b555 Privacy Policy — How We Protect Your Personal Data

Section 1

What Personal Data We Collect

b555 collects personal data in several categories depending on how you interact with the Platform. Registration data: full legal name, date of birth, email address, mobile phone number, and residential address. This data is collected when you open an account and is required to verify your identity and comply with our age-verification obligations. Financial data: payment method details including bKash wallet number, Nagad account, Rocket number, Upay number, bank account name and number (for Bangladeshi bank transfers), and transaction histories. This data is used solely to process deposits and withdrawals and to fulfil anti-money-laundering obligations. Identity verification data: copies of government-issued identity documents (NID, passport, driving licence) and proof-of-address documents submitted during the KYC process. Behavioural data: login timestamps, session durations, pages visited, games played, bet amounts, and device information (browser type, operating system, IP address, device ID). This data is used to maintain platform security, detect fraudulent activity, and improve the user experience. Communications data: records of any live chat conversations, emails, or support tickets submitted to the b555 support team.

Section 2

Legal Basis for Processing

b555 processes your personal data on the following legal bases: (a) Contractual necessity — processing your registration data, financial data, and KYC documents is necessary to provide the services described in our Terms and Conditions. Without this data, we cannot open or maintain an account for you. (b) Legal obligation — financial transaction records, identity verification documents, and anti-money-laundering data are retained to comply with applicable legal requirements. (c) Legitimate interests — behavioural and device data is processed to protect the Platform from fraud, abuse, and security threats, and to improve Platform performance. Our legitimate interests in maintaining a secure and reliable service do not override your privacy rights. (d) Consent — where b555 sends you optional promotional communications (such as bonus announcements or seasonal offers), this is done only where you have opted in to receive such communications. You may withdraw consent at any time by contacting support.

Section 3

How We Use Your Data

b555 uses your personal data exclusively for the following purposes: to create and maintain your player account; to verify your identity and age in compliance with our 21+ policy; to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladeshi bank channels; to detect and prevent fraud, money laundering, and platform abuse; to provide customer support and respond to your enquiries; to send you transactional communications such as deposit confirmations and withdrawal status updates; to send you promotional communications where you have consented; to improve the Platform's functionality, game selection, and user interface based on aggregated usage patterns; and to comply with applicable legal and regulatory requirements. b555 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

Section 4

Data Sharing and Third Parties

b555 does not sell your personal data to any third party. We share data only in the following limited circumstances: Payment processors — bKash, Nagad, Rocket, Upay, and partner banks receive the minimum transaction data necessary to execute deposits and withdrawals on your behalf. Gaming providers — certified providers such as Evolution Gaming, Pragmatic Play, and Spribe may receive a pseudonymous player identifier to enable game sessions. They do not receive your full name, payment details, or contact information. Identity verification services — where b555 uses an automated KYC verification tool, your identity documents are shared with that tool's provider under a strict data processing agreement. Legal and regulatory authorities — b555 will disclose personal data to law enforcement, financial intelligence units, or regulatory bodies where required to do so by applicable law or where we believe such disclosure is necessary to protect the Platform or its users from serious harm. All third parties with whom b555 shares data are required to maintain appropriate data security standards and are prohibited from using your data for any purpose beyond the specific task for which it was shared.

Section 5

Cookies and Tracking Technologies

b555 uses cookies and similar browser-based storage technologies on the Platform. We use the following categories of cookies: Essential cookies — these are strictly necessary for the Platform to function. They maintain your login session, store your language preference, and keep your shopping basket active between page loads. The Platform cannot function properly without them, and they cannot be disabled. Analytical cookies — these help us understand how players use the Platform. We collect aggregated, anonymised data on which pages are visited most frequently, how long sessions last, and which features are used. This data is used exclusively to improve the Platform. We do not use third-party advertising cookies or cross-site tracking pixels. Your browser settings allow you to refuse or delete cookies at any time; however, disabling essential cookies will prevent you from logging in to your b555 account. By continuing to use the Platform after reviewing this Policy, you consent to our use of essential and analytical cookies as described above.

Section 6

Data Retention

b555 retains personal data only for as long as is necessary for the purposes set out in this Policy or as required by applicable law. Specific retention periods: Account data (name, email, contact information) — retained for the duration of the active account relationship and for 5 years following account closure, in line with standard financial record-keeping requirements. Financial transaction records — retained for a minimum of 5 years following the date of the transaction to satisfy anti-money-laundering and financial compliance obligations. KYC identity documents — retained for 5 years following account closure or the date on which the document was submitted, whichever is later. Analytical and behavioural data — retained in anonymised, aggregated form only, with no retention limit on aggregate data that cannot be linked back to an individual. Communications records — retained for 2 years following the closing of the relevant support case. Following the applicable retention period, data is securely deleted or anonymised in accordance with b555's data disposal procedures.

Section 7

Your Data Rights

As a player on b555, you have the following rights in relation to your personal data: Right of access — you may request a copy of all personal data b555 holds about you. We will respond within 30 days. Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it. Right to erasure — subject to our legal retention obligations, you may request that b555 delete your personal data. This right applies where data is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing was unlawful. Right to restrict processing — you may ask b555 to pause processing of your data while a rectification or erasure request is being considered. Right to object — you may object to processing based on legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds that override your rights. Right to withdraw consent — where processing is based on consent (for example, optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing. To exercise any of these rights, contact the b555 support team at [email protected]. We will acknowledge your request within 2 business days and resolve it within 30 calendar days.

Section 8

Data Security

b555 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include: SSL/TLS encryption on all account, transaction, and data-input pages; access controls that restrict internal access to personal data on a need-to-know basis; regular security assessments and penetration testing of the Platform infrastructure; secure, encrypted storage for all KYC identity documents; and staff training on data handling obligations. In the event of a personal data breach that poses a risk to your rights and freedoms, b555 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach. No method of transmission over the internet or electronic storage is 100% secure. While b555 takes all reasonable steps to protect your data, we cannot guarantee absolute security, and players use the Platform at their own risk in this regard.

Section 9

Children and Minors

b555 is strictly prohibited to persons under the age of 21. We do not knowingly collect, process, or store personal data belonging to any person under 21 years of age. If b555 becomes aware that personal data belonging to a minor has been collected, that data will be deleted immediately and the associated account will be closed. If you are a parent or guardian and believe that a minor in your care has registered on the Platform, please contact [email protected] immediately so that we can take appropriate action.

Section 10

Changes to This Privacy Policy

b555 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform functionality. When we make a material change to this Policy, we will update the "Last updated" date at the top of this page. For significant changes that materially affect how we use your personal data, we will notify you by email to the address registered on your account. Continued use of the Platform following notification of a change constitutes acceptance of the revised Policy. If you do not agree with any change, you must cease using the Platform and contact support to request account closure.

Section 11

Governing Law

This Privacy Policy is governed by applicable law. Any dispute arising from the collection, processing, or storage of personal data by b555 that cannot be resolved through direct negotiation shall be subject to binding arbitration in accordance with the dispute resolution provisions set out in the b555 Terms and Conditions. Nothing in this clause limits your statutory rights as a data subject under applicable privacy legislation.