Privacy Policy

1 Introduction

hy555 ("we", "us", "our") operates the online betting and casino information platform accessible at hy555.cam (the "Platform"). This Privacy Policy ("Policy") describes how hy555 collects, processes, stores and protects personal data provided by or obtained about users ("you", "User") of the Platform.

We recognise that the privacy of your personal information is important. hy555 is committed to handling personal data in a transparent, lawful and secure manner, consistent with internationally recognised data protection principles including those reflected in the General Data Protection Regulation (GDPR) framework and applicable data protection laws.

This Policy applies to all personal data processed in connection with your registration, account management, betting activity, payments, support interactions and any other use of the hy555 Platform. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your data as described herein.

2 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings assigned below:

• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly, including but not limited to name, email address, national identity number, IP address, payment details and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, alteration or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, hy555.
• "Data Processor" means any third party that processes Personal Data on behalf of hy555, such as payment service providers or KYC verification suppliers.
• "CNIC" means Computerised National Identity Card, issued by NADRA to Pakistani citizens.
• "KYC" means Know Your Customer — the identity and age verification process required under anti-money laundering (AML) obligations.
• "Cookies" means small text files placed on a User's device by the Platform for functional, analytical or preference-storage purposes.
• "Sensitive Personal Data" means special categories of data including health information, biometric data and government-issued identity document numbers.

3 Data We Collect

hy555 collects the following categories of personal data:

3.1 Identity & Registration Data

• Full legal name, date of birth, gender
• Email address, mobile telephone number
• Residential address (city, province, country)
• Username and account credentials (password stored as a secure hash — never in plaintext)

3.2 Identity Verification (KYC) Data

• CNIC number and copies of the CNIC document (front and back) — for Pakistani users
• Passport number and copy, where submitted as an alternative identity document
• Proof of address documentation (utility bills, bank statements)
• Selfie or liveness-check photograph for identity matching purposes
• Source of funds declarations where required for large transactions

3.3 Financial & Transaction Data

• Deposit and withdrawal history with transaction amounts in PKR or applicable currency
• Payment method identifiers (e.g., last four digits of a bank account, wallet reference) — full payment credentials are processed by third-party payment providers and not stored by hy555
• Transaction timestamps and processing status records

3.4 Betting & Gaming Activity Data

• Bet history, stake amounts, markets selected and outcomes
• Casino game session records, duration and wagering amounts
• Responsible Gambling tool settings and activation history

3.5 Technical & Device Data

• IP address, browser type and version, operating system
• Device type, screen resolution, language settings
• Geolocation data (country and approximate region — not precise GPS location)
• Session duration, pages visited, click-path and referral source

3.6 Communications Data

• Live chat transcripts and support ticket content
• Email correspondence with hy555 customer support
• Records of promotional communications sent and whether they were opened or acted upon

4 How We Collect Data

hy555 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support or respond to promotional communications.
• Automatically — through cookies, server logs and analytics tools when you interact with the Platform, including browsing patterns, session data and device information.
• From third-party partners — including KYC/AML verification service providers, payment processing companies and fraud detection services, to the extent permitted by applicable law and their own privacy frameworks.
• From public sources — including where permitted, publicly available information used to supplement KYC or fraud prevention checks.

5 Data Processing & Legal Basis

hy555 processes personal data only where a valid legal basis exists. The primary legal bases under which we process your data are as follows:

6 How We Use Your Data

hy555 uses collected personal data for the following specific purposes:

• To create, maintain and administer your account on the Platform
• To verify your identity and age in compliance with KYC and AML requirements
• To process deposits, withdrawals and betting transactions in PKR or other applicable currencies
• To detect, investigate and prevent fraudulent activity, money laundering and unauthorised access
• To monitor betting patterns for responsible gambling purposes and to implement or enforce Responsible Gambling tools
• To respond to support requests, complaints and account-related enquiries
• To send transactional communications including account confirmations, security alerts and withdrawal notifications
• To send promotional communications where you have opted in — you may withdraw consent at any time via your account preferences
• To improve Platform functionality, user experience and sports-market offerings
• To comply with applicable legal obligations, court orders and regulatory instructions

7 Data Sharing & Disclosure

hy555 does not sell, rent or trade your personal data to third parties for their own marketing or commercial purposes. We may share personal data with the following categories of recipients, strictly as necessary for the purposes described in this Policy:

• KYC / Identity Verification Providers — third-party services that process your identity documents and conduct liveness checks to satisfy AML and age verification obligations.
• Payment Processing Partners — companies that facilitate deposits and withdrawals. These partners process payment credentials directly and in accordance with their own PCI-DSS compliant security standards. hy555 does not store full payment card or bank account numbers. Payment partner names are not disclosed for security reasons.
• Fraud Prevention Services — specialist providers that help identify suspicious activity, duplicate accounts or financial crime indicators.
• Platform Technology Providers — hosting, cloud infrastructure and software-as-a-service providers that process data on hy555's behalf under binding data processing agreements.
• Legal & Regulatory Authorities — where required by law, court order, regulatory instruction or the legitimate exercise of legal rights. This may include disclosures to licensing authorities, law enforcement agencies or financial regulators in the relevant licensing jurisdiction.
• Corporate Transactions — in the event of a merger, acquisition or restructuring of hy555, personal data may be transferred to successor entities, subject to equivalent data protection standards.

8 Cookies & Tracking Technologies

hy555 uses cookies and similar tracking technologies to operate the Platform efficiently, remember your preferences and gather analytics data. The following table summarises the types of cookies in use:

You may control non-essential cookie categories through the Platform's cookie preference centre (where available) or through your browser's native cookie settings. Disabling essential cookies may impair the functionality of the Platform, including your ability to remain logged in or to place bets securely.

9 Data Retention

hy555 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law or legitimate business need. The following retention principles apply:

• Active Account Data: Retained for the duration of your active account relationship with hy555.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations applicable in the operator's licensing jurisdiction.
• Transaction Records: Retained for a minimum of five (5) years following the transaction date, for financial audit and regulatory compliance purposes.
• Support Correspondence: Retained for up to three (3) years following resolution of the relevant interaction.
• Marketing Consent Records: Retained until consent is withdrawn, plus a reasonable period thereafter to demonstrate compliance.
• Technical Logs: Typically retained for up to twelve (12) months unless required longer for fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents restoration or re-identification.

10 Data Security

hy555 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. Key security measures include:

• Transport Encryption: All data transmitted between your device and the hy555 Platform is encrypted using 256-bit TLS/SSL. Look for the padlock icon in your browser's address bar on hy555.cam.
• Password Security: Account passwords are stored as salted cryptographic hashes — plaintext passwords are never stored or visible to hy555 staff.
• Two-Factor Authentication (2FA): Optional 2FA is available for added account login security — we recommend all users enable it.
• Access Controls: Internal access to personal data is restricted on a need-to-know basis and subject to role-based access controls and audit logging.
• KYC Document Security: Identity documents submitted via the secure KYC portal are handled by specialist third-party verification partners operating under strict contractual and security obligations.
• Incident Response: hy555 maintains a documented data breach response procedure. In the event of a breach that creates material risk to users, affected individuals will be notified as required by applicable law.

11 Your Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by hy555. These rights may be exercised by contacting us through the channels described in Section 16.

Please note that certain rights may be limited where data retention is required by law (e.g., AML record-keeping obligations). hy555 will respond to data rights requests within a reasonable period, typically within 30 calendar days of receipt. We may request verification of your identity before fulfilling any data rights request.

12 Minors & Age Verification

The hy555 Platform is strictly intended for adults. We do not knowingly collect personal data from individuals under the age of 18, or the higher minimum age required by the operator's licensing jurisdiction. Age verification is a mandatory component of the KYC process, and accounts identified as belonging to underage individuals will be closed immediately with any associated data handled in accordance with applicable legal requirements.

13 International Data Transfers

hy555 operates internationally and may transfer your personal data to servers or third-party partners located outside Pakistan. Where personal data is transferred to countries that may not have equivalent data protection laws, hy555 takes steps to ensure that appropriate safeguards are in place — including standard contractual clauses, data processing agreements and, where applicable, adequacy determinations by recognised regulatory bodies.

KYC document processing, payment facilitation and certain cloud-hosting functions may involve international data transfers. All third-party processors engaged by hy555 are required to maintain security standards consistent with those described in this Policy.

14 Third-Party Services & Links

The hy555 Platform does not contain links to third-party websites or services for navigation or advertising purposes. Where third-party technology providers are embedded within Platform functionality (such as payment gateways, KYC verification tools or live chat software), those providers operate under their own privacy policies and data processing terms. hy555 is not responsible for the privacy practices of third-party processors beyond the contractual obligations described in this Policy.

15 Policy Amendments

hy555 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, applicable law, regulatory requirements or the structure of the Platform. Material changes will be communicated to registered Users via in-Platform notification or email at least seven (7) days before taking effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. We recommend reviewing this page periodically.

16 Contact Us

If you have any questions, requests or concerns regarding this Privacy Policy, or if you wish to exercise any of your data rights described in Section 11, please contact the hy555 Data Protection team through the following channels:

• Email: [email protected] (displayed as plain text — not a clickable link)
• Live Chat: Available 24/7 through the Account portal on hy555.cam
• Support Language: English (primary); Urdu assistance available on request

When submitting a data rights request, please include your registered account username and a clear description of your request to allow us to process it efficiently. Identity verification may be required before any personal data is disclosed or deleted. We aim to respond to all data rights requests within 30 calendar days.