f555 Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how f555 — operated at https://f555.lol — collects, processes, stores, and shares personal data relating to individuals who visit, register on, or use the f555 platform ("Players" or "Users"). It applies to all personal data processed in connection with the f555 website, mobile interface, customer support channels, and any other touchpoint through which you interact with f555.

By registering an f555 account, using f555 services, or continuing to access the f555 platform after this Policy has been updated and communicated to you, you acknowledge that you have read and understood this Policy and consent to the data processing activities described herein where consent is the applicable legal basis.

This Policy should be read alongside the f555 Terms and Conditions, which govern the overall relationship between f555 and its Players. In the event of any conflict between this Policy and the Terms and Conditions on a privacy matter, this Policy prevails.

2 Data Controller

For the purposes of applicable data protection law, f555 acts as the data controller in respect of personal data collected from Players and visitors to the f555 platform. As data controller, f555 determines the purposes for which personal data is collected and the means by which it is processed.

f555 operates under an internationally recognised gaming licence. Data processing activities carried out by f555 in connection with its regulatory obligations — including KYC identity verification and AML monitoring — are conducted in accordance with the requirements of that licence and any applicable regulatory guidance.

For all privacy-related enquiries, data subject access requests, or complaints, Players may contact f555 at: [email protected]

3 Personal Data We Collect

f555 collects personal data across several categories, depending on the nature of your interaction with the platform. The following table summarises the categories of data collected:

f555 does not collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where a Player voluntarily discloses such information during support interactions, in which case it is processed only to the extent necessary to resolve the matter.

4 How We Collect Your Data

f555 collects personal data through the following channels and mechanisms:

4.1 Direct Collection

You provide data directly to f555 when you: register an account; complete the KYC identity verification process; make a deposit or withdrawal; contact customer support via live chat or email; participate in a promotion; or update your account settings. All data provided directly by you is collected on the basis of your active input.

4.2 Automatic Collection

When you access the f555 platform, certain technical data is automatically collected by f555's systems. This includes your IP address, device identifiers, browser information, operating system, and session activity data. This data is collected through server logs, session management systems, and cookies (see Section 10).

4.3 Third-Party Sources

f555 may receive data about you from third-party sources in the following circumstances:

• Payment Processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and card payment processors may share transaction confirmation data with f555 as part of deposit and withdrawal processing.
• Identity Verification Services: f555 may use third-party KYC verification providers to cross-reference identity documents submitted by Players against official databases.
• AML Screening Services: f555 may use third-party screening services to check Player names and transaction data against sanctions lists and PEP (Politically Exposed Persons) databases as required by our gaming licence obligations.
• Fraud Prevention Services: f555 works with fraud prevention partners who may share device fingerprint data or risk signals to assist in detecting and preventing fraudulent account activity.

5 Purposes & Legal Bases for Processing

f555 processes your personal data only where there is a valid legal basis to do so. The following table sets out the primary purposes for which f555 processes personal data and the corresponding legal basis for each:

6 Sharing Your Personal Data

f555 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own marketing or commercial purposes. f555 shares personal data only in the following circumstances and only to the minimum extent necessary:

6.1 Service Providers

f555 engages third-party service providers who process data on f555's behalf as data processors. These include: payment processing providers (JazzCash, EasyPaisa, banking partners); KYC and identity verification providers; AML and sanctions screening services; fraud prevention platforms; IT infrastructure and hosting providers; and customer support platform providers. All f555 data processors are subject to contractual data processing obligations that require them to handle data securely and only in accordance with f555's instructions.

6.2 Game Providers

Game providers whose titles are offered on f555 — including but not limited to Evolution Gaming, Pragmatic Play, PG Soft, and Jili — receive limited Player session data necessary to deliver their game services. The data shared is limited to what is technically required for game functionality and session management. Game providers do not receive Players' financial data or CNIC information.

6.3 Regulatory and Legal Disclosure

f555 may disclose personal data to its licensing authority, regulatory bodies, law enforcement agencies, or courts where required by law, court order, or as part of f555's obligations under its gaming licence. f555 will make reasonable efforts to notify affected Players of such disclosures where legally permitted to do so.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of f555's business, Player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and any material changes to data handling that result from it.

7 International Data Transfers

f555 operates internationally and some of the third-party service providers engaged by f555 — including game providers, KYC vendors, and infrastructure providers — may be located outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan.

Where personal data is transferred outside Pakistan, f555 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under f555's licensing obligations. These safeguards may include contractual data transfer agreements incorporating standard data protection clauses, or reliance on the recipient country's adequacy status where recognised.

If you would like further information about the safeguards f555 applies to international data transfers, please contact f555 at [email protected].

8 Data Retention

f555 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by f555's gaming licence obligations and applicable law. The following general retention periods apply:

Where f555 is required to retain data beyond the standard retention period by a legal hold, regulatory investigation, or ongoing dispute, the relevant data will be retained until the matter is resolved. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with f555's data deletion procedures.

9 Security Measures

f555 employs a layered security architecture to protect Player personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• Transport Layer Security (TLS): All data transmitted between your browser or device and f555 is encrypted using TLS 1.2 or higher, with 256-bit AES encryption for data at rest.
• Access Controls: Access to personal data within f555's internal systems is restricted on a need-to-know basis. Staff are granted access only to the data categories necessary to perform their specific job functions.
• Two-Factor Authentication: f555 supports two-factor authentication (2FA) for Player accounts, providing an additional layer of protection against unauthorised account access.
• Payment Data Tokenisation: f555 does not store full credit or debit card numbers. Card payment processing uses tokenisation, with payment tokens stored instead of raw card data.
• Penetration Testing: f555's platform undergoes regular independent security assessments and penetration testing to identify and remediate potential vulnerabilities.
• Incident Response: f555 maintains a documented security incident response procedure. In the event of a data breach that poses a risk to affected Players, f555 will notify the relevant regulatory authority and affected Players in accordance with applicable requirements.

10 Cookies & Tracking Technologies

f555 uses cookies and similar tracking technologies on the f555 platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow f555 to recognise your device on subsequent visits, maintain your session while you are logged in, remember your preferences, and collect analytics data about how the platform is used.

10.1 Types of Cookies Used

• Essential Cookies: Required for the f555 platform to function. These include session cookies that maintain your login state and security cookies that protect against cross-site request forgery. Essential cookies cannot be disabled without preventing core platform functionality.
• Analytics Cookies: Used to collect anonymised data about how Players navigate and use the f555 platform, which pages are visited most frequently, and where technical errors occur. This data helps f555 improve platform performance and user experience.
• Functional Cookies: Used to remember your preferences — such as language settings, last-used game categories, and responsible gaming display options — so that f555 can personalise your experience across sessions.
• Marketing Cookies: Used only where you have provided consent, to track engagement with f555 promotions and measure the effectiveness of f555's marketing communications.

10.2 Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse all cookies, accept only certain types, or delete existing cookies. Please note that disabling essential cookies will prevent you from logging in to your f555 account and using platform services. Disabling analytics or functional cookies may reduce the quality of your f555 experience but will not prevent access to core functionality.

11 Your Data Rights

Subject to applicable law and, in some cases, the requirements of f555's gaming licence obligations, you have the following rights in relation to your personal data held by f555:

To exercise any of the above rights, submit your request in writing to [email protected] with the subject line "Data Subject Request". f555 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. Where requests are complex or numerous, this period may be extended by a further 30 days with prior notification to you.

12 Children's Privacy

Parents and guardians who are concerned about minors accessing online gambling services are encouraged to install reputable parental control software on shared devices. Parental control tools can restrict access to gambling websites and provide an additional layer of protection beyond f555's own age verification measures.

13 Marketing Communications

f555 may send promotional communications — including bonus offers, new game announcements, PSL season promotions, and account-related updates — to Players who have opted in to receive marketing communications during registration or through their account preferences settings.

You can opt out of f555 marketing communications at any time by:

• Clicking the unsubscribe link included in any f555 marketing email;
• Updating your communication preferences in your f555 account settings; or
• Contacting f555 support at [email protected] with the subject line "Marketing Opt-Out".

Please allow up to 5 business days for your opt-out preference to take effect across all f555 communication channels. Opting out of marketing communications does not affect transactional or account-related communications — f555 will continue to send messages necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, and security alerts.

14 Changes to This Privacy Policy

f555 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect the way f555 processes your data or the rights you hold — f555 will notify registered Players via email to their registered address and / or via a prominent on-site notification at least 14 days before the changes take effect.

For minor amendments — such as clarifications to existing practices or corrections of typographical errors — the updated Policy will be published on this page with the "Last Updated" date revised accordingly, without prior individual notification.

Your continued use of the f555 platform after the effective date of any Policy update constitutes your acceptance of the updated terms. If you do not agree with the updated Policy, you should close your f555 account by contacting support before the changes take effect.

The current version of this Policy is always available at https://f555.lol/privacy-policy. f555 recommends reviewing this page periodically to stay informed of any updates.

15 Contact & Complaints

For any questions about this Privacy Policy, to exercise your data rights, or to raise a privacy-related concern, please contact f555 through the following channels:

• Email: [email protected] — for data subject requests and privacy complaints, use the subject line "Privacy Request" or "Privacy Complaint" to ensure prompt routing to the appropriate team.
• Live Chat: Available 24/7 within the f555 platform for immediate queries. For formal data subject requests, email is the recommended channel to create a documented record.

f555 aims to respond to all privacy enquiries within 5 business days and to resolve data subject requests within 30 calendar days. Where a request is particularly complex or requires retrieval of historical records, f555 may extend this period by a further 30 days and will notify you of the extension and the reasons for it.

If you are dissatisfied with f555's handling of your privacy complaint, you have the right to lodge a complaint with f555's gaming licence regulatory authority or the relevant data protection supervisory authority in your jurisdiction.