gt555 Privacy Policy

1. Who We Are

This Privacy Policy is issued by gt555, the operator of the online casino and sports betting platform accessible at https://gt555.bio. gt555 operates under an international gaming licence and is the data controller in respect of all personal data collected through the Platform.

When this Privacy Policy refers to "gt555", "we", "us", or "our", it refers to the licensed operator of the gt555 Platform. When it refers to "you", "your", or "Player", it refers to any individual who accesses the Platform, creates an account, or otherwise interacts with any gt555 service.

If you have any questions about how your data is handled, or wish to exercise any of your data rights described in this Policy, you may contact us at any time via the support channels listed in Section 15.

2. Data We Collect

gt555 collects personal data in the following categories:

3. How We Collect Your Data

gt555 collects your personal data through the following means:

• Direct Interactions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, respond to a promotion, or update your account settings.
• Automated Technologies: When you access the Platform, we automatically collect Technical Data and Usage Data via cookies, server logs, and similar tracking technologies. See Section 7 for full details of our cookie practices.
• Third-Party Sources: We may receive data about you from third-party service providers, including identity verification agencies used in the KYC process, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), fraud detection services, and our licensed game providers where relevant to your gameplay activity.
• Publicly Available Sources: In limited circumstances, and only where required under our AML obligations, we may cross-reference publicly available sources to verify information you have provided.

4. Why We Use Your Data

gt555 uses the personal data it collects for the following purposes:

• Account Management: To create and administer your gt555 account, authenticate your identity at login, and manage your account preferences and settings.
• Service Delivery: To process deposits and withdrawals in PKR, settle bets and game outcomes, award bonuses and promotions, and deliver all other Platform services you have requested.
• KYC & Age Verification: To verify that you are at least 21 years of age and to confirm your identity as required under our international gaming licence. This is a mandatory condition of Platform access.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account registrations, and other prohibited conduct described in the gt555 Terms & Conditions.
• Legal & Regulatory Compliance: To fulfil our obligations under our gaming licence, including record-keeping requirements, AML reporting, and cooperation with lawful regulatory or law enforcement requests.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling behaviour and to apply responsible gaming measures — including deposit limits, cooling-off periods, and self-exclusion — where appropriate.
• Customer Support: To respond to your queries, resolve complaints, and maintain records of support interactions for quality assurance purposes.
• Platform Improvement: To analyse aggregate usage data (in anonymised form) to improve the Platform's performance, user experience, and game offering.
• Marketing Communications: To send you promotional offers and platform updates by email or in-platform notification, where you have provided consent to receive such communications. You may withdraw consent at any time via your account settings.

5. Legal Basis for Processing

gt555 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to deliver the services you have contracted for — including account management, payment processing, game delivery, and support — is carried out on the basis that it is necessary for the performance of the contract between you and gt555.
• Legal Obligation: Processing required for KYC verification, AML compliance, age verification, record retention, and regulatory reporting is carried out to fulfil gt555's legal obligations under its gaming licence and applicable financial crime prevention frameworks.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of gt555's legitimate interests in operating a safe, secure, and compliant gaming platform. These interests have been assessed and do not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications is carried out on the basis of your explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing & Disclosure

gt555 does not sell your personal data. We may share your data with the following categories of third party, strictly to the extent necessary to deliver the Platform's services and meet our legal obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the financial data necessary to process your deposit and withdrawal transactions. Each processor operates under its own privacy policy and is bound by applicable financial data protection regulations.
• Identity Verification Providers: Third-party KYC and age verification agencies receive identity and document data strictly for the purpose of verifying your eligibility to use the Platform. These providers are contractually prohibited from using your data for any other purpose.
• Licensed Game Providers: Game software providers may receive a player identifier and session data necessary to deliver gameplay, settle outcomes, and detect irregular activity. No more data than is strictly required is transmitted.
• Fraud & AML Detection Services: Specialist fraud prevention and anti-money laundering service providers may process Technical Data and transaction data to identify patterns of suspicious activity.
• Regulatory & Law Enforcement Authorities: gt555 will disclose personal data to regulators, gaming licence authorities, law enforcement agencies, or courts where required by law or where gt555 reasonably believes disclosure is necessary to prevent serious harm or financial crime.
• Professional Advisers: Legal, accounting, and auditing advisers may access personal data on a need-to-know basis and are bound by professional confidentiality obligations.

7. Cookies & Tracking Technologies

The gt555 Platform uses cookies and similar technologies to operate correctly, improve performance, and deliver a personalised experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and cookies that remember your language and currency preference. These cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how Players navigate the Platform — which pages are visited most, where errors occur, and how long sessions typically last. This data is used exclusively to improve the Platform and is not linked to your identity.
• Functional Cookies: Used to remember your preferences and personalise your experience — such as your preferred game categories, display settings, and notification preferences.
• Security Cookies: Used to detect and prevent fraudulent logins, bot activity, and suspicious session behaviour. These are essential for platform integrity and cannot be disabled.

You may manage non-essential cookie preferences via your browser settings. Disabling strictly necessary or security cookies may prevent you from accessing certain features of the Platform or logging into your account.

8. Data Retention

gt555 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. The following retention periods apply:

• Account Data & Transaction Records: Retained for a minimum of five years following account closure, as required under our gaming licence's AML and record-keeping obligations. Some records may be retained for longer where required by applicable law or ongoing legal proceedings.
• KYC & Identity Verification Documents: Retained for a minimum of five years following account closure. Copies of identity documents are stored in encrypted form and access is restricted to authorised compliance personnel only.
• Support & Communications Records: Retained for two years following resolution of the relevant query or complaint, to allow for follow-up and quality assurance purposes.
• Technical & Usage Data: Retained in identifiable form for up to 12 months, after which it is anonymised and may be retained indefinitely in aggregate form for platform analytics purposes.
• Marketing Consent Records: Retained for as long as you hold an account and for 12 months following account closure, to demonstrate consent where required.

Where data is no longer required and no legal obligation requires its retention, gt555 will securely delete or irreversibly anonymise it.

9. Data Security

gt555 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data in transit between your device and the Platform's servers.
• AES-256 encryption for sensitive data at rest, including identity documents and financial records.
• Role-based access controls ensuring that personal data is only accessible to staff members who require it for their specific job function.
• Multi-factor authentication requirements for all internal systems that hold personal data.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified independent security professionals.
• Continuous monitoring of Platform infrastructure for anomalous access patterns or potential intrusion attempts.
• Incident response procedures to identify, contain, and report data security incidents in accordance with our licence obligations.

10. International Data Transfers

As an internationally licensed platform serving Pakistani players, some of the data gt555 collects may be processed or stored on servers located outside Pakistan. Where such international transfers occur, gt555 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards used for international transfers include:

• Contractual data protection clauses incorporated into agreements with all third-party processors that may handle data outside Pakistan.
• Transfer to jurisdictions that maintain adequate data protection standards as assessed under our licence framework.
• Encryption of data prior to any cross-border transfer, ensuring that data remains protected even if intercepted in transit.

If you have concerns about the international transfer of your data, please contact our support team for further information about the specific safeguards applicable to your data.

11. Your Data Rights

As a gt555 Player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team as described in Section 15. We will respond to all valid requests within 30 days.