Privacy Policy — hy555
Online Casino & Sportsbook

1. Introduction

hy555 takes the privacy of its players seriously. Whether you are based in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else across Pakistan, the same robust data protection standards apply to your account. We are committed to handling your personal information in a transparent, fair, and secure manner consistent with the obligations imposed by our international gaming licence.

This Privacy Policy sets out in clear terms:

• What categories of personal data hy555 collects from you and about you.
• The purposes for which that data is collected and used.
• The legal basis on which we process your personal data.
• The circumstances under which data may be shared with third parties.
• How long we retain your data and the security measures we apply.
• Your rights as a data subject and how to exercise them.

If you have any questions about this Policy that are not answered below, please contact our support team at the address provided in Section 14.

2. Data Controller

For the purposes of this Privacy Policy, hy555 acts as the data controller in respect of personal data collected from players using the hy555 platform. As data controller, hy555 determines the purposes and means by which your personal data is processed. Our designated data protection contact can be reached at the email address set out in Section 14 of this Policy.

hy555 operates under an international gaming licence. All data processing activities are carried out in compliance with the data protection obligations stipulated by that licensing framework and applicable international privacy standards.

3. Data We Collect

3.1 Data You Provide Directly

When you register an account, complete KYC verification, make a deposit, request a withdrawal, or contact our support team, you provide us with personal data directly. This includes:

• Identity Data: Full legal name, date of birth, gender, and nationality.
• Contact Data: Email address, mobile phone number, and residential address (including city and province within Pakistan).
• Identity Documents: Copies of your CNIC, passport, or other government-issued photo identification submitted during KYC verification.
• Financial Data: Payment method details including JazzCash account number, EasyPaisa wallet reference, HBL / UBL / Meezan Bank account details, USDT wallet addresses, or bank transfer references. We do not store full card numbers where card payment is used.
• Account Credentials: Your chosen username and an encrypted hash of your password. We never store your password in plain text.
• Support Communications: The content of any messages, emails, or live chat transcripts exchanged with our customer support team.

3.2 Data We Collect Automatically

When you access and use the hy555 platform, certain data is collected automatically by our systems, including:

• Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and time zone.
• Usage Data: Pages visited, games played, session duration, bet amounts, wagering history, login timestamps, and click-path data.
• Transaction Data: A full record of all deposits, withdrawals, bonuses credited, and wagers placed through your account.
• Cookie Data: Session identifiers, security tokens, and platform preference settings as described in Section 7.

3.3 Data From Third Parties

In certain circumstances, hy555 may receive personal data about you from authorised third-party sources, including identity verification service providers used during the KYC process, fraud detection and anti-money laundering screening services, and payment processors facilitating your transactions.

4. How We Use Your Personal Data

hy555 uses the personal data it collects for the following defined purposes:

Purpose	Data Categories Used
Account registration and management	Identity, Contact, Credentials
Age and identity verification (KYC)	Identity, Identity Documents, Financial
Processing deposits and withdrawals	Financial, Transaction, Identity
Fraud prevention and AML compliance	Identity, Financial, Technical, Usage
Customer support delivery	Identity, Contact, Support Communications
Responsible gaming monitoring	Usage, Transaction, Account Credentials
Platform security and abuse prevention	Technical, Usage, Cookie
Regulatory reporting and licence compliance	Identity, Financial, Transaction
Service improvement and analytics	Usage, Technical (aggregated & anonymised)
Promotional communications (where consented)	Contact, Usage

hy555 does not use your personal data for automated profiling that produces legal or similarly significant effects without human review. Where our responsible gaming systems flag a potential concern based on usage patterns, a member of the compliance team will review the case before any account action is taken.

5. Legal Basis for Processing

hy555 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and hy555 — for example, processing your deposit so you can play, or verifying your identity before releasing a withdrawal.
• Legal Obligation: Processing that is required by applicable law or our licensing obligations — for example, retaining transaction records for anti-money laundering purposes or reporting suspicious activity to the relevant authority.
• Legitimate Interests: Processing carried out in pursuit of hy555's legitimate business interests, where those interests are not overridden by your rights — for example, fraud prevention, platform security monitoring, and service improvement analytics.
• Consent: Where you have given clear, specific consent to a processing activity — for example, opting in to receive promotional emails about new games or bonus offers. You may withdraw consent at any time by contacting support or updating your account communication preferences.

6. Data Sharing & Disclosure

hy555 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

6.1 Service Providers

We engage carefully selected third-party service providers who process data on our behalf under strict contractual obligations. These include KYC and identity verification providers, payment processors (such as JazzCash, EasyPaisa, and partnered banking institutions), fraud detection services, cloud infrastructure providers, and customer support platform operators. All such providers are contractually prohibited from using your data for any purpose other than the specific service they provide to hy555.

6.2 Legal and Regulatory Disclosure

hy555 may disclose personal data to regulatory authorities, law enforcement agencies, or our licensing body where we are legally required to do so, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or other criminal activity, to protect the rights or safety of hy555 or other players, or to comply with a valid legal process such as a court order or regulatory investigation.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of hy555's business assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified via email and a prominent platform notice prior to any such transfer taking effect.

7. Cookies & Tracking Technologies

hy555 uses cookies and similar tracking technologies on its platform. Cookies are small data files stored on your device that help the platform function correctly, remain secure, and remember your preferences between sessions.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cookies cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated and anonymised data about how players navigate the platform, which pages generate the most engagement, and where technical errors occur. This data is used solely for internal performance improvements.
• Functional Cookies: Store your platform preferences such as preferred language, last-visited game category, and display settings so that your experience is consistent across sessions.

hy555 does not use third-party advertising cookies, cross-site tracking pixels, or behavioural targeting technologies. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform.

8. Data Retention

hy555 retains personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a period of 5 years following account closure.
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in line with standard anti-money laundering record-keeping requirements.
• KYC Documents: Retained for 5 years following the completion of the verification process or account closure, whichever is later.
• Support Communications: Retained for 2 years from the date of the last interaction, unless the communication relates to an unresolved dispute.
• Marketing Consent Records: Retained for the duration of your consent plus 1 year following withdrawal, to demonstrate compliance.

Upon expiry of the applicable retention period, data is securely deleted or anonymised so that it can no longer be attributed to any individual.

9. Data Security

hy555 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures include:

• Transport Encryption: All data transmitted between your browser or mobile device and hy555 servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Storage Encryption: Sensitive data stored on hy555 infrastructure, including identity documents and financial records, is encrypted at rest.
• Password Hashing: Account passwords are hashed using a modern, computationally expensive hashing algorithm. Plain-text passwords are never stored.
• Access Controls: Access to player personal data within hy555's internal systems is restricted on a strict need-to-know basis and governed by role-based access controls.
• Security Audits: hy555 conducts regular internal security reviews and periodically engages independent security professionals to perform penetration testing and vulnerability assessments.
• Incident Response: hy555 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, you will be notified within 72 hours where technically feasible and legally required.

10. Your Data Rights

As a registered player of hy555, you hold the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to the contact address in Section 14. hy555 will respond within 30 calendar days of receiving a verifiable request.

• Right of Access: You may request a copy of the personal data hy555 holds about you, together with information about how that data is being processed.
• Right to Rectification: If any personal data held by hy555 is inaccurate or incomplete, you may request that it be corrected. Note that correcting identity data may trigger an additional KYC review.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to hy555's overriding legal obligations to retain certain records.
• Right to Restrict Processing: You may request that hy555 restrict the processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a machine-readable copy of your personal data for transfer to another service.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes, subject to hy555's overriding legal obligations.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11. Children & Underage Players

The hy555 platform is strictly intended for adults aged 21 years and above. hy555 does not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory component of our registration and KYC process.

If hy555 discovers or is notified that an account has been created by a person under the age of 21, the account will be immediately suspended, all data associated with the account will be reviewed by our compliance team, and any funds held will be dealt with in accordance with our regulatory obligations. The incident will be reported to our licensing authority as required.

If you believe a minor has registered on the hy555 platform, please report this immediately to our support team. We treat all such reports with urgency.

12. International Data Transfers

hy555 operates under an international gaming licence, and some of the service providers and infrastructure partners we work with may be located outside of Pakistan. Where personal data is transferred internationally, hy555 ensures that appropriate safeguards are in place to maintain an equivalent level of data protection to that described in this Policy.

Such safeguards may include contractual clauses that impose data protection obligations on the recipient, technical security measures including end-to-end encryption, and selection of service providers who operate under recognised international data protection frameworks. hy555 does not transfer player data to countries or organisations that cannot demonstrate adequate data protection standards.

13. Amendments to This Privacy Policy

hy555 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new processing purpose or change the way data is shared — we will notify registered players by displaying a prominent notice on the platform and, where practical, by sending an email notification to your registered address.

The revised Policy will take effect on the date indicated in the "Last Updated" header at the top of this page. Your continued use of the hy555 platform after the effective date of any revision constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of how hy555 protects your data.

14. Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of the data rights described in Section 10, or wish to raise a concern about how hy555 has handled your personal data, please contact our data protection team in writing.

Contact email: [email protected]  (plain text — not a clickable link)

Please include "Privacy Request — [Your Account Username]" in the subject line of your email. hy555 will acknowledge receipt within 48 hours and provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.