Your Privacy Matters at 555ba

Introduction

This Privacy Policy ("Policy") describes how 555ba ("555ba", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "your", "Player") who register for or use the online betting and casino platform available at https://555ba.io and any associated mobile applications or subdomains (collectively, the "Platform").

We understand that privacy is important to our players across Bangladesh — from Dhaka and Chittagong to Sylhet, Khulna, Rajshahi, and Barisal. This Policy is designed to give you a clear and honest account of our data practices so that you can make informed decisions about your use of the 555ba Platform.

By registering a 555ba account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy forms part of our Terms and Conditions, which you agreed to upon registration.

Data Controller

555ba is the data controller responsible for the personal information collected through the Platform. As data controller, 555ba determines the purposes and means of processing your personal data and is accountable for ensuring that processing is carried out lawfully, fairly, and transparently in accordance with applicable data protection laws.

If you have any questions about how 555ba handles your personal data, or if you wish to exercise any of your data rights as described in Section 11 of this Policy, you may contact our Data Protection team directly at [email protected] (plain text — not a clickable link). We aim to respond to all data-related enquiries within 72 hours.

Personal Data We Collect

555ba collects the minimum amount of personal data necessary to provide a safe, legal, and high-quality betting and gaming service. The categories of data we collect are set out in the table below:

3.1 Special Category Data

555ba does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If, in an exceptional circumstance (such as a responsible gaming self-exclusion request), you voluntarily share information that could be considered sensitive, it will be treated with the highest level of confidentiality and used solely for the stated purpose.

How We Collect Your Data

555ba collects personal data through the following channels:

• Direct Submission: Information you provide when registering your account, completing KYC verification, making a deposit or withdrawal request, contacting our support team, or completing any form on the Platform.
• Automated Technologies: Technical and usage data collected automatically when you access and interact with the Platform, including via cookies, web beacons, log files, and similar tracking technologies (see Section 9 for full details).
• Payment Processors: Transaction confirmation and status data received from bKash, Nagad, Rocket, Upay, and banking partners when you make a deposit or withdrawal.
• Identity Verification Providers: Confirmation data received from our KYC partners when they verify identity documents you have submitted for account verification.
• Third-Party Game Providers: Anonymised or pseudonymised gameplay session data passed from game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to settle bets and record game outcomes in your account history.
• Publicly Available Sources: In limited circumstances, we may verify information against publicly available records to prevent fraud or comply with anti-money laundering obligations.

How We Use Your Personal Data

555ba uses the personal data we collect for the following specific purposes:

5.1 Account Management

To create and maintain your 555ba account, authenticate your identity at login, communicate important account updates, and provide customer support when you need it.

5.2 Payment Processing

To process deposits and withdrawals via your registered bKash, Nagad, Rocket, or Upay account, verify that transactions originate from your own registered payment method, and maintain accurate financial records in compliance with applicable regulations.

5.3 Legal Compliance

To fulfil 555ba's obligations under applicable anti-money laundering (AML) laws, Know Your Customer (KYC) regulations, and any other legal requirements that apply to the operation of an online gaming platform serving players in Bangladesh and other jurisdictions.

5.4 Fraud Prevention and Security

To detect, investigate, and prevent fraudulent transactions, account takeover attempts, bonus abuse, and other activity that violates our Terms and Conditions or applicable law. This includes monitoring IP addresses, device fingerprints, and unusual betting or transaction patterns.

5.5 Personalisation

To tailor your 555ba experience based on your preferences and activity — for example, surfacing cricket betting markets such as BPL and IPL matches that align with your betting history, or recommending slots from providers you have previously enjoyed.

5.6 Responsible Gaming

To monitor gameplay and transaction patterns for indicators of problem gambling and to proactively offer responsible gaming tools such as deposit limits, session reminders, and self-exclusion where our risk models suggest a player may benefit from intervention.

5.7 Marketing Communications

To send you promotional offers, bonus notifications, and news about 555ba products and seasonal promotions — such as Eid or Pohela Boishakh special offers — but only where you have provided explicit consent to receive such communications. You may withdraw consent at any time by updating your notification preferences in your account dashboard or by contacting our support team.

5.8 Platform Improvement

To analyse aggregated usage patterns, identify technical issues, test new features, and continuously improve the performance, reliability, and user experience of the 555ba Platform for all players.

Legal Basis for Processing

555ba processes your personal data on one or more of the following legal grounds, depending on the specific purpose:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to operate your account, process payments, and deliver the betting and gaming services you have signed up for.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, KYC requirements, and any reporting obligations imposed by regulatory authorities.
• Legitimate Interests: Processing carried out for 555ba's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and for the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing and Disclosure

555ba does not sell, rent, or trade your personal data to any third party for commercial gain. We share your data only in the following limited and controlled circumstances:

7.1 Payment Service Providers

We share the minimum necessary financial and identity data with mobile money operators — including bKash, Nagad, Rocket, and Upay — and with banking partners such as Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank, solely for the purpose of processing your deposits and withdrawals.

7.2 Identity Verification Partners

When you submit identity documents for KYC verification, your documents and personal details are shared with our regulated third-party verification partner. This partner is contractually bound to process your data solely for the purpose of identity verification and is prohibited from using it for any other purpose.

7.3 Game Content Providers

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a unique anonymised player token and session parameters to deliver their games within the 555ba Platform. They do not receive your name, mobile number, NID details, or payment information.

7.4 Legal and Regulatory Authorities

555ba may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, a valid legal order, or to protect the rights, property, or safety of 555ba, its players, or the public.

7.5 Business Transfers

In the event that 555ba undergoes a merger, acquisition, or sale of all or part of its business assets, player data may be transferred to the acquiring entity. In such circumstances, 555ba will notify affected players by email or through a prominent Platform notice prior to any transfer taking effect, and the receiving entity will be bound by the terms of this Policy or an equivalent standard of protection.

International Data Transfers

The 555ba Platform serves players primarily in Bangladesh. However, some of our technical infrastructure, data processors, and game content providers are located outside Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that applicable in Bangladesh, 555ba will implement appropriate safeguards — such as standard contractual clauses or equivalent contractual protections — to ensure your data remains protected to the standard described in this Policy.

By using the 555ba Platform, you acknowledge and consent to the transfer of your personal data to countries outside Bangladesh as described in this section, subject always to the protections described above.

Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function correctly, operate efficiently, and provide information to site owners. 555ba uses cookies and similar technologies (including web beacons and local storage) on the Platform.

9.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to collect anonymous or pseudonymised data about how players navigate and use the Platform — such as which pages are most visited and how long sessions last. This data helps us improve the platform. We use industry-standard analytics tools for this purpose.
• Functional Cookies: Used to remember your preferences — such as language settings or preferred payment method — so you do not need to re-enter them on every visit.
• Marketing Cookies: Only placed where you have provided explicit consent. These cookies track your interaction with 555ba promotional content to allow us to deliver more relevant offers. You may withdraw consent at any time through your browser settings.

9.3 Managing Cookies

You can manage or disable non-essential cookies at any time through your browser settings. Most modern browsers — including Chrome, Firefox, and Samsung Internet — allow you to view, block, and delete cookies on a per-site basis. Please note that disabling essential cookies may prevent certain features of the 555ba Platform from working correctly.

Data Retention

555ba retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention guidelines are as follows:

• Active Account Data: Retained for the duration of your account and for a period of five (5) years after account closure, to comply with anti-money laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, as required by applicable AML regulations.
• Transaction Records: Retained for five (5) years from the date of each transaction.
• Support Communications: Retained for two (2) years from the date of the last communication in a support thread, unless the matter relates to an unresolved dispute in which case records are retained until resolution plus two (2) years.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year after consent is withdrawn, as evidence of compliance.
• Analytics Data: Aggregated and anonymised analytics data may be retained indefinitely as it no longer constitutes personal data.

When personal data is no longer required, 555ba will securely delete or anonymise it in accordance with our internal data disposal procedures.

Your Data Rights

As a 555ba player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] (plain text — not a clickable link). We will respond within 30 days of receiving a verifiable request.

• Right of Access: You have the right to request a copy of the personal data 555ba holds about you and to receive information about how it is being used. We will provide this in a clear, readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic contact details directly from your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Please note that we may be required to retain certain data to meet our legal obligations even after an erasure request.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that we restrict the processing of your data — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another data controller.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for marketing purposes. Where you object to direct marketing, we will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Children and Minors

The 555ba Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the Platform under any circumstances.

If 555ba discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the data as promptly as legally permissible, and return any funds to the extent required by applicable law. If you are a parent or guardian and believe a minor has registered on 555ba, please contact us immediately at [email protected] (plain text — not a clickable link).

Security of Your Personal Data

555ba takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or device and the 555ba Platform is encrypted using industry-standard SSL/TLS protocols, preventing interception by third parties.
• Data Encryption at Rest: Sensitive data — including payment account numbers, identity document images, and authentication credentials — is stored in encrypted form on our servers.
• Access Controls: Access to personal data within 555ba is restricted to authorised personnel who require it to perform their job functions. All staff with data access are bound by confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication: 555ba supports and encourages the use of two-factor authentication (2FA) on player accounts to add an additional layer of security beyond the password.
• Intrusion Detection and Monitoring: Our security team monitors the Platform continuously for signs of unauthorised access attempts, unusual activity, and potential data breaches.
• Regular Security Audits: 555ba conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, 555ba will notify affected players and relevant authorities as required by applicable law, within the legally prescribed timeframe.

Third-Party Services and Links

The 555ba Platform incorporates games and services provided by licensed third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While 555ba carefully selects its partners and requires them to maintain appropriate data protection standards, we are not responsible for the privacy practices of third-party services operating under their own separate terms.

Please note that the 555ba Platform does not contain links to external third-party websites for commercial or advertising purposes. Any game content delivered within the Platform interface remains subject to 555ba's data governance framework, and 555ba does not permit third-party game studios to directly identify or profile individual 555ba players through their game delivery mechanisms.

Amendments to This Privacy Policy

555ba reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes to this Policy, we will notify registered players by email to the address associated with their 555ba account, and we will update the "Last Updated" date displayed at the top of this page.

We encourage you to review this Policy periodically to stay informed about how 555ba protects your personal data. Your continued use of the Platform following the posting of any amendments constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should stop using the Platform and may request account closure by contacting our support team.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 555ba handles your personal data, please contact our Data Protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the 555ba Platform dashboard
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Response Time: We aim to acknowledge all privacy enquiries within 72 hours and to provide a full response within 30 calendar days.

For urgent matters relating to suspected unauthorised access to your account or a potential data breach affecting your personal information, please contact us immediately via live chat for the fastest response.