Privacy Policy

tot55 is an internationally licensed online gaming and sports betting platform operating at tot55.biz. tot55 is the data controller responsible for the personal data of all registered players who access its services. When we refer to "tot55", "we", "us", or "our" in this Privacy Policy, we mean the tot55 platform and its operating entity.

This Privacy Policy applies to all personal data collected through your use of the tot55 website, mobile browser experience, and any associated customer support channels — including live chat and email communications sent to [email protected]. It does not apply to third-party websites or services that may be linked to or from the tot55 platform.

tot55 collects several categories of personal data depending on your level of interaction with the platform. The categories are set out in the table below:

tot55 does not collect sensitive special-category personal data (such as racial or ethnic origin, political opinions, or health data) unless specifically required for responsible gaming intervention purposes, in which case your explicit consent will be sought.

tot55 collects personal data through the following means:

• Direct submission: Data you provide when registering your account, completing KYC verification, making deposits or withdrawals, participating in promotions, or contacting our support team.
• Automated technical collection: Data collected automatically when you visit tot55.biz, including IP address, device identifiers, browser type, and session activity, via server logs and first-party cookies.
• Payment processors: Transaction reference data received from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank upon completion of a deposit or withdrawal. tot55 receives only transaction references — not full payment credentials.
• KYC and identity verification partners: Confirmation data from licensed identity verification service providers used to validate CNIC or passport details during the KYC process.
• Fraud prevention tools: Risk scoring and device fingerprint data from third-party fraud detection services that help tot55 identify suspicious account activity.

tot55 uses the personal data it collects for the following purposes:

• Account creation and management: To register your tot55 account, verify your identity and age (21+), and maintain your account in good standing.
• Processing transactions: To process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to handle withdrawal requests to your registered payment method.
• Platform operation: To deliver casino games, sports betting markets (including PSL cricket and international cricket events), slot games, and fishing games to your device.
• Customer support: To respond to your queries, complaints, and feedback via live chat and email in English and Urdu.
• Responsible gaming: To monitor gaming patterns and, where necessary, apply responsible gaming tools such as deposit limits, session reminders, or self-exclusion in accordance with our Responsible Gaming policy.
• Legal compliance and fraud prevention: To comply with anti-money laundering (AML) obligations, verify source of funds for large transactions, and detect and prevent fraudulent or abusive activity on the platform.
• Marketing communications: To send you promotional offers, PSL season bonuses, and platform updates via SMS or push notification — only where you have given explicit consent. You may opt out at any time via your account settings or by contacting support.
• Platform improvement: To analyse usage patterns and improve the tot55 experience for Pakistani mobile users, including page load performance, navigation, and game availability.

tot55 processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to fulfil tot55's obligations to you as a registered player — including account management, transaction processing, and game delivery — is carried out on the basis that it is necessary to perform the contract between you and tot55.
• Legal obligation: Processing carried out to comply with applicable law, including anti-money laundering regulations, gaming licence conditions, and age verification requirements, is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics is carried out on the basis of tot55's legitimate business interests, provided these interests are not overridden by your fundamental privacy rights.
• Consent: Processing for direct marketing communications is carried out only where you have given clear, specific, and freely withdrawable consent at the time of registration or subsequently through your account settings.

tot55 does not sell your personal data. We may share your data with the following categories of third parties strictly for the purposes described in this Privacy Policy:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive only the minimum transaction data necessary to process your deposit or withdrawal.
• Identity verification providers: Licensed KYC service providers who verify CNIC, passport, and address documentation to confirm your identity and age eligibility (21+).
• Game content providers: Third-party game studios whose games are hosted on the tot55 platform may receive anonymised session data necessary for game delivery and fairness auditing. These providers are contractually prohibited from using this data for any other purpose.
• Fraud prevention and security services: Specialist fraud detection and cybersecurity vendors who help tot55 identify suspicious activity, protect player accounts, and maintain platform integrity.
• Regulatory and law enforcement authorities: Where tot55 is required to disclose data by applicable law, court order, or the instruction of a competent regulatory authority, we will do so. We will notify you of any such disclosure where legally permitted to do so.
• Professional advisers: Lawyers, auditors, and accountants engaged by tot55, who are bound by strict professional confidentiality obligations.

tot55.biz uses cookies and similar tracking technologies to provide a functional, personalised, and secure gaming experience. The types of cookies we use are as follows:

You can manage cookie preferences through your browser settings. Please note that disabling functional or analytics cookies may affect your experience on the tot55 platform. Strictly necessary and fraud prevention cookies cannot be disabled without preventing access to core platform features.

tot55 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and gaming licence conditions. The general retention periods are as follows:

• Active account data: Retained for the full duration of your tot55 account plus five (5) years following account closure, to comply with AML record-keeping obligations and to resolve any post-closure disputes.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification, in line with standard gaming licence compliance requirements.
• Transaction records: Retained for five (5) years from the date of each transaction in PKR, including JazzCash, EasyPaisa, and bank transfer records.
• Gaming history: Retained for five (5) years from each session date to support dispute resolution, responsible gaming monitoring, and regulatory audits.
• Marketing consent records: Retained for three (3) years from the date consent was given or withdrawn, whichever is later.
• Support communications: Live chat transcripts and support emails are retained for two (2) years from the date of the interaction.
• Technical and usage data: Anonymised after ninety (90) days and retained in aggregate form for up to two (2) years for analytics purposes.

Upon expiry of the applicable retention period, tot55 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

As a tot55 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request":

• Right of access: You may request a copy of all personal data tot55 holds about you. We will provide this within 14 calendar days of receiving a valid request.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it promptly. For account details, you may also update information directly within your tot55 account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing was unlawful. Please note that erasure requests cannot override our legal obligation to retain certain data (e.g., AML records) for the retention periods specified in Section 8.
• Right to restrict processing: In certain circumstances, you may request that we restrict the processing of your personal data — for example, while the accuracy of data is being verified following a rectification request.
• Right to data portability: You may request that tot55 provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to direct marketing, tot55 will cease that processing immediately.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

tot55 is strictly an adults-only platform. We do not knowingly collect, process, or store personal data belonging to any individual under the age of 21. The minimum age to register and use tot55 is 21 years old, and this is enforced through mandatory age declaration at registration and document-based KYC verification.

If tot55 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a false declaration at registration or any other means — we will immediately close the relevant account, void all associated bets and balances, and securely delete the data as soon as our legal record-keeping obligations permit.

tot55 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and tot55 servers.
• Encrypted storage of sensitive personal data fields, including identity document references and payment account identifiers, at rest in our databases.
• Access controls: tot55 staff access to player personal data is restricted on a strict need-to-know basis. All internal access is logged and audited.
• Two-factor authentication (2FA) available for player accounts to provide an additional layer of protection against unauthorised login attempts.
• Automated fraud detection systems that monitor for suspicious login patterns, unusual transaction volumes, and account takeover signals in real time.
• Regular security audits and penetration testing of the tot55 platform infrastructure conducted by independent cybersecurity specialists.

While tot55 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, tot55 will notify affected players without undue delay via registered mobile number or email, and will report the breach to the relevant regulatory authority as required by applicable law.

As an internationally licensed gaming operator, tot55 may process or store certain categories of personal data on servers or through service providers located outside Pakistan. Where such international transfers occur, tot55 ensures that adequate safeguards are in place to protect your data to the same standard as described in this Privacy Policy.

Safeguards for international transfers include:

• Contractual data processing agreements with all third-party processors that incorporate data protection standards equivalent to those required under internationally recognised privacy frameworks.
• Transfer only to jurisdictions recognised as providing an adequate level of data protection, or to processors in other jurisdictions who have committed to equivalent contractual protections.
• Minimisation of the categories of data transferred internationally — only data strictly necessary for the relevant processing purpose is transferred outside Pakistan.

If you would like further information about the specific safeguards in place for any particular international transfer, please contact us at [email protected].

tot55 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The "Last Updated" date at the top of this page will be revised whenever a change is made.

For material changes — those that significantly affect your rights or the way we process your personal data — tot55 will notify you via your registered Pakistani mobile number or platform notification at least 14 days before the change takes effect. Non-material changes, such as typographical corrections or clarifications that do not affect the substance of our data practices, may be made without advance notice.

Your continued use of the tot55 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change, you must cease using the platform and may request closure of your account in accordance with Section 9 above.

If you have any questions, concerns, or requests relating to this Privacy Policy or to how tot55 handles your personal data, please reach out to our dedicated support team:

• Privacy & Data Requests: [email protected] — use subject line "Privacy Request" for data access, rectification, or erasure requests.
• General Support: Available 24/7 via the Live Chat feature on your tot55 account dashboard — our fastest response channel, available in English and Urdu.
• Formal Privacy Complaints: Write to [email protected] with subject line "Privacy Complaint." tot55 commits to a full written response within 14 calendar days. If your complaint remains unresolved, you may escalate to the relevant data protection authority in your jurisdiction.