at55 Privacy Policy

01 Who We Are

at55 is an online gaming platform accessible at at55.app, offering cricket betting, live casino tables, video slots, bingo, and instant games to registered players. at55 operates under international gaming licensing standards and is the data controller responsible for the personal data collected through the at55 platform.

This Privacy Policy applies to all personal data collected by at55 through the at55 website, mobile-optimised interface, customer support channels, and any associated promotional communications. It covers all registered players, including those based in Karachi, Lahore, Islamabad, Faisalabad, and throughout Pakistan.

02 Data We Collect

at55 collects personal data in the following categories, depending on your interaction with the platform:

at55 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification under KYC obligations.

03 How We Use Your Data

at55 uses the personal data it collects for the following purposes:

• Account Administration: Creating, verifying, and maintaining your at55 player account, including password resets and two-factor authentication.
• KYC & Age Verification: Confirming that you are 21 years of age or older and that your identity matches the details provided at registration, as required under at55's licensing obligations.
• Payment Processing: Facilitating PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and processing withdrawal requests to your verified payment method.
• Fraud Prevention & Security: Detecting and preventing fraudulent transactions, money laundering, underage access, and other prohibited conduct on the platform.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and to apply responsible gaming tools (deposit limits, session timers, self-exclusion) where activated by the player or required by policy.
• Customer Support: Responding to your enquiries, complaints, and requests submitted via live chat or email.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — only where you have expressly opted in. You may opt out at any time via account settings.
• Legal & Regulatory Compliance: Meeting recordkeeping, reporting, and disclosure obligations under at55's applicable international gaming licence and anti-money laundering requirements.

04 Legal Basis for Processing

at55 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to enter into and perform the contract with you — i.e., operating your account, processing transactions, and delivering gaming services — is necessary for the performance of the at55 Terms & Conditions to which you are a party.
• Legal Obligation: Processing necessary to comply with at55's obligations under applicable anti-money laundering laws, gaming licence conditions, and financial recordkeeping requirements.
• Legitimate Interests: Processing undertaken in at55's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where you have provided explicit opt-in consent. This consent may be withdrawn at any time without affecting the lawfulness of prior processing.

05 Data Sharing & Third Parties

at55 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is shared with third parties only in the following limited circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum data necessary to process your deposit or withdrawal transaction. Each of these providers operates under its own privacy framework and applicable Pakistani financial regulations.
• Identity Verification Providers: Third-party KYC service providers may receive your identity documents (CNIC / passport) and personal details for the sole purpose of completing age and identity verification. These providers are contractually bound to use data only for this purpose.
• Game Software Providers: Where at55 operates games developed by third-party providers, those providers may receive anonymised or pseudonymised gameplay data necessary for game functionality, RNG certification, and technical support.
• Regulatory & Law Enforcement Authorities: at55 may disclose personal data to relevant regulatory bodies, tax authorities, or law enforcement agencies where required to do so by applicable law, court order, or licensing condition.
• Fraud Prevention Networks: In cases of suspected fraud or money laundering, at55 may share relevant data with cross-industry fraud prevention services as permitted by law.

06 Cookies & Tracking Technologies

The at55 platform uses cookies and similar tracking technologies to ensure platform functionality, personalise your experience, and support security monitoring. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings and last-used payment method to improve your experience across sessions.
• Analytics Cookies: Collect anonymised data about how players use the platform — which pages are visited most, session duration, and navigation paths — to help at55 improve the platform over time.
• Security Cookies: Support fraud detection and bot prevention by tracking unusual access patterns and device fingerprints associated with known fraudulent behaviour.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the at55 platform.

07 Data Security

at55 implements and maintains a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the at55 platform.
• AES-256 encryption for all personal data stored at rest in at55 databases.
• One-way cryptographic hashing for all account passwords — at55 staff cannot view or recover your password.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific function.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Two-factor authentication (2FA) available to all players and mandatory for at55 administrative staff accounts.

In the event of a personal data breach that is likely to result in significant risk to players, at55 will notify affected players without undue delay and take immediate remedial action.

08 Data Retention

at55 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention standards:

• Account & Identity Data: Retained for a minimum of five (5) years following the date of account closure, in compliance with anti-money laundering recordkeeping obligations applicable under at55's gaming licence.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required for regulatory audit and tax compliance purposes.
• Customer Support Communications: Retained for three (3) years from the date of the interaction, to enable at55 to respond to subsequent enquiries or disputes relating to the same matter.
• Marketing Consent Records: Retained for the duration of the consent and for three (3) years thereafter as evidence of consent, or until a valid withdrawal of consent is received.
• Technical & Usage Logs: Retained for thirteen (13) months on a rolling basis for security monitoring and fraud detection purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

09 Your Rights

Subject to applicable law and at55's regulatory obligations, you hold the following rights with respect to your personal data held by at55. To exercise any of these rights, contact the at55 support team via live chat or at [email protected]. at55 will respond to all verified rights requests within 30 calendar days.

• Right of Access: You may request a copy of the personal data at55 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: You may request correction of inaccurate personal data or completion of incomplete personal data held in your at55 account.
• Right to Erasure: You may request deletion of your personal data where at55 no longer has a lawful basis for retaining it. Note that at55 may be required to retain certain data for regulatory compliance even after account closure.
• Right to Restriction: You may request that at55 restrict its processing of your personal data in certain circumstances, for example while a rectification request is under review.
• Right to Data Portability: You may request that at55 provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object to at55 processing your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests grounds, subject to at55 demonstrating compelling legitimate grounds to continue.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10 Children & Minors

The at55 platform is strictly for adults aged 21 and above. at55 does not knowingly collect personal data from any person under the age of 21. Age verification via CNIC or government-issued identification is conducted as part of the KYC process for all new accounts and prior to processing any withdrawal.

If at55 becomes aware that it has inadvertently collected personal data from a person under the age of 21, the account will be immediately suspended, all associated funds will be withheld pending investigation, and the personal data will be securely deleted in accordance with at55's data retention policy. If you believe that a minor has registered an account on at55, please contact the support team immediately via live chat.

11 Policy Updates

at55 may update this Privacy Policy from time to time to reflect changes in applicable law, platform functionality, data processing practices, or third-party arrangements. When a material change is made, at55 will notify registered players via their registered mobile number or on-platform notification at least 14 days before the change takes effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of the at55 platform following notification of any update constitutes acceptance of the revised Privacy Policy. Players are encouraged to review this page periodically.

12 Contact & Complaints

If you have a question, concern, or complaint about how at55 processes your personal data, please contact the at55 Data Support team in the first instance. at55 will acknowledge all privacy complaints within 48 hours and provide a substantive response within 14 calendar days.

• Live Chat: Available 24/7 directly within the at55 platform — the fastest way to reach the support team, with an average response time of 3–5 minutes. Support is available in both Urdu and English.
• Email: [email protected] — please include "Privacy Request" in the subject line along with your registered mobile number so the team can verify your identity efficiently.

If you are not satisfied with at55's response to your privacy complaint, you may have the right to escalate your complaint to the relevant data protection authority or the dispute resolution body applicable under at55's gaming licence jurisdiction.