allow for complaint investigation and quality assurance review.
• Consent Records: Records of marketing consents and responsible gambling preferences are retained for the duration of the account relationship, and for a period thereafter to demonstrate compliance with consent obligations.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

Subject to applicable data protection law and certain exceptions, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, please contact us using the details in Section 17.

a5555 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the Platform is encrypted using industry-standard SSL/TLS protocols.
• Access Controls: Personal data is accessible only to authorised personnel on a strict need-to-know basis. Access rights are reviewed and updated regularly.
• Secure Storage: Sensitive data — including KYC documents and financial records — is stored in encrypted form in secured environments with restricted physical and electronic access.
• Authentication Controls: Account access is protected by password requirements and, where available, two-factor authentication options. We recommend that all users enable two-factor authentication.
• Security Monitoring: We maintain procedures for the ongoing monitoring of platform security, including vulnerability assessments and incident response protocols.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals, in accordance with applicable data protection law.

a5555 is strictly an adults-only platform. Access is limited to individuals aged 18 or older, or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect, process or retain personal data from minors.

Age verification is conducted as part of the KYC process. Where we discover that personal data has been provided by or on behalf of an individual who does not meet the minimum age requirement, we will take immediate steps to close the relevant account, delete the associated personal data and, where applicable, return any deposited funds subject to compliance review.

If you believe a minor has registered an account on a5555, please notify us immediately at [email protected] so that we can investigate and act accordingly.

Where you have opted in to receive marketing communications during registration or through your account settings, a5555 may send you promotional offers, bonus notifications, platform updates and related content by email or other channels you have consented to.

We do not send unsolicited marketing communications. Marketing is sent only to users who have given explicit consent and only for the purposes covered by that consent.

You may opt out of marketing communications at any time by: (a) using the unsubscribe link contained in any marketing email; (b) updating your communication preferences in your account settings; or (c) contacting support at [email protected] with a request to be removed from marketing lists. Opting out of marketing will not affect transactional or account-related communications, which we are required to send as part of the Platform service.

The processing of betting and gaming activity data for responsible gambling monitoring purposes is a core element of a5555's player protection obligations. We use behavioural data — including deposit frequency, session duration, loss patterns and changes in betting volume — to identify patterns that may indicate harmful gambling activity.

Where such patterns are detected, a5555 may take proactive steps including: displaying responsible gambling prompts; contacting the user to discuss available support tools; or, in cases where there is a clear risk of serious harm, applying platform controls in accordance with our Responsible Gambling Policy.

Responsible gambling data — including self-exclusion requests, limit settings and interaction history — is processed under our legitimate interest in protecting the wellbeing of our users, and where applicable under legal or regulatory obligation. This data is not used for marketing purposes and is retained separately from general account data.

Self-exclusion data is retained for a period that ensures the exclusion can be enforced for its full duration and for a reasonable period thereafter. This ensures that a returning user who previously self-excluded is appropriately screened before account access is restored.

a5555 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law or regulatory requirements. Where material changes are made, we will notify registered users by email or via an in-platform notification prior to the changes taking effect.

The "Last Updated" date at the top of this page will be revised each time changes are made. We encourage you to review this Policy periodically, particularly if you have not accessed the Platform for an extended period.

Continued use of the Platform following notification of an updated Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not accept the updated terms, you may request account closure by contacting support.

For any questions relating to this Privacy Policy, to exercise your data protection rights, or to raise a concern about our data processing practices, please contact the a5555 data protection team using the details below:

• Email: [email protected] — please use the subject line "Privacy / Data Rights Enquiry" to ensure your message is directed to the appropriate team
• Live Chat: Available via the Platform during published support hours

When submitting a data rights request, please include: your full registered name, your account username and a clear description of the request or concern. We will acknowledge your request promptly and aim to respond within the timeframe required by applicable data protection law.

For additional information about how we operate the Platform or your rights as a user, please visit our FAQ page or review our Terms & Conditions.