Privacy Policy — How GG555 Handles Your Data

1 Introduction

This Privacy Policy ("Policy") describes how GG555 ("Platform", "we", "us", "our"), operating at https://gg555.cam, collects, uses, stores, shares and protects personal data relating to users ("you", "your") of the GG555 platform and associated services.

GG555 is an English-language online gaming information platform primarily targeting users in Pakistan. We are committed to handling personal data responsibly and in a manner consistent with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) and equivalent frameworks, where applicable.

By registering an account, accessing the GG555 platform or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you should discontinue use of the platform immediately.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, each of which forms part of the overall agreement governing your use of GG555.

2 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, IP address, device identifiers, location data and financial information.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means GG555, which determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" means any third party that processes Personal Data on behalf of GG555 under a contractual arrangement (e.g., KYC verification providers, payment processors).
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement by which a user accepts the processing of their Personal Data for a stated purpose.
• "Cookies" means small text files placed on a user's device by a website for purposes including session management, analytics and personalisation.
• "KYC" means Know Your Customer verification, the process by which GG555 confirms the identity and eligibility of registered users.
• "Third Parties" means organisations or individuals outside of GG555 that may receive or process Personal Data in connection with the delivery of platform services.

3 Data We Collect

GG555 collects the following categories of Personal Data, depending on how you interact with the platform:

4 How We Collect Your Data

4.1 Data You Provide Directly

We collect Personal Data that you voluntarily provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team or participate in a promotion. This includes all information submitted through account forms, support channels and identity verification uploads.

4.2 Data Collected Automatically

When you access GG555, our systems automatically collect certain technical and usage data, including your IP address, device identifiers, browser type and version, referring URLs, pages visited and the duration of your sessions. This data is collected via server logs, analytics tools and cookies as described in Section 9.

4.3 Data From Third Parties

We may receive Personal Data about you from third-party service providers who assist with KYC verification, fraud prevention, payment processing and responsible gambling compliance. Where we receive data from such parties, we ensure that they have an appropriate legal basis for sharing that data with us.

4.4 Publicly Available Data

In limited circumstances — for example, where we have reason to investigate suspected fraudulent or abusive activity — we may consult publicly available sources to cross-reference information provided during registration or KYC processes.

5 Data Processing & Use

GG555 processes your Personal Data for the following purposes:

• Account Management: Creating, maintaining and securing your GG555 account, including password resets, profile updates and account suspension or closure.
• Service Delivery: Enabling access to betting markets, live casino, slots, esports and other gaming categories available on the platform, including cricket, PSL T20, ICC tournaments and international football markets.
• KYC and Age Verification: Confirming your identity, age and eligibility to use GG555 in compliance with applicable operator requirements and anti-money laundering obligations.
• Payment Processing: Facilitating deposits and withdrawals, verifying payment sources and maintaining transaction records in accordance with financial compliance requirements.
• Fraud Prevention and Security: Detecting, investigating and preventing fraudulent activity, unauthorised access, duplicate accounts and other platform abuse.
• Responsible Gambling: Monitoring usage patterns to identify potential problem gambling behaviour, enforcing deposit limits, loss limits and self-exclusion arrangements, and fulfilling player protection obligations.
• Customer Support: Responding to enquiries, resolving disputes and maintaining records of communications for quality assurance purposes.
• Marketing Communications: Sending promotional offers, bonus notifications and platform updates where you have given explicit consent. You may withdraw marketing consent at any time via your account settings.
• Legal and Regulatory Compliance: Complying with applicable legal obligations, responding to lawful requests from regulatory or law enforcement authorities and maintaining records as required by anti-money laundering regulations.
• Platform Improvement: Analysing aggregated usage data to improve platform features, user experience and content relevance.

6 Legal Basis for Processing

Where data protection law requires GG555 to identify a legal basis for processing Personal Data, we rely on one or more of the following grounds:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions, including account management, payment processing and service delivery.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering requirements, KYC obligations and any lawful disclosure to regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out for GG555's legitimate business interests, such as fraud detection, platform security, responsible gambling monitoring and internal analytics, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where you have given explicit, freely-given consent — for example, for direct marketing communications or the placement of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

7.1 Service Providers

We share Personal Data with carefully selected third-party service providers who process data on our behalf under contractual data processing agreements. These include KYC and identity verification providers, payment processing partners, cloud hosting infrastructure providers, analytics platforms and customer support tools. All such providers are contractually required to process data only as instructed and to implement appropriate security measures.

7.2 Regulatory and Law Enforcement Authorities

GG555 may disclose Personal Data to regulatory bodies, law enforcement agencies or courts where required to do so by applicable law, court order or regulatory directive, or where disclosure is necessary to prevent or investigate suspected criminal activity including fraud or money laundering.

7.3 Responsible Gambling Organisations

In circumstances where a user has self-excluded or requested referral to a responsible gambling support resource, relevant information may be shared with the applicable responsible gambling programme in the operator's licence jurisdiction, strictly for the purpose of enforcing exclusion or facilitating support.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of GG555's business, Personal Data may be transferred to the relevant successor entity, subject to equivalent data protection obligations. Affected users will be notified of any material change in data controller identity.

7.5 Aggregated and Anonymised Data

GG555 may share aggregated, anonymised or de-identified data — which cannot reasonably be used to identify any individual — with analytics partners, industry bodies or for publication in research or reporting contexts.

8 Data Retention

GG555 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering and financial record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, in accordance with AML obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Retained for a maximum of three (3) years from the date of the last communication, unless retention is required in connection with an open complaint or legal matter.
• Marketing Preference Records: Retained for three (3) years from the date of consent or opt-out, to demonstrate compliance with consent obligations.
• Technical and Log Data: Retained for up to twelve (12) months from the date of collection for security and fraud detection purposes.

Upon expiry of applicable retention periods, Personal Data is securely deleted, anonymised or archived in a manner that prevents re-identification. You may request early deletion of your data in accordance with Section 10 — Right to Erasure, subject to any overriding legal retention obligations.

9 Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files stored on your device when you visit GG555. They allow the platform to recognise your device across sessions, maintain your login state and gather usage analytics. GG555 also uses similar technologies such as pixel tags, local storage objects and session identifiers.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication tokens, security cookies and load-balancing identifiers. These cannot be disabled without materially impairing platform functionality.
• Analytical / Performance Cookies: Used to collect aggregated data about how users interact with the platform, including pages visited, session duration and error events. This data helps us improve platform performance.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences and previously entered information to improve your experience.
• Responsible Gambling Cookies: Used to support session time tracking, cooling-off enforcement and self-exclusion status verification to fulfil our player protection obligations.

9.3 Managing Cookies

You may control non-essential cookies through your browser settings or the GG555 cookie preference centre. Please note that disabling certain cookies may affect platform functionality. For detailed guidance on managing cookies in your browser, refer to the browser's help documentation. GG555 does not currently respond to browser Do Not Track (DNT) signals.

10 Your Rights

Subject to applicable law and any overriding legal obligations, you have the following rights in relation to your Personal Data held by GG555. To exercise any of these rights, contact us using the details in Section 15. We will acknowledge your request within 5 business days and provide a full response within 30 days.

11 Data Security

GG555 employs a layered security approach that includes the following controls:

• TLS Encryption: All data transmitted between your device and our servers is protected by Transport Layer Security (TLS) encryption to prevent interception in transit.
• Password Hashing: User passwords are stored as cryptographic hashes using industry-standard algorithms. Plaintext passwords are never stored or transmitted.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Staff with access to sensitive data are subject to confidentiality obligations and regular security training.
• Infrastructure Security: GG555's hosting infrastructure is maintained with regular security patching, vulnerability scanning and intrusion detection monitoring.
• Fraud Detection Systems: Automated systems monitor account activity for anomalous patterns, including unusual login behaviour, suspicious transaction activity and potential account takeover attempts.

Notwithstanding these measures, no data transmission over the internet can be guaranteed as completely secure. GG555 cannot warrant the absolute security of data transmitted to or from the platform. You are responsible for maintaining the confidentiality of your account credentials and for reporting any suspected unauthorised access immediately.

12 Minors & Age Verification

GG555 is strictly an adults-only platform. We require all users to confirm that they meet the minimum age requirement during the registration process. Where there are reasonable grounds to believe that a registered user is under the minimum required age, GG555 will:

1. Immediately suspend the account pending age verification.
2. Void all open bets and suspend withdrawal requests until the matter is resolved.
3. Where underage access is confirmed, permanently close the account, return any verifiable deposits made by the user and delete associated Personal Data, subject to any overriding legal retention obligations.

If you become aware that a minor has registered on GG555 using false information, please notify us immediately at [email protected] so that we can take prompt action.

13 International Data Transfers

GG555 operates on a global platform infrastructure. Your Personal Data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction. Where such transfers occur, GG555 ensures appropriate safeguards are in place, which may include:

• Standard Contractual Clauses approved by an applicable data protection authority.
• Contractual obligations on recipient third parties to maintain equivalent levels of data protection.
• Processing by service providers operating in jurisdictions recognised as providing adequate data protection standards.

Pakistani users should note that GG555 does not represent that any cross-border data transfer complies with Pakistani domestic law. Users are responsible for understanding the data protection implications of their use of the platform under applicable local law.

14 Amendments to This Policy

GG555 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, where we introduce a new processing purpose or significantly change how data is shared — we will notify you via a platform notification or email to your registered address at least 14 days before the changes take effect.

The updated Policy will be posted on this page with a revised effective date. Your continued use of GG555 following the effective date of any update constitutes acceptance of the revised Policy. We recommend reviewing this page periodically, and at minimum every three months, to stay informed of any changes.

If you object to any material change in this Policy, you may close your account in accordance with the procedure described in our Terms & Conditions.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how GG555 has handled your Personal Data, please contact our Data Protection team using the details below. We aim to acknowledge all data-related requests within 5 business days and provide a substantive response within 30 days.