ar555 Privacy
Policy

1. Introduction & Scope

ar555 operates an online casino and sports betting platform accessible at ar555.asia, providing services to players in Pakistan and other permitted jurisdictions. In the course of delivering these services, ar555 necessarily collects and processes personal data about its users, including individuals in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Peshawar, Multan, and other cities across Pakistan.

This Privacy Policy applies to:

• All registered ar555 Account holders and applicants for registration.
• All visitors to the ar555 website, whether or not they hold a registered Account.
• All individuals who contact ar555 customer support through any channel.
• All individuals who receive ar555 marketing communications through any channel.

This Policy does not apply to third-party websites, platforms, or services that may be linked to or from the ar555 website. ar555 is not responsible for the privacy practices of third-party operators, and users are advised to review the privacy policies of any third-party platform they access independently.

2. Personal Data We Collect

ar555 collects the following categories of personal data in connection with the provision of its services:

ar555 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required to do so by applicable law or licensing authority direction.

3. How We Collect Personal Data

ar555 collects personal data through the following means:

• Direct collection: Information you provide directly to ar555 during Account registration, completion of KYC verification, use of the deposit and withdrawal cashier, completion of responsible gaming tool settings, and all communications with the ar555 customer support team.
• Automated collection: Technical data including IP addresses, device identifiers, browser information, and session data is collected automatically when you access the ar555 website or platform. This collection is facilitated through cookies, server logs, and similar tracking technologies as further described in Section 6 of this Policy.
• Third-party sources: ar555 may receive personal data from third-party identity verification providers, payment processors, fraud detection services, and, where applicable, from affiliate partners who referred the user to ar555. All third-party data sharing is governed by contractual arrangements that require the third party to have lawful grounds for disclosure.

4. Purpose & Legal Basis for Processing

ar555 processes personal data only where it has a valid lawful basis for doing so. The following table sets out the primary purposes for which ar555 processes personal data and the corresponding legal basis:

Where ar555 relies on legitimate interests as the basis for processing, ar555 has assessed that those interests are not overridden by the interests, fundamental rights, or freedoms of the individuals whose data is being processed.

5. Data Sharing & Disclosure

ar555 does not sell, rent, or trade personal data to any third party for commercial purposes. ar555 shares personal data with third parties only in the following circumstances:

• Payment processors: ar555 shares financial data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, SadaPay, and USDT TRC20 infrastructure providers as necessary to process deposits and withdrawals. These providers operate under strict contractual obligations and their own regulatory frameworks.
• Identity verification providers: ar555 uses authorised third-party KYC and AML service providers to verify the identity and age of Account holders. These providers process identity data only to the extent necessary to complete the verification task and are prohibited from using the data for any other purpose.
• Fraud prevention services: ar555 uses industry-standard fraud detection tools that may process technical data such as IP addresses and device fingerprints to identify suspicious activity and protect the integrity of the platform.
• Regulatory and licensing authorities: ar555 is required by its operating licence to disclose certain player data to the relevant licensing authority upon request. This disclosure is mandatory and does not require the consent of the individual concerned.
• Law enforcement and legal proceedings: ar555 will disclose personal data to competent law enforcement or judicial authorities where required to do so by applicable law, court order, or legally enforceable governmental request.
• Group companies and successors: In the event of a merger, acquisition, or restructuring of the ar555 business, personal data may be transferred to the acquiring entity subject to the same privacy protections described in this Policy.

All third parties with whom ar555 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using ar555 user data for any purpose other than the specific task for which it was shared.

6. Cookies & Tracking Technologies

ar555 uses cookies and similar tracking technologies to enable the operation of the platform, personalise user experience, and analyse platform usage. The following categories of cookies are used by ar555:

• Strictly necessary cookies: These cookies are essential for the ar555 platform to function and cannot be disabled. They include session authentication cookies that keep you logged in to your ar555 Account during a session, and security cookies that protect against cross-site request forgery (CSRF) attacks.
• Functional cookies: These cookies remember your preferences such as language settings, responsible gaming configurations, and preferred deposit method to provide a more consistent experience across sessions.
• Analytics cookies: ar555 uses anonymised analytics tools to understand how users navigate the platform, which games are most frequently accessed, and where technical errors occur. This data is used to improve platform performance and user experience and does not identify individual users.
• Marketing cookies: Where you have consented to receive marketing communications, ar555 may use cookies to track whether you have opened marketing emails or interacted with promotional content, to assess the effectiveness of marketing campaigns.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the ar555 platform from functioning correctly and may make it impossible to access your Account. ar555 does not use cookies to track your activity on third-party websites.

7. Data Retention

ar555 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or licensing obligations. The following general retention principles apply:

• Active Account data: Personal data associated with an active ar555 Account is retained for the duration of the Account relationship and for a minimum period of five years following Account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC and verification documents: Identity verification documents including CNIC copies and proof of address are retained for a minimum of five years following Account closure or the date of the last transaction, whichever is later.
• Transaction records: Financial transaction records including deposit and withdrawal history are retained for a minimum of five years following the date of the transaction for compliance with financial record-keeping obligations.
• Customer support records: Communications with the ar555 support team are retained for a minimum of three years following the last interaction, or longer where the communication relates to a dispute or regulatory inquiry.
• Marketing data: Where you have opted in to marketing communications, your contact details and communication preferences are retained until you withdraw consent or request deletion, subject to any legal retention requirements.

When data is no longer required and the applicable retention period has expired, ar555 will securely delete or anonymise the data so that it can no longer be linked to any individual.

8. Data Security

ar555 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, and destruction. These measures include:

• Encryption: All data transmitted between your device and the ar555 platform is protected by 256-bit SSL/TLS encryption. Personal data stored in ar555 databases is encrypted at rest using industry-standard encryption protocols.
• Access controls: Access to personal data within ar555 is restricted on a strict need-to-know basis. Internal staff are granted access only to the data necessary to perform their specific role. All access is logged and regularly audited.
• Network security: The ar555 platform is protected by enterprise-grade firewalls, intrusion detection systems, and regular penetration testing conducted by authorised security professionals.
• Incident response: ar555 maintains a formal data breach response plan. In the event of a data breach that is likely to result in a risk to individuals, ar555 will notify the relevant licensing authority and affected individuals in accordance with applicable reporting requirements.
• Employee training: All ar555 staff who handle personal data receive regular training on data protection obligations and security best practices.

9. Your Data Protection Rights

Subject to applicable law and certain conditions, ar555 Account holders and website users have the following rights with respect to their personal data:

To exercise any of the above rights, please contact the ar555 data protection team at [email protected]. ar555 may require you to verify your identity before processing any data rights request. Requests will be acknowledged within 5 business days and fulfilled within 30 calendar days, subject to any permitted extensions under applicable law.

ar555 will not charge a fee for handling data rights requests unless the request is manifestly unfounded, excessive, or repetitive.

10. International Data Transfers

ar555 may transfer personal data to countries outside of Pakistan in connection with the delivery of its services, including to the jurisdiction in which ar555 holds its operating licence and to countries where ar555's technology infrastructure and service providers are located.

Where personal data is transferred internationally, ar555 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to the protections described in this Privacy Policy. These safeguards include contractual data protection clauses with receiving parties and, where applicable, transfer mechanisms recognised by the relevant licensing authority.

ar555 does not transfer personal data to countries that do not maintain adequate data protection standards without first ensuring that contractual or other legally recognised safeguards are in place to protect the data in transit and at rest in the destination country.

11. Children's Privacy

The ar555 platform is strictly intended for adults. ar555 does not knowingly collect, process, or store personal data relating to any individual under the age of 21. In Pakistan, ar555 considers any individual under 21 to be a child for the purposes of this Privacy Policy, consistent with the age restriction applied across the ar555 platform.

If ar555 discovers that personal data relating to an individual under the age of 21 has been collected — whether through a false age declaration during registration or any other means — ar555 will immediately close the associated Account, void any transactions, and securely delete all associated personal data.

If a parent or guardian believes that their minor child has submitted personal data to ar555, they are urged to contact the ar555 support team at [email protected] immediately so that appropriate action can be taken without delay.

12. Marketing Preferences

ar555 sends promotional and marketing communications to Account holders who have specifically opted in to receive them. These communications may include information about new games, PSL cricket betting promotions, bonus offers, and other ar555 platform updates.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your ar555 Account settings panel.
• Clicking the unsubscribe link included in any ar555 marketing email.
• Contacting the ar555 support team directly at [email protected] with a request to be removed from marketing communications.

Withdrawal of consent for marketing communications does not affect your ability to receive service-related communications from ar555, such as account security alerts, transaction confirmations, KYC notifications, and other communications necessary for the operation of your Account.

ar555 will process opt-out requests within 5 business days. Following opt-out, you may continue to receive marketing messages for a short period while systems are updated, but no further messages will be sent after the opt-out has been fully processed.

13. Amendments to This Privacy Policy

ar555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, licensing requirements, platform functionality, or data processing practices. Any material changes to this Privacy Policy will be communicated to registered Account holders through a notification displayed upon platform login or by email to the registered Account address.

The revised Privacy Policy will take effect from the date specified in the amendment notice. Continued use of the ar555 platform following the effective date of any amendment constitutes acceptance of the updated Privacy Policy. We encourage you to review this Policy periodically to remain informed about how ar555 handles your personal data.

The current effective version of this Privacy Policy is always accessible via the footer link on the ar555 website and is dated January 2026. It supersedes all prior versions of the ar555 privacy notice.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data protection right, or have a concern about how ar555 has handled your personal data, please contact the ar555 data protection team using the details below:

If you are not satisfied with ar555's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or the alternative dispute resolution body specified by ar555's licensing authority. Information about the applicable authority is available upon request from the ar555 support team.