yh555 Privacy Policy

1 Overview & Scope

This Privacy Policy ("Policy") is issued by yh555 ("yh555", "we", "our", or "us") and applies to all personal data collected through the yh555 online gaming platform, including its website accessible at yh555.app, any associated mobile or progressive web applications, customer support channels, and promotional communications (collectively, the "Platform").

By registering an account, making a deposit, placing a wager, or simply browsing the yh555 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

yh555 is committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection standards. While yh555 primarily serves players in Pakistan — with PKR-denominated transactions via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast — this Policy applies equally to all registered users of the Platform regardless of location.

2 Data We Collect

yh555 collects several categories of personal data in the course of operating the Platform. The specific data collected depends on how you interact with yh555 and the stage of your account lifecycle.

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (collected to enforce the 21+ age restriction).
• Email address and mobile phone number.
• Residential address including city, province, and postal code.
• Username and encrypted account password.
• CNIC number or passport number, collected during KYC verification.

2.2 Financial & Transaction Data

• JazzCash or EasyPaisa mobile wallet identifiers associated with deposits and withdrawals.
• Bank account numbers and branch details where bank transfers (HBL, UBL, Meezan Bank, Raast) are used.
• Deposit and withdrawal transaction histories including amounts in PKR, timestamps, and payment method references.
• Bonus credits, wagering records, win/loss history, and wallet balance snapshots.

2.3 Identity Verification (KYC) Documents

• Scanned or photographed copy of National Identity Card (CNIC) or passport.
• Proof of address documents such as recent utility bills or bank statements.
• Selfie or live photo collected during biometric verification stages, if applicable.

2.4 Technical & Device Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser version.
• Session timestamps, login history, and session duration.
• Clickstream data and in-platform navigation patterns.

2.5 Communications Data

• Records of live chat conversations with yh555 customer support.
• Email correspondence sent to or received from yh555.
• Feedback, survey responses, and dispute or complaint submissions.

3 How We Collect Your Data

yh555 collects personal data through a combination of direct inputs from you, automated technical processes, and trusted third-party service providers. The primary collection mechanisms are:

• Account Registration: You provide identity, contact, and age-verification data directly when creating your yh555 account.
• KYC Submission: You upload identity and address documents through the yh555 account verification portal.
• Deposits & Withdrawals: Financial data is captured automatically when you initiate transactions via JazzCash, EasyPaisa, Raast, or bank transfer.
• Platform Usage: Technical and behavioural data is collected automatically through server logs, session tracking, and analytics tools as you navigate the yh555 Platform.
• Cookies & Local Storage: See Section 9 for a full description of cookies used on the yh555 Platform.
• Customer Support: Communications data is collected when you contact yh555 via live chat or email.
• Third-Party Verification Providers: yh555 may receive identity verification results from licensed KYC and AML screening providers who process data on our behalf under strict data processing agreements.
• Payment Providers: Transaction confirmation data and payment identifiers are transmitted to yh555 by JazzCash, EasyPaisa, and participating banks as part of the payment processing workflow.

4 Why We Use Your Data

yh555 uses your personal data for the following clearly defined purposes:

yh555 does not use your personal data for any purpose not listed above without first notifying you and, where required, obtaining your explicit consent.

5 Legal Basis for Processing

yh555 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil the contract between you and yh555, including account management, payment processing, and game delivery. Without this processing, yh555 cannot provide its services to you.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML requirements, age verification obligations, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing for purposes that serve yh555's legitimate operational interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your fundamental rights.
• Consent: Processing of data for optional purposes such as marketing communications and certain cookie categories, where yh555 has obtained your specific, informed, and freely given consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Third Parties

yh555 does not sell your personal data. We share personal data with third parties only to the extent strictly necessary for the purposes described in this Policy, and only with parties who have agreed to maintain appropriate data security standards. Categories of third-party recipients include:

• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and other payment providers receive the minimum transaction data necessary to process your PKR deposits and withdrawals.
• KYC & AML Verification Providers: Licensed identity verification services receive your KYC documents and identity data to carry out legally required screening on our behalf under data processing agreements.
• Game Software Providers: Third-party game studios whose titles are available on yh555 may receive anonymised or pseudonymised session data necessary to deliver and audit gameplay.
• Cloud Infrastructure & Hosting Providers: yh555 uses enterprise-grade cloud infrastructure providers who process data solely on yh555's instructions and under strict contractual data protection obligations.
• Analytics Providers: Aggregated, anonymised platform usage data may be shared with analytics partners to support platform development and performance optimisation.
• Regulatory & Law Enforcement Authorities: yh555 will disclose personal data to competent authorities where required by applicable law, court order, or legitimate regulatory request. yh555 will notify affected users of such disclosures where legally permitted to do so.
• Fraud Prevention Networks: Limited identity and transaction data may be shared with industry fraud prevention networks to protect the yh555 Platform and its users from financial crime.

7 Data Retention

yh555 retains your personal data for no longer than is necessary for the purposes for which it was collected, subject to legal and regulatory minimum retention obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Data subject to an ongoing legal dispute or regulatory investigation will be retained until the matter is fully resolved.

8 Security Measures

yh555 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or device and yh555 servers is encrypted using industry-standard Transport Layer Security protocols.
• Encrypted Data Storage: Sensitive personal data — including identity documents, financial records, and account credentials — is stored in encrypted form on secured servers.
• Password Hashing: Account passwords are stored as salted cryptographic hashes. yh555 staff cannot view your plain-text password under any circumstances.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. yh555 staff members can only access the specific data categories required to perform their role.
• Multi-Factor Authentication: Administrative systems that hold personal data are protected with multi-factor authentication to prevent unauthorised internal access.
• Regular Security Audits: yh555 conducts periodic security audits and penetration testing of its Platform infrastructure to identify and remediate vulnerabilities proactively.
• Data Breach Response: yh555 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights, yh555 will notify affected users without undue delay and take all necessary remediation steps.

9 Cookies & Tracking Technologies

yh555 uses cookies and similar tracking technologies on the Platform to ensure core functionality, improve user experience, and where you have given consent, to support analytics and personalisation. A cookie is a small text file stored on your device by your browser when you visit a website.

Cookie Categories Used by yh555

You can manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will prevent the yh555 Platform from functioning correctly. Withdrawing consent for analytics or marketing cookies will not affect your ability to use core Platform features.

10 Your Rights

As a yh555 user, you hold the following rights in respect of your personal data. To exercise any of these rights, contact the yh555 Data Protection team at [email protected] with your registered account email and a description of your request.

• Right of Access: You may request a copy of all personal data that yh555 holds about you. yh555 will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data held by yh555 is inaccurate or incomplete, you have the right to request correction. Minor details such as contact number and address can be updated directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where the data is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing was unlawful. Note that yh555 cannot delete data it is legally obligated to retain, such as KYC records and financial transaction logs.
• Right to Restriction: You may request that yh555 restrict processing of your data in specific circumstances, such as while a dispute is being investigated.
• Right to Data Portability: Where processing is based on your consent or contract performance, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for personalisation purposes. You may also withdraw consent for marketing communications at any time via the unsubscribe link in any yh555 promotional email.
• Rights Related to Automated Decision-Making: Where yh555 uses automated processing that produces decisions with significant effects on you — such as automated fraud flags or account restrictions — you have the right to request human review of that decision.

yh555 will respond to all verified data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, with prior notification to you. There is no charge for exercising your rights in most circumstances.

11 Minors & Age Verification

The yh555 Platform is strictly intended for adults aged 21 years and above. yh555 does not knowingly collect personal data from individuals under the age of 21 under any circumstances.

Age verification is a mandatory component of the yh555 registration process. You are required to declare your date of birth at registration, and yh555 may at any time request documentary proof of age — including a copy of your CNIC or passport — before activating your account or processing any withdrawal.

If yh555 becomes aware or has reasonable grounds to suspect that a registered account is held by or accessible to a person under the age of 21, the account will be immediately suspended pending investigation. Any deposits made on such an account will be refunded to the verified payment method, and all associated data will be securely deleted in accordance with this Policy.

If you believe a minor in your household has accessed or registered on the yh555 Platform using your account or their own, please contact yh555 support at [email protected] immediately.

12 Payment Data & Financial Privacy

All PKR financial transactions on the yh555 Platform are processed through our regulated payment partners. yh555 handles payment data with particular care given its sensitive nature:

• yh555 does not store full bank account numbers or complete mobile wallet credentials on its own servers. Only the minimum reference identifiers needed to process and reconcile transactions are retained.
• JazzCash and EasyPaisa transactions are processed through their respective secure APIs. yh555 does not have access to your mobile wallet PIN or full account credentials.
• Bank transfer details (HBL, UBL, Meezan Bank, Raast) are used solely for the purpose of processing the specific transaction for which they were provided and reconciling your yh555 wallet balance.
• Transaction histories are retained in accordance with the AML-mandated retention periods described in Section 7 and are accessible to you at any time through your yh555 account transaction history.
• In the event of a disputed transaction, yh555 may share minimum necessary financial records with the relevant payment provider or regulatory authority to facilitate resolution.

13 Changes to This Policy

yh555 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable regulations, or Platform features. The date of the most recent revision is always displayed at the top of this page.

Where changes to this Policy are material — meaning they significantly affect how we use your personal data or the rights available to you — yh555 will notify registered users via email to their registered address and through an in-platform notification at least 14 days before the changes take effect. For minor or clarificatory changes, the revised Policy will simply be published on the Platform with an updated revision date.

Your continued use of the yh555 Platform following the effective date of any update constitutes acceptance of the revised Policy. If you do not agree with a material change, you have the right to close your account in accordance with the yh555 Terms & Conditions before the change takes effect.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by yh555, please reach out through any of the following channels:

• Email (Data Protection): [email protected] — mark your subject line with "Privacy Request" for faster routing.
• Live Chat: Available 24/7 from any page on the yh555 Platform. Suitable for general privacy queries and account data requests.
• FAQ: Visit the yh555 FAQ page for answers to common privacy-related questions.

yh555 commits to acknowledging all privacy-related enquiries within two business days and providing a substantive response within 30 calendar days of receiving a verified request.