At yes55, your personal data is treated with the same level of care and security as your funds. This Privacy Policy explains exactly what information we collect when you use the yes55 platform, how we use it, who we share it with, how long we keep it, and what rights you have over it. Please read it carefully alongside our Terms & Conditions.
These principles guide every decision yes55 makes about personal data — from a new registration in Karachi to a withdrawal request in Lahore.
yes55 collects personal data only for specific, clearly stated purposes — account management, payment processing, identity verification, fraud prevention, and regulatory compliance. We do not collect data speculatively or for undefined future uses.
We collect the minimum personal data necessary to operate the yes55 platform. If a piece of data is not necessary for a defined purpose, we do not request it. Your CNIC is needed for KYC; your home address is not unless you specifically request physical correspondence.
All yes55 systems — from the login portal to the payment processing pipeline — are built with security as the foundation, not an afterthought. 256-bit SSL encryption, access controls, and regular third-party security audits are standard, not optional extras.
yes55 does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or any commercial entity for marketing purposes. Your data serves your yes55 experience — it is not a product we monetise independently.
You have meaningful rights over your personal data — to access it, correct it, request its deletion (where permitted by law), and object to certain types of processing. yes55 honours these rights and provides accessible mechanisms to exercise them.
yes55 does not keep personal data indefinitely. Retention periods are defined for each category of data based on legal obligations and operational necessity. Once a retention period expires, data is securely deleted or anonymised.
The yes55 platform, accessible at yes55.biz, is operated by yes55 (referred to in this Policy as "yes55", "we", "us", or "the Company"). yes55 is the data controller in respect of the personal data of all registered players and website visitors.
yes55 operates under an international online gaming licence and is subject to the data protection and player privacy obligations imposed by that licensing framework. Where applicable law imposes additional data protection requirements, yes55 complies with the highest applicable standard.
If you have any questions about how yes55 handles your personal data, or wish to exercise any of your rights set out in this Policy, please contact our Data Protection team using the details provided in Section 15.
yes55 collects the following categories of personal data depending on how you interact with the Platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, selfie photograph | At registration and KYC verification |
| Contact Data | Mobile number (JazzCash / EasyPaisa registered number), email address | At registration |
| Financial Data | Deposit amounts, withdrawal amounts, payment method identifiers (wallet IDs, bank account partial details), transaction references | During deposit and withdrawal activity |
| Gaming Data | Bets placed, games played, game outcomes, bet amounts, session durations, bonus usage, active promotion history | Continuously during Platform use |
| Technical Data | IP address, device type, operating system, browser type and version, session identifiers, cookies | Automatically on each Platform visit |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | When you contact yes55 support |
| Responsible Gaming Data | Deposit limits set, loss limits set, self-exclusion requests, cooling-off period activations | When you use responsible gaming tools |
yes55 does not collect or process special category personal data (such as health information, racial or ethnic origin, political opinions, or religious beliefs) unless specifically required by applicable law or with your explicit, documented consent.
yes55 collects personal data through the following channels:
yes55 uses your personal data for the following purposes:
yes55 processes your personal data on the following legal bases:
yes55 does not sell your personal data. We share personal data only with the following categories of third parties, only to the extent necessary for the defined purpose:
All third parties with whom yes55 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond that which yes55 has authorised.
yes55 operates internationally and some of its third-party service providers — including gaming software licensors and fraud prevention systems — may process personal data in jurisdictions outside Pakistan. Where such transfers occur, yes55 ensures they are conducted under appropriate safeguards, which may include:
You may request information about the specific safeguards in place for any international transfer of your personal data by contacting yes55 at the address in Section 15.
yes55 uses cookies and similar technologies on yes55.biz for the following purposes:
yes55 does not use third-party advertising cookies or retargeting pixels. You will not see yes55 advertisements following you across unrelated websites as a result of cookies placed on yes55.biz.
You may control cookie settings through your browser preferences. Note that disabling strictly necessary cookies will impair your ability to log in to yes55 and use the Platform.
yes55 retains personal data for the periods specified below, after which data is securely deleted or irreversibly anonymised:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC Data | 5 years after account closure | Anti-money-laundering legal obligation |
| Financial Transaction Records | 5 years after transaction date | Gaming licence and AML compliance |
| Gaming History (bets, outcomes) | 3 years after last gaming activity | Dispute resolution, regulatory audit |
| Communications (support, email) | 2 years after conversation close | Legitimate interests (dispute resolution) |
| Technical / Log Data | 12 months from collection | Security and fraud detection |
| Marketing Consent Records | Until consent withdrawn + 1 year | Proof of consent basis |
Where a legal obligation, ongoing investigation, or active dispute requires retention beyond these periods, yes55 will retain only the data necessary for that specific purpose until it is resolved.
Subject to applicable law and the legitimate interests and legal obligations of yes55, you have the following rights in respect of your personal data:
Request a copy of the personal data yes55 holds about you and information about how it is processed.
Request correction of inaccurate personal data yes55 holds about you, or completion of incomplete data.
Request deletion of your personal data where it is no longer necessary, or where you withdraw consent, subject to our legal retention obligations.
Request that yes55 limits how it processes your data in certain circumstances, such as during the resolution of an accuracy dispute.
Request your personal data in a structured, machine-readable format where processing is based on consent or contract performance and carried out by automated means.
Object to processing of your personal data for direct marketing purposes (effective immediately) or for other purposes based on legitimate interests, subject to yes55's overriding grounds.
To exercise any of the above rights, please contact the yes55 Data Protection team using the details in Section 15. We will respond to all verifiable requests within thirty (30) calendar days. Where a request is complex or numerous, we may extend this period by a further thirty days, of which we will notify you. We may require you to verify your identity before processing any rights request.
The yes55 Platform is strictly restricted to individuals aged 21 years and above. yes55 does not knowingly collect, process, or retain personal data belonging to any person under the age of 21.
Age verification is a mandatory step in the yes55 KYC process. Where yes55 has reasonable grounds to believe that personal data has been collected from a person under 21 — whether through misrepresentation at registration or any other means — yes55 will immediately suspend the account, void all gaming activity associated with it, and delete the personal data of the underage individual from our active systems, subject only to any data retention obligations under applicable law relating to the investigation of the incident.
If you are a parent or guardian and believe your minor child has created a yes55 account, please contact us immediately at [email protected] so we can investigate and take immediate corrective action.
yes55 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration:
Despite these measures, no internet-based system can guarantee absolute security. yes55 strongly recommends that all players use strong, unique passwords and enable 2FA on their yes55 account. If you suspect a security incident affecting your account, contact yes55 support immediately through live chat.
The yes55 Platform may contain references to third-party services, including payment providers and game studios. yes55's Privacy Policy does not extend to any third-party website, application, or service accessed via a link or integration from yes55.biz.
yes55 is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service you use in connection with your yes55 account, particularly your mobile payment provider (JazzCash or EasyPaisa) and any banking institution (HBL, UBL, Meezan Bank).
yes55 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. All amendments will be published on this page with an updated "Last Updated" date.
Where an amendment materially changes how yes55 processes your personal data in a manner that affects your rights, we will provide prominent notice through the yes55 Platform and, where appropriate, by email to your registered address prior to the change taking effect.
Your continued use of the yes55 Platform following the publication of an amended Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any amendment, please contact yes55 support to discuss your options, which may include account closure under the procedures set out in our Terms & Conditions.
For all privacy-related enquiries, data rights requests, or complaints relating to how yes55 handles your personal data, please contact the yes55 Data Protection team:
yes55 will acknowledge all privacy-related requests within 5 business days and will provide a substantive response within 30 calendar days. Where a complaint relates to how yes55 has processed a data rights request, and you are not satisfied with yes55's response, you may refer the matter to the supervisory authority or complaints body associated with yes55's gaming licence jurisdiction.
When contacting yes55 regarding a data rights request, please include your registered mobile number to enable identity verification. We cannot process rights requests for unverified individuals.
Our support team handles all data rights requests 24 hours a day. If you would like to access, correct, or delete your yes55 account data, log in and contact us via live chat — or review our FAQ for quick answers on common privacy questions.
21+ only. See also: Terms & Conditions & Responsible Gaming.