555t Privacy Policy — How We Collect, Use, and Protect Your Personal Data

Who We Are

This Privacy Policy is issued by 555t ("we", "us", "the Company"), the operator of the online casino and sports betting platform accessible at https://555t.io ("the Platform"). 555t is a digital entertainment platform serving players in Bangladesh and operates as a data controller in respect of the personal data collected through the Platform.

As a data controller, 555t determines the purposes for which personal data is collected and the means by which it is processed. 555t is committed to handling all personal data responsibly, transparently, and in accordance with the principles set out in this Privacy Policy. If you have any questions about how your data is managed, you may contact the 555t data team at any time via the contact details in Section 13 of this Policy.

Data We Collect and How

555t collects personal data through several channels: directly from you when you register an account or contact support; automatically when you use the Platform; and in limited circumstances from third-party service providers such as identity verification partners and payment processors.

The following table summarises the categories of personal data 555t collects and the primary source of each:

555t does not collect special categories of sensitive personal data (such as biometric data for identification purposes, health data, religious beliefs, or political opinions) unless specifically required by law or with your explicit consent.

Legal Basis for Processing

555t processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and 555t — for example, creating and managing your account, processing deposits and withdrawals, and delivering the gaming services you have requested.
• Legal Obligation: Processing is required for 555t to comply with applicable legal obligations — including anti-money laundering (AML) requirements, Know Your Customer (KYC) identity verification, fraud prevention obligations, and record-keeping requirements.
• Legitimate Interests: Processing is necessary for 555t's legitimate business interests, provided those interests are not overridden by your rights — including platform security monitoring, fraud detection, improving the Platform's performance, and responsible gaming monitoring.
• Consent: Where processing is based on your consent — for example, receiving promotional communications about 555t bonuses and offers — you may withdraw your consent at any time without affecting the legality of processing carried out prior to withdrawal.

How We Use Your Data

555t uses the personal data it collects for the following clearly defined purposes:

• Account Creation and Management: To register your 555t account, authenticate your identity at login, manage your account settings, and communicate important account information to you.
• Payment Processing: To process deposits made via bKash, Nagad, Rocket, Upay, and bank transfer, and to verify and process withdrawal requests to your registered payment method.
• Identity Verification (KYC): To verify that you meet the minimum age requirement of 21 years, to confirm your identity, and to comply with anti-money laundering obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, bonus abuse, and other prohibited conduct.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviours and to facilitate the responsible gaming tools available to you, including deposit limits, cooling-off periods, and self-exclusion.
• Customer Support: To respond to your support requests, handle complaints, and maintain records of communications for quality assurance and dispute resolution purposes.
• Platform Improvement: To analyse aggregated and anonymised usage data in order to improve the performance, reliability, and user experience of the 555t platform.
• Legal Compliance: To fulfil 555t's obligations under applicable laws and regulations, including providing information to regulatory or law enforcement authorities where legally required.
• Marketing Communications: Where you have provided consent, to send you information about 555t promotions, bonuses, new game launches, and seasonal offers relevant to the Bangladesh market. You may opt out of marketing communications at any time.

Data Sharing and Third Parties

555t does not sell your personal data to any third party. Data is shared with third parties only in the limited circumstances described below, and always under contractual obligations that require those parties to protect your data to a standard equivalent to that applied by 555t:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners — to process deposits and withdrawals. These providers receive only the minimum transaction data necessary to process your payment.
• Identity Verification Partners: Third-party KYC and AML compliance service providers who assist 555t in verifying player identities, screening against sanctions lists, and conducting document authentication.
• Game Software Providers: Game studios and platform providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive anonymised session data necessary to deliver their games on the 555t platform. These providers do not receive personally identifiable information beyond a session token.
• IT Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers who maintain the technical infrastructure on which the 555t platform runs.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or a legitimate request from a competent authority, 555t may disclose personal data to regulatory bodies, law enforcement agencies, or other government authorities.
• Professional Advisors: Legal counsel, auditors, and compliance consultants who require access to data in the course of providing professional services to 555t, and who are bound by professional confidentiality obligations.

Payment Data and Financial Information

Financial data — including your mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details, and transaction records — is treated with an elevated level of protection on the 555t platform. Payment data is never stored in plain text. Card or wallet credentials are handled exclusively by the relevant payment service provider and are not retained on 555t's own servers beyond what is required for transaction reconciliation.

All deposit and withdrawal transactions conducted through 555t are logged in your account transaction history and retained for the periods specified in Section 9 of this Policy. Transaction records may be used to resolve payment disputes, comply with financial reporting requirements, and assist in fraud investigations. You may request a copy of your transaction history at any time by contacting 555t support.

555t monitors all financial transactions for patterns indicative of money laundering or other financial crime. Where suspicious activity is identified, 555t is legally obligated to report it to the appropriate authorities without notifying the account holder. This is not a discretionary decision — it is a requirement under applicable anti-money laundering law.

Cookies and Tracking Technologies

The 555t platform uses cookies and similar tracking technologies to operate the website, maintain your login session, remember your preferences, and analyse how the Platform is used. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in, security tokens, and cookies that remember your responsible gaming settings. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences such as preferred language, display settings, and notification choices. Disabling these cookies may affect your experience but will not prevent you from using the Platform.
• Analytics Cookies: Used to collect anonymised information about how visitors use the 555t platform — including which pages are visited most frequently, session duration, and navigation paths. This information helps 555t improve the Platform experience. No personally identifiable information is included in analytics data.
• Security Cookies: Used to support fraud detection and account security monitoring, including identifying unusual login patterns and detecting bot activity.

Most modern web browsers allow you to control cookie settings through the browser's privacy preferences. You may block or delete cookies through your browser settings; however, doing so may affect the functionality of the 555t platform, particularly features that rely on session persistence. 555t does not currently use third-party advertising cookies or behavioural profiling cookies.

Data Security Measures

555t implements a layered approach to data security, combining technical controls, organisational procedures, and access governance to protect your personal data from unauthorised access, loss, alteration, or disclosure. The key security measures in place include:

• 256-Bit SSL Encryption: All data transmitted between your browser or device and the 555t servers is encrypted using Transport Layer Security (TLS) with 256-bit keys — the industry benchmark for secure online data transmission.
• Password Hashing: Account passwords are never stored in readable form. They are processed through a one-way cryptographic hashing algorithm so that even 555t's own technical staff cannot read your password.
• Access Controls: Access to personal data within 555t's systems is restricted on a strict need-to-know basis. Staff members access only the data required to perform their specific role. All internal data access is logged and audited.
• Intrusion Detection: 555t operates real-time monitoring systems that detect and alert on unusual access patterns, potential breaches, and unauthorised system activity.
• Regular Security Reviews: The 555t platform and its underlying infrastructure undergo periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

While 555t takes all reasonable and practicable steps to protect your personal data, no digital system can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights, 555t will notify affected individuals promptly and take all appropriate remediation steps. If you suspect that your account security has been compromised, contact 555t support immediately at [email protected].

Data Retention

555t retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active Account Data: Retained for the lifetime of your 555t account and for a period of five years following the date of account closure, in order to comply with legal and regulatory record-keeping obligations.
• KYC and Identity Verification Documents: Retained for a minimum of five years following account closure, in accordance with anti-money laundering regulatory requirements.
• Transaction and Financial Records: Retained for a period of seven years following each transaction, to comply with financial record-keeping obligations and to support dispute resolution.
• Support and Communication Records: Retained for three years following the resolution of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your marketing consent plus three years, to demonstrate compliance with consent obligations.
• Anonymised Analytics Data: May be retained indefinitely in anonymised, aggregated form. Once data is fully anonymised and cannot be re-linked to an individual, it falls outside the scope of this Privacy Policy.

Following the expiry of the applicable retention period, personal data is securely deleted or permanently anonymised. Where deletion is not immediately possible due to backup schedules or technical constraints, the data will be isolated from active processing until deletion can be completed.

Your Rights Over Your Data

You hold meaningful rights in relation to the personal data that 555t holds about you. 555t is committed to honouring these rights promptly and transparently. Your rights include:

• Right of Access: You may request a copy of all personal data that 555t holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data held by 555t is inaccurate or incomplete, you may request that it be corrected. You may update basic account details directly through your account settings at any time.
• Right to Erasure: You may request that 555t delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where it has been processed unlawfully. Note that 555t may be required by law to retain certain data even following an erasure request — for example, transaction records required under anti-money laundering regulations.
• Right to Restrict Processing: You may request that 555t limit the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data held about you.
• Right to Data Portability: You may request a copy of the personal data you have provided to 555t in a structured, machine-readable format for the purpose of transferring it to another service provider.
• Right to Object: You may object to the processing of your personal data where 555t relies on legitimate interests as its legal basis, or where your data is used for direct marketing purposes. Marketing opt-outs will be processed immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the 555t data team at [email protected]. We will acknowledge your request within five business days and aim to fulfil it within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

Children and Underage Players

The 555t platform is strictly intended for adults aged 21 years and above. 555t does not knowingly collect, process, or retain personal data from individuals under the age of 21. The registration process requires all applicants to confirm that they are 21 or older, and identity verification is used to enforce this requirement.

If 555t discovers or is notified that an account has been registered by an individual under the age of 21, the account will be immediately suspended, all funds will be returned to the payment method used for deposit following verification of ownership, and all personal data associated with the account will be deleted as quickly as legally permissible. If you believe that a minor has registered a 555t account, please notify 555t support immediately at [email protected].

Changes to This Policy

555t reviews this Privacy Policy periodically and updates it when necessary to reflect changes in data practices, legal requirements, or Platform features. When material changes are made to this Policy, 555t will notify registered account holders by email at least 14 days before the changes take effect. The updated Policy will also be published on this page with the revised effective date clearly indicated at the top.

Your continued use of the 555t platform after a revised Privacy Policy has taken effect constitutes your acknowledgement of the updated Policy. If you do not agree with any changes, you should stop using the Platform and request account closure before the changes take effect. Minor, non-material updates — such as corrections of typographical errors or clarifications that do not change the substance of the Policy — may be made without specific notification.

Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 555t handles your personal data, please contact the 555t data and privacy team using the details below. All privacy-related enquiries are handled with priority and in strict confidence.

• Privacy and Data Enquiries: [email protected] — please include "Privacy Request" in your message subject to ensure prompt routing to the data team.
• Response Time Target: Acknowledgement within five business days; full response within 30 calendar days for data subject rights requests.
• Support Hours: 24 hours a day, seven days a week, Bangladesh Standard Time (UTC+6).
• Platform Address: https://555t.io

555t takes all privacy complaints seriously and will investigate and respond to every enquiry received. Where a complaint cannot be resolved to your satisfaction through direct contact with the 555t team, you may have the right to escalate your complaint to a relevant supervisory authority in accordance with applicable law.