Privacy Policy — How 555db Collects, Uses, and Protects Your Data

1. Introduction

555db is an online casino and sports betting platform serving players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. To deliver a personalised, secure, and compliant service, 555db necessarily processes certain personal data relating to the players who register and use our platform.

This Privacy Policy sets out in full detail what personal data 555db collects, the purposes for which that data is used, the legal basis on which we rely for each processing activity, who we share data with, how long we retain it, and what rights you have as a data subject. This policy is incorporated by reference into the 555db Terms & Conditions, which can be reviewed at /terms-conditions.

We are committed to handling your data responsibly and protecting your privacy. This policy is written in plain English so that every player understands exactly how their information is treated, without needing a legal background to interpret it.

2. Personal Data We Collect

555db collects personal data across several categories depending on your level of interaction with the platform. The table below summarises the categories of data we collect and the typical source of each:

Data Category	Examples	Source
Identity Data	Full legal name, date of birth, gender, nationality	Registration form, KYC documents
Contact Data	Bangladeshi mobile number, email address, residential address	Registration form
Verification Documents	National ID card, passport, driver's licence, proof of address, bKash/Nagad/Rocket account screenshot	KYC submission
Financial Data	Deposit amounts, withdrawal amounts, transaction IDs, bKash/Nagad/Rocket/Upay account numbers	Platform transactions, payment processors
Gaming Activity Data	Games played, wagers placed, bet outcomes, session durations, sports markets accessed	Platform activity logs
Technical Data	IP address, device type, operating system, browser type, screen resolution	Automatic collection via cookies and server logs
Behavioural Data	Pages visited, navigation patterns, feature usage, time spent on platform	Automatic collection via cookies and analytics tools
Communications Data	Live chat transcripts, support email content, complaint records	Your communications with 555db
Responsible Gaming Data	Deposit limits set, self-exclusion periods, reality check preferences	Responsible gaming tool usage

555db does not collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than document photographs submitted for identity verification), or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request.

3. How We Collect Your Data

3.1 Data You Provide Directly

The majority of personal data we hold is provided directly by you when you register a 555db account, complete the KYC identity verification process, make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, contact the 555db support team, or set up responsible gaming tools such as deposit limits or self-exclusion periods.

3.2 Data Collected Automatically

When you access and use the 555db platform, certain technical and behavioural data is collected automatically. This includes your IP address, device identifiers, browser type and version, operating system, referring URLs, pages visited within the platform, session start and end times, and in-platform click patterns. This data is collected via server logs, cookies, and similar technologies as described in Section 7 of this policy.

3.3 Data Received from Third Parties

555db may receive limited personal data from the following third-party sources in connection with operating the platform:

• Payment processors (bKash, Nagad, Rocket, Upay): Transaction confirmation data, payment method registration status, and anti-fraud flags.
• Identity verification providers: Document authentication results and identity match scores generated during KYC processing.
• Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others): Game round results, wager amounts, and session data necessary for account balance reconciliation and dispute resolution.
• Fraud prevention services: Risk scores, device fingerprinting data, and flagging alerts related to suspected fraudulent activity or multi-accounting.

4. How We Use Your Personal Data

555db uses the personal data we collect for the following purposes:

• Account management: Creating and maintaining your 555db player account, managing your preferences, and processing your 555db login sessions securely.
• Identity verification (KYC): Confirming your age (21+), identity, and residential address in compliance with anti-money laundering requirements.
• Payment processing: Facilitating deposits and withdrawals in Bangladeshi Taka via bKash, Nagad, Rocket, and Upay, and maintaining accurate financial records.
• Gameplay and platform delivery: Providing access to casino games, live dealer tables, crash games, and sports betting markets including BPL cricket, IPL, T20 World Cup, and football.
• Fraud detection and prevention: Identifying suspicious account activity, multi-accounting, bonus abuse, money laundering patterns, and unauthorised access attempts.
• Customer support: Responding to your enquiries, complaints, and requests via live chat and email.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling indicators, enforcing self-exclusion periods, and managing deposit and loss limits you have set.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. See Section 12 for how to opt out.
• Platform improvement: Analysing aggregated behavioural data to improve platform navigation, game selection, and the overall player experience.
• Legal compliance: Retaining records as required by applicable law and responding to lawful requests from regulatory or law enforcement authorities.

5. Legal Basis for Processing

555db relies on the following legal bases to process your personal data, depending on the specific activity:

• Contract performance: Processing necessary to create and manage your account, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal obligation: Processing necessary to comply with anti-money laundering obligations, age verification requirements, and any lawful requests from authorities.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and general platform analytics, where these interests do not override your rights and freedoms.
• Consent: Processing for direct marketing communications, where you have clearly opted in to receive such communications. You may withdraw your consent at any time by contacting the 555db support team.

6. Data Sharing and Disclosure

6.1 Service Providers

555db shares personal data with the following categories of third-party service providers strictly on a need-to-know basis and under contractual data protection obligations:

• Payment processors: bKash, Nagad, Rocket, and Upay receive transaction-level data necessary to process deposits and withdrawals.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios receive account identifiers and wager data to deliver their games and verify round outcomes.
• Identity verification services: Third-party KYC providers receive identity documents and biographical data to authenticate your identity and age.
• IT infrastructure and hosting providers: Cloud hosting and server management providers who store platform data on encrypted infrastructure.
• Fraud prevention and security services: Providers that assist in detecting and preventing fraudulent activity, bonus abuse, and unauthorised account access.

6.2 Legal Disclosures

555db may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of 555db, its players, or the public. 555db will notify affected players of any such disclosure where legally permitted to do so.

6.3 No Sale of Data

555db does not sell, rent, lease, or otherwise transfer your personal data to any third party for their independent commercial use. Data shared with service providers is used exclusively to perform services on behalf of 555db and is prohibited from being used by those providers for any other purpose.

7. Cookies and Tracking Technologies

The 555db platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. Cookies are small text files placed on your device when you visit the platform. 555db uses the following categories of cookies:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your 555db login session, and security cookies that help detect fraudulent activity. These cannot be disabled without impairing platform functionality.
• Functional cookies: Store your preferences such as language settings, responsible gaming reminder intervals, and your preferred game lobby view. These improve your experience but are not essential.
• Analytics cookies: Collect anonymised or pseudonymised data about how players navigate and use the platform. This data is used to improve platform design, game selection, and loading performance. Analytics data is not used to identify individual players.
• Marketing cookies: Used only where you have opted in to receive marketing communications. These cookies help 555db present relevant promotional offers and track the performance of marketing campaigns. You may opt out of marketing cookies at any time.

You may control non-essential cookies via your browser settings. Note that disabling certain functional cookies may affect your experience on the 555db platform. Essential cookies cannot be disabled via browser settings while you remain logged in to your account.

8. Data Retention

555db retains personal data only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account lifecycle plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming activity logs: Retained for a minimum of 3 years from the date of each session, or for the duration necessary to resolve any active dispute.
• Customer support communications: Retained for a minimum of 2 years from the date of the final communication in each support thread.
• Marketing consent records: Retained for the duration of your account and for 1 year following any opt-out or account closure, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

9. Data Security

555db implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 555db platform.
• Encryption of sensitive data at rest, including identity documents and financial records, using AES-256 or equivalent standards.
• Role-based access controls ensuring that personal data is accessible only to 555db personnel who require it to perform their specific job functions.
• Regular security assessments and penetration testing of platform infrastructure.
• Secure, access-controlled data centres for server infrastructure hosting.
• Incident response procedures for detecting, containing, and reporting data security breaches within mandatory notification timeframes.

While 555db takes all reasonable steps to protect your data, no digital system is entirely immune to security risks. In the event of a data breach that affects your personal data, 555db will notify affected players through the contact details held on their account as promptly as practicable.

10. Your Data Rights

As a 555db player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the 555db support team using the contact details in Section 15. 555db will respond to all verified requests within 30 calendar days.

• Right of access: You may request a copy of the personal data 555db holds about you, along with information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. For basic account details, you may update these directly via your account settings after 555db login.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that some data must be retained for legal compliance purposes and cannot be deleted on request.
• Right to restriction: You may request that 555db restricts processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to object: You may object to processing of your personal data where that processing is based on legitimate interests, including profiling for responsible gaming monitoring or direct marketing. Processing for legal compliance purposes cannot be objected to.
• Right to data portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

11. Children's Privacy and the 21+ Rule

The 555db platform is strictly intended for adults aged 21 years and above. 555db does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will close the associated account, delete the data to the extent permitted by law, and forfeit any account balance in accordance with our underage gaming policy.

If you are a parent or guardian and believe that a minor may have created a 555db account using false age information, please contact the support team immediately at support 555db.io. We will investigate and take appropriate action within 48 hours of receiving a substantiated report.

12. Marketing Communications

555db may send promotional communications — including bonus offers, seasonal promotions tied to events such as Eid, Pohela Boishakh, Durga Puja, BPL cricket season, and the T20 World Cup, as well as general platform news — to players who have opted in to receive such communications during account registration or subsequently via account settings.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in the 555db account settings after 555db login.
• Contacting the 555db support team via live chat or email and requesting removal from marketing lists.
• Using the unsubscribe link included in any marketing email sent by 555db.

Opting out of marketing communications will not affect your ability to receive transactional communications related to your account, such as deposit confirmations, withdrawal notifications, KYC verification updates, and responsible gaming alerts. These communications are essential to the operation of your account and cannot be disabled.

13. Third-Party Links

The 555db platform does not include links to external third-party websites. However, where game providers such as Pragmatic Play, Evolution Gaming, or NetEnt deliver content via embedded technology within the 555db platform, their own privacy practices apply to data processed directly by their systems. 555db encourages players to review the privacy policies of any third-party technology providers whose services they interact with. 555db is not responsible for the privacy practices of third-party providers beyond the contractual obligations imposed on them as described in Section 6.1.

14. Changes to This Privacy Policy

555db reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When we make material changes, we will notify registered players via a notification to the mobile number or email address held on their account, or via a prominent on-platform notice, at least 7 days before the updated policy takes effect. The effective date at the top of this document will be updated to reflect the date of the most recent revision.

Your continued use of the 555db platform after the updated Privacy Policy takes effect constitutes your acceptance of the revised terms. If you do not accept an updated policy, you must close your account and withdraw any remaining balance before the effective date of the change.

15. Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data 555db holds about you, please contact the 555db data team through the following channels:

• Email: support 555db.io — subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 directly within the 555db platform after 555db login.
• Response Time: All privacy enquiries are acknowledged within 5 business days and fully resolved within 30 calendar days, in accordance with applicable data subject rights obligations.
• Support Hours: Bangladesh Standard Time (BST, UTC+6), 24 hours a day, 7 days a week.

Support is available in English and is delivered by agents familiar with the Bangladesh market, local payment methods, and the responsible gaming obligations of the 555db platform. We treat all privacy requests with strict confidentiality and will never ask for your account password when processing a data request.