555b Privacy Policy

Introduction

555b is an internationally operated online betting and casino platform serving players in Bangladesh and beyond. We recognise that the personal information you share with us is sensitive, and we are committed to handling it with the highest standards of care, security and transparency.

This Policy applies to all personal data collected through the 555b website (555b.io), any associated mobile-optimised interfaces, customer support communications, and any other means by which you interact with the 555b platform. It covers data collected from prospective players who visit the site without registering, as well as fully registered and verified account holders.

555b acts as the data controller in respect of all personal data collected from players. For the purpose of this Policy, "personal data" means any information that identifies you directly or indirectly as a natural person, including your name, email address, date of birth, financial account details and device identifiers.

If you have any questions about this Policy or wish to exercise any of your data rights, please contact the 555b Data Protection team at [email protected]. Our support team is available 24 hours a day, 7 days a week on Bangladesh Standard Time (UTC+6).

Data We Collect

555b collects personal data across several categories depending on your level of interaction with the platform. The following table summarises the categories of data we may collect and the context in which they are collected.

555b does not knowingly collect data from individuals under 21 years of age. If we discover that personal data has been submitted by a person under the age of 21, we will delete that data immediately and close the associated account.

How We Collect Data

555b collects personal data through the following channels:

Direct Submission

You provide data directly when you complete the 555b registration form, submit KYC documents, make a deposit or withdrawal, contact our support team, or update your account profile. All direct submissions are transmitted over TLS-encrypted connections.

Automated Collection

When you visit 555b.io or use the platform, we automatically collect technical data including your IP address, browser fingerprint, device type, operating system version and session activity timestamps. This data is collected using server-side logging and, where applicable, session cookies as described in Section 8.

Payment Provider Data

When you make a deposit or withdrawal via bKash, Nagad, Rocket or Upay, our payment processing partners transmit transaction confirmation data to 555b. This includes transaction reference numbers, timestamps, amounts and the mobile number or account identifier associated with the payment. 555b does not receive or store your full bKash or Nagad PIN at any point.

Third-Party Verification Services

For identity verification purposes, 555b may use third-party KYC service providers who assist in validating the authenticity of identity documents submitted by players. These providers operate under strict data processing agreements with 555b and are not permitted to use player data for any purpose other than verification.

Legal Basis for Processing

555b processes personal data on the following legal bases depending on the purpose of the processing activity:

• Contractual Necessity: Processing your identity data, contact data and financial data is necessary to enter into and perform the account agreement with you, including processing deposits and withdrawals, settling bets and providing customer support.
• Legal Obligation: 555b is required to collect and retain certain data for anti-money laundering (AML) compliance, fraud detection and responsible gaming obligations. This processing is mandatory and cannot be opted out of by individual players.
• Legitimate Interests: 555b processes technical data and gaming activity data to maintain platform security, detect abuse, improve service quality and prevent fraud. These interests are balanced against your privacy rights and do not override them.
• Consent: Where we send optional promotional communications (e.g., bonus notifications, seasonal offers tied to BPL or T20 tournaments), we do so on the basis of your explicit consent provided during registration or account settings. You may withdraw this consent at any time.

How We Use Your Data

555b uses the personal data it collects for the following specific purposes:

Account Management

Your identity and contact data are used to create, maintain and secure your 555b account. This includes verifying your identity at registration, enabling login authentication, resetting credentials, and communicating account-related notifications to your registered email address or phone number.

Payment Processing

Financial data is used exclusively to process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer or card). Payment data is processed in accordance with Section 7 of this Policy and is never used for purposes unrelated to your financial transactions with 555b.

Platform Security and Fraud Prevention

Technical data including IP addresses, device identifiers and session logs are used to monitor for suspicious activity, prevent unauthorised account access, detect multi-accounting, and identify patterns consistent with prohibited conduct as defined in the 555b Terms & Conditions. This processing is fundamental to maintaining a fair and secure environment for all players.

Responsible Gaming Compliance

Gaming activity data and account preference data are used to monitor compliance with player-set responsible gaming limits (deposit limits, session time reminders, time-out periods), to identify accounts that may exhibit signs of problem gambling behaviour, and to enforce self-exclusion requests. This processing is carried out in the interest of player welfare and cannot be disabled.

Customer Support

Communications data from your interactions with the 555b support team is retained to provide accurate and consistent support, to investigate and resolve disputes, and to improve the quality of our support services. Support transcripts are stored securely and accessible only to authorised 555b personnel.

Regulatory Compliance

Certain categories of personal data — particularly identity documents and transaction records — are retained to satisfy anti-money laundering (AML) and counter-terrorism financing (CTF) obligations applicable to internationally operating gambling platforms. This data is not used for any commercial purpose and is retained only for the minimum period required by applicable obligations.

Service Improvement

Aggregated and anonymised technical data may be used to analyse platform performance, identify and resolve bugs, and improve the overall user experience. No individually identifiable data is used for this purpose.

Data Sharing

555b does not sell, rent, trade or otherwise commercially exploit your personal data. We share personal data only in the limited circumstances described below, and only with parties who are contractually required to protect it.

Payment Service Providers

We share the minimum necessary financial data with payment providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processing partners to facilitate your deposits and withdrawals. Each payment provider is subject to its own privacy policy and data security standards. 555b is not responsible for the data practices of third-party payment providers once data has been transmitted to them for transaction processing purposes.

Identity Verification Providers

For KYC purposes, 555b may share copies of identity documents with authorised third-party verification service providers. These providers process documents solely for the purpose of verification and are bound by strict data processing agreements that prohibit any secondary use of player data.

Legal and Regulatory Authorities

555b may be required to disclose personal data to law enforcement agencies, regulatory bodies or courts in response to a lawful request, court order or legal process. In such cases, 555b will disclose only the minimum data required to satisfy the legal obligation and will, where legally permissible, notify the affected player of the disclosure.

Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of 555b's business assets, player personal data may be transferred to the acquiring entity as part of the transaction. Affected players will be notified by email in advance of any such transfer, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

Payment Data

Given the financial nature of the 555b platform, payment data is treated with an elevated level of protection beyond the standard personal data security measures described elsewhere in this Policy.

bKash, Nagad and Rocket

When you make a deposit or withdrawal via bKash, Nagad or Rocket, your mobile financial service credentials (PIN, OTP) are entered directly into the respective provider's interface. 555b does not have visibility of or access to your PIN or one-time password at any point in the transaction flow. 555b receives only a transaction confirmation token and the registered mobile number associated with the payment.

Card Payments

Card payment transactions (Visa, Mastercard) processed on the 555b platform are handled through a PCI DSS-compliant payment gateway. Full card numbers, CVV codes and card expiry dates are never transmitted to or stored on 555b servers. Tokenised payment references are retained solely for the purpose of facilitating refunds and dispute resolution.

Bank Transfers

Where you initiate a bank transfer deposit from City Bank, BRAC Bank, Islami Bank, Sonali Bank or any other supported Bangladeshi bank, the bank account details you provide are used solely to process the specific transaction and to confirm ownership of the account in the event of a withdrawal request. Bank account details are stored in encrypted form and are accessible only to authorised 555b finance personnel.

Transaction Records

All deposit and withdrawal transaction records — including amounts in Bangladeshi Taka (৳), timestamps, payment method references and processing status — are retained for a minimum of five years in accordance with financial record-keeping obligations. These records may be reviewed in the event of a player dispute, regulatory inquiry or AML investigation.

Cookies & Tracking Technologies

555b uses a minimal and transparent approach to cookies. We do not deploy third-party advertising or behavioural tracking cookies. The cookies used on the 555b platform fall into the following categories:

Strictly Necessary Cookies

These cookies are essential for the basic functioning of the 555b platform. They enable you to remain logged in during a session, maintain your game state, and ensure that your bets and transactions are processed correctly. Strictly necessary cookies cannot be disabled without breaking core platform functionality. They contain no personally identifiable information beyond a session identifier.

Performance and Analytics Cookies

555b uses anonymised, first-party analytics cookies to understand how players navigate the platform, which game categories are most popular, and where technical errors occur. This data is aggregated and does not identify any individual player. These cookies are optional and may be declined via your browser settings.

Security Cookies

Certain cookies are used as part of 555b's fraud detection and account security infrastructure. These cookies help identify suspicious login patterns, detect bot activity and prevent credential stuffing attacks. They do not contain personally identifiable information and are not shared with third parties.

Managing Cookies

You may manage cookie preferences through your browser's settings menu. Please note that disabling strictly necessary cookies will impair your ability to use the 555b platform. Most modern browsers allow you to view, block or delete cookies on a per-site basis. Consult your browser's help documentation for specific instructions.

Data Retention

555b retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable legal obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation rather than deletion is applied, the resulting data may be retained indefinitely for aggregate analytics purposes.

Your Rights

As a player whose personal data is processed by 555b, you have the following rights. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". 555b will acknowledge all rights requests within 48 hours and provide a substantive response within 30 calendar days.

Right of Access

You have the right to request a copy of all personal data held by 555b about you. We will provide this in a structured, machine-readable format (JSON or CSV) free of charge for the first request in any 12-month period. Subsequent requests within the same period may be subject to a reasonable administrative fee.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity data that forms part of your KYC record, you may be required to submit updated supporting documentation.

Right to Erasure

You may request that 555b delete your personal data. This right is subject to limitations where retention is required by law (e.g., AML obligations under Section 9). Where erasure is not possible in full, 555b will inform you of the specific data that must be retained and the legal basis for doing so, and will delete all data that is not subject to a mandatory retention requirement.

Right to Restriction of Processing

You may request that 555b temporarily restrict the processing of your personal data in certain circumstances, for example while a dispute about data accuracy is being resolved. During any restriction period, 555b will continue to store your data but will suspend active processing beyond what is strictly necessary.

Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a portable format and to request that it be transmitted directly to another controller where technically feasible.

Right to Object

You have the right to object to processing carried out on the basis of legitimate interests. 555b will assess each objection on its merits. Where your right to object overrides 555b's legitimate interests, processing will cease. Note that objections to processing carried out for legal obligation purposes cannot be upheld.

Right to Withdraw Consent

Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time through your account notification settings or by contacting [email protected]. Withdrawal is effective immediately and will not affect any processing carried out before withdrawal.

Security Measures

555b implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. Key measures include:

• Encryption at Rest: All personal data stored on 555b infrastructure is encrypted using AES-256 with unique per-record encryption keys managed through a hardened key management system;
• Encryption in Transit: All data transmitted between your browser and the 555b platform is protected using TLS 1.3. Older TLS versions (1.0, 1.1) and SSLv3 are disabled across all 555b endpoints;
• Access Controls: Access to personal data is restricted to authorised 555b personnel on a strict need-to-know basis. All internal access is authenticated using multi-factor authentication and is logged for audit purposes;
• Intrusion Detection: 555b operates continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time;
• Penetration Testing: The 555b platform undergoes regular independent security assessments including penetration testing and vulnerability scanning by qualified third-party security professionals;
• Employee Training: All 555b personnel who handle personal data receive mandatory data protection and security awareness training. Access rights are reviewed quarterly and revoked promptly upon role change or departure;
• Incident Response: 555b maintains a formal data breach incident response plan. In the event of a confirmed breach affecting player personal data, affected players will be notified within 72 hours as described in Section 6 of this Policy.

Despite these measures, no online platform can guarantee absolute security. You are encouraged to protect your own account by using a strong, unique password for your 555b account, enabling any available two-factor authentication, and notifying 555b immediately if you suspect that your account has been compromised.

Policy Updates

555b reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal obligations, or the services we offer. All updates will be published on this page with a revised "Last Updated" date at the top of the document.

Where a proposed change is material — meaning it significantly affects how we use your personal data or reduces your rights — 555b will provide at least 14 calendar days' advance notice by sending an email to your registered address before the change takes effect. Continued use of the 555b platform after the effective date of any update constitutes your acceptance of the revised Policy.

We encourage you to review this Privacy Policy periodically. The version history below records significant amendments for your reference.