How x555games Handles Your Personal Data
At x555games, we take your privacy seriously. This policy explains exactly what personal information we collect when you open an account or make a deposit via JazzCash, Easypaisa...
What This Privacy Policy Covers and Why
This privacy policy applies to all personal data processed by x555games when you use our platform in supported regions, including Pakistan where local law permits. We collect the information you provide at account registration — your name, contact details, and payment method identifiers such as your JazzCash mobile number or Easypaisa wallet reference. We also collect transactional records, device identifiers, and session
logs to operate the platform and meet our legal obligations. Your SadaPay or Raast account details are handled with the same care as any other payment credential: stored encrypted, never shared with third parties for marketing, and retained only as long as required by applicable law or our internal retention schedules. We do not sell your data.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Why You Can Rely on Our Privacy Practices
We built x555games's data handling around concrete controls rather than vague promises. Below are six verifiable practices that define how we protect your information every day, from the moment you open an...
Encrypted Storage
All personal data — including your JazzCash mobile number and Easypaisa wallet reference — is stored using AES-256 encryption at rest. Encryption keys are rotated on a scheduled basis and are never stored alongside the data they protect.
Limited Staff Access
Only staff with a documented operational need can access your account data. Access is logged, reviewed quarterly, and revoked immediately when a team member's role changes. No marketing team member can view your payment details.
Secure Data Transit
Every connection between your device and x555games uses TLS 1.3. This covers your login, deposit flow via SadaPay or Raast, and any form submission, so your data is protected in transit as well as at rest.
Retention Schedules
We keep your data only as long as legally required or operationally necessary. When a retention period ends, data is permanently deleted from our systems rather than archived indefinitely in cold storage.
Third-Party Vetting
Payment processors and analytics vendors we work with are contractually bound to our data standards. We review each vendor's security posture before onboarding and require them to notify us within 72 hours of any incident affecting your data.
Breach Notification
If a data breach affects your personal information, we will notify you directly via the contact details on your account within the timeframe required by applicable law, explaining what was affected and what steps we have taken.
How This Policy Aligns Across Our Legal Pages
Our privacy policy, cookie policy, and terms of use share the same data definitions and retention rules so there are no contradictions between them. The table below shows...
| Data Controller Identity | Identified the same way in every legal document — no variation in entity name or contact address across our privacy, cookie, and terms pages. |
|---|---|
| Retention Periods | Retention timelines defined in this privacy policy are the same figures cited in our terms of use, so there is no ambiguity about how long we keep your records. |
| Payment Data Handling | How we treat JazzCash, Easypaisa, SadaPay and Raast transaction records is described consistently here and in our terms — no separate carve-outs in either document. |
| User Rights Language | Your right to access, correct, and delete your data is described using the same scope in this policy as in the terms of use, so exercising a right under one document covers both. |
| Cookie Classification | Cookies classified as strictly necessary in our cookie policy are treated as exempt from consent requirements in the same way this privacy policy classifies essential processing. |
| Third-Party Disclosure Rules | The conditions under which we share data with third parties are stated identically here and in our terms, preventing any loophole where one document permits what the other restricts. |
| Policy Update Process | Our process for notifying you of policy changes — email to your registered address plus an in-account banner — is the same across all three legal documents, with the same notice period. |
How Our Privacy Page Is Built for You
We designed this privacy policy to be readable and actionable rather than a wall of legal text. Each section focuses on a specific part of how your data...