lock55 Privacy Policy

lock55 operates the online gaming platform accessible at lock55.pro and all associated subdomains, mobile web interfaces, and API-connected game environments (collectively, "the Platform"). For the purposes of this Privacy Policy, lock55 is the data controller — the entity that determines how and why your personal data is processed.

The lock55 Platform is designed and operated primarily for players located in Pakistan. All account balances, deposit transactions, and withdrawal settlements at lock55 are denominated in Pakistani Rupees (PKR). If you have questions about how lock55 handles your personal data, or wish to exercise any data rights described in this Policy, you can reach the lock55 data team at the contact address set out in Section 14.

lock55 collects personal data in several categories, depending on your interaction with the Platform:

lock55 uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and securing your lock55 account; verifying your identity at login via OTP; managing your PKR wallet balance; processing deposits and withdrawals via Easypaisa, JazzCash, Raast, HBL, and other approved Pakistan payment methods.
• KYC and anti-money laundering compliance: Verifying your identity and payment methods to prevent fraud, money laundering, and financial crime in line with applicable compliance obligations.
• Game delivery: Connecting your account to certified Game Provider software and live dealer streams; recording wager and outcome data to ensure accurate balance updates and dispute resolution.
• Responsible gaming monitoring: Monitoring gaming activity patterns to identify potential signs of problematic gambling behaviour; enforcing deposit limits, session limits, and self-exclusion restrictions activated by you.
• Customer support: Responding to enquiries, payment disputes, account recovery requests, and complaints submitted through email, WhatsApp, or Telegram.
• Platform security: Detecting and preventing fraud, abuse of bonuses, use of automation tools, multi-accounting, and other prohibited conduct described in the lock55 Terms & Conditions.
• Platform improvement: Analysing aggregated, anonymised data to understand game popularity, payment method preferences, and navigation patterns in order to improve the Platform for Pakistan players.
• Communications: Sending account-related notifications (login alerts, withdrawal confirmations, KYC requests) and, where you have opted in, promotional communications about lock55 offers, VIP tier updates, and leaderboard results.

lock55 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing necessary to deliver the services you have contracted for when registering a lock55 account — account management, game access, PKR transactions, and support.
• Legal obligation: Processing required by applicable legal obligations, including KYC verification, transaction record-keeping, and anti-money laundering compliance.
• Legitimate interests: Processing in lock55's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided these interests are not overridden by your rights and interests.
• Consent: Where you have given explicit consent, such as opting in to promotional communications or to the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5.1 When KYC is Required. lock55 requires Know Your Customer (KYC) verification before processing withdrawal requests above 25,000 PKR, or at any time lock55 has a reasonable basis to verify your identity for fraud prevention or compliance purposes. KYC verification is a standard requirement across all responsible financial and gaming platforms operating in Pakistan.

5.2 Documents Required. Standard KYC at lock55 requires a clear scan or photograph of your Computerised National Identity Card (CNIC) — both front and back — and a selfie photograph taken at the time of submission. Additional documentation (proof of address, source of funds declaration) may be requested for transactions above 500,000 PKR.

5.3 Document Storage. KYC documents are stored in an encrypted document vault with access restricted to authorised lock55 compliance staff. Documents are retained for a minimum of five years from account closure to satisfy financial record-keeping obligations. After the mandatory retention period, KYC documents are securely deleted.

5.4 Third-Party Verification. lock55 may use a certified third-party KYC verification service to assist in the identity verification process. Any such service provider is bound by data processing agreements that restrict their use of your data to the verification purpose only and prohibit onward sharing.

6.1 What Are Cookies. Cookies are small text files placed on your device when you access the lock55 Platform. lock55 uses cookies and similar tracking technologies (local storage, session storage) to maintain your login session, remember your game preferences, detect fraud, and understand how Pakistan players navigate the Platform.

6.2 Essential Cookies. Certain cookies are essential for lock55 to function — they maintain your authenticated session, remember your responsible gaming settings, and prevent duplicate form submissions. These cookies cannot be disabled without preventing Platform use.

6.3 Analytics Cookies. With your consent, lock55 uses analytics cookies to collect anonymised data about how players interact with the Platform — which pages are visited most frequently, how players navigate between the Casino, Jackpot Slots, and Cockfighting sections, and where technical errors occur. This data is used exclusively to improve the lock55 experience for Pakistan players.

6.4 Managing Cookies. You can control non-essential cookies through the lock55 cookie preference centre, accessible from the footer of the Platform. Most mobile and desktop browsers also allow you to block or delete cookies through their settings. Note that disabling essential cookies will impair your ability to log in and use Platform features.

lock55 shares personal data with third parties only in the following limited circumstances:

• Game Providers: lock55 shares your account identifier and session data with certified Game Providers (including Evolution, Pragmatic Play, Ezugi, Microgaming, and NetEnt) to the extent necessary to deliver their games and record your wager and outcome data. Game Providers are prohibited from using this data for any purpose beyond delivering their services to lock55.
• Payment Processors: Transaction data is shared with Pakistan payment providers including Easypaisa, JazzCash, Raast, SadaPay, and HBL to process deposits and withdrawals. The data shared is limited to what the payment provider requires to execute the transaction.
• KYC Verification Services: Where lock55 uses a third-party KYC provider, your identity document data is shared with that provider solely for verification purposes under a binding data processing agreement.
• Legal and Regulatory Authorities: lock55 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, or where necessary to prevent or detect fraud, money laundering, or other criminal activity.
• Business Successors: In the event that lock55's business is transferred, merged, or acquired, your personal data may be transferred to the successor entity, subject to the same privacy commitments set out in this Policy.

8.1 Encryption. All personal data transmitted between your device and the lock55 Platform is encrypted using TLS 1.2 or higher. Personal data stored on lock55 servers is encrypted at rest. Password data is processed using a one-way cryptographic hash — lock55 cannot recover plain-text passwords and will never ask you to provide one via any support channel.

8.2 Access Controls. Access to personal data held by lock55 is restricted on a need-to-know basis. Only lock55 staff whose job function requires access to specific data categories (e.g., the compliance team for KYC documents, the support team for account records) can access that data. All internal data access is logged and audited.

8.3 Infrastructure Security. The lock55 Platform infrastructure is hosted on secured cloud infrastructure with firewall protection, intrusion detection, and regular vulnerability assessments. lock55 conducts periodic security reviews and acts promptly to remediate identified vulnerabilities.

8.4 Incident Response. lock55 maintains an incident response plan for data security breaches. In the event of a breach affecting your personal data, lock55 will notify affected players via their registered email address within 72 hours of becoming aware of the breach, and will describe the data affected, the likely consequences, and the measures taken or proposed to address the breach.

lock55 retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Active Account Data: Retained for the duration of account activity plus a reasonable period after the last login or transaction to allow for account recovery and dispute resolution.
• KYC Documents: Retained for a minimum of five years from the date of account closure or the date of the most recent KYC verification, whichever is later, in line with financial compliance obligations.
• Transaction Records: PKR deposit and withdrawal records, game wager histories, and bonus transaction logs are retained for a minimum of five years for financial compliance and dispute resolution purposes.
• Support Communications: Email, WhatsApp, and Telegram support correspondence is retained for two years from the date of the conversation, or longer where a formal complaint or legal proceeding is outstanding.
• Responsible Gaming Records: Self-exclusion records, deposit limit histories, and session time limit configurations are retained for five years from account closure to enable lock55 to enforce permanent self-exclusion requests and demonstrate regulatory compliance.
• Closed or Suspended Accounts: When a lock55 account is closed or permanently suspended, personal data is retained only to the extent required by the retention periods above, after which it is deleted. Data is not retained beyond mandatory retention periods for any commercial purpose.

As a Pakistan player with a lock55 account, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to the contact address in Section 14, sent from the email address registered to your lock55 account:

• Right of Access: You may request a copy of the personal data lock55 holds about you, the purposes for which it is processed, and the categories of third parties it is shared with. lock55 will respond within 30 days.
• Right to Rectification: Where personal data lock55 holds about you is inaccurate or incomplete, you have the right to request correction. For account information (name, email, phone number), corrections can also be requested directly via account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent on which processing is based. Note that legal retention obligations (KYC records, transaction histories) may prevent full erasure during mandatory retention periods.
• Right to Restriction: You may request that lock55 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is contested, or while an objection to processing is being assessed.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to lock55, including account details and gaming activity records, where technically feasible.
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though lock55 may be able to demonstrate overriding legitimate grounds that permit continued processing.

11.1 Responsible Gaming Data Processing. lock55 processes your gaming activity data — including session duration, wager frequency, deposit patterns, and loss history — for the specific purpose of responsible gaming monitoring. This processing is carried out in your interests as a player and in fulfilment of lock55's commitment to player welfare.

11.2 Intervention Data. Where lock55's responsible gaming systems identify patterns consistent with potentially problematic gambling behaviour, your account may be flagged for a responsible gaming check by the lock55 support team. This flagging is based on automated pattern analysis and does not constitute a judgment about your character or circumstances.

11.3 Self-Exclusion Records. Your self-exclusion status — including the type, start date, and end date of any self-exclusion — is retained for the full five-year period described in Section 9, regardless of whether your account is subsequently closed. This ensures that lock55 can enforce permanent self-exclusions and demonstrate responsible gaming compliance.

11.4 18+ Verification Data. Date of birth and identity documents submitted for age verification purposes are retained in line with the KYC retention periods in Section 9. Where an account is found to belong to a person under 18, all associated data is handled in accordance with Section 12 of this Policy.

lock55 is strictly an adult platform. The Platform is not directed at, and does not knowingly collect personal data from, persons under the age of 18. Age verification is required as part of the registration and KYC process.

If lock55 becomes aware that personal data has been collected from a person under 18 — whether through a failed or circumvented age verification process — the following actions will be taken immediately: the account will be closed; all balances will be forfeited; all PKR transactions will be reversed to the extent technically possible; and all personal data associated with the account will be deleted, except where retention is required to report the incident to relevant authorities.

13.1 Right to Amend. lock55 reserves the right to amend this Privacy Policy at any time to reflect changes in data processing practices, legal obligations, or Platform features. Material amendments will be communicated to registered Pakistan players via the email address on file at least 7 days before the amended Policy takes effect.

13.2 Continued Use. Continued use of the lock55 Platform after the effective date of any amended Privacy Policy constitutes acceptance of the updated Policy. The current effective date is displayed in the hero section at the top of this page and is updated with each revision.

13.3 Previous Versions. Prior versions of the lock55 Privacy Policy are archived and available on request from lock55 support. If you have a question about how your data was handled under a previous version of this Policy, you can submit that question to the contact address in Section 14.

For all privacy-related enquiries, data rights requests, or concerns about how lock55 handles your personal data, use the following contact details:

• Email (Primary): [email protected] — use subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing
• Response Time: Acknowledgement within 48 hours; full response within 30 calendar days for data rights requests; within 5 business days for general privacy enquiries
• Language: All privacy communications with lock55 are handled in English by a trained member of the lock55 compliance team
• Verification: For data rights requests, please send from the email address registered to your lock55 account to allow identity verification without requiring additional documentation

lock55's Terms & Conditions, which should be read alongside this Privacy Policy, are available at lock55.pro/terms-and-conditions. For responsible gaming support, including self-exclusion and deposit limit assistance, see the Responsible Gaming section or contact lock55 support directly.