Privacy Policy

1.1 13x555 ("we", "us", "our") operates the online sports betting and casino platform accessible at https://13x555.cam (the "Platform"). We are committed to protecting the personal information of all users ("you", "your") who access, register and interact with the Platform.

1.2 This Privacy Policy is designed to comply with applicable international data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework where relevant to our operations. It governs the collection, use, storage, disclosure and deletion of personal data across all Platform interactions.

1.3 The Platform is an English-language service primarily directed at users in the Pakistani market context, offering sports betting, live casino, slots and related content with PKR display and local payment references. This Privacy Policy applies to all users regardless of their geographic location.

1.4 This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and 13x555. Where any conflict exists between this Policy and the Terms on matters of data, this Policy shall prevail.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, modification and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, the operator of 13x555.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under a written agreement.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of Personal Data for a defined purpose.
• "KYC" means Know Your Customer — identity and age-verification processes required for regulatory compliance and responsible gambling purposes.
• "Cookies" means small text files stored on your device by your web browser when you visit the Platform.
• "User" or "you" means any individual who visits, registers on or otherwise interacts with the Platform.

3.1 We collect Personal Data in several categories depending on how you interact with the Platform. The table below summarises the main data categories, examples and the primary purpose of collection.

3.2 We do not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, health data or biometric data) unless it is provided voluntarily by you in a support interaction, or unless required specifically for identity verification purposes under applicable AML and responsible gambling obligations.

3.3 We collect data directly from you (during registration, KYC, gameplay and support interactions), automatically (through cookies, server logs and analytics tools) and, in limited cases, from third-party identity or payment verification services.

We process your Personal Data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contractual Necessity: Processing required to create, maintain and operate your Account and to deliver the Platform's services to you, including processing bets, managing balances and handling withdrawals.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF), identity verification and responsible gambling obligations imposed by the operator's applicable licensing jurisdiction.
• Legitimate Interests: Processing required for fraud detection, platform security, abuse prevention, service analytics and responsible gambling monitoring — where these interests are not overridden by your privacy rights.
• Consent: Where you have explicitly opted in to receiving marketing communications or to the use of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5.1 We use the Personal Data we collect for the following purposes:

• Creating, verifying and maintaining your Account;
• Processing deposits, bets, game play and withdrawals;
• Providing 24/7 customer support in English (and Urdu on request);
• Administering bonuses, promotions and loyalty programme benefits;
• Displaying transaction history and account activity in PKR.

• Conducting KYC and age-verification checks;
• Monitoring for fraud, money laundering and prohibited activities;
• Enforcing responsible gambling limits, self-exclusion requests and cooling-off periods;
• Complying with applicable legal, regulatory and licensing obligations.

• Analysing aggregate usage patterns to improve Platform performance and features;
• Testing and deploying technical improvements across Pakistan-focused device and connection profiles;
• Conducting internal research to better serve Pakistani users across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.

• Sending promotional emails, platform updates and personalised offers where you have expressly opted in;
• We do not send marketing materials to users who have opted out or are under an active self-exclusion period.

6.1 We do not sell your Personal Data to third parties for their own commercial purposes. We may share Personal Data with carefully selected third parties only in the following circumstances:

• Identity & KYC Verification Providers: Third-party services used to verify age, identity and source of funds as required by applicable compliance obligations;
• Payment Processing Partners: Service providers who facilitate the processing of deposits and withdrawals. These processors receive only the data necessary to complete the transaction;
• Game Software Suppliers: Casino and sportsbook technology providers who supply the games and odds feeds accessible on the Platform. Shared data is limited to session-level identifiers required to operate the game;
• Analytics and Security Providers: Third-party tools used for fraud detection, platform monitoring and aggregate usage analysis under strict data processing agreements;
• Legal and Regulatory Authorities: Where required by applicable law, court order or regulatory directive, we may disclose Personal Data to competent authorities;
• Business Transfers: In the event of a merger, acquisition or asset sale, Personal Data may be transferred to the relevant successor entity, subject to the same privacy standards.

6.2 All third-party Data Processors who handle your Personal Data on our behalf are bound by written data processing agreements that restrict their use of your data to the purposes for which it was shared and that require appropriate technical and organisational security measures.

7.1 The Platform uses cookies and similar tracking technologies to operate core Platform functions, remember your preferences and analyse Platform performance. The main categories of cookies used are:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without disrupting Platform use;
• Functional Cookies: Remember your preferences such as language setting, display currency and responsible gambling limit configurations;
• Analytics Cookies: Collect anonymised information about how users navigate the Platform to help us improve performance. These are only placed with your consent;
• Marketing Cookies: Used to deliver relevant promotional content. These are only placed where you have provided explicit consent and are not placed for users under self-exclusion.

7.2 You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may impair Platform functionality. For analytics and marketing cookies, you may withdraw consent at any time via the cookie preference settings displayed on the Platform.

8.1 We retain Personal Data for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal, regulatory or licensing obligations — whichever is longer. Specific retention principles include:

• Account and KYC data is retained for a minimum of five (5) years from account closure to comply with AML and record-keeping obligations;
• Transaction records are retained for a minimum of five (5) years from the date of each transaction;
• Support communications are retained for a minimum of two (2) years from the date of the last interaction in a support thread;
• Marketing consent records are retained for as long as the consent is relied upon, plus a reasonable period thereafter for compliance documentation;
• Technical and analytics data collected in anonymised or aggregated form may be retained indefinitely as it is not attributed to specific individuals.

8.2 Upon expiry of the relevant retention period, Personal Data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

9.1 13x555 implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Role-based access controls ensuring that only authorised personnel access Personal Data on a need-to-know basis;
• Regular internal security reviews and monitoring of system access logs;
• Two-factor authentication options available to all registered users;
• Vendor security assessment procedures for all third-party Data Processors.

9.2 While we apply industry-standard security controls, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials. In the event you suspect your Account has been compromised, contact support immediately at [email protected].

10.1 Subject to applicable law and the conditions set out below, you have the following rights in relation to your Personal Data held by 13x555:

10.2 To exercise any of the above rights, submit a written request to [email protected]. We will acknowledge your request within 5 business days and respond substantively within 30 days. In complex cases, this period may be extended by up to a further 60 days with notice provided to you.

10.3 Note that certain rights are subject to limitations. For example, the right to erasure does not apply where we are required by law to retain your data — such as AML record-keeping obligations — or where retention is necessary to defend legal claims.

If you are a parent or guardian and believe that a minor has registered on the Platform without proper authorisation, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly.

12.1 13x555 is designed for users familiar with the Pakistani market context. Pakistani users may interact with the Platform from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and other cities. The data processing practices described in this Policy apply equally to all users regardless of location.

12.2 Pakistan does not currently have a comprehensive, sector-specific data protection law equivalent to GDPR, though the Personal Data Protection Bill has been under legislative consideration. 13x555 applies international data protection principles as a baseline standard for all users, including Pakistani users.

12.3 References to Pakistani payment methods on this Platform — Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah — are contextual references only. They do not indicate that 13x555 shares your data with these institutions in the ordinary course of Platform operation. Any data shared with payment processors during a specific transaction is limited to what is strictly necessary for that transaction.

12.4 13x555 is not licensed or regulated by any Pakistani authority, including the State Bank of Pakistan, PTA or any provincial government body. Data processing is governed by the laws of the operator's applicable licensing jurisdiction, not Pakistani data protection or gambling law.

13.1 The Platform may display references to third-party services, sports organisations or payment providers for contextual and informational purposes. These references do not constitute endorsements and do not imply that 13x555 has entered into a data-sharing arrangement with those parties.

13.2 Game software supplied by third-party studio providers operates within the Platform environment. The technical integration may involve session identifiers and game-play data being processed by those studios as Data Processors under our oversight. Their use of such data is limited to delivering the game service and is governed by our data processing agreements with them.

13.3 13x555 is not responsible for the privacy practices of any external websites or services that are not operated by us, even where contextual references to those services appear on the Platform.

14.1 We may update this Privacy Policy periodically to reflect changes in our data practices, applicable law or Platform features. Material changes will be communicated to you via email to your registered address or via a prominent notice on the Platform before they take effect.

14.2 The "Effective Date" shown at the top of this page indicates when the current version of this Policy came into force. We encourage you to review this Policy periodically to remain informed of how we protect your data.

14.3 Your continued use of the Platform following publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms.

If you have any questions, concerns or requests relating to this Privacy Policy or to the exercise of your data rights, please contact the 13x555 data support team using the details below. Email addresses are shown as plain text and are not clickable links.