Privacy Policy
mh5555 Platform — How We Handle Your Data

1. Introduction

This Privacy Policy (the "Policy") is issued by mh5555 (the "Operator", "we", "us" or "our"), the operator of the online betting and casino platform accessible at mh5555.cam. This Policy sets out how mh5555 collects, uses, stores, shares and protects personal data relating to individuals who access, register on or otherwise interact with the Platform (collectively, "Users", "you" or "your").

mh5555 is an English-language platform designed primarily for users in Pakistan, with interfaces and content suited to users across cities including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. This Policy applies to all such users regardless of location and governs all personal data processing activities carried out by mh5555 in connection with the Platform.

This Policy should be read alongside the mh5555 Terms & Conditions, which are accessible at mh5555.cam/terms-conditions. In the event of any conflict between this Policy and the Terms & Conditions on matters relating specifically to personal data, this Policy shall prevail.

mh5555 is not regulated by the Government of Pakistan, the PTA, the State Bank of Pakistan, or any Pakistani provincial authority. Where applicable, data processing activities are governed by the laws of the jurisdiction in which the Operator holds its gaming licence, and by any mandatory data protection obligations recognised by that jurisdiction.

2. Definitions

In this Policy, the following terms have the meanings given below:

• "Account" means the registered user account created by a User on the mh5555 Platform.
• "Controller" means the entity that determines the purposes and means of processing personal data — in this context, mh5555.
• "Data Subject" means the natural person to whom personal data relates — in this context, the registered User.
• "KYC" means Know Your Customer identity and age verification procedures.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, contact details, identity documents, financial information and device identifiers.
• "Platform" refers to the mh5555 website at mh5555.cam and all associated digital services.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure and deletion.
• "Processor" means a third party that processes personal data on behalf of the Controller pursuant to a data processing agreement.
• "Special Category Data" means sensitive personal data such as health, biometric or financial vulnerability information, the processing of which is subject to heightened protections.

3. Data We Collect

3.1 Registration Data

When you register an Account on mh5555, we collect the following personal data:

• Full legal name
• Date of birth (to verify minimum age eligibility)
• Residential address, including city (e.g., Karachi, Lahore, Islamabad)
• Email address
• Mobile phone number
• Username and encrypted password credentials
• Preferred currency (PKR displayed by default)

3.2 Identity Verification (KYC) Data

As part of mandatory KYC and Anti-Money Laundering (AML) verification, we may collect copies of government-issued identification documents — typically a valid CNIC or passport — proof of residential address, and selfie or liveness-check images. Full details are set out in Section 13 of this Policy.

3.3 Financial & Transaction Data

We collect transaction data relating to deposits, withdrawals, wagers and bonus activity on your Account. This includes transaction amounts (expressed in PKR or the operative settlement currency), transaction dates and times, payment method references and transaction status. Full details are set out in Section 14.

3.4 Device & Technical Data

We automatically collect certain technical data when you access the Platform, including:

• IP address and approximate geolocation derived from IP
• Browser type and version
• Device type and operating system
• Session duration and page interaction data
• Cookie identifiers (see Section 9)

3.5 Communications Data

When you contact our support team by email or live chat, we retain records of those communications — including the content of messages and your contact details — to resolve your query and for quality assurance purposes.

4. How We Collect Data

mh5555 collects personal data through the following means:

• Directly from you — when you register, complete KYC, make transactions or contact support.
• Automatically — when you access or browse the Platform, via cookies, session logs and analytics tools.
• From identity verification services — where we use a third-party KYC provider to process identity documents, that provider may share verification results and associated data with us.
• From payment processors — transaction confirmation data may be passed to us by payment processors upon completion of deposit or withdrawal events.

We do not purchase personal data from third-party data brokers. We do not collect data from social media profiles without your explicit consent.

5. Purposes & Legal Basis for Processing

The table below sets out the purposes for which mh5555 processes your personal data, together with the legal basis for each processing activity. Where we rely on legitimate interests, those interests are proportionate to your rights and freedoms as a Data Subject.

6. Data Sharing

6.1 Service Providers and Processors

mh5555 engages third-party service providers who process personal data on our behalf as data Processors, pursuant to written data processing agreements. Categories of Processors include identity verification providers, payment processing partners, analytics and platform performance providers, customer support tool providers, and fraud detection services.

These Processors are permitted to process your personal data only in accordance with our documented instructions and for the specific purposes for which they are engaged. We do not permit Processors to use your data for their own purposes.

6.2 Legal Disclosures

mh5555 may disclose personal data to law-enforcement authorities, regulatory bodies or courts where required to do so by applicable law, court order or regulatory direction. Any such disclosure will be limited to the data strictly necessary for the purpose of the disclosure.

6.3 No Sale of Data

mh5555 does not sell, rent or trade your personal data to third parties for their own commercial use. Payment method references (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) used in platform context do not involve the transfer of your personal data to those providers unless you initiate a transaction through the cashier, at which point only the data necessary to process that specific transaction is shared with the relevant payment processor.

7. International Data Transfers

As an internationally operating platform, mh5555 may process or transfer personal data in or to countries outside Pakistan. Where personal data is transferred internationally, we implement appropriate safeguards — such as contractual data transfer agreements with Processors — to ensure that your data receives a level of protection consistent with the principles of this Policy.

Users in Pakistan should be aware that Pakistan's data protection framework is evolving. mh5555 does not claim to be subject to, or compliant with, any specific Pakistani data protection statute — users should assess what obligations, if any, apply to their own use of international digital services under Pakistani law.

8. Data Retention

mh5555 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable regulatory or legal obligations. In practice, this means:

• Account and registration data — retained for the duration of the Account and for a period thereafter as required by the Operator's licensing obligations (which may typically be five to seven years following account closure).
• KYC and AML data — retained for a minimum of five years following the end of the customer relationship, in line with standard anti-money-laundering retention requirements.
• Transaction data — retained for a minimum of five years following each transaction, for financial compliance and dispute resolution purposes.
• Communications data — retained for up to two years following the resolution of each support interaction, for quality assurance purposes, or longer where required for a live dispute or legal matter.
• Analytics and session data — typically retained in anonymised or aggregated form for platform improvement purposes, with identifiable elements deleted after a shorter period.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. mh5555 uses cookies and similar tracking technologies (including session tokens, local storage and analytics pixels) to operate the Platform, maintain your session, remember your preferences and analyse Platform usage.

9.2 Types of Cookies Used

• Strictly Necessary Cookies — required for the Platform to function, including session authentication. These cannot be disabled without affecting your ability to use the Platform.
• Functional Cookies — remember your preferences (such as currency display and language settings) to improve your experience on return visits.
• Analytics Cookies — collect aggregated, non-identifiable data about how users navigate the Platform to help us improve usability and performance.
• Security Cookies — support fraud detection and session integrity controls.

9.3 Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the Platform. mh5555 does not currently use third-party advertising cookies.

10. Security Measures

mh5555 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• HTTPS/TLS encryption for all data in transit between your device and the Platform.
• Encrypted storage of sensitive data, including password credentials and identity documents.
• Role-based access controls limiting internal access to personal data on a need-to-know basis.
• Two-factor authentication options for User accounts.
• Routine security assessments and monitoring of system access logs.
• KYC document uploads processed exclusively through secure HTTPS portal — not via email, unverified chat or third-party file sharing.

11. Your Data Rights

Subject to applicable law and the Operator's regulatory obligations, you hold the following rights in relation to your personal data held by mh5555. To exercise any of these rights, contact us at the details in Section 18.

We will respond to data rights requests within a reasonable period, typically within 30 days. Where a request is complex or numerous, we may extend this period and will notify you accordingly. We reserve the right to verify your identity before fulfilling a data rights request.

12. Children & Minors

The mh5555 Platform is strictly for adults aged 18 or older — or the higher minimum age required by the Operator's licensing jurisdiction. We do not knowingly collect personal data from individuals below the applicable minimum age. If we become aware that personal data has been collected from a minor, we will promptly delete that data and close the associated Account.

Age verification is a mandatory step in the KYC process. Registration alone does not constitute confirmation of age eligibility — age verification must be completed before full withdrawal privileges are granted.

13. KYC & AML Data Processing

Identity verification and anti-money-laundering checks are required by the Operator's licensing conditions. The processing of KYC data — including CNIC/passport images, proof of address documents and selfie/liveness checks — is carried out for the purpose of verifying your identity, confirming your age and fulfilling AML obligations. This processing is lawful under legal obligation and performance of contract.

KYC documents must be submitted exclusively through the mh5555 official secure HTTPS verification portal. We instruct Users never to send identity documents via unverified chat applications, email attachments to unverified addresses, or third-party file-sharing services. mh5555 will never ask for your full CNIC number, password or financial credentials via chat or email.

KYC data is retained for a minimum of five years following account closure, in compliance with standard AML retention obligations. During the retention period, access is restricted to compliance personnel only.

14. Payment Data

mh5555 processes transaction data — including deposit amounts, withdrawal requests, payment method references and transaction timestamps — to manage your Account balance and to satisfy financial compliance and AML reporting obligations. All amounts are displayed in PKR.

mh5555 does not store full card numbers or full banking credentials on its servers. Where card or bank data is used for transactions, it is processed directly by the relevant payment processor under their own security standards. References to familiar Pakistan payment methods — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — reflect payment options that may be available in the cashier; references to these providers do not constitute a claim of data-sharing partnership with them beyond what is strictly necessary to process a user-initiated transaction.

15. Marketing Communications

mh5555 may send you promotional communications — including information about bonuses, new games, PSL season promotions and other offers — where you have provided consent to receive such communications during registration or subsequently.

You may withdraw consent to receive marketing communications at any time by updating your Account notification preferences or by contacting us at [email protected]. Withdrawal of marketing consent does not affect your access to the Platform or your right to use its services.

mh5555 does not share your personal data with third-party advertisers for the purpose of targeting you with third-party marketing.

16. Third-Party Links

The mh5555 Platform may reference third-party game providers or services. This Privacy Policy applies solely to data processed by mh5555 in connection with the Platform. mh5555 accepts no responsibility for the privacy practices of third-party providers whose services are accessed through the Platform. Users are encouraged to review the privacy policies of any third-party services they interact with independently of mh5555.

17. Changes to This Policy

mh5555 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, platform functionality or data processing practices. Material changes will be communicated to registered Users by in-platform notification or email to the registered address, with reasonable notice prior to the changes taking effect.

The current version of this Policy will always be accessible at mh5555.cam/privacy-policy. The "Last Reviewed" date at the top of this page indicates when this version was most recently reviewed. Continued use of the Platform following a material amendment constitutes acceptance of the revised Policy.

18. Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right, or need to report a data security concern, please contact the mh5555 data team using the details below. Do not send sensitive identity documents via email — use only the secure HTTPS verification portal within your Account.