Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by tot555 ("we", "us", "our", "the Platform"), accessible at tot555.cam. tot555 is an English-language online betting and gaming information platform serving users in Pakistan and other permitted jurisdictions.

This Policy explains how tot555 collects, uses, stores, discloses and protects personal data relating to registered users and visitors ("you", "your", "User") in connection with your access to and use of the Platform. It applies to all personal data processed by tot555 regardless of the medium through which it is collected — including the website, support communications and any associated services.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. By using the Platform you acknowledge that you have read, understood and accepted this Policy.

2. Definitions

• "Personal Data" means any information that directly or indirectly identifies a natural person, including name, CNIC number, email address, mobile number, device identifiers and financial transaction details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, tot555.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under contractual instruction.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of Personal Data.
• "KYC" means Know Your Customer — the identity and age verification process required under applicable anti-money-laundering and player-protection obligations.
• "Cookies" means small text files stored on your device by your browser when you visit the Platform.
• "Sensitive Personal Data" means a subset of Personal Data that warrants heightened protection, including government-issued identity numbers (such as CNIC), financial account details and biometric data.

3. Data Controller

tot555, operating the Platform at tot555.cam, acts as the Data Controller in respect of Personal Data collected from Users. All requests relating to the exercise of data rights, privacy queries and data-related complaints should be directed to our support team using the contact details set out in Section 15 of this Policy.

Where we engage third-party Data Processors — such as KYC verification providers, payment processors and fraud-detection services — we do so under written data processing agreements that bind those processors to handle your data only on our documented instructions and in compliance with applicable data protection standards.

4. Personal Data We Collect

The categories of Personal Data we collect depend on the nature of your interaction with the Platform. The following table summarises our primary data categories:

4.1 Data You Provide Directly

The majority of Personal Data we hold is data you provide to us directly — during registration, KYC submission, payment processing or when you contact our support team. You are not obligated to provide this data, but certain features of the Platform (including depositing funds and requesting withdrawals) will not be available unless KYC is completed.

4.2 Data Collected Automatically

When you access the Platform, we automatically collect certain Technical and Usage Data through server logs, cookies and similar tracking technologies. This data does not typically identify you by name but may constitute Personal Data when combined with other information we hold.

5. Lawful Basis for Processing

We process your Personal Data only where a lawful basis exists. The bases on which we rely are:

• Contractual necessity: Processing required to perform our agreement with you — including account management, payment processing and delivering the services you have requested.
• Legal obligation: Processing required to comply with applicable law — including KYC, AML and regulatory record-keeping requirements.
• Legitimate interests: Processing necessary for our legitimate business interests where those interests are not overridden by your rights — including fraud detection, platform security, responsible gambling monitoring and service improvement.
• Consent: Where we rely on your consent — for example, for optional marketing communications — you may withdraw that consent at any time by contacting our support team or updating your account preferences.

6. How We Use Your Personal Data

We use the Personal Data we collect for the following purposes:

• Creating and managing your Account, including processing your registration and verifying your identity;
• Processing deposits and withdrawals in PKR through available payment methods;
• Fulfilling our KYC and AML compliance obligations;
• Detecting, investigating and preventing fraud, multi-accounting, money laundering and other prohibited conduct;
• Enforcing our Terms & Conditions and other platform policies;
• Providing customer support via Live Chat and email in English and Urdu;
• Sending transactional communications — such as deposit confirmations, withdrawal updates and security alerts;
• Sending promotional communications where you have opted in — including bonus offers, PSL/T20 promotions and platform news;
• Monitoring gameplay for responsible gambling signals and administering player-protection tools such as deposit limits, session alerts and self-exclusion;
• Improving the Platform, diagnosing technical issues and conducting internal analytics;
• Complying with court orders, regulatory requests or other legal obligations.

7. Sharing Your Personal Data

tot555 does not sell, rent or trade your Personal Data to third parties. We share your data only in the circumstances described below, and only to the extent necessary for the stated purpose:

7.1 Service Providers and Data Processors

We engage trusted third-party providers who process data on our behalf under written agreements, including:

• Identity verification and KYC providers;
• Payment processors and fraud-screening services;
• Cloud hosting and infrastructure providers;
• Customer support platform providers;
• Analytics and platform monitoring services.

These processors are contractually prohibited from using your data for any purpose other than providing the contracted service to tot555.

7.2 Legal and Regulatory Disclosure

We may disclose Personal Data to regulatory authorities, law enforcement agencies or courts where required by applicable law or where we determine in good faith that disclosure is necessary to protect the rights, property or safety of tot555, our users or the public.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of assets, your Personal Data may be transferred to a successor entity. We will notify affected users of any such transfer via a prominent on-site notice and, where required, seek your consent.

7.4 Payment Method References

References to Pakistani payment brands — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — appear on the Platform as contextual references to familiar local payment methods. tot555 does not share your personal data with these institutions beyond what is strictly required to process a specific transaction you have initiated. These institutions do not endorse, support or affiliate with gambling operations.

8. Data Retention

We retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, including the satisfaction of applicable legal, regulatory, accounting and reporting obligations. Our general retention approach is as follows:

• Account and identity data: Retained for the duration of your account relationship with tot555 and for a period of at least five (5) years after account closure, in line with standard AML record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, consistent with financial compliance obligations.
• Support communications: Retained for up to three (3) years from the date of the communication, or longer if related to an ongoing dispute or investigation.
• Technical and usage data: Typically retained for up to twenty-four (24) months in identifiable form, after which it is aggregated or anonymised.
• Responsible gambling data: Self-exclusion records are retained throughout the exclusion period and for a minimum of five (5) years thereafter to prevent re-registration during active exclusion windows.

When Personal Data is no longer required, we securely delete or anonymise it in accordance with our internal data destruction procedures.

9. Your Data Rights

Depending on applicable law, you may have the following rights in respect of your Personal Data held by tot555. We will respond to all verified requests within a reasonable timeframe and without undue delay.

To exercise any of these rights, please contact our support team using the details in Section 15. We may require identity verification before processing your request to protect against unauthorised access. We will not charge a fee for routine requests but reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

10. Cookies & Tracking Technologies

tot555 uses cookies and similar technologies to operate the Platform, remember your preferences and improve your experience. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function — for example, session authentication cookies that keep you logged in. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, preferred sports categories and responsible gambling tool configurations.
• Analytical Cookies: Used to collect aggregated information about how users navigate the Platform, which pages are most visited and where errors occur. This data helps us improve the user experience.
• Security Cookies: Used for fraud detection, multi-account detection and protection against automated bot traffic.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the availability and functionality of Platform features. We do not use advertising or cross-site tracking cookies.

11. Security Measures

tot555 implements a range of technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• End-to-end HTTPS/TLS encryption for all data in transit;
• Encryption of sensitive data fields (including identity document data) at rest;
• Role-based access controls limiting staff access to Personal Data on a need-to-know basis;
• Regular security assessments and vulnerability testing;
• Multi-factor authentication for administrative systems;
• Incident response procedures with defined notification timelines.

While we take data security seriously and apply industry-standard protections, no system is entirely immune to risk. Users are responsible for maintaining the confidentiality of their own account credentials and should never share passwords or one-time PINs with any third party — including individuals claiming to represent tot555 support.

12. Minors

The Platform is strictly for persons aged 18 years or older — or the higher minimum age required by the operator's licensing jurisdiction. We do not knowingly collect Personal Data from individuals under this age threshold. If we discover that Personal Data has been collected from an underage user, we will delete that data promptly and close the associated account.

If you are a parent or guardian and believe that a minor in your care has registered on or provided data to the Platform, please contact us immediately using the details in Section 15 so that we can take the appropriate action.

13. International Data Transfers

tot555 operates internationally and your Personal Data may be transferred to and processed in countries other than Pakistan. Where such transfers occur, we take steps to ensure that your data receives an adequate level of protection consistent with this Policy and applicable data protection standards — for example, by using contractual safeguards with Data Processors in recipient countries.

By using the Platform and providing us with your Personal Data, you acknowledge that your data may be transferred, stored and processed outside Pakistan in accordance with this Policy.

14. Amendments to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or business operations. When we make material changes, we will display a prominent notice on the Platform and update the "Last Reviewed" date at the top of this page.

Your continued use of the Platform following the posting of a revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must stop using the Platform and may request account closure via our support team.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact our support team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 from within your Account dashboard
• Support languages: English (primary); Urdu available on request

Please include your registered username, a description of your query and — where relevant — the specific right you wish to exercise. We will acknowledge your request promptly and aim to resolve it without undue delay.