555zz Privacy Policy

This Privacy Policy ("Policy") applies to all users of the 555zz platform accessible at https://555zz.app, including its website, mobile-optimised interface, and all associated services (collectively, "the Platform"). This Policy describes how 555zz ("we", "us", "our") collects, processes, stores, and protects the personal information you provide when you register, deposit, play, or otherwise interact with the Platform. By creating an account on 555zz, you confirm that you have read and understood this Policy. This Policy should be read alongside the 555zz Terms & Conditions and Responsible Gaming Policy.

1 Information We Collect

555zz collects personal information through several distinct channels during your interaction with the Platform. The categories of data we collect and the circumstances under which they are gathered are described below.

1.1 Registration Data

When you create a 555zz account, you are required to provide the following information:

• Full legal name as it appears on your government-issued identification.
• Date of birth, to verify that you meet the 18-year minimum age requirement.
• Email address, which serves as your primary account identifier and communication channel.
• Mobile number, preferably a Bangladeshi number registered with bKash, Nagad, Rocket, or another supported mobile financial service provider.
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code.
• Username and password, which are used to secure your account. Passwords are stored in hashed form only — we never store plaintext passwords.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request the following documents at account opening or prior to processing significant withdrawals:

• A copy of a government-issued photo ID such as a National Identity Card (NID), passport, or birth certificate.
• A recent utility bill, bank statement, or other document confirming your residential address, issued within the last 90 days.
• Proof of ownership of the payment method used for deposits (e.g., a screenshot showing the registered bKash or Nagad account number matching the one used on 555zz).

1.3 Financial Transaction Data

We record all deposit and withdrawal transactions processed through your 555zz account. This includes transaction amounts in Bangladeshi Taka (BDT), transaction timestamps, payment method identifiers (e.g., the last four digits of a card or a partial mobile wallet number), and transaction reference numbers assigned by the payment processor.

1.4 Gameplay & Betting Activity Data

We maintain a detailed log of your activity on the Platform, including games played, bet amounts, game outcomes, session duration, and bonus activity. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement purposes.

1.5 Device & Technical Data

When you access 555zz, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device model, screen resolution, and time-zone setting (Bangladesh Standard Time, UTC+6). This information is used for fraud prevention, security monitoring, and to optimise the Platform's performance on your device.

2 How We Use Your Data

555zz processes your personal data on the basis of contractual necessity (to fulfil our obligations as your gaming operator), legal obligation (to comply with applicable anti-money laundering and age verification requirements), and legitimate interest (to maintain platform security and improve user experience). The table below summarises the primary purposes for which your data is used:

555zz will not use your personal data for any purpose not listed above without first notifying you and, where required, obtaining your explicit consent. You may withdraw consent for marketing communications at any time by updating your notification preferences within your account dashboard or by contacting support.

3 Data Sharing & Third Parties

555zz does not sell, rent, or trade your personal data. We may share your information with carefully selected third-party service providers only where necessary to operate the Platform. All third-party partners are bound by strict data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to 555zz.

Categories of third parties with whom your data may be shared include:

• Payment Processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, Visa, and Mastercard receive the minimum transaction data required to process your deposits and withdrawals. These providers operate under their own regulatory frameworks and privacy obligations.
• Game Providers: Software partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to facilitate gameplay. They do not receive your name, contact details, or payment information.
• Identity Verification Services: Third-party KYC and document verification partners may process your identity documents on our behalf. These partners are contractually prohibited from retaining your documents beyond the verification process.
• Analytics Providers: Aggregated, anonymised usage data may be shared with analytics platforms to help us understand how players interact with the Platform and identify areas for improvement. No personally identifiable information is included in these datasets.
• Legal & Regulatory Authorities: We may be required by law to disclose your information to law enforcement agencies, financial intelligence units, or other regulatory bodies in connection with suspected fraud, money laundering, or other criminal activity. Such disclosures are made only when legally required.

4 Cookies & Tracking Technologies

555zz uses cookies and similar tracking technologies to ensure the proper functioning of the Platform, maintain your session state, and gather anonymised analytics data. The following categories of cookies are used on the 555zz platform:

555zz does not place third-party advertising or cross-site behavioural tracking cookies. You may manage or delete cookies through your browser settings at any time; however, disabling essential cookies may prevent certain Platform features from functioning correctly, including the ability to maintain a logged-in session.

5 Data Retention & Storage

555zz retains your personal data for as long as your account remains active, and for a defined period after account closure as required by our legal and regulatory obligations. The retention periods applicable to different categories of data are as follows:

• Account Registration Data: Retained for the duration of the account and for a minimum of five (5) years following account closure, to comply with anti-money laundering record-keeping obligations.
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later.
• Financial Transaction Records: Retained for a minimum of seven (7) years to satisfy financial record-keeping requirements and to facilitate dispute resolution.
• Gameplay and Betting Logs: Retained for a minimum of three (3) years from the date of the activity, or longer where a dispute or investigation remains unresolved.
• Customer Support Communications: Retained for a minimum of two (2) years from the date of the last interaction.
• Device and Technical Logs: Retained for up to twelve (12) months from the date of collection, unless a specific security event requires extended retention.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is applied, the resulting data may be retained indefinitely for statistical and platform improvement purposes.

6 Your Rights & Data Controls

555zz is committed to giving you meaningful control over your personal data. You have the following rights with respect to the information we hold about you:

• Right of Access: You may request a copy of all personal data that 555zz holds about you. We will provide this information in a structured, commonly used format within a reasonable timeframe.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you may request that we correct or update it. For account details such as your name or address, some corrections may require supporting documentation.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records as described in Section 5.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while a dispute regarding the accuracy of your data is being resolved.
• Right to Data Portability: You may request that we provide your personal data to you in a machine-readable format, or transfer it directly to another service provider where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interest as the legal basis for processing, unless we can demonstrate compelling legitimate grounds that override your interests.

Please note that certain rights may be limited where compliance would conflict with our legal obligations, for example where deleting transaction records would violate anti-money laundering record-keeping requirements. In such cases, we will inform you of the specific limitation and the reason for it.

7 Security Measures

555zz takes the security of your personal data seriously. We implement a layered security architecture that encompasses both technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction.

Our core technical security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and 555zz's servers is encrypted in transit using current Transport Layer Security protocols.
• Encryption at Rest: Sensitive data stored in our databases — including identity documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Password Hashing: User passwords are never stored in plaintext. They are processed using a strong cryptographic hashing algorithm with salting to prevent compromise even in the event of a database exposure.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security. 2FA settings are managed from the account security dashboard.
• Automated Fraud Detection: Our systems monitor login attempts, transaction patterns, and gameplay behaviour in real time to identify and flag suspicious activity for immediate review.
• Access Controls: Internal access to player data is governed by role-based access controls. Only personnel with a specific operational need are granted access to personal data, and all access events are logged for audit purposes.

While 555zz employs robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for ensuring that you log out of your account when using a shared or public device. If you suspect that your account has been accessed without your authorisation, please contact our support team immediately.

8 Changes to This Policy

555zz reserves the right to update or revise this Privacy Policy at any time. Changes may be made in response to new legal requirements, updates to Platform functionality, changes in our data processing practices, or feedback from our player community.

When material changes are made to this Policy, we will notify registered players by email to the address associated with their 555zz account, and will display a prominent notice on the Platform's homepage and login screen for a minimum of 14 days following the update. The "Last updated" date displayed at the top of this page will be revised to reflect the date of the most recent change.

Your continued use of the 555zz platform following notification of a policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must discontinue use of the Platform and may request account closure. We recommend bookmarking this page and reviewing it periodically to stay informed of the current version.

This Privacy Policy was last reviewed and approved on 1 January 2026 and supersedes all previous versions of the 555zz Privacy Policy.