tot55 Privacy Policy

The data controller responsible for your personal information is the operator of the tot55 platform, an internationally licensed online gaming operator operating the website accessible at tot55.bid ("tot55", "we", "us", "our").

As data controller, tot55 determines the purposes and means of processing personal data collected through the Platform. tot55 processes personal data in accordance with applicable data protection and privacy law, as well as the requirements of our international gaming license.

Questions about this Privacy Policy or about how tot55 handles your personal data should be directed to our support team at the contact details provided in Section 14 of this Policy.

tot55 collects the following categories of personal data from players who register, deposit, or use the Platform:

tot55 does not collect or process special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or political opinions) except where strictly required by applicable law in connection with responsible gaming or anti-money laundering obligations.

tot55 collects personal data through the following methods:

• Direct Provision: Information you provide when registering your Account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your Account settings.
• Automated Collection: Technical and gaming activity data collected automatically as you use the Platform — including IP addresses, device identifiers, session data, and gameplay logs — using server logs, analytics tools, and cookies.
• Payment Providers: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card processors when you make deposits or withdrawals. tot55 does not store full card numbers; payment tokenisation is handled by the payment provider.
• Identity Verification Providers: Confirmation of CNIC validity and age verification results from third-party KYC service providers used by tot55 as part of the mandatory verification process.
• Fraud Prevention Services: Risk signals and fraud indicators from third-party fraud detection services used to protect the Platform and its players from fraudulent activity.

tot55 uses personal data for the following specific purposes:

Account Management & Platform Operation

To create, verify, and maintain your tot55 Account; to process deposits and withdrawals in PKR via JazzCash, EasyPaisa, and other approved methods; to make available the sportsbook, live casino, and slot game platform; and to provide Account-related notifications including transactional emails and security alerts.

Identity & Age Verification (KYC)

To verify that you are who you say you are and that you meet the minimum age requirement of 21 years, in compliance with our international gaming license requirements and applicable anti-money laundering regulations. KYC verification is mandatory for all tot55 players prior to withdrawal processing.

Fraud Prevention & Platform Security

To detect, prevent, and investigate fraudulent activity, multi-accounting, bonus abuse, match-fixing, money laundering, and other prohibited conduct. Technical data including IP addresses and device fingerprints is used to identify suspicious patterns and protect the integrity of the Platform.

Legal & Regulatory Compliance

To meet obligations imposed by our international gaming license, applicable anti-money laundering legislation, and any other legal or regulatory requirements applicable to tot55's operations. This includes the retention of transaction records, KYC documentation, and communications logs for the periods mandated by applicable regulation.

Responsible Gaming

To monitor gaming behaviour for indicators of problem gambling; to enforce deposit limits, session controls, and self-exclusion restrictions you have set; and to proactively contact players whose gaming patterns suggest harm, in accordance with tot55's responsible gaming obligations under our license.

Customer Support

To respond to queries, resolve disputes, and provide assistance through our 24/7 English-language support service available to Pakistani players via live chat and email.

Marketing Communications (with Consent)

To send promotional emails and SMS about tot55 bonuses, cricket betting promotions, and casino offers where you have consented to receive such communications. Marketing consent can be withdrawn at any time.

Platform Improvement

To analyse aggregated, anonymised usage data to improve Platform performance, user experience, game selection, and payment processing efficiency.

tot55 processes personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the agreement formed when you create a tot55 Account and accept our Terms and Conditions — including Account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable law, including KYC/AML obligations under our gaming license, record-keeping requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing conducted for tot55's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics — where these interests are not overridden by your privacy rights.
• Consent: Processing of personal data for direct marketing communications, where we rely on your express consent. You may withdraw this consent at any time without affecting any other processing.

tot55 does not sell your personal data to any third party. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card processing networks receive the minimum payment data necessary to process your transactions. These providers process data under their own privacy policies and are independently responsible for compliance with applicable financial regulation.
• Identity Verification (KYC) Providers: Third-party KYC service providers receive CNIC and identity documentation to perform age and identity verification. These providers are contractually bound to use your data solely for verification purposes.
• Game Providers: Game studios including Evolution Gaming, Pragmatic Play, and Play'n GO receive session identifiers and wager data necessary to operate the games they supply to tot55. Game providers do not receive your full identity data.
• Fraud Prevention Services: Risk and fraud detection platforms receive technical data (IP addresses, device identifiers, transaction patterns) to identify and prevent fraudulent activity on the Platform.
• Regulatory Authorities: tot55 may be required to disclose player data to regulatory bodies, licensing authorities, or law enforcement agencies where required by applicable law or by order of a competent court or regulatory authority.
• Professional Advisors: Legal counsel, auditors, and compliance professionals may access personal data on a strictly need-to-know basis under professional confidentiality obligations.

tot55 uses cookies and similar tracking technologies on the Platform to ensure functionality, analyse usage, and improve the player experience. The following types of cookies are used:

• Essential Cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state, security cookies, and cookies that remember your language and Account preferences. These cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the Platform — which pages are visited most often, session duration, and navigation paths. This data helps tot55 improve the Platform experience.
• Functional Cookies: Store preferences such as game filter settings, odds format preferences, and responsible gaming alert configurations between sessions.

Cookies set by tot55 do not contain your password or full financial data. You may adjust cookie preferences through your browser settings, though disabling essential cookies will affect Platform functionality. Most modern browsers (Chrome, Safari, Firefox) allow granular cookie management.

tot55 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and tot55's servers is encrypted using 256-bit SSL/TLS — the same standard used by major international financial institutions.
• Encrypted Data Storage: Personal data at rest is stored in encrypted form on secure servers. Database access is restricted to authorised personnel only, with access logs maintained for audit purposes.
• Password Security: Passwords are never stored in plain text. tot55 stores only cryptographic hashes of passwords, using industry-standard hashing algorithms with salt, so that even internal personnel cannot read your actual password.
• Access Controls: Access to personal data within tot55 is governed by role-based access controls. Only personnel who require access to specific data categories to perform their job functions are granted that access.
• Security Monitoring: tot55's infrastructure is subject to continuous security monitoring, regular vulnerability assessments, and periodic penetration testing by qualified security professionals.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data breach that poses a risk to your rights, tot55 will notify you in accordance with applicable law and without undue delay.

tot55 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply:

After the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

As a player whose personal data is processed by tot55, you have the following rights with respect to your personal data. These rights may be subject to certain legal limitations where tot55 has overriding legitimate interests or legal obligations:

To exercise any of these rights, contact tot55 customer support via live chat from within your Account dashboard, or by email at the address provided in Section 14. We will verify your identity before processing any rights request and will respond within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 30 days with notification.

The tot55 Platform is strictly for individuals aged 21 years and above. tot55 does not knowingly collect personal data from individuals under the age of 21. All Account registrations are subject to age verification using CNIC documentation.

If tot55 discovers that personal data has been collected from a person under 21 years of age, that data will be deleted immediately, the Account will be closed, and any real money balance will be returned through applicable responsible gaming processes.

If you are a parent or legal guardian and believe that a minor in your household has registered a tot55 Account or submitted personal data to the Platform, please contact tot55 support immediately so that we can investigate and take appropriate remedial action without delay.

As an internationally licensed online gaming operator, tot55 may transfer personal data to third-party service providers located outside Pakistan — including game providers, KYC providers, and fraud detection services operating in other countries.

Where personal data is transferred internationally, tot55 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy. These safeguards may include contractual clauses, standard data protection agreements, or transfers to providers operating in jurisdictions with adequate data protection frameworks.

All international transfers of data by tot55 are conducted strictly on a need-to-fulfil-service basis and only to processors who are contractually bound to protect the data in accordance with applicable privacy standards.

tot55 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform operations. The effective date at the top of this document will always reflect when the most recent version came into force.

Where changes are material — meaning they meaningfully affect how your personal data is processed or your rights in relation to it — tot55 will notify registered players via email to the address on their Account, or via an in-Platform notification displayed at login. For minor or administrative changes, updating this page with the revised effective date constitutes sufficient notice.

Your continued use of the Platform after the publication of a revised Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not agree with any changes, you should cease using the Platform and contact support to close your Account.

The current version of this Privacy Policy is always available at tot55.bid/privacy-policy.

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact tot55 through the following channels:

• Live Chat: Available 24/7 from within your logged-in tot55 Account — the recommended and fastest channel for all data rights requests and privacy concerns
• Email: [email protected] — displayed as plain text, not a clickable link
• Platform URL: tot55.bid/privacy-policy — always shows the current version of this Policy

When submitting a data rights request, please include sufficient information to allow tot55 to verify your identity before processing the request. This protects both you and other players from unauthorised data access.

tot55 endeavours to respond to all privacy-related queries within two (2) business days, and to all formal data rights requests within thirty (30) calendar days of receipt of a valid, verified request.