den55 Privacy Policy — How We Protect Your Personal Data

den55 ("we", "our", "us", or "the Platform") is committed to safeguarding the privacy and personal data of every individual who accesses or uses the den55 online gaming platform at https://den55.net. This Privacy Policy is a legally binding document that describes our data processing practices in full transparency.

By registering an account on den55, making a deposit, placing a wager, or simply browsing the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, you should immediately discontinue your use of the den55 Platform.

This policy should be read alongside den55's Terms and Conditions, which govern the contractual relationship between den55 and its players. Where a conflict exists between this Privacy Policy and the Terms and Conditions on a privacy-related matter, this Privacy Policy shall take precedence.

den55 collects personal data from you in several ways — directly when you provide it to us, automatically when you use the Platform, and occasionally from third-party sources as part of our legal compliance obligations. The categories of personal data we collect include:

den55 uses your personal data only for legitimate, specified purposes that are directly connected to providing and improving the den55 gaming service. We do not use your data for any purpose that has not been disclosed in this policy. The primary purposes for which den55 processes personal data are:

• Account registration and management: To create and maintain your den55 player account, verify your identity, and ensure that only one account is held per player.
• Age and identity verification: To confirm that you are at least 21 years of age before granting access to real-money gaming, and to fulfil our KYC obligations under applicable gaming regulations.
• Processing deposits and withdrawals: To facilitate financial transactions via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 — and to maintain an accurate record of your financial activity on the Platform.
• Providing customer support: To respond to your queries, complaints, and requests submitted via live chat or email, and to keep a record of support interactions for quality assurance.
• Responsible gaming compliance: To monitor your gaming behaviour and identify indicators of problematic gambling patterns, in order to proactively offer responsible gaming tools such as deposit limits, session limits, and self-exclusion.
• Anti-money laundering (AML) and fraud prevention: To detect and prevent fraudulent account activity, bonus abuse, multi-accounting, and money laundering in compliance with applicable AML standards.
• Marketing communications: With your explicit consent, to send you promotional offers, bonus notifications, and platform updates via email or SMS. You may opt out of marketing communications at any time.
• Platform improvement: To analyse usage patterns and technical data in aggregate, anonymised form to improve the functionality, performance, and user experience of the den55 Platform.
• Legal and regulatory compliance: To comply with applicable laws, respond to lawful requests from governmental or regulatory authorities, and enforce den55's Terms and Conditions.

den55 processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing your identity data, contact data, and financial data is necessary for den55 to perform its contractual obligations to you as a player — including account registration, payment processing, and customer support.
• Legal obligation: Processing your KYC data, transaction records, and AML-related data is required for den55 to comply with its legal obligations under applicable gaming licensing standards and anti-money-laundering regulations.
• Legitimate interests: Processing your gaming activity data and technical data for fraud prevention, responsible gaming monitoring, and platform improvement is carried out on the basis of den55's legitimate business interests, provided that these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing your data for marketing communications is carried out only on the basis of your explicit, freely given consent. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

den55 uses cookies and similar tracking technologies to enable essential Platform functionality, improve user experience, and collect usage analytics. The following categories of cookies are used on the den55 Platform:

• Strictly necessary cookies: These cookies are essential for the den55 Platform to function. They enable core features such as session management, login state, and security controls. These cookies cannot be disabled without disrupting Platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming tool configurations — so that you do not need to re-enter them on each visit.
• Analytics cookies: These cookies collect anonymised, aggregate data about how players use the den55 Platform, which pages are visited most frequently, and where users encounter difficulties. This data is used solely to improve Platform performance and user experience.
• Security cookies: These cookies help den55 detect and prevent fraudulent activity, bot access, and unauthorised login attempts by establishing a unique, session-bound device fingerprint.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the den55 Platform. den55 does not use third-party advertising cookies or cross-site tracking cookies.

den55 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be shared with third parties only in the following limited and controlled circumstances:

• Payment service providers: To process your deposits and withdrawals, den55 shares the minimum necessary financial data with authorised payment processors, including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and Raast. These providers are contractually bound to process your data only for the specific purpose of completing your transaction.
• Identity verification providers: To fulfil KYC obligations, den55 may share your identity documents with authorised third-party identity verification services. These providers are bound by strict confidentiality obligations and data protection standards.
• Game software providers: Third-party game studios that supply games on the den55 platform may receive technical session data (such as bet amounts and game outcomes) for the purposes of game operation and dispute resolution. No personally identifiable contact or financial data is shared with game providers.
• Regulatory and law enforcement authorities: den55 may disclose personal data to governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or a lawful regulatory request. den55 will only disclose the minimum data required to comply with such requests.
• Service providers and contractors: den55 may engage trusted third-party service providers — such as cloud hosting providers, customer support software vendors, and analytics platforms — who process data on den55's behalf under binding data processing agreements. These providers have no independent right to use your data beyond the services they provide to den55.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of den55's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights under this Privacy Policy will continue to apply.

den55 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to different categories of personal data:

• Account and identity data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure. This retention is required by applicable AML and gaming licensing standards.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of each transaction, in compliance with financial record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the last transaction to which the KYC relates, whichever is later.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of the recorded activity, for the purposes of dispute resolution and responsible gaming monitoring.
• Customer support communications: Retained for three (3) years from the date of the last communication, for quality assurance and complaint resolution purposes.
• Marketing consent records: Retained for as long as you maintain an active den55 account, plus a reasonable period thereafter to demonstrate compliance with consent obligations.
• Technical and usage data: Typically retained in anonymised, aggregated form indefinitely for analytics purposes. Raw technical logs are retained for no more than twelve (12) months.

When personal data is no longer required, it is securely deleted or anonymised in accordance with den55's internal data retention and disposal procedures.

den55 implements technical and organisational security measures that are proportionate to the nature and sensitivity of the personal data we process. These measures include, but are not limited to:

• Encryption in transit: All data transmitted between your device and the den55 Platform is protected using TLS 1.2 or higher encryption. This ensures that your login credentials, financial data, and personal information cannot be intercepted by unauthorised parties during transmission.
• Encryption at rest: Sensitive personal data stored on den55's servers — including identity documents, financial records, and KYC data — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within den55's systems is strictly limited to authorised personnel who require access to perform their job functions. Role-based access controls are enforced and all access is logged and audited.
• Password hashing: Player account passwords are never stored in plain text. den55 uses industry-standard cryptographic hashing algorithms to store password data securely.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their den55 accounts as an additional layer of protection against unauthorised access.
• Regular security audits: den55 conducts regular internal security reviews and engages third-party security professionals to perform penetration testing and vulnerability assessments on the Platform.
• Incident response: den55 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to players' rights and freedoms, affected players will be notified within the timeframe required by applicable law.

As a den55 player, you have the following rights with respect to your personal data. You may exercise any of these rights at any time by contacting den55 at [email protected]:

• Right of access: You have the right to request a copy of all personal data that den55 holds about you. den55 will provide this information within 30 days of receiving a verified request.
• Right to rectification: If any personal data that den55 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure ("right to be forgotten"): In certain circumstances, you have the right to request that den55 delete your personal data. This right is subject to den55's legal obligations to retain certain data under applicable gaming and financial regulations — data required by law cannot be erased early on request.
• Right to restrict processing: You have the right to request that den55 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and den55 is considering your objection.
• Right to data portability: Where processing is based on your consent or on a contractual relationship, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another service provider.
• Right to object: You have the right to object to processing carried out on the basis of den55's legitimate interests, including profiling. You may also withdraw consent for marketing communications at any time.
• Right not to be subject to automated decision-making: den55 does not make decisions about individual players that produce significant legal or similarly significant effects based solely on automated processing, without human review.

To exercise any of the above rights, please contact den55 support at [email protected], clearly stating your username, the right you wish to exercise, and relevant details to enable den55 to process your request promptly. den55 may need to verify your identity before acting on any data rights request.

den55 is strictly an adult platform. Our services are available only to individuals who are aged 21 years or older. den55 does not knowingly collect personal data from individuals under the age of 21, and the Platform is not directed at, designed for, or intended to be used by minors.

If den55 discovers that it has inadvertently collected personal data from an individual under the age of 21 — whether through misrepresentation during registration or any other means — the following actions will be taken immediately:

• The relevant account will be suspended and blocked from all gaming activity.
• All personal data associated with the underage account will be securely deleted from den55's systems, to the extent permitted by legal retention obligations.
• Any real-money balance deposited to the account will be returned to the original payment method after appropriate verification.

If you are a parent or guardian and you believe that a minor in your care has created a den55 account, please contact us immediately at [email protected] so that we can take prompt action to close the account and remove the associated data.

den55 operates as an international online gaming platform. As a result, your personal data may be transferred to, stored in, or processed in countries other than Pakistan. These countries may have data protection laws that differ from those applicable in Pakistan.

Where such international transfers occur, den55 ensures that appropriate safeguards are in place to protect your personal data, including:

• Entering into data processing agreements with third-party processors that incorporate standard contractual clauses or equivalent data protection obligations.
• Only transferring data to countries or organisations that provide an adequate level of data protection as determined by applicable standards.
• Implementing additional technical and organisational security measures where necessary to compensate for lower levels of legal protection in certain jurisdictions.

By using the den55 Platform, you acknowledge and consent to the international transfer of your personal data as described in this section, subject to the safeguards described above.

den55 reserves the right to update or revise this Privacy Policy at any time. When material changes are made — such as changes to the categories of data collected, new purposes of processing, or new third-party sharing arrangements — the following process applies:

• Players will be notified of material changes via the email address registered to their account and/or via a prominent notice on the den55 Platform.
• The updated Privacy Policy will display the revised "Last Updated" date at the top of the document. The revised policy will take effect on the date specified in the notification, which will be no less than 7 days from the date of notification.
• Continued use of the den55 Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.
• Players who do not agree with a revised Privacy Policy have the right to close their account and request deletion of their data prior to the effective date, subject to den55's legal data retention obligations.

For non-material changes — such as corrections of typographical errors or minor clarifications that do not affect your rights — den55 may update the Privacy Policy without prior notice. The "Last Updated" date will always reflect when the document was most recently revised.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way den55 handles your personal data, please contact us through any of the following channels:

• Email: [email protected] — our data privacy team will respond within 2 business days for privacy-related enquiries.
• Live Chat: Available 24 hours a day, 7 days a week, directly from the den55 Platform. Live chat is staffed by agents familiar with Pakistani players' needs and can assist with account-level data queries.

When contacting den55 regarding a privacy matter, please include your registered username and a clear description of your request or concern so that we can process it efficiently. For data rights requests, den55 may need to verify your identity before taking action.