555dd Privacy Policy — How We Collect, Use, and Protect Your Data

This Privacy Policy applies to all personal data collected, processed, and stored by 555dd in connection with the operation of its online betting and gaming platform at https://555dd.io. It covers data collected through the website, mobile web interface, customer support channels, and any related services provided under the 555dd brand.

This policy applies to all registered players, prospective players who browse the Platform without registering, and individuals who contact 555dd through its support channels. It does not apply to the privacy practices of third-party game studios, payment processors, or external websites that may be referenced from the Platform — those third parties operate under their own privacy policies, and 555dd encourages you to review them independently.

555dd is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles. Our platform is designed to serve players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar, and this policy reflects the expectations of that audience.

555dd collects personal data through several channels. The categories of data collected are described below:

2.1 Registration Data

When you create a 555dd account, we collect: full legal name, date of birth, residential address, email address, and mobile phone number. This data is required to establish your account identity and to verify that you meet the minimum age requirement of 21 years.

2.2 Identity Verification (KYC) Data

To comply with responsible gaming standards and anti-fraud obligations, 555dd requires players to submit identity documents before processing their first withdrawal. KYC data may include: copies of a National ID Card, Passport, or Driving Licence; proof of address documents such as utility bills or bank statements; and proof of payment method ownership (e.g., bKash or Nagad account screenshots showing the registered mobile number).

2.3 Financial & Transaction Data

555dd records all financial transactions conducted through the Platform, including deposit amounts, withdrawal requests, bonus credits, wagering activity, and transaction timestamps. Payment method identifiers (such as mobile wallet numbers for bKash, Nagad, or Rocket, and masked card numbers for Visa or Mastercard) are stored to support transaction history and the return-to-source withdrawal policy.

2.4 Usage & Behavioural Data

555dd automatically collects technical and behavioural data when you use the Platform, including: IP address, browser type and version, device type and operating system, session timestamps, pages visited, games played, bet histories, and in-app navigation patterns. This data is collected using server logs, cookies, and analytics tools.

2.5 Communication Data

When you contact 555dd's customer support team via email at [email protected], or through live chat or ticketing systems, the content of those communications — including your name, email address, and the substance of your enquiry — is retained as part of our support records.

2.6 Responsible Gaming Data

If you use 555dd's responsible gaming tools — including deposit limits, session reminders, reality checks, or self-exclusion — we record your preferences and any self-exclusion periods you set. This data is processed to honour your responsible gaming elections and to protect your wellbeing.

555dd uses the personal data described in Section 2 for the following purposes:

• Account Management: To create, maintain, and administer your 555dd account, including processing logins, updating account details, and managing wallet balances.
• Identity & Age Verification: To verify that you meet the minimum age requirement of 21 years and that your identity matches the account registration details, in accordance with responsible gaming obligations.
• Payment Processing: To process deposit and withdrawal transactions through supported payment methods including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. Transaction data is shared with payment processors solely to the extent required to execute the transaction.
• Platform Security & Fraud Prevention: To detect and prevent unauthorised account access, bonus abuse, multiple account registration, money laundering, and other forms of fraud or prohibited conduct described in the Terms & Conditions.
• Regulatory & Legal Compliance: To meet applicable anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gaming obligations, and to respond to lawful requests from competent authorities.
• Customer Support: To respond to your enquiries, process complaints, and resolve disputes in accordance with the dispute resolution process described in the Terms & Conditions.
• Responsible Gaming: To honour deposit limits, self-exclusion periods, session reminders, and other responsible gaming tools you have activated on your account.
• Platform Improvement: To analyse aggregated usage patterns and game performance data in order to improve the 555dd Platform, fix technical issues, and develop new features. Analysis conducted for improvement purposes uses anonymised or pseudonymised data wherever possible.
• Promotional Communications: If you have opted in to receive promotional communications, 555dd may send you information about new games, bonuses, tournaments, and seasonal promotions (such as Eid specials or BPL cricket offers) via email. You may opt out of promotional emails at any time by following the unsubscribe link in the email or by contacting [email protected].

555dd processes your personal data on the following legal bases:

• Contractual Necessity: Processing of registration data, KYC data, financial data, and communication data is necessary to perform the contract between you and 555dd — namely, the provision of the betting and gaming services described in the Terms & Conditions. Without this processing, 555dd cannot operate your account or deliver the Platform's services.
• Legitimate Interests: Processing of usage data, device data, and session logs for fraud prevention, platform security, and platform improvement is conducted on the basis of 555dd's legitimate interest in maintaining a safe, fair, and well-functioning platform for all players. Where 555dd relies on legitimate interests, we have assessed that those interests are not overridden by your rights and freedoms as a data subject.
• Legal Obligation: Processing of KYC and transaction data for AML, CTF, and responsible gaming compliance is carried out to meet applicable legal obligations.
• Consent: Processing of your data for direct marketing communications (promotional emails and offers) is conducted on the basis of your explicit opt-in consent at the time of account registration or subsequently via your account preferences. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

555dd does not sell, rent, or trade your personal data to third parties. Your data is shared only in the following limited and necessary circumstances:

• Payment Processors: Financial transaction data (including mobile wallet numbers, masked card details, and transaction amounts) is shared with payment service providers — such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard — solely to the extent required to process your deposits and withdrawals.
• Game Providers: Your username and in-session game data may be transmitted to licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Habanero to facilitate gameplay. These studios do not receive your full registration data, KYC documents, or financial transaction history.
• Identity Verification Partners: Where 555dd uses third-party identity verification services to assist with KYC processing, relevant identity document data may be shared with those verified partners under strict confidentiality agreements.
• Legal & Regulatory Authorities: 555dd may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a lawful order, legal process, or applicable obligation. In such cases, 555dd will disclose only the minimum data required to comply with the relevant request.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of 555dd's assets, player data may be transferred to the acquiring entity, provided that the new entity agrees to maintain data protection standards no less protective than those set out in this policy. Affected players will be notified of any such transfer.

555dd uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you access the 555dd website. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your language and currency preference (BDT or INR), and ensure security features operate correctly. These cookies cannot be disabled without impairing core Platform functionality.
• Performance & Analytics Cookies: These cookies collect aggregated data about how players navigate the Platform — which pages are visited most frequently, how long sessions last, and where players encounter technical issues. This data is used to improve Platform performance and user experience. Analytics data is processed in pseudonymised form wherever possible.
• Functional Cookies: These cookies remember your preferences and personalisation settings — for example, your preferred game lobby layout, your notification settings, and your responsible gaming configuration.
• Fraud Prevention Cookies: These cookies help 555dd detect and prevent fraudulent activity, including automated bot access, multiple account creation from a single device, and suspicious betting patterns.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using core features of the 555dd Platform. 555dd does not currently use third-party advertising or retargeting cookies.

555dd retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account & Registration Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, to meet AML record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of 5 years from the date of submission or the date of account closure, whichever is later.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Communication & Support Records: Retained for 3 years from the date of the communication, unless the communication relates to a formal dispute, in which case it is retained until the dispute is fully resolved plus 2 years.
• Usage & Session Logs: Retained for 13 months for analytics and security purposes, then deleted or anonymised.
• Self-Exclusion Records: Retained for the full duration of the self-exclusion period plus 5 years following its expiry, to prevent re-registration during the exclusion period and to maintain audit records.

When retention periods expire, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player.

As a player on the 555dd Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the 555dd data support team at [email protected] with the subject line "Privacy Rights Request":

• Right of Access: You may request a copy of the personal data that 555dd holds about you. We will provide this within 30 calendar days of your verified request.
• Right to Rectification: If any personal data held by 555dd is inaccurate or incomplete, you may request that it be corrected. Please note that correcting identity data (name, date of birth) may require re-submission of KYC documents.
• Right to Erasure: You may request that 555dd delete your personal data. 555dd will honour erasure requests to the extent permissible — however, data subject to mandatory legal retention periods (as set out in Section 7) cannot be deleted ahead of those periods.
• Right to Restriction of Processing: In certain circumstances (for example, while a dispute is pending), you may request that 555dd restrict further processing of your data beyond what is strictly necessary.
• Right to Data Portability: You may request a copy of the personal data you have provided to 555dd in a structured, commonly used, machine-readable format (such as CSV or JSON) for your own records or for transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent (such as promotional email communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to Object: You may object to 555dd processing your personal data on the basis of legitimate interests where you believe your rights and freedoms override those interests. 555dd will assess each objection on its merits and respond within 30 calendar days.

The 555dd Platform is strictly intended for adults aged 21 years and above. 555dd does not knowingly collect, process, or retain personal data from any individual under the age of 21. The Platform's registration flow includes a mandatory date-of-birth field, and age verification is performed as part of the KYC process.

If 555dd becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated funds will be returned to the payment source (net of any winnings generated in breach of the age restriction), and all personal data associated with the account will be securely deleted without undue delay.

Parents or guardians who believe that a minor under their care has registered on the 555dd Platform are urged to contact us immediately at [email protected] so that prompt action can be taken. We also encourage households with minors to use device-level parental controls and filtering software to prevent access to online gaming platforms.

555dd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your browser or device and the 555dd Platform is encrypted using TLS 1.2 or higher, indicated by the HTTPS prefix and SSL certificate on the 555dd website.
• Encryption at Rest: Sensitive personal data — including KYC documents, financial transaction records, and account credentials — is encrypted at rest using AES-256 encryption on 555dd's secure servers.
• Access Controls: Access to player personal data within 555dd's internal systems is restricted on a strict need-to-know basis. Staff with access to sensitive data are subject to confidentiality obligations and regular security awareness training.
• Intrusion Detection & Monitoring: 555dd operates continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Password Security: Account passwords are stored using one-way cryptographic hashing with salting. 555dd staff cannot view your password in plain text. Players are strongly encouraged to use a unique, strong password for their 555dd account and to enable two-factor authentication where available.
• Regular Security Audits: The 555dd Platform and infrastructure undergo periodic security reviews and penetration testing by qualified security professionals to identify and remediate vulnerabilities.

While 555dd takes all reasonable steps to protect your data, no security system is completely impenetrable. In the event of a data breach that poses a risk to your rights and freedoms, 555dd will notify affected players without undue delay and take all necessary remediation steps.

The 555dd Platform integrates with third-party services including game studios, payment gateways, and analytics providers to deliver its full range of features. While 555dd takes care to partner only with reputable and security-conscious third parties, each of these services operates under its own privacy policy and data protection practices.

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Habanero receive the minimum data necessary to facilitate gameplay sessions — typically a session token and player display name — and are contractually prohibited from using this data for purposes beyond game delivery.

Payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard process financial transaction data in accordance with their own privacy and security standards, which are governed by their respective agreements with you as a payment service customer. 555dd is not responsible for the privacy practices of these independent payment providers.

The 555dd website may include hyperlinks to external information pages or support resources. Clicking on such links will take you to a third-party website that is outside 555dd's control. 555dd is not responsible for the content or privacy practices of any external websites and recommends that you review the privacy policy of any site you visit.

555dd reserves the right to update or amend this Privacy Policy at any time in response to changes in legal requirements, Platform features, or data processing practices. When material changes are made, 555dd will notify registered players via email and/or a prominent notice on the Platform at least 7 calendar days before the amended policy takes effect.

The effective date at the top of this document will always reflect the date of the most recent revision. The most current version of the 555dd Privacy Policy is always available at https://555dd.io/privacy-policy. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated policy.

If you do not agree with any change to this policy, you may request account closure by contacting [email protected] before the revised policy takes effect. Your data will be handled in accordance with the version of the policy in force at the time it was collected, and retained or deleted according to the applicable retention schedule.

For all privacy-related enquiries, data subject access requests, or concerns about how 555dd handles your personal data, please contact the support team using the details below:

• Email: [email protected] — use the subject line "Privacy Rights Request" for data-related queries
• Support Hours: 24 hours a day, 7 days a week, including Bangladeshi public holidays
• Response Time Target: Within 30 calendar days for formal data subject requests; within 24 hours for general privacy enquiries

When submitting a privacy rights request, please include your registered email address and account username so that we can verify your identity before processing the request. 555dd will not process data subject access or erasure requests from unverified sources, as this verification step is necessary to protect your data from unauthorised third-party requests.

For responsible gaming support, including self-exclusion requests and deposit limit adjustments, please visit the dedicated Responsible Gaming page at https://555dd.io/responsible-gaming or contact the support team at any time.