HG555 Privacy Policy

1. Introduction

hg555 ("the Platform", "we", "us", "our") is an English-language online gambling information and platform site accessible at https://hg555.cam. We are committed to protecting the personal data of our users and handling it in a lawful, fair and transparent manner.

This Privacy Policy ("Policy") describes the categories of personal data we collect from users of the Platform, the purposes for which that data is processed, the legal bases relied upon for processing, the parties with whom data may be shared, the retention periods applied, the security measures in place, and the rights available to data subjects.

This Policy forms part of the hg555 Terms & Conditions, which are incorporated by reference. Capitalised terms used but not defined in this Policy carry the meanings given to them in the Terms & Conditions.

This Policy applies to all personal data collected through the Platform, including data provided at registration, data generated through Platform use, and data submitted during identity verification (KYC). It does not apply to third-party websites or services that may be linked from or integrated with the Platform.

2. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, residential address, email address, telephone number, IP address and financial identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, the Operator of the hg555 Platform.
• "Data Processor" means an entity that processes Personal Data on behalf of the Data Controller under a contractual obligation, such as a KYC verification provider or payment processor.
• "Data Subject" means the natural person to whom Personal Data relates — in this context, the registered user of the Platform.
• "KYC Data" means identity and verification documentation submitted by users to comply with Know Your Customer requirements, including copies of government-issued identity documents, proof of address and liveness-check images.
• "Cookies" means small text files placed on a user's device by the Platform for the purposes of session management, analytics and personalisation.

3. Data Controller

The Data Controller for Personal Data processed through the hg555 Platform is the Operator, whose registered details are available upon request through the Platform's support channels. Users may contact the Operator on data-related matters using the contact details provided in Section 16 of this Policy.

Where the Operator engages third-party Data Processors to carry out specific processing activities (for example, KYC verification providers, payment processors or cloud infrastructure suppliers), those parties are required by contract to process Personal Data only on the Operator's documented instructions and to implement appropriate technical and organisational security measures.

4. Personal Data We Collect

4.1 Data Provided Directly by You

When you register an Account, use Platform services or contact support, we may collect the following categories of Personal Data:

• Full legal name as it appears on your government-issued identity document.
• Date of birth and country/city of residence (including, for Pakistani users, city — such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar).
• Email address and mobile telephone number.
• Residential address and, where required, proof-of-address documentation.
• Login credentials (password stored in hashed form; we do not store plaintext passwords).
• Identity documents submitted for KYC — typically a CNIC or passport for Pakistani users.
• Payment account details used to make deposits or receive withdrawals, including account names, numbers and related verification details.
• Communications sent to us through live chat, email or any other support channel.

4.2 Data Generated by Platform Use

We also collect data generated automatically when you use the Platform:

• IP address, device type, operating system, browser version and language preferences.
• Session timestamps, pages visited, features accessed and navigation paths within the Platform.
• Betting and gaming history, including markets accessed, stakes placed and game outcomes.
• Deposit and withdrawal transaction records, including amounts, timestamps and payment method references.
• Responsible gambling settings applied to your Account, including any limits, cooling-off periods or self-exclusion instructions.
• Cookie and tracking data as described in Section 11.

5. Purposes of Processing & Legal Bases

We process your Personal Data only where we have a valid legal basis to do so. The table below sets out the primary purposes for which we process Personal Data and the corresponding legal basis relied upon.

Where we rely on legitimate interests as a legal basis, we have assessed that those interests are not overridden by your fundamental rights and freedoms, taking into account the nature of the data processed and the reasonable expectations of Platform users.

Where we rely on consent (for example, to send you promotional emails or push notifications), you may withdraw that consent at any time by contacting support or updating your notification preferences in Account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6. KYC & Identity Verification Data

As part of our legal obligations, we are required to verify the identity and age of Account holders before processing withdrawals and in other circumstances. For Pakistani users, acceptable documents typically include a valid CNIC (Computerised National Identity Card) or a current passport. Additional documents such as proof of address or a selfie/liveness image may be required at the Operator's discretion.

KYC Data is submitted through the Platform's secure HTTPS verification portal only. You must not send identity documents via unsecured chat, email or any unverified third-party channel. KYC Data is processed by the Operator and, where applicable, by contracted KYC verification service providers who are bound by data-protection obligations equivalent to those set out in this Policy.

KYC Data is retained for the period required by applicable AML and record-keeping regulations, which typically extends for a defined number of years following Account closure. After the mandatory retention period expires, KYC documents are securely deleted or anonymised.

7. Payment Data

When you make a deposit or request a withdrawal, we collect the necessary payment account details to process the transaction. This may include bank account names, account numbers, mobile wallet identifiers and transaction reference numbers.

Payment methods referenced on the Platform for Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are mentioned as contextually familiar payment references only. These providers are independent third parties. hg555 does not store full payment credentials (such as full bank account numbers or card numbers) on its servers where this processing is handled by a certified payment service provider.

Payment transaction records are retained as required by applicable financial record-keeping and AML obligations. We may use anonymised or aggregated payment data for internal analysis and fraud-prevention purposes.

8. Data Sharing & Disclosure

We do not sell, rent or trade your Personal Data to third parties. We may share Personal Data in the following limited circumstances:

• Service Providers: We engage contracted third-party providers to carry out processing activities on our behalf — including KYC verification partners, payment processors, cloud infrastructure providers, fraud-detection services and customer support platform operators. These parties are bound by data-processing agreements that restrict them from using your data for any purpose other than providing the contracted service.
• Legal and Regulatory Obligations: We may disclose Personal Data to competent authorities, regulators, law enforcement agencies or courts where required by applicable law, a valid legal order or our regulatory obligations, including AML reporting requirements.
• Responsible Gambling Interventions: Where required by the Operator's license conditions, user data may be shared with a self-exclusion or problem-gambling register operated by a relevant licensing or regulatory authority for the purpose of preventing gambling harm.
• Business Transfers: In the event of a corporate restructure, merger, acquisition or sale of the business, Personal Data may be transferred to the successor entity, subject to equivalent data-protection obligations and prior notice to affected users.
• Fraud Prevention: We may share data with fraud-prevention agencies and other gambling operators where there are reasonable grounds to suspect fraudulent activity, money laundering or bonus abuse.

In each case, we share only the minimum amount of Personal Data necessary for the stated purpose and require all recipients to handle it with appropriate safeguards.

9. Retention Periods

We retain Personal Data for as long as is necessary to fulfil the purpose for which it was collected, comply with applicable legal and regulatory requirements, and resolve any outstanding disputes or claims. The following indicative retention periods apply:

Following the expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where anonymisation is not technically feasible, the data is archived with access controls that prevent it from being used in operational processing.

10. Security Measures

We implement appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• SSL/TLS encryption applied across all Platform pages and data-transmission channels.
• Encryption of stored sensitive data, including hashed password storage (plaintext passwords are never stored).
• Role-based access controls ensuring that Personal Data is accessible only to authorised personnel who require it to perform their job functions.
• Regular security assessments and patch management for Platform infrastructure.
• Optional two-factor authentication (2FA) available to all Account holders.
• Contractual data-security requirements imposed on all third-party Data Processors.

No internet-based system is entirely risk-free. While we take reasonable precautions, we cannot guarantee the absolute security of data transmitted over the internet. Users are responsible for maintaining the security of their login credentials and for using secure, private networks when accessing the Platform.

11. Cookies & Tracking Technologies

The Platform uses cookies and similar tracking technologies to support core Platform functions, analyse user behaviour and improve the user experience. The principal categories of cookies used are:

• Essential / Strictly Necessary Cookies: Required for the Platform to function correctly. These include session management cookies that maintain your login state and security tokens. They cannot be disabled without affecting Platform functionality.
• Analytics Cookies: Used to collect anonymised or aggregated data about how users interact with the Platform — including pages visited, session duration and navigation paths. This information is used to identify usability issues and improve the Platform.
• Functionality Cookies: Used to remember your preferences, such as language settings and responsible gambling tool configurations.
• Marketing / Targeting Cookies: Used only where you have provided explicit consent to receive personalised promotional communications. These cookies track campaign interactions and help us assess the effectiveness of marketing activities.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may affect your ability to log in or use core Platform features. For marketing and analytics cookies, your consent can be withdrawn through the Platform's cookie management interface or by updating browser settings.

12. International Data Transfers

The Platform may be operated from or use infrastructure located in jurisdictions outside Pakistan. Where Personal Data is transferred to a country that does not provide an equivalent level of data protection, we take steps to ensure that appropriate safeguards are in place, which may include contractual clauses that oblige the recipient to protect your Personal Data to a standard consistent with this Policy.

By using the Platform, you acknowledge that your Personal Data may be transferred to, stored in, and processed in countries other than your country of residence, including countries whose data-protection laws may differ from those of Pakistan. We take reasonable precautions to ensure that such transfers are handled lawfully and securely.

13. Your Data Rights

Subject to applicable law and the legal bases on which we process your Personal Data, you have the following rights as a data subject. To exercise any of these rights, contact the support team using the details in Section 16.

We will respond to verified data-rights requests within a reasonable period, and in any event within the timeframe required by applicable law. We may ask you to verify your identity before processing a request to prevent unauthorised disclosure of another person's data.

Please note that certain data-rights requests may be subject to exceptions — for example, we cannot delete data that we are legally required to retain for AML, fraud-prevention or regulatory compliance purposes.

14. Minors

The Platform is strictly intended for adults aged 18 or over, or the higher minimum age required by the Operator's license jurisdiction. We do not knowingly collect Personal Data from individuals under the applicable minimum age.

If we become aware that we have inadvertently collected Personal Data from a person under the applicable minimum age, we will take immediate steps to suspend the relevant Account, delete the collected data and, where required by law, notify the relevant authority.

If you are a parent or guardian and believe that a minor in your care has registered an Account on the Platform, please contact support immediately using the details in Section 16.

15. Policy Amendments

We reserve the right to update this Privacy Policy at any time to reflect changes in applicable law, the Operator's data-processing activities, or platform functionality. Where changes are material — meaning they significantly affect how your Personal Data is processed or your rights as a data subject — we will provide advance notice via the Platform interface or your registered email address before the changes take effect.

The "Last reviewed" date at the top of this document indicates when the Policy was most recently updated. Continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms. If you do not accept the updated Policy, please cease using the Platform and contact support to close your Account.

16. Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right, or need to report a suspected data-security incident, please contact the hg555 support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform's built-in chat widget. This is the fastest route for urgent matters including suspected unauthorised Account access.
• Email (plain text — not a clickable link): [email protected]
• Response Target: Email responses within 24–48 hours on business days. Data-rights requests will be acknowledged promptly and resolved within the applicable statutory timeframe.

For the full terms governing your use of the Platform, please read the Terms & Conditions. For information on responsible gambling tools and self-exclusion, please visit the Responsible Gambling page.