ss55 Privacy Policy

ss55 is an internationally licensed online casino and sports betting platform operating at ss55.bio. We are the data controller responsible for the personal information collected through the ss55 website, mobile interface, and any associated applications or services. Our platform is designed primarily for English-speaking Pakistani users, with all transactions conducted in Pakistani Rupees (PKR) and payment methods tailored to the Pakistan market including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.

As the data controller, ss55 determines the purposes and means by which your personal data is processed. We are committed to handling your data responsibly, transparently, and in accordance with applicable data protection standards. For all privacy-related queries, you may contact our Data Protection team directly at [email protected].

ss55 collects personal data across several categories. The table below outlines the specific types of data we collect and the context in which that data arises:

ss55 collects personal data through the following channels and methods:

• Direct input: Data you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting customer support, or updating your account profile.
• Automated technical collection: Data collected automatically when you access the ss55 Platform, including IP addresses, device identifiers, browser type, and session logs via server-side logging and first-party analytics tools.
• Cookies and similar tracking technologies: First-party cookies and session storage used to maintain your login state, store preferences, and generate aggregate analytics data. Full details are provided in Section 7.
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, and banking partners when processing deposits and withdrawals in PKR.
• KYC verification partners: Identity verification data returned by our licensed third-party KYC providers upon completion of document checks against your CNIC submission.
• Third-party game providers: Gameplay session data relayed from licensed game provider servers when you engage with slots, live dealer tables, crash games, or poker products hosted on the ss55 Platform.

ss55 processes your personal data only where we have a valid legal basis to do so. The legal basis applicable to each processing activity is described below:

• Contractual necessity: Processing required to fulfil our obligations under the player account agreement — including account management, payment processing, and game delivery — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with Anti-Money Laundering (AML) obligations, KYC regulatory requirements, tax reporting duties, and court or regulatory orders is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is justified by ss55's legitimate business interests, provided those interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications — including promotional emails, SMS notifications about PSL bonuses, and personalised offers — is carried out on the basis of your explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ss55 uses your personal data for the following specific purposes:

• Creating, verifying, and managing your ss55 player account.
• Processing deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer.
• Verifying your identity and age (21+) through CNIC-based KYC checks to comply with our regulatory obligations.
• Delivering casino games, sportsbook markets (including PSL and cricket betting), live dealer tables, and other platform features.
• Calculating and crediting bonus rewards, managing wagering requirement tracking, and administering promotional campaigns.
• Monitoring gameplay patterns to detect and investigate problem gambling behaviours and to apply responsible gaming interventions where appropriate.
• Detecting, preventing, and investigating fraudulent activity, identity misrepresentation, multi-accounting, and money laundering.
• Generating anonymised or aggregated analytics reports to improve platform performance, user experience, and product development.
• Responding to customer support enquiries, complaints, and dispute resolution processes.
• Sending transactional communications including deposit confirmations, withdrawal notifications, and account security alerts.
• Sending marketing communications including bonus offers, reload promotions, and PSL season specials — where you have provided explicit consent.
• Complying with applicable regulatory, legal, and licensing requirements applicable to ss55's international gaming licence.

ss55 does not sell, rent, or trade your personal data. We share personal data with third parties only where strictly necessary, under the categories described below:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and our banking gateway partners receive the minimum transaction data required to process your PKR deposits and withdrawals.
• KYC and identity verification providers: Licensed identity verification partners receive your CNIC document and personal details to conduct age and identity checks required under our regulatory obligations.
• Game providers: Licensed third-party game providers receive your account identifier and session data to deliver casino games and live dealer products within the ss55 Platform environment.
• IT and cloud infrastructure providers: Server hosting and cloud storage partners who process data strictly as data processors under binding data processing agreements with ss55, with no independent rights to use your data.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory instruction, ss55 will disclose personal data to relevant Pakistani or international authorities without prior notice to you.
• AML compliance bodies: Transaction data may be shared with financial intelligence units where our AML obligations require us to file suspicious activity reports.

ss55 uses cookies and similar browser-based technologies to operate the Platform efficiently and deliver a personalised experience. The table below describes the cookie categories we use:

ss55 does not use third-party advertising cookies, cross-site tracking pixels, or retargeting technologies. You can manage your cookie preferences via the cookie settings panel in the site footer. Please note that disabling strictly necessary cookies will prevent you from logging in to your ss55 account.

ss55 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in compliance with AML regulatory requirements.
• Financial transaction records: Retained for a minimum of 7 years following each transaction, as required under applicable financial regulation and tax reporting obligations.
• KYC documents: Retained for the duration of your account plus 5 years post-closure, or longer where required by a regulatory investigation or court order.
• Gameplay logs: Retained for 3 years from the date of each gaming session for fraud detection, dispute resolution, and responsible gaming monitoring purposes.
• Customer support communications: Retained for 2 years from the date of resolution of the relevant support interaction.
• Marketing preference records: Consent and opt-out records are retained indefinitely to evidence compliance with marketing regulations.
• Technical and analytics data: Aggregated anonymised analytics data may be retained indefinitely; raw technical logs are purged after 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to technical constraints, it is isolated from active processing systems pending scheduled deletion.

ss55 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• TLS encryption: All data transmitted between your device and ss55 servers is encrypted using Transport Layer Security (TLS 1.2 or higher).
• AES-256 encryption at rest: Sensitive data including financial records, KYC documents, and password hashes is stored using AES-256 encryption in our database infrastructure.
• Password security: Player passwords are never stored in plain text. We use industry-standard adaptive hashing algorithms (bcrypt) to store password credentials.
• Two-factor authentication: ss55 offers optional two-factor authentication (2FA) for account login, strongly recommended for all players.
• Access controls: Access to personal data within ss55 is restricted on a strict need-to-know basis. All internal data access is logged and subject to regular audit review.
• Penetration testing: ss55 conducts regular third-party penetration tests and vulnerability assessments of our platform infrastructure.
• Incident response: ss55 maintains a formal data breach response procedure. In the event of a data breach affecting your personal data, we will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.

As an ss55 player, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". ss55 will respond within 30 days of receipt.

• Right of Access: You may request a copy of all personal data ss55 holds about you, presented in a structured and readable format.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under AML and financial regulation.
• Right to Restriction: You may request that ss55 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is under investigation.
• Right to Data Portability: You may request a machine-readable export of the personal data you provided to ss55 directly, in a structured, commonly used format such as JSON or CSV.
• Right to Object: You may object to processing based on ss55's legitimate interests at any time. Processing will cease unless ss55 can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent — for example, marketing communications — you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

ss55 operates under an international gaming licence. As a result, personal data collected from Pakistani players may be transferred to and processed in countries outside Pakistan — including the jurisdiction in which ss55 holds its gaming licence and the locations of our cloud infrastructure and service providers.

Where personal data is transferred internationally, ss55 ensures that appropriate safeguards are in place to protect your data to an equivalent standard as applied within our primary operating jurisdiction. These safeguards include:

• Standard contractual clauses incorporated into data processing agreements with all international service providers.
• Transfers only to service providers located in jurisdictions assessed as providing an adequate level of data protection.
• Binding corporate rules or equivalent frameworks where applicable to ss55's corporate structure.

You may request further information about the specific safeguards applicable to any international transfer of your personal data by contacting our Data Protection team at [email protected].

ss55 is strictly prohibited for use by any person under the age of 21 years. We do not knowingly collect personal data from individuals under 21. If ss55 becomes aware that personal data has been collected from a person under 21 — whether through registration, attempted registration, or any other interaction — that data will be immediately and securely deleted, the relevant account will be permanently closed, and any funds associated with that account will be handled in accordance with our Terms & Conditions.

ss55 applies CNIC-based age verification as part of our mandatory KYC process. CNIC cards are only issued to Pakistani nationals aged 18 and above; however, ss55 applies an elevated minimum age threshold of 21 years for all gaming products in line with our responsible gaming commitments. Where our automated systems flag a potential age concern, manual KYC review is conducted before gameplay access is granted.

ss55 sends promotional communications — including bonus offers, PSL betting markets, reload promotions, and platform news — only to players who have provided explicit opt-in consent at the time of registration or subsequently via the account preferences panel.

• Opting out: You may withdraw consent to receive marketing communications at any time by updating your preferences in your ss55 account settings, clicking the unsubscribe link in any marketing email, or submitting a written request to [email protected].
• Transactional communications: Opt-out from marketing does not affect transactional communications — including deposit confirmations, withdrawal notifications, security alerts, and account status updates — which are sent as part of the service regardless of marketing preferences.
• SMS promotions: Promotional SMS messages to your registered Pakistani mobile number are sent only where you have separately consented to SMS marketing. You may opt out by replying STOP to any promotional SMS.
• No third-party marketing: ss55 does not share your contact details with third-party advertisers for marketing purposes under any circumstances.

ss55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our licensing obligations. The "Last Updated" date at the top of this Policy will be revised upon each amendment.

Where amendments are material — meaning they significantly alter how we collect, use, or share your personal data — ss55 will notify registered players via the email address associated with their account and/or via a prominent notice on the Platform at least 7 days before the amended Policy takes effect.

Your continued use of ss55 following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the amended Policy, you must cease using the Platform and may request account closure by contacting our support team.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy-related complaint, please contact the ss55 Data Protection team using the details below. All privacy enquiries are treated as confidential and handled by dedicated personnel.

• Email: [email protected] — Subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 via the ss55 Platform — select "Privacy & Data" from the support topic menu
• Response Time: ss55 aims to acknowledge all privacy enquiries within 72 hours and resolve data rights requests within 30 calendar days
• Complaints: If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in ss55's licensing jurisdiction