s55ff Privacy Policy

Section 1 Introduction

This Privacy Policy ("Policy") sets out how s55ff ("Platform", "we", "us", "our"), accessible at https://s55ff.cam (the "Site"), collects, processes, stores, shares and protects personal data relating to users ("you", "your") who access or use the Site.

s55ff is an English-language online betting information and entertainment platform designed for Pakistani users and other users accessing the Site in English. We take privacy seriously — not as a compliance exercise, but as a foundational commitment to the users who trust us with their information.

This Policy applies to all personal data collected through your use of the Site, including data collected during registration, account use, customer support interactions and any other engagement with our services. It should be read alongside our Terms & Conditions.

Section 2 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living natural person, directly or indirectly — including name, email address, IP address, device identifiers and location data.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure and deletion.
• "Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, s55ff.
• "Processor" means a third party that processes Personal Data on behalf of the Controller under a written data processing agreement.
• "Cookies" means small text files placed on your device by a website to store information about your preferences or browsing behaviour.
• "KYC Data" means identity and age-verification documents and related information submitted as part of the Know Your Customer process.
• "Special Category Data" means sensitive personal data including health information, biometric data or financial details, which attract heightened protection obligations.

Section 3 Data We Collect

3.1 Data You Provide Directly

When you register an account, use the platform or contact support, you may provide us with:

• Full legal name;
• Date of birth (for age verification);
• Email address;
• Residential address (city, province, country — for example Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar);
• Username and encrypted password;
• Phone number (where provided);
• KYC documents — such as a Pakistani CNIC or passport image, proof of address and selfie/liveness check data;
• Payment information — such as bank account details, digital wallet identifiers (e.g. Easypaisa or JazzCash wallet references) or card details, as required by the operator's payment processing system. These references are contextual only and do not imply endorsement by any payment provider;
• Support correspondence — messages, attachments and contact history.

3.2 Data Collected Automatically

When you visit the Site, we may automatically collect certain technical data, including:

• IP address and approximate geographic location;
• Device type, operating system and browser version;
• Pages visited, time spent on each page and navigation paths;
• Referral source (how you arrived at the Site);
• Session duration and login timestamps;
• Cookie and tracking identifiers (see Section 7).

3.3 Data From Third Parties

We may receive supplementary data from third-party KYC verification providers or fraud-detection services to assist with identity verification and AML compliance. Such data is handled under the same security standards as directly collected data.

Section 4 Legal Basis for Processing

We process your Personal Data on one or more of the following legal bases:

Section 5 How We Use Your Data

We use the Personal Data we collect for the following purposes:

• Account administration: Creating, managing and securing your account, including password reset and authentication;
• Identity and age verification: Fulfilling KYC obligations to confirm your identity and that you meet the minimum age requirement (18+ or the higher minimum required by the operator and licence jurisdiction);
• Transaction processing: Handling deposits, withdrawals and payment reconciliation;
• Customer support: Responding to queries, complaints and support requests submitted via live chat or email;
• Responsible gambling: Monitoring usage patterns to identify potential problem-gambling indicators and providing access to limit and self-exclusion tools;
• Fraud prevention and AML: Detecting and preventing fraudulent activity, money laundering, identity theft and terms violations;
• Platform improvement: Analysing aggregated usage data to improve Site performance, content relevance and user experience — this analysis uses anonymised or pseudonymised data wherever possible;
• Legal compliance: Meeting applicable legal and regulatory requirements, including responding to lawful requests from authorities.

Section 6 Data Sharing & Disclosure

s55ff does not sell Personal Data. We may share your data in the following limited circumstances:

6.1 Service Providers (Processors)

We engage carefully selected third-party service providers to assist with platform operations, including KYC verification providers, payment processors, fraud-detection services, hosting providers and email delivery platforms. All processors are bound by data processing agreements requiring them to process your data only on our documented instructions and to maintain appropriate security standards.

6.2 Legal and Regulatory Disclosure

We may disclose Personal Data where required to do so by applicable law, court order, regulatory instruction or other lawful authority. We will notify you of such disclosure where we are legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of our business, Personal Data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any resulting change to this Policy.

6.4 Aggregated or Anonymised Data

We may share aggregated, anonymised data — from which individuals cannot be identified — with partners, researchers or the public for analytical or reporting purposes. Such data does not constitute Personal Data.

Section 7 Cookies & Tracking Technologies

s55ff uses cookies and similar tracking technologies to operate and improve the Site. Cookies are small text files stored on your device when you visit a website. We use the following categories of cookies:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent some parts of the Site from functioning correctly. We do not use third-party advertising cookies or cross-site tracking cookies.

Section 8 Data Retention

We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following general retention periods apply:

• Account data: Retained for the duration of your account relationship and for a period of up to five (5) years following account closure, to satisfy AML record-keeping requirements;
• KYC documents: Retained for the period required by the applicable operator licence and AML regulations — typically five (5) years from the date of the last transaction;
• Transaction records: Retained for a minimum of five (5) years in accordance with standard financial record-keeping obligations;
• Support correspondence: Retained for up to three (3) years from the date of resolution, unless a longer retention period is required for an ongoing dispute or regulatory matter;
• Analytical data: Anonymised usage data may be retained indefinitely in aggregated, non-identifiable form.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised.

Section 9 Data Security

s55ff implements industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration or destruction. Our measures include:

• TLS/HTTPS encryption for all data transmitted between your device and our servers;
• Encryption of Personal Data at rest using AES-256 or equivalent standards;
• Access controls limiting data access to authorised personnel with a documented operational need;
• Regular security assessments and vulnerability monitoring;
• Incident response procedures for detecting, containing and notifying relevant parties of data breaches.

Section 10 International Data Transfers

s55ff operates internationally and your Personal Data may be transferred to, and stored on, servers located in jurisdictions outside Pakistan. Where such transfers occur, we take appropriate steps to ensure your data receives an equivalent level of protection as it would in its country of origin, including:

• Contractual safeguards (standard contractual clauses or equivalent data transfer agreements) with receiving parties;
• Restricting transfers to jurisdictions with adequate data-protection frameworks;
• Ensuring Processor agreements require the receiving party to maintain security standards consistent with this Policy.

Pakistan does not currently have a comprehensive data-protection law equivalent to the EU General Data Protection Regulation. Users in Pakistan are advised that their data may be processed in jurisdictions whose data-protection standards differ from those prevailing in Pakistan. By using this Site, you acknowledge and accept this position.

Section 11 Minors & Age Restriction

s55ff is strictly intended for adults. We do not knowingly collect, process or retain Personal Data from individuals under the age of 18, or the higher minimum age required by the applicable operator and licence jurisdiction. If we become aware that Personal Data has been collected from a minor without appropriate parental or guardian consent, we will delete that data promptly and close the associated account.

If you are a parent or guardian and believe that a minor has registered an account on this platform, please contact us immediately at [email protected] (plain text — not a clickable link) so that we can take appropriate action.

Section 12 Your Rights in Relation to Your Personal Data

Subject to applicable law and the specific circumstances of your request, you have the following rights in relation to the Personal Data we hold about you. To exercise any of these rights, please contact us using the details in Section 15.

We will respond to all verified rights requests within thirty (30) days. Where a request is complex or we receive a high volume of requests, this period may be extended by a further two months, with notice provided to you of the extension and the reasons for it.

Section 13 Pakistan-Specific Context

s55ff is designed and maintained with Pakistani users in mind. We recognise that Pakistan does not currently have a comprehensive standalone data-protection statute equivalent to international frameworks such as the EU GDPR. However, we apply the following principles consistently for all users, including those in Pakistan:

• Purpose Limitation: Data is collected only for the specific purposes described in this Policy and is not used for incompatible purposes without your consent;
• Data Minimisation: We collect only the data necessary for the stated purpose — no excess collection;
• Accuracy: We take reasonable steps to keep Personal Data accurate and up to date;
• Storage Limitation: Data is not retained beyond the periods specified in Section 8;
• Integrity and Confidentiality: Appropriate security measures are maintained at all times.

References to payment providers familiar in Pakistan — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — appear on this platform in a contextual capacity only. None of these institutions are data controllers, data processors or partners of s55ff. Any data relating to payment transactions is handled exclusively by the operator's licensed payment processing infrastructure, not by the payment providers themselves in connection with s55ff.

Pakistani users should also be aware that s55ff does not share user data with the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan or any other Pakistani governmental body except where required to do so by a binding legal order.

Section 14 Amendments to This Policy

s55ff reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or platform functionality. The effective date at the top of this page will be updated whenever material changes are made.

Where changes are material — for example, a change to the categories of data we collect, the purposes for which we use it, or the parties with whom we share it — we will provide reasonable notice via the Site or through account communications prior to the changes taking effect.

Your continued use of the Site following publication of a revised Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically, particularly after extended absences from the Site.

Section 15 Contact Us

If you have questions, concerns or requests relating to this Privacy Policy or our data practices, please contact us using the information below. All data-related correspondence should be submitted in English for efficient processing.

When submitting a data rights request, please include: your full registered name, your registered email address, the specific right you are exercising (e.g. access, erasure, correction) and any relevant details that will help us locate your data. We may need to verify your identity before processing the request.