Privacy Policy — m5555 Platform

m5555 ("we", "us", "our") operates the online gaming information and guide platform located at https://m5555.cam (the "Platform"). This Privacy Policy describes how m5555 collects, uses, stores, shares and protects personal data obtained from users ("you", "your") of the Platform, and explains the rights available to you in connection with your personal data.

m5555 is an information and educational guide platform. We do not operate a casino, accept financial deposits, process gambling transactions or issue gambling licences. The personal data we process is limited to what is necessary to operate the Platform, comply with our legal obligations, and provide a safe, well-functioning service to our users.

This Privacy Policy should be read alongside our Terms & Conditions. By registering an account, submitting any personal information or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

In this Privacy Policy, the following defined terms apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, email address, CNIC number, IP address, device identifiers and behavioural data.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, alteration or deletion.
• "Data Controller" means m5555, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of m5555 under a written agreement and in accordance with our instructions.
• "User" means any individual who accesses or uses the Platform, whether registered or anonymous.
• "Cookies" means small text files placed on your device by the Platform to store information about your browsing session or preferences.
• "KYC Data" means identity documents and verification information — such as CNIC, passport copies and proof of address — submitted by users as part of an identity verification process.
• "Sensitive Personal Data" means personal data that reveals racial or ethnic origin, political opinions, religious beliefs, health data, biometric data or financial data beyond what is necessary for standard account operation.
• "Applicable Laws" means all data protection, privacy and related laws and regulations applicable to the processing of personal data in the relevant jurisdiction.

m5555 collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Registration and Account Data

When you create an account, we collect:

• Full name as provided during registration;
• Email address (used as your primary account identifier);
• Date of birth (for age verification purposes);
• Country of residence (including city where provided — e.g. Karachi, Lahore, Islamabad);
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

Where identity verification is required, we may collect:

• Copies of government-issued identity documents (e.g. CNIC, passport);
• Proof of address documents;
• Selfie or liveness check data where required by the verification process.

3.3 Technical and Usage Data

We automatically collect certain technical data when you access the Platform, including:

• IP address and approximate geographic location;
• Browser type and version;
• Device type, operating system and screen resolution;
• Pages visited, time spent on page and navigation paths;
• Referring URLs and search terms used to reach the Platform;
• Session timestamps and error logs.

3.4 Communications Data

When you contact us through support channels, we collect the content of your messages, your email address, and any attachments you submit — including any personal information you voluntarily include in correspondence.

3.5 Payment Reference Data

Where you use functionality that references payment methods, we may collect limited transaction reference data for fraud prevention and platform integrity purposes. m5555 does not collect or store full payment card numbers, bank account details or mobile wallet credentials. References to payment channels such as Easypaisa, JazzCash, Raast and associated banks (HBL, UBL, Meezan Bank, Bank Alfalah) are for informational purposes only and do not represent m5555 processing financial transactions on your behalf.

m5555 collects personal data through the following means:

• Directly from you — when you register an account, complete forms, contact support, or voluntarily provide information while using the Platform;
• Automatically — through cookies, web beacons, server logs and other tracking technologies as you navigate the Platform;
• From third-party identity verification services — where KYC verification is conducted through a third-party provider, that provider may share verification outcomes and associated data with us;
• From analytics providers — we use privacy-respecting analytics tools to understand how the Platform is used. These tools may collect anonymised or pseudonymised usage data;
• From fraud prevention services — we may receive data from fraud screening and risk assessment services to protect the Platform and its users from abuse.

m5555 processes personal data only where a lawful basis exists. The following table summarises the primary lawful bases we rely upon:

m5555 uses the personal data we collect for the following specific purposes:

6.1 Platform Operation

To create and manage your account, authenticate your identity, enable access to Platform features and deliver the educational content and services you have requested.

6.2 Identity Verification

To verify that users are of legal age (18 or above, or the higher minimum required by the operator or licence jurisdiction) and that their identity information is accurate. This is a mandatory compliance requirement for any gaming-related platform.

6.3 Communications

To respond to your enquiries and support requests, send account-related notifications, deliver security alerts, and — where you have consented — send promotional or informational communications about Platform updates and new content.

6.4 Safety and Fraud Prevention

To detect, investigate and prevent fraudulent, abusive or illegal activity on the Platform. This includes monitoring for prohibited conduct such as multi-accounting, bonus abuse and the use of automated systems.

6.5 Platform Improvement

To analyse how the Platform is used, identify technical issues, improve content quality and enhance the overall user experience for Pakistani users and international visitors alike.

6.6 Responsible Gambling

To monitor usage patterns that may indicate at-risk gambling behaviour and to ensure that responsible gambling tools are functioning as intended. This may include reviewing session frequency, deposit patterns and interaction with responsible gambling features.

6.7 Legal Compliance

To comply with applicable legal obligations, including responding to lawful requests from courts, regulators and law enforcement authorities.

m5555 does not sell your personal data. We may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

7.1 Service Providers and Data Processors

We engage third-party service providers who process personal data on our behalf, including hosting and infrastructure providers, identity verification services, analytics platforms and customer support tools. These providers are contractually bound to process data only as instructed by m5555 and to maintain appropriate security standards.

7.2 Identity Verification Partners

Where KYC verification is required, your identity documents and personal information may be processed by a specialist third-party verification provider. This is necessary to fulfil our age verification and anti-fraud obligations.

7.3 Law Enforcement and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulators or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property or safety of m5555, its users or the public.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of the m5555 business, personal data may be transferred to the acquiring entity as part of that transaction, subject to the acquirer assuming the obligations of this Privacy Policy.

7.5 No Sharing with Payment Providers

m5555 does not share personal data with Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah or any other payment provider. References to these providers on this Platform are for educational context only and do not create any data-sharing relationship between m5555 and those entities.

m5555 uses cookies and similar technologies to operate and improve the Platform. The following categories of cookies may be set when you use the Platform:

8.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They enable core features such as user authentication, session management and security. These cookies cannot be disabled without significantly affecting Platform functionality.

8.2 Analytics Cookies

We use analytics cookies to understand how visitors interact with the Platform — such as which pages are most visited, how long users stay and where they navigate from. This data is used in aggregate form to improve Platform content and user experience. Analytics cookies are set only with your consent where required by law.

8.3 Preference Cookies

These cookies remember your settings and preferences — such as language selection and display preferences — to provide a more personalised experience on return visits.

8.4 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse non-essential cookies, delete existing cookies or be notified when a cookie is set. Please note that disabling certain cookies may affect the functionality of parts of the Platform. Detailed cookie management guidance is available through your browser's help documentation.

m5555 retains personal data for only as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by law. Our retention principles are as follows:

• Account data — retained for the duration of your account and for a period of up to 5 years following account closure, to satisfy legal and regulatory obligations;
• KYC and identity verification data — retained for the period required by applicable anti-money laundering and identity verification regulations, typically 5 years from the date of the last transaction or account closure, whichever is later;
• Communications data — retained for up to 2 years from the date of last correspondence, unless required for longer by legal proceedings or regulatory requests;
• Technical and usage data — retained in aggregated or anonymised form for analytical purposes; identifiable technical logs are retained for no longer than 12 months;
• Cookies and tracking data — session cookies expire at the end of your browsing session; persistent cookies expire in accordance with the timescales stated in the cookie preference settings.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data — where no individual can be identified — may be retained indefinitely for statistical and analytical purposes.

m5555 takes the security of your personal data seriously and implements technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive personal data at rest using industry-standard encryption algorithms;
• Role-based access controls limiting access to personal data to authorised personnel on a strict need-to-know basis;
• Regular security assessments and vulnerability testing of Platform infrastructure;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Incident response procedures to detect, contain and report data security incidents in a timely manner.

Despite these measures, no method of internet transmission or electronic storage is completely secure. m5555 cannot guarantee absolute security of your data. You are also responsible for maintaining the security of your own account credentials.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, m5555 will notify affected users without undue delay and take all reasonable steps to mitigate the impact of the breach.

m5555 may transfer personal data to service providers, partners or infrastructure providers located outside Pakistan. Such transfers may include hosting in data centres in other countries and the use of cloud-based platforms operated by international providers.

Where personal data is transferred internationally, m5555 ensures that appropriate safeguards are in place to protect the data, including:

• Transfers only to countries or territories with adequate data protection standards;
• Use of standard contractual clauses or equivalent data transfer mechanisms with receiving entities;
• Contractual obligations requiring recipients to maintain security standards equivalent to those applied by m5555.

Users based in Pakistan acknowledge that data protection frameworks in other jurisdictions may differ from those applicable in Pakistan. m5555 will use commercially reasonable efforts to ensure that personal data transferred internationally continues to receive adequate protection.

Subject to Applicable Laws, you have the following rights in relation to the personal data m5555 holds about you. To exercise any of these rights, please contact us using the details in Section 16.

The m5555 Platform is strictly intended for adults. We do not knowingly collect personal data from individuals under the age of 18, or such higher minimum age as is required by the applicable operator or licence jurisdiction.

If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close any associated account. If you have reason to believe that a minor has registered on the Platform or provided personal information, please contact us immediately at the address provided in Section 16.

We may use age verification mechanisms as part of the account registration process to help prevent underage access. However, we rely on users providing accurate date-of-birth information and accept no liability for minors who misrepresent their age to gain access to the Platform.

The m5555 Platform may contain references to or descriptions of third-party online gaming operators, payment service providers and other external entities for educational purposes. This Privacy Policy applies solely to personal data processed by m5555 in connection with the m5555 Platform.

m5555 does not control the data processing practices of third-party operators, payment service providers (including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah) or any other external entity referenced on the Platform. References to these organisations do not imply any data-sharing relationship, endorsement or affiliation.

If you navigate to a third-party platform through information provided on m5555, your interaction with that platform is governed exclusively by that platform's own privacy policy and terms. m5555 accepts no responsibility for third-party data practices.

m5555 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations or Platform operations. The revised Policy will be posted on this page with an updated "Last Updated" date shown in the header.

For material changes — those that significantly affect your rights or our data processing activities — we will use reasonable efforts to provide advance notice, either through a prominent notice on the Platform or by email to registered users at the address associated with their account.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you should cease using the Platform and may request account deletion in accordance with Section 12.

We recommend bookmarking this page and reviewing the Privacy Policy periodically — particularly before submitting any new personal information or engaging with new Platform features.

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact the m5555 Privacy Team:

Privacy Enquiries — Email:
[email protected]

Please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate. Include your registered email address and a clear description of your query. We aim to acknowledge all privacy-related correspondence within 5 business days and to resolve requests within 30 days.

For questions about our Terms & Conditions, account management or responsible gambling resources, please visit the relevant page or contact our general support team at the same address.

For responsible gambling assistance and self-exclusion requests, please visit our dedicated Responsible Gambling page.