555ba Privacy
Policy

Section 1

Information We Collect

555ba collects personal data that is necessary to operate the platform, verify your identity, process transactions, and comply with applicable legal obligations. We collect data in three main ways: directly from you when you register or interact with the platform, automatically through your use of the platform, and occasionally from third-party sources for verification purposes.

Information you provide directly:

• Full legal name, date of birth, and gender — collected at registration for identity and age verification purposes.
• Mobile phone number — used for OTP verification, security notifications, and account recovery.
• Email address — used for account management, promotional communications (where opted in), and security alerts.
• National ID number or passport number — collected during the KYC process prior to processing withdrawals.
• Payment method details — bKash account number, Nagad account number, Rocket number, or bank account details used for deposits and withdrawals. Full payment credentials are processed securely and not stored in plain text.
• Residential address — collected as part of enhanced KYC where required by our compliance obligations.
• Communications you send to support — including live chat transcripts and emails sent to [email protected].

Information collected automatically:

• IP address and approximate geolocation — used to detect prohibited jurisdictions, prevent fraud, and comply with geographic restrictions.
• Device type, operating system, and browser version — collected to optimise platform performance and detect suspicious activity.
• Session data — including login times, pages visited, games played, bet amounts, and session duration — used for platform analytics, personalisation, and responsible gaming monitoring.
• Cookie data — see the Cookies & Tracking section below for full details.
• Referral source — how you arrived at the 555ba platform (e.g., direct search, affiliate link), used for marketing attribution purposes.

Information from third parties:

• Identity verification data from KYC service providers used to confirm the authenticity of documents you submit.
• Fraud and sanctions screening data from compliance screening services to detect financial crime risk.
• Payment confirmation data from bKash, Nagad, Rocket, and other payment processors to confirm transaction status.

Section 2

How We Use Your Data

555ba uses the personal data we collect for the following specific purposes. We process your data only where we have a lawful basis to do so — including contractual necessity, legal obligation, legitimate interest, and (for marketing communications) your explicit consent.

We do not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where automated systems flag an account for review (e.g., fraud detection), a human member of the compliance team will review the case before any consequential action is taken.

Section 3

Data Sharing & Disclosure

555ba does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of recipient, strictly on a need-to-know basis and only to the extent necessary for the described purpose:

• Payment service providers — bKash, Nagad, Rocket, Upay, and partner banks receive the payment details necessary to process your deposit or withdrawal transaction. These providers are contractually bound to process your data securely and only for the stated payment purpose.
• KYC and identity verification providers — specialist third-party services that verify the authenticity of identity documents you submit. These providers process your data solely for verification and are bound by strict data processing agreements.
• Fraud and compliance screening services — providers that cross-reference your details against sanctions lists and fraud databases to meet our anti-money-laundering obligations.
• Game and platform technology providers — software suppliers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive anonymised session data necessary to deliver game functionality. These providers do not receive your full personal profile.
• Legal and regulatory authorities — 555ba will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by a valid legal order or statutory obligation.
• Internal group companies — where 555ba operates through affiliated entities, data may be shared within the group for the purposes described in this policy, subject to the same data protection standards.

Section 4

Cookies & Tracking

555ba uses cookies and similar tracking technologies to operate certain essential platform features, remember your preferences, and gather anonymised analytics data that helps us improve the user experience. A cookie is a small text file stored on your device by your browser when you visit the platform.

555ba does not use third-party advertising cookies to build behavioural profiles for sale to advertisers. You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect the platform's ability to function correctly. For more information on managing cookies in your browser, consult your browser's help documentation.

Section 5

Data Retention

555ba retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to meet our legal and contractual obligations, and to resolve any disputes that may arise. The following retention periods apply:

• Active account data — retained for the full duration of your account's active status on the platform, plus a minimum of 5 years following account closure to meet anti-money-laundering record-keeping obligations.
• KYC and identity documents — retained for a minimum of 5 years after the verification was completed, or 5 years after account closure, whichever is later.
• Transaction records — all deposit and withdrawal records are retained for a minimum of 5 years following the transaction date for financial compliance and dispute resolution purposes.
• Customer support communications — live chat transcripts and email correspondence are retained for 2 years from the date of the last communication in a support thread.
• Marketing consent records — records of your marketing opt-in or opt-out preferences are retained for the duration of the relationship and for 3 years following account closure.
• Session and analytics data — anonymised, aggregated analytics data may be retained indefinitely as it cannot be linked back to any individual player.
• Self-exclusion records — if you have self-excluded from the platform, a record of your self-exclusion is retained indefinitely to prevent re-registration in breach of the exclusion, regardless of account closure.

When personal data is no longer required for any active purpose and its retention period has expired, 555ba securely deletes or anonymises the data in accordance with our internal data disposal procedures.

Section 6

Data Security

555ba takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption on all connections between your browser and the 555ba platform, ensuring data is protected in transit.
• Encryption of sensitive data fields (including payment details and identity document references) at rest within our database infrastructure.
• OTP-based two-factor authentication for player account login and for high-value withdrawal requests.
• Role-based access controls limiting platform personnel's access to personal data strictly to what is necessary for their specific job function.
• Automated fraud detection systems that continuously monitor account activity for patterns consistent with unauthorised access or malicious behaviour.
• Regular internal security reviews and vulnerability assessments of the platform's infrastructure.
• Staff training on data protection obligations and incident response procedures.

Despite these measures, no system connected to the internet can be guaranteed to be completely secure. In the event of a data breach that poses a risk to your rights and freedoms, 555ba will notify affected players as soon as reasonably practicable and will take all necessary steps to contain and remediate the breach.

You also play an important role in keeping your data secure. You are responsible for maintaining the confidentiality of your account credentials and for ensuring that no other person has access to your 555ba account login details. If you suspect your account has been accessed without authorisation, contact our support team immediately via live chat or at [email protected].

Section 7

Your Rights

As a player on the 555ba platform, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact our support team via live chat or at [email protected]. We will respond to all verified requests within a reasonable timeframe.

We may need to verify your identity before processing a data rights request to ensure we do not disclose your personal data to an unauthorised third party. We will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable fee may apply.

Section 8

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how 555ba has handled your personal information, please contact our support team using the details below. We are committed to resolving all privacy-related queries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the 555ba platform
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

When submitting a privacy-related request, please include your registered account username and the email address associated with your account so that we can locate your records and verify your identity efficiently.

555ba will acknowledge your privacy request within 2 business days and will aim to provide a full response within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with our response to your complaint, you have the right to escalate your concern to the relevant data protection supervisory authority in your jurisdiction. 555ba will cooperate fully with any such investigation.