Your Privacy Matters at 555ff

Who We Are

555ff ("we", "us", "our") is an online casino and sports betting platform operating at 555ff.io and serving players primarily located in Bangladesh. For the purposes of this Privacy Policy, 555ff acts as the data controller in respect of personal data collected through the platform, meaning we determine the purposes and means of processing your personal data.

Our platform offers online casino games, live dealer experiences, slot games, and sports betting markets including cricket (BPL, IPL, T20 World Cup), football, kabaddi, and other sports of interest to players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

All privacy-related correspondence, data access requests, and complaints should be directed to our dedicated privacy support channel at [email protected]. Our support team operates 24 hours a day, seven days a week, in English, operating on Bangladesh Standard Time (BST, UTC+6).

Data We Collect

555ff collects personal data in several ways: directly from you when you register or use the platform, automatically through your device and browser when you access our services, and from third-party identity verification and payment partners. The categories of personal data we collect are described below.

2.1 Registration & Identity Data

• Full legal name as it appears on your National Identity Card (NID) or passport;
• Date of birth (to verify that you meet the 21+ age requirement);
• Residential address in Bangladesh;
• Email address and mobile phone number;
• Username and encrypted password;
• Copies of identity documents submitted during KYC verification (NID, passport, utility bill, bank statement).

2.2 Financial & Transaction Data

• Payment method details (bKash wallet number, Nagad account, Rocket number, bank account details, Visa/Mastercard card details — stored only in tokenised or masked form);
• Deposit and withdrawal amounts, dates, and transaction reference numbers;
• Bonus credits issued, wagering activity, and balance history;
• Currency (Bangladeshi Taka, BDT / ৳) and exchange rate data where applicable.

2.3 Gaming & Betting Activity Data

• Game history (games played, bet amounts, outcomes, session durations);
• Sports betting selections, stake amounts, odds accepted, and settlement results;
• Bonus and promotional offer usage;
• Responsible gaming tool settings (deposit limits, time-outs, self-exclusion records).

2.4 Technical & Device Data

• IP address and approximate geolocation (country/city level);
• Device type, operating system, and browser type and version;
• Session timestamps, page visit data, and navigation paths within the platform;
• Cookie identifiers and similar tracking technologies (see Section 5).

2.5 Communications Data

• Live chat transcripts and email correspondence with our support team;
• Formal complaint records and their resolution;
• Survey responses and feedback submitted voluntarily.

2.6 Data Collected as a Summary Table

How We Use Your Data

555ff uses your personal data only for specified, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process your personal data are described in detail below.

3.1 Account Management & Service Delivery

We use your registration and identity data to create and maintain your 555ff account, authenticate your identity when you log in, and enable you to access the full range of platform services including casino games, sports betting, live dealer tables, and promotional offers.

3.2 Identity Verification (KYC)

We are required to verify the identity and age of all players to ensure compliance with our 21+ policy and to fulfil our anti-money laundering (AML) obligations. This involves processing copies of your identity documents with third-party KYC verification partners. KYC data is processed only to the extent necessary to confirm your identity, age, and residency.

3.3 Payment Processing

Financial transaction data is processed to facilitate your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. We use tokenised or masked payment credentials wherever technically possible to minimise the exposure of your full financial details.

3.4 Fraud Prevention & Security

Technical data including IP addresses, device fingerprints, and session activity is analysed to detect and prevent fraudulent activity, account takeovers, bonus abuse, and money laundering. This processing is essential to protecting the integrity of the platform and the financial security of all players.

3.5 Responsible Gaming

Gaming activity and account data is monitored to identify patterns that may indicate problem gambling behaviour. Where such patterns are detected, 555ff may reach out proactively to offer responsible gaming tools or support resources. Self-exclusion and deposit limit records are processed to enforce player-requested restrictions.

3.6 Customer Support

Communications data including live chat transcripts and email correspondence is retained to resolve your queries accurately and to maintain a record of any disputes or formal complaints. This data helps us provide consistent, high-quality support and to improve our customer service processes over time.

3.7 Platform Improvement & Analytics

Aggregated and anonymised technical and gaming activity data is used to analyse how players use the 555ff platform, identify popular features, diagnose technical issues, and prioritise product improvements. Where analytics are performed on personal data rather than anonymised data, this is done only to the extent necessary and with appropriate safeguards in place.

3.8 Marketing Communications

Where you have provided explicit consent to receive marketing communications, we may use your email address and mobile number to send you information about bonuses, promotions, new games, and sporting events relevant to your interests (for example, BPL cricket season offers or Eid promotional bonuses). You may withdraw consent at any time — see Section 11 for full details.

Legal Basis for Processing

555ff processes your personal data on one or more of the following legal grounds, depending on the specific purpose of the processing activity:

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before your withdrawal. Where processing is based on legitimate interests, you have the right to object to that processing — see Section 8 for details on exercising your rights.

Cookies & Tracking Technologies

555ff uses cookies and similar tracking technologies on the platform to ensure core functionality, enhance your experience, and support our security and analytics systems. A cookie is a small text file placed on your device when you visit the 555ff website. Cookies do not contain executable code and cannot access other data stored on your device.

5.1 Categories of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of the platform. These include session authentication cookies that keep you logged in during your visit, security tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and recently visited game categories. These improve the consistency of your experience across sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the platform — which pages are visited most frequently, where users exit, and how long sessions last. This information is used solely to improve the 555ff platform. No personally identifiable information is transmitted via analytics cookies.
• Security Cookies: Help detect and mitigate fraudulent activity, bot traffic, and account takeover attempts by monitoring behavioural patterns across sessions.

5.2 Managing Cookies

You may configure your browser to refuse all cookies, delete existing cookies, or alert you when cookies are being set. Please note that disabling strictly necessary cookies will impair or entirely prevent your ability to log in and use the 555ff platform. Instructions for managing cookies are available in your browser's help documentation. 555ff does not use third-party advertising or retargeting cookies.

Data Sharing & Third Parties

555ff does not sell, rent, or trade your personal data. We share personal data with third parties only where strictly necessary to deliver the platform's services or to comply with legal obligations. All third-party partners with whom data is shared are bound by confidentiality agreements and are required to process your data only for the specified purpose and in accordance with applicable data protection standards.

6.1 Categories of Third Parties We Share Data With

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — to facilitate deposits and withdrawals. Only the data strictly necessary to process each transaction is shared (e.g., account number, transaction amount).
• KYC & Identity Verification Partners: Third-party identity verification services that assist in confirming your identity, age, and address as part of our AML compliance programme. These partners process your document images and personal details solely for the purpose of verification and are prohibited from retaining or using your data for any other purpose.
• Game Providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by one of these studios, technical session data (session token, game stake, outcome) is transmitted to their servers to deliver the game. Game providers do not receive your full name, address, or payment details.
• IT Infrastructure & Hosting Providers: Cloud hosting and database services that store and process platform data on our behalf. These providers operate under strict data processing agreements and are required to maintain security standards commensurate with those we apply ourselves.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or lawful regulatory request, 555ff may disclose personal data to relevant authorities. We will notify you of any such disclosure where we are legally permitted to do so.

6.2 No Sale of Personal Data

555ff has never sold, and will never sell, your personal data to any third party for commercial purposes. We do not share your data with advertising networks, data brokers, or any organisation whose primary purpose is to monetise personal data.

Data Retention

555ff retains personal data for no longer than is necessary to fulfil the purposes for which it was collected or as required by applicable law. The following retention schedule applies:

When the applicable retention period expires, personal data is either securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual. Anonymised, aggregated data may be retained beyond these periods for statistical analysis and platform improvement purposes.

Your Data Rights

As a data subject, you hold a number of rights in relation to the personal data that 555ff holds about you. These rights are described below along with the process for exercising each one. All requests should be submitted in English to [email protected] with the subject line "Data Rights Request — [Your Username]".

• Right of Access: You have the right to request a copy of all personal data that 555ff holds about you, together with information about how that data is being used, where it came from, and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it promptly. For example, if your registered address or phone number has changed, you may ask us to update our records.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Please note that this right is subject to legal retention obligations — for example, AML regulations require us to retain certain transaction records for a minimum of 7 years regardless of an erasure request.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict processing of your personal data — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to request that we transmit this data to another service provider where technically feasible.
• Right to Object: Where processing is based on legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Marketing Consent: Where you have consented to receive marketing communications, you may withdraw that consent at any time by contacting support or using the unsubscribe option in any marketing email. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

Data Security

555ff takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction, or disclosure. No method of electronic transmission or storage is 100% secure, but we maintain industry-standard safeguards and continuously review and improve our security posture.

9.1 Technical Measures

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 555ff platform is encrypted using TLS 1.2 or higher. This ensures that data in transit cannot be intercepted or read by unauthorised third parties.
• Encrypted Data Storage: Personal data, financial records, and identity documents held in our databases are stored in encrypted form. Database-level encryption ensures that even in the event of unauthorised physical access to storage media, the data remains unreadable.
• Access Controls: Access to personal data within 555ff's internal systems is restricted on a strict need-to-know basis. Employees and contractors are granted only the minimum level of access required to perform their role. All internal access is logged and audited.
• Two-Factor Authentication (2FA): 555ff supports two-factor authentication for player accounts to provide an additional layer of protection against unauthorised account access. Players are strongly encouraged to enable 2FA.
• Intrusion Detection & Monitoring: Our infrastructure is monitored continuously for suspicious activity, anomalous access patterns, and potential security incidents. Automated alerts are in place to flag and escalate potential threats in real time.

9.2 Organisational Measures

• All staff and contractors with access to personal data receive regular data protection training and are bound by confidentiality obligations.
• Third-party service providers are subject to due diligence assessments and are required to demonstrate adequate data security practices before being granted access to any personal data.
• 555ff maintains an internal data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities in accordance with applicable legal requirements.

9.3 Your Responsibilities

While 555ff takes every reasonable step to protect your data, the security of your account also depends on your own actions. You are responsible for keeping your login credentials confidential, choosing a strong and unique password for your 555ff account, enabling two-factor authentication, and notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

Children & Minors

The 555ff platform is strictly intended for adults aged 21 and above. We do not knowingly collect or process personal data relating to individuals under the age of 21. Registration on the 555ff platform requires a declaration of age, and all accounts are subject to identity and age verification as part of our KYC process.

If 555ff becomes aware that a player account belongs to, or has been used by, an individual under the age of 21, the account will be suspended immediately, all funds will be handled in accordance with our Terms & Conditions, and any personal data relating to the minor will be deleted as promptly as possible subject to any overriding legal obligations.

Parents and guardians are encouraged to make use of parental control software to restrict access to online gambling platforms on devices used by minors. 555ff does not accept any responsibility for unauthorised use of the platform by individuals who misrepresent their age during registration. For additional guidance, please refer to our Responsible Gaming page.

Marketing Communications

555ff may send you marketing communications about bonuses, promotions, new games, and upcoming sporting events — including BPL cricket season offers, IPL betting promotions, T20 World Cup specials, and seasonal offers tied to occasions such as Eid, Pohela Boishakh, and Victory Day — where you have provided explicit prior consent to receive such communications.

11.1 How We Obtain Consent

Marketing consent is obtained through a clearly labelled opt-in checkbox during the account registration process. This checkbox is not pre-ticked. By leaving it unticked, you will not receive marketing communications. Completing registration without opting in does not result in marketing emails or SMS messages being sent to you.

11.2 Withdrawing Consent

You may withdraw your consent to receive marketing communications at any time using any of the following methods:

• Clicking the "Unsubscribe" link included in the footer of every marketing email;
• Contacting our support team via live chat and requesting removal from all marketing lists;
• Emailing [email protected] with the subject line "Unsubscribe — [Your Username]".

Withdrawal of consent will be processed within 5 business days. Please note that withdrawing marketing consent does not affect the delivery of transactional communications (such as deposit confirmations, withdrawal notifications, account security alerts, and KYC request emails) which are sent as part of our contractual obligation to you and do not require separate consent.

11.3 No Third-Party Marketing

555ff does not share your contact details with any third-party organisation for the purposes of their marketing activities. Any marketing communication you receive will be sent by 555ff directly and will relate exclusively to 555ff products and services.

International Data Transfers

555ff's platform infrastructure and third-party service providers may be located in jurisdictions outside Bangladesh. When personal data is transferred internationally — for example, to a game provider's servers or a KYC verification partner operating in another country — 555ff ensures that appropriate safeguards are in place to protect your data to a standard that is at least equivalent to the protections that apply within Bangladesh.

Safeguards employed for international data transfers include:

• Contractual data processing agreements that require the receiving party to apply equivalent data protection standards;
• Transfer only to jurisdictions with adequate data protection frameworks recognised by international standards bodies;
• Limitation of transferred data to the minimum necessary for the specific processing purpose.

If you would like further information about the specific safeguards applied to any particular international data transfer, please contact us at [email protected]. We will provide details within 30 days of your request.

Policy Updates

555ff reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new platform features, changes in applicable law, or guidance issued by relevant data protection authorities. The current effective date is always displayed at the top of this page and in the Table of Contents.

Where changes to this Privacy Policy are material — meaning they meaningfully affect how we process your personal data, the rights available to you, or the categories of data we collect — we will notify you in advance by:

• Sending a notification email to the address registered to your 555ff account, at least 14 days before the new policy takes effect; and/or
• Displaying a prominent in-platform notice when you next log in to your account, clearly indicating what has changed and when the updated policy becomes effective.

Your continued use of the 555ff platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the platform and contact us to close your account before the new policy takes effect. Minor, non-material changes (such as typographical corrections or clarifications that do not affect the substance of the policy) may be made without advance notice.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how 555ff has handled your personal data, please contact us using the details below. All privacy-related communications are handled in English by our dedicated support team, operating 24 hours a day, seven days a week, on Bangladesh Standard Time (BST, UTC+6).

14.1 General Privacy Enquiries

For general questions about this Privacy Policy or about how your data is used, contact our support team via live chat on the platform (typically under 5 minutes response time) or by email at [email protected]. Email responses are provided within 24 hours during normal operations.

14.2 Formal Data Rights Requests

To exercise any of the data rights described in Section 8 (access, rectification, erasure, restriction, portability, objection), please submit a written request by email to [email protected] with the subject line "Data Rights Request — [Your Username]". Include your registered email address and a clear description of the right you wish to exercise. Identity verification will be required before any request is processed. 555ff will respond within 30 days of receipt.

14.3 Formal Privacy Complaints

If you believe that 555ff has handled your personal data unlawfully or in breach of this Privacy Policy, you may submit a formal written complaint to [email protected] with the subject line "Privacy Complaint — [Your Username]". Please include a detailed description of your concern, the relevant dates, and any supporting documentation. 555ff will acknowledge your complaint within 24 hours and aim to issue a full written response within 7 business days.

14.4 Contact Details Summary

• Email: [email protected]
• Live Chat: Available 24/7 via the platform interface
• Response Language: English
• Time Zone: Bangladesh Standard Time (BST, UTC+6)
• Data Request Response Time: Within 30 days
• Complaint Acknowledgement: Within 24 hours