Privacy Policy — How dk555 Handles Your Data

This Privacy Policy (hereinafter "Policy") is issued by dk555 (the "Operator", "Platform", "we", "us" or "our") and applies to all personal data collected from individuals ("Users", "you" or "your") who access, register on, or otherwise interact with the dk555 website at https://dk555.cam and any associated services.

This Policy describes what personal data we collect, the purposes for which it is processed, the legal bases we rely upon, how long we retain it, who we share it with, and what rights you have in relation to it. It should be read alongside our Terms & Conditions, which form the primary agreement governing your use of the Platform.

By registering an Account, making a deposit, or otherwise providing personal data to dk555, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein, to the extent that consent is the applicable legal basis for processing.

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" — any information that identifies or can identify a living individual, directly or in combination with other information. Includes name, CNIC number, email address, IP address, device identifiers and transaction records.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure and destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, dk555 is the Data Controller.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• "KYC / AML" — Know Your Customer / Anti-Money Laundering — regulatory obligations requiring identity verification and transaction monitoring.
• "Cookies" — small text files placed on a User's device by the Platform to store session information, preferences and anonymised analytics data.
• "Sensitive Data" — a subset of Personal Data attracting enhanced protections, including financial account details and government-issued identity document numbers.

dk555 collects the following categories of Personal Data from Users. The table below identifies each category, specific data types and the primary reason for collection:

dk555 collects Personal Data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC forms, making deposits or withdrawals, contacting support, or submitting a complaint.
• Automated collection: Technical and Usage Data collected automatically when you access the Platform, via server logs, cookies, session tracking and device fingerprinting technologies.
• Third-party verification: Identity and address verification data obtained via licensed KYC/AML service providers to confirm the accuracy of information you have submitted.
• Payment processors: Confirmation data returned by payment processors following a transaction, including transaction status and anonymised reference identifiers.
• Fraud detection services: Risk signals and device-reputation data from licensed fraud prevention service providers used to identify suspicious account activity.

dk555 processes Personal Data under the following legal bases, as recognised under applicable data protection law in the licensing jurisdiction:

• Contractual necessity: Processing required to perform the contract constituted by the Terms & Conditions — including account creation, transaction processing and service delivery.
• Legal obligation: Processing required to comply with KYC, AML, and other regulatory obligations imposed by the licensing framework.
• Legitimate interests: Processing necessary for fraud prevention, security monitoring, service improvement and responsible-gambling oversight, where these interests are not overridden by User rights.
• Consent: Processing for direct marketing communications, where you have provided express consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Personal Data collected by dk555 is used for the following specific purposes:

• To create, manage and maintain your Account, including authentication and security verification.
• To process deposits and withdrawal requests and maintain accurate financial records.
• To conduct KYC and AML checks as required by our licensing obligations.
• To detect, investigate and prevent fraud, money laundering, collusion and other prohibited conduct.
• To provide customer support and resolve complaints or disputes.
• To monitor responsible-gambling indicators and apply protective measures where appropriate.
• To personalise your Platform experience, including displaying relevant game recommendations and promotions (where consented).
• To send account-related notifications — security alerts, transaction confirmations, policy update notices.
• To improve Platform functionality, performance and user experience through anonymised analytics.
• To comply with regulatory obligations, court orders, law enforcement requests and audit requirements.

dk555 does not sell Personal Data to third parties. Personal Data is shared only in the following circumstances, and only to the extent necessary for the specified purpose:

• KYC/AML service providers: Licensed identity verification and fraud-prevention partners who process identity documents and transaction data under contractual data processing agreements.
• Payment processors: Entities that process deposit and withdrawal transactions on behalf of dk555. They receive only the data necessary to complete the transaction.
• Game content providers: Third-party studios that deliver casino and sports-betting content may receive anonymised session data for game-integrity and RNG audit purposes.
• Regulatory authorities: Competent authorities in the licensing jurisdiction may require disclosure of account or transaction data under applicable law or licence conditions.
• Law enforcement: Where dk555 is legally required to disclose Personal Data to law enforcement agencies or courts, it will do so in accordance with applicable legal process.
• Corporate transactions: In the event of a merger, acquisition or asset sale, Personal Data may be transferred as part of that transaction, subject to equivalent privacy protections.

dk555 is operated internationally and may process or store Personal Data on servers located outside Pakistan. By using this Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions that may have data protection laws different from those applicable in Pakistan.

Where Personal Data is transferred to service providers in third countries, dk555 implements appropriate safeguards — including contractual protections — to ensure that the level of protection afforded to your data is not materially diminished as a result of the transfer. Specific safeguards applicable to a particular transfer may be requested by contacting our support team.

dk555 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention principles apply:

• Account data: Retained for the duration of the Account relationship plus a minimum post-closure period as required by AML record-keeping obligations in the licensing jurisdiction (typically five to seven years).
• KYC documents: Retained for the period required by AML regulations following account closure. Documents are stored securely and access is restricted to authorised compliance personnel.
• Transaction records: Retained for a minimum of five years from the date of the transaction, consistent with financial record-keeping requirements.
• Support communications: Retained for a minimum of two years from the date of the communication, or longer if related to an unresolved dispute or investigation.
• Technical and usage logs: Retained for up to 13 months for security and analytics purposes, after which they are anonymised or deleted.
• Marketing preferences: Retained until consent is withdrawn or the Account is closed, whichever occurs first.

Following the expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes.

10.1 What We Use

The dk555 Platform uses cookies and similar tracking technologies to support essential functionality, maintain session security, collect anonymised analytics data and, where consented, deliver personalised content.

• Strictly necessary cookies: Required for Platform functionality — session management, authentication tokens, security checks. These cannot be disabled without impairing Platform use.
• Performance cookies: Collect anonymised data about how Users interact with the Platform — page load times, error rates, navigation paths — used to improve performance.
• Functional cookies: Store User preferences such as language settings and game lobby display configuration to provide a more consistent experience across sessions.
• Analytics cookies: Aggregate, anonymised data used to understand Platform usage patterns. No individual-level profiling is conducted using analytics cookies alone.

10.2 Managing Cookies

You may configure your browser to refuse, delete or alert you to the presence of cookies. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Instructions for managing cookies are available in your browser's help documentation. Consent for non-essential cookies may be withdrawn by adjusting your browser settings at any time.

Subject to applicable law and, in certain cases, verification of your identity, you have the following rights in relation to Personal Data held by dk555. Requests should be submitted in writing to our support email address.

The dk555 Platform is strictly for adults. We do not knowingly collect Personal Data from individuals under the age of 18, or the higher minimum age required by applicable jurisdiction. If we become aware that Personal Data has been collected from a minor, we will take immediate steps to delete that data and close the associated Account.

dk555 implements technical and organisational security measures appropriate to the sensitivity of the Personal Data we process. These include:

• 256-bit TLS/SSL encryption for all data in transit between User devices and Platform servers.
• Access controls restricting Personal Data access to authorised personnel with a documented business need.
• Tokenisation of payment data — full card and bank credentials are not stored on dk555 infrastructure.
• Two-factor authentication availability for User accounts and mandatory 2FA for administrative access.
• Regular security assessments and penetration testing of Platform infrastructure.
• Incident response procedures for detecting, assessing and notifying affected parties of data breaches within applicable regulatory timeframes.

No security system is entirely impenetrable. While we apply rigorous measures, dk555 cannot guarantee absolute security. In the event of a data breach that poses a high risk to affected Users, we will notify impacted individuals in accordance with our obligations under the applicable data protection framework.

dk555 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the structure of the Platform. When we make material changes, we will notify registered Users via account notification or a prominent notice on the website prior to the change taking effect.

The "Effective Date" at the top of this Policy indicates when the current version was last revised. We encourage you to review this Policy periodically. Continued use of the Platform following notification of any change constitutes acceptance of the revised Policy.

For all privacy-related queries, data subject rights requests, consent withdrawals or complaints, please contact the dk555 Data Protection team using the information below. Contact details are presented as plain text in accordance with Platform policy — no clickable links are provided.