he555 Privacy Policy — How We Handle Your Personal Data

he555 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of every user who accesses the he555 casino and sports betting platform at he555.bio. This Privacy Policy ("Policy") has been prepared in accordance with internationally recognised data protection principles and explains in plain terms what personal data he555 collects, why we collect it, how we use and protect it, and what rights you hold over that data.

This Policy applies to all he555 users worldwide, with particular attention to the needs and expectations of Pakistani players who use local payment methods including JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK, as well as USDT (Tether) for crypto transactions.

By registering an account on he555, accessing the platform, or continuing to use any he555 service after this Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data practices described herein. If you do not agree to this Policy, you must not access or use the he555 platform.

For the purposes of applicable data protection law, the data controller responsible for your personal information is the he555 operating entity as identified in the he555 Terms and Conditions. he555 processes personal data in its capacity as a provider of online casino and sports betting services operating under international gaming standards.

Queries relating specifically to data protection and privacy matters can be directed to the he555 support team as described in Section 16 of this Policy. he555 takes its obligations as a data controller seriously and has implemented appropriate technical and organisational measures to ensure personal data is processed securely and in compliance with applicable privacy standards.

he555 collects the following categories of personal data from users, depending on how you interact with the platform:

he555 does not collect sensitive personal data such as racial or ethnic origin, religious or political beliefs, genetic data, or biometric data, unless specifically required by applicable law or regulation for identity verification purposes.

he555 collects personal data through the following channels and mechanisms:

• Direct registration: When you create a he555 account, you actively provide identity, contact, and initial payment data. This is the primary source of your personal information on the platform.
• Account activity: Transaction records, bet history, session data, and game logs are generated automatically as you use the he555 platform — these form part of your account record.
• KYC verification: When he555 requests identity or age verification documents, the data contained in those documents (name, date of birth, ID number, document image) is collected and stored as part of the verification process.
• Payment processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, Raast, or a Pakistani bank, limited transaction confirmation data is received from those payment partners to confirm successful processing.
• Technical systems: he555's servers automatically collect IP addresses, device identifiers, browser fingerprint data, and session metadata whenever you connect to the platform.
• Support interactions: When you contact he555 via live chat or email, the content of that communication becomes part of your account data for quality assurance and dispute resolution purposes.
• Cookies and similar technologies: As described in Section 9, he555 uses cookies and similar tracking technologies to collect usage and behavioural data during your platform sessions.

he555 processes your personal data only for lawful, defined purposes. The primary purposes for which we use personal data are:

• Account management: Creating, maintaining, and securing your he555 account — including login authentication, session management, and account settings.
• Service delivery: Enabling access to all he555 platform products — slots, W Live dealer tables, cricket sportsbook, Super Keno — and processing the bets, game sessions, and results associated with your account.
• Payment processing: Executing deposit and withdrawal transactions through your chosen payment method (JazzCash, EasyPaisa, USDT, etc.), reconciling account balances, and maintaining a financial transaction audit trail.
• Identity and age verification: Confirming that all he555 users meet the minimum age requirement of 21 years and that account details match the identity of the individual operating the account.
• Anti-fraud and security: Detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, money laundering, and other prohibited conduct on the he555 platform.
• Regulatory compliance: Meeting applicable record-keeping, anti-money laundering (AML), and Know Your Customer (KYC) obligations under international gaming standards.
• Responsible gaming: Monitoring usage patterns to identify potential signs of problem gambling and to support self-exclusion or deposit limit requests made by users.
• Platform improvement: Analysing aggregated and anonymised usage data to improve product quality, navigation design, game selection, and overall platform performance for Pakistani players.
• Customer support: Responding to inquiries, resolving disputes, and maintaining records of support interactions for quality assurance.
• Direct communications: Sending account-related notifications (password resets, security alerts, transaction confirmations) to your registered email or mobile number.

he555 processes personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: The majority of he555's data processing — account management, payment execution, bet processing, and game delivery — is necessary to perform the contract between he555 and the User as set out in the Terms and Conditions.
• Legal obligation: Certain processing activities — particularly KYC verification, AML record-keeping, and fraud reporting — are required by applicable legal and regulatory frameworks under which he555 operates.
• Legitimate interests: he555 processes technical and usage data on the basis of legitimate interests in maintaining platform security, preventing fraud, improving the product, and operating an efficient, fair gaming environment.
• Consent: Where he555 seeks to send promotional or marketing communications beyond transactional account notifications, we will obtain your explicit, informed consent before doing so. You may withdraw this consent at any time.

he555 does not sell personal data. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK, and USDT network service providers receive the minimum data necessary to process your financial transactions — typically your account identifier and transaction amount.
• Game technology providers: Software studios whose games are hosted on he555 may receive anonymised session identifiers for the purpose of game integrity certification and RNG audit logging. These providers do not receive your name, contact details, or financial information.
• Identity verification services: Where KYC verification is required, he555 may use a third-party identity verification provider that processes the document images and data you submit solely for the purpose of confirming your identity.
• Legal and regulatory authorities: he555 will disclose personal data to law enforcement, gaming regulators, or other governmental authorities where required by applicable law, court order, or regulatory obligation — and only to the extent required.
• Professional advisors: Legal, audit, and compliance advisors who assist he555 in meeting its obligations may access personal data strictly on a need-to-know basis and under binding confidentiality obligations.

All third-party service providers with whom he555 shares personal data are contractually required to maintain appropriate data security standards and to use the data only for the specified purpose for which it was shared.

he555 takes the privacy of Pakistani players' financial information with particular seriousness. Payment data — including JazzCash account numbers, EasyPaisa wallet details, bank account information, and USDT wallet addresses — is processed and stored under additional security controls beyond those applied to standard personal data.

he555 does not store full payment card numbers or CVV codes. Where Pakistani bank account details are stored for withdrawal processing, they are encrypted at rest using AES-256 encryption and are accessible only to authorised payment processing systems — not to individual support staff members.

he555 uses cookies and similar tracking technologies (including session tokens, local storage, and device fingerprinting) to operate the platform, maintain login sessions, prevent fraud, and understand how users interact with the he555 interface.

• Essential cookies: Required for basic platform functionality — including login session maintenance, load balancing, and security token management. These cannot be disabled without breaking core platform features.
• Analytical cookies: Collect anonymised data about how users navigate the he555 platform — which pages are visited, how long sessions last, and which features are used most frequently. This data informs product improvement decisions.
• Fraud-detection tracking: Device fingerprint data and IP-based signals used to identify suspicious login attempts, multi-account creation, and other potentially fraudulent activity patterns.
• Performance cookies: Help he555 optimise page load speeds and game streaming performance, particularly for players accessing the platform on Pakistani 4G mobile networks.

You may control cookie settings through your browser. However, disabling essential cookies will prevent certain core functions — including maintaining your he555 login session — from working correctly. Analytical and performance cookies can be disabled without affecting core functionality.

he555 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as general guidelines:

• Active account data: Retained for the duration of your he555 account and for a minimum period after account closure as required by applicable gaming regulations for audit and compliance purposes.
• Financial transaction records: Retained for a minimum of five (5) years following the date of the transaction, in compliance with anti-money laundering record-keeping requirements applicable under international gaming standards.
• KYC documentation: Retained for the duration of the account and for a minimum period post-closure as required by applicable AML and gaming compliance obligations.
• Support communications: Retained for a period of two (2) years from the date of last interaction, unless the matter relates to an unresolved dispute or regulatory inquiry, in which case records are retained until final resolution.
• Technical and log data: Retained for a rolling period of twelve (12) months, after which it is automatically deleted or anonymised.

Upon expiry of the applicable retention period, he555 will securely delete or permanently anonymise your personal data so that it can no longer be linked to your identity.

he555 implements a layered information security architecture designed to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and he555 servers — including during login, payment processing, and all in-session activity.
• AES-256 encryption at rest for sensitive stored data including financial details, KYC documents, and authentication credentials.
• One-way password hashing — he555 does not store your password in readable form at any point. Passwords are processed through a strong one-way hashing algorithm with salting, meaning even he555 staff cannot read your password.
• Role-based access controls — internal access to personal data is restricted on a strict need-to-know basis. Support agents can view account information relevant to their service role but cannot access full payment credentials or KYC document images without specific authorisation.
• New-device authentication — logins from unrecognised devices trigger an SMS verification step to your registered Pakistani mobile number, preventing account access from compromised passwords alone.
• Automated fraud detection systems — he555 runs real-time analysis on login patterns, deposit behaviour, and gameplay data to flag suspicious activity for human review.

Despite these measures, no internet-connected system can guarantee absolute security. he555 encourages all Pakistani players to protect their own account security by using a strong, unique password and enabling device verification for their he555 account.

he555 operates as an international gaming platform. Personal data collected from Pakistani players may be processed and stored on servers located outside Pakistan. Where such international transfers occur, he555 takes steps to ensure that appropriate safeguards are in place to protect your personal data to the same standard as described in this Policy.

Safeguards for international transfers may include contractual data protection clauses with service providers, processing within jurisdictions that maintain recognised data protection standards, and equivalent technical security measures applied regardless of where data is physically stored.

As a he555 user, you hold the following rights over your personal data. To exercise any of these rights, contact the he555 support team as described in Section 16. he555 will respond to all valid requests within a reasonable timeframe, typically within 30 days:

• Right of access: You may request a copy of the personal data he555 holds about you, including your account data, transaction history, and KYC records where applicable.
• Right to rectification: If you believe any personal data he555 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly via your he555 account settings.
• Right to erasure: In certain circumstances — such as where data is no longer necessary for the purpose it was collected, and subject to our legal retention obligations — you may request deletion of your personal data.
• Right to restrict processing: You may request that he555 limits its use of your personal data in certain situations while a correction or objection request is being assessed.
• Right to data portability: Where technically feasible and legally applicable, you may request a structured, machine-readable copy of your he555 account data for transfer to another service provider.
• Right to object: You may object to he555 processing your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to our ability to demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

he555 operates a strict 21+ only policy across all platform products. The he555 platform is not directed at, and must not be used by, any person under the age of 21. he555 does not knowingly collect personal data from individuals under the age of 21.

If he555 becomes aware that personal data has been collected from a user who is under 21 years of age, we will take immediate steps to permanently close the relevant account, delete or restrict access to the collected data, and — where funds have been deposited — handle those funds in accordance with our Terms and Conditions and applicable legal requirements.

If you are a parent or guardian and believe that a minor in your care has accessed or attempted to access the he555 platform, please contact our support team immediately so we can investigate and take appropriate action.

he555 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we offer. When material changes are made to this Policy, we will provide notice through appropriate channels — such as an in-platform notification or an email to your registered address — and will update the "Last Updated" date at the top of this document.

Your continued use of the he555 platform after any revised Privacy Policy has been made available to you constitutes your acceptance of the updated Policy. We encourage Pakistani players to review this Policy periodically to stay informed about how their data is being protected and used.

For any questions, concerns, or formal requests relating to this Privacy Policy or he555's data practices, please contact us through the following channels:

• Live Chat: Available directly on the he555 platform, 24 hours per day, 7 days per week — the fastest route for routine privacy inquiries from Pakistani players.
• Email: [email protected] — for formal data subject access requests, erasure requests, or other rights exercises. Please include "Privacy Request" in the subject line and your registered account username to help us process your request efficiently.

he555 takes all privacy requests seriously. We will acknowledge receipt of your request promptly and aim to provide a substantive response within 30 days. Complex requests — such as large-scale data access exports or requests requiring legal review — may take up to 60 days, and we will communicate expected timelines at acknowledgement stage.