tot55 Privacy Policy

1Who We Are

tot55 is an online casino and sports betting platform operated under internationally recognised gaming standards, providing services to players including those located in Pakistan. The tot55 Platform is accessible at tot55.ws and encompasses all casino games, live dealer tables, sportsbook markets, crash games, and related financial and account management services.

For the purposes of this Privacy Policy, tot55 acts as the data controller in respect of all personal information collected from registered players and Platform visitors. As data controller, tot55 determines the purposes and means by which your personal data is processed.

2Personal Data We Collect

tot55 collects the following categories of personal data from players and Platform visitors:

tot55 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is required for standard KYC identity verification.

3How We Collect Your Data

tot55 collects personal data through the following channels:

• Direct Registration: Information you provide when creating your tot55 Account, including name, date of birth, mobile number, and email address.
• KYC Submissions: Identity and address verification documents you upload in response to a tot55 verification request or as part of the account opening process.
• Transaction Activity: Payment data generated when you make deposits or withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or debit card.
• Platform Usage: Data automatically collected as you navigate the Platform, including pages viewed, games launched, bets placed, and session duration.
• Device & Technical Data: Information collected automatically by our servers when your device connects to tot55, including IP address, browser type, operating system, and device identifiers.
• Cookies & Similar Technologies: Data collected via cookies, pixel tags, and local storage as described in Section 7 of this Policy.
• Customer Support Interactions: Information you share when contacting tot55 support via live chat, email, or any other communication channel.
• Third-Party Verification Services: Where tot55 uses third-party KYC or fraud-screening providers, data may be cross-referenced against external databases to verify the accuracy of information you have provided.

4Legal Basis for Processing

tot55 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil the contract between you and tot55 — including operating your Account, processing deposits and withdrawals, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) laws, counter-terrorism financing (CTF) regulations, KYC requirements, and any other applicable legal or regulatory obligation.
• Legitimate Interests: Processing necessary for tot55's legitimate business interests, including fraud prevention, network and information security, Platform performance monitoring, and responsible gaming compliance — provided these interests are not overridden by your own rights and interests.
• Consent: Where tot55 relies on your consent as the legal basis for processing — primarily for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

5How We Use Your Personal Data

tot55 uses the personal data collected from you for the following purposes:

• Creating, managing, and maintaining your tot55 Account.
• Processing deposits and withdrawals in PKR via your chosen payment method.
• Verifying your identity and age in compliance with KYC requirements, including confirming that you are 21 years of age or older.
• Detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, and other prohibited conduct.
• Monitoring your gaming activity for responsible gaming purposes and, where necessary, applying self-exclusion or limit restrictions.
• Providing customer support, responding to queries, and resolving disputes.
• Sending transactional communications including deposit confirmations, withdrawal notifications, and Account security alerts.
• Sending marketing communications where you have provided consent to receive them.
• Improving the tot55 Platform, diagnosing technical issues, and analysing usage patterns to enhance the player experience.
• Complying with applicable legal and regulatory reporting obligations.

6Data Sharing & Disclosure

tot55 does not sell your personal data. We share your information only in the following limited circumstances:

• Payment Processors: Your financial data is shared with payment service providers — including JazzCash, EasyPaisa, and bank transfer intermediaries — solely to process your requested transactions. These providers are bound by their own data protection obligations.
• KYC & Fraud Screening Providers: Identity verification data may be shared with third-party KYC and fraud detection services to confirm the accuracy of your registration information and to detect suspicious activity.
• Game Providers: Limited technical data may be shared with third-party game studios whose titles are hosted on the tot55 Platform, solely to facilitate gameplay and resolve technical issues.
• Regulatory & Law Enforcement Authorities: tot55 will disclose personal data to competent authorities where required by law, court order, or regulatory direction, including in connection with AML and CTF investigations.
• Professional Advisers: Personal data may be shared with tot55's legal advisers, auditors, or insurers where strictly necessary and subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of tot55's business assets, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

7Cookies & Tracking Technologies

The tot55 Platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure gaming experience. The following types of cookies may be set when you use tot55:

• Strictly Necessary Cookies: Required for core Platform functionality including session management, login state, and security token storage. These cookies cannot be disabled without materially impairing Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the Platform, including pages visited, error occurrences, and load times. This data helps tot55 identify and fix technical issues and optimise the player experience.
• Functional Cookies: Used to remember your preferences — such as your preferred language, display settings, and responsible gaming limits — so that you do not need to re-enter them on each visit.
• Security Cookies: Used to support fraud prevention and security monitoring functions, including detecting unusual login patterns or suspicious session behaviour.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the tot55 Platform. tot55 does not use third-party advertising or behavioural targeting cookies.

8Data Retention

8.1 Active Accounts. Personal data associated with an active tot55 Account is retained for as long as the Account remains open and for a period thereafter as required by applicable legal and regulatory obligations.

8.2 Closed Accounts. Following Account closure, tot55 retains identity verification records, transaction history, and Account activity logs for a minimum period required under applicable AML and gaming regulations. This retention period is typically five (5) years from the date of Account closure, though longer periods may apply where required by law.

8.3 Support & Communications Data. Customer support records and correspondence are retained for a period of three (3) years from the date of last interaction, to support dispute resolution and service quality management.

8.4 Technical & Log Data. Server log data, including IP address records and session logs, is retained for a maximum period of twelve (12) months unless required for longer retention in connection with an active security investigation or legal matter.

8.5 Deletion. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with tot55's internal data lifecycle management procedures.

9International Data Transfers

tot55 may transfer personal data to servers or service providers located outside Pakistan. Where such transfers occur, tot55 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy.

Safeguards used for international transfers may include contractual data protection clauses with receiving parties, the use of service providers located in jurisdictions with recognised data protection frameworks, and other technical and organisational measures appropriate to the nature and volume of the data transferred.

10Your Privacy Rights

As a tot55 player, you have the following rights in respect of your personal data. Requests to exercise any of these rights should be directed to tot55 support:

• Right of Access: You have the right to request a copy of the personal data tot55 holds about you, together with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by tot55.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. Please note that this right is subject to tot55's legal obligations to retain data under AML and gaming regulations, which may take precedence.
• Right to Restriction: You have the right to request that tot55 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being disputed.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including any profiling carried out on that basis.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

tot55 will respond to all valid data rights requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days, with prior notification to you.

11Children & Minors

The tot55 Platform is strictly restricted to individuals who are 21 years of age or older. tot55 does not knowingly collect personal data from persons under the age of 21. The Platform employs age verification procedures during registration and KYC processes specifically to prevent underage use.

12Marketing Communications

12.1 Consent-Based Marketing. tot55 will send you marketing communications — including promotional offers, bonus announcements, and new game alerts — only where you have provided explicit consent during registration or subsequently opted in through your Account settings.

12.2 Opting Out. You may withdraw your consent to receive marketing communications at any time by adjusting your notification preferences in the Account settings section of the tot55 Platform, or by following the unsubscribe link contained in any marketing email. Opt-out requests are processed within five (5) business days.

12.3 Transactional Communications. Withdrawal of marketing consent does not affect tot55's ability to send you essential transactional communications, including deposit and withdrawal confirmations, security alerts, Account verification requests, and responsible gaming notifications. These are sent on the basis of contractual necessity and cannot be opted out of while your Account remains active.

13Security Measures

tot55 implements the following technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration:

• 256-bit SSL/TLS encryption on all data transmissions between your device and tot55 servers.
• Hashed and salted storage of all Account passwords — no passwords are stored in plain text.
• Two-factor authentication (2FA) via SMS OTP available to all players and strongly recommended.
• Role-based access controls limiting internal access to personal data to authorised personnel with a demonstrated need-to-know.
• Regular penetration testing and security audits by qualified third-party security specialists.
• Intrusion detection and prevention systems (IDS/IPS) monitoring Platform infrastructure in real time.
• Encrypted backup procedures ensuring data integrity and availability in the event of a system failure.

While tot55 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your tot55 Account and to enable 2FA from your Account security settings.

14Third-Party Links

The tot55 Platform may reference or display content from third-party game providers whose games are hosted within the Platform environment. These game studios operate under their own privacy policies in respect of any data they independently collect during gameplay.

tot55 is not responsible for the privacy practices of third-party game providers or any other third-party services. Players are encouraged to review the privacy policies of any third-party service they interact with in connection with their use of the tot55 Platform.

15Updates to This Privacy Policy

15.1 Right to Update. tot55 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The date of the most recent review is displayed at the top of this page.

15.2 Notification of Material Changes. Where changes to this Privacy Policy are material — meaning they significantly affect how we collect, use, or share your personal data — tot55 will notify registered players via their registered email address or mobile number at least seven (7) days prior to the changes taking effect.

15.3 Continued Use. Your continued use of the tot55 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how tot55 protects your information.

16Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or tot55's handling of your personal data, please contact our support team. tot55 is committed to addressing all privacy-related enquiries promptly and fairly.

When submitting a data rights request, please include your registered Account mobile number or email address and a description of your request so that tot55 can locate your records and respond accurately. Identity verification may be required before processing certain requests, such as access or erasure requests, to protect against unauthorised data disclosures.