Privacy Policy — How 555bit Collects, Uses, and Protects Your Data

1 Data We Collect

555bit collects personal data only to the extent necessary to provide a safe, reliable, and legally compliant betting and casino service to players in Bangladesh. We collect data through three primary channels: information you provide directly during registration and account use, information generated automatically by your interaction with the platform, and information received from trusted third-party partners such as payment processors.

1.1 Data You Provide Directly

When you register a 555bit account, make a deposit, request a withdrawal, or contact our support team, you may provide the following categories of personal data:

• Identity data: Full legal name, date of birth, and gender as stated on your government-issued ID.
• Contact data: Email address and Bangladesh mobile phone number used to register your account.
• Address data: Residential address in Bangladesh, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar).
• Financial data: bKash wallet number, Nagad wallet number, Rocket wallet number, Upay account details, or bank account information used for deposits and withdrawals.
• Verification documents: Copies of your National ID card, passport, driving licence, or utility bills submitted during KYC verification.
• Support communications: Records of emails, live chat transcripts, and any other correspondence you initiate with the 555bit support team.

1.2 Data Collected Automatically

When you access and use the 555bit platform, our systems automatically record certain technical and behavioural data. This data is collected to ensure platform security, prevent fraud, and improve service quality. It includes:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, features accessed, games played, bets placed, session duration, click paths, and search queries entered within the platform.
• Transaction data: Full records of all deposits, withdrawals, bonus activations, bet placements, game rounds, and balance movements within your 555bit account.
• Login and security data: Login timestamps, session tokens, failed login attempts, two-factor authentication activity, and device fingerprint data used for fraud detection.
• Cookie and tracking data: First-party cookies and session identifiers as described in Section 4 of this policy.

1.3 Data from Third Parties

555bit may receive limited personal data about you from trusted third-party partners in the following contexts: payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank) may confirm transaction status and account ownership; identity verification service providers may return the result of a document authenticity check; and fraud-prevention services may flag risk signals associated with an IP address or device.

2 How We Use Your Data

555bit processes personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes stated at the time of collection. The table below summarises the primary purposes for which we use each category of data and the legal basis on which processing is conducted.

2.1 Marketing Communications

555bit sends promotional communications — including bonus offers, BPL and IPL match-day promotions, and seasonal campaigns such as Eid and Pohela Boishakh special offers — only to players who have explicitly opted in to receive them at the time of registration or through their account settings. You may withdraw consent for marketing communications at any time by updating your notification preferences in your account dashboard or by contacting [email protected]. Withdrawal of consent for marketing does not affect any other aspect of your account.

2.2 Automated Decision-Making

555bit uses automated systems to detect potentially fraudulent activity, identify problem gambling patterns, and enforce platform usage policies. Where an automated process results in an adverse action — such as account suspension or withdrawal hold — you have the right to request a manual review of that decision by contacting [email protected] with the subject line "Manual Review Request". We will complete all manual reviews within a reasonable timeframe and communicate the outcome to you in English by email.

3 Data Sharing and Third Parties

555bit does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

3.1 International Data Transfers

Some of 555bit's third-party partners — including game studios and identity verification providers — operate data processing infrastructure outside Bangladesh. Where personal data is transferred internationally, 555bit ensures that appropriate safeguards are in place, including contractual data protection clauses that require the recipient to protect your data to a standard equivalent to that described in this Privacy Policy.

4 Cookies and Tracking Technologies

The 555bit website uses cookies and similar technologies to deliver a functional, personalised, and secure platform experience. A cookie is a small text file placed on your device by a website server. Cookies do not execute code and cannot carry viruses. 555bit uses first-party cookies only — we do not embed third-party advertising cookies or cross-site behavioural tracking technologies.

4.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as chosen language (English), preferred odds format, and notification settings. These persist between sessions so you do not need to reconfigure your preferences each time you log in.
• Analytics cookies: Collect anonymised data about how visitors use the 555bit platform — which pages are visited most frequently, where users navigate from, and which features are used. This data helps us improve platform design and performance. Analytics data does not identify you personally.
• Security cookies: Detect and prevent fraudulent access attempts, bot traffic, and suspicious login patterns. These cookies are essential for protecting your account and the integrity of the platform.

4.2 Managing Cookies

You may configure your browser to refuse all cookies or to alert you when cookies are being sent. Most modern browsers (Chrome, Firefox, Safari, Edge, and others) provide granular cookie management settings accessible via the browser's privacy or settings menu. Please note that disabling strictly necessary cookies will prevent you from logging in to your 555bit account and using core platform features. Disabling functional cookies will mean your preferences are not saved between sessions.

5 Data Security and Storage

Protecting the personal data of 555bit players is a technical and organisational priority. We implement a layered security framework that covers data in transit, data at rest, and access controls at the infrastructure and application level.

• Encryption in transit: All communications between your device and 555bit servers are encrypted using TLS 1.2 or higher with 256-bit AES encryption. The 555bit SSL certificate is current and valid at all times.
• Encryption at rest: Sensitive personal data — including identity documents, financial account details, and password hashes — is stored encrypted at rest using industry-standard encryption algorithms. Passwords are never stored in plain text.
• Access controls: Access to player personal data is restricted on a strict need-to-know basis. 555bit staff with access to personal data are subject to confidentiality obligations and receive data protection training.
• Infrastructure security: Platform servers are hosted in secure data centres with physical access controls, redundant power and network connections, and continuous intrusion detection monitoring.
• Penetration testing: 555bit conducts regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses before they can be exploited.

5.1 Data Breach Response

In the event of a personal data breach that creates a risk to player rights and freedoms, 555bit will act promptly to contain the breach, assess its scope, and notify affected players by email without undue delay. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures 555bit has taken or proposes to take to address the breach. Players who suspect their account has been compromised should contact [email protected] immediately so that remedial action can be taken.

6 Your Privacy Rights

As a 555bit player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] in English, clearly identifying the right you wish to exercise and your registered account details. We will respond to all verified requests in a timely manner and in English.

• Right of access: You have the right to request a copy of all personal data 555bit holds about you. We will provide this in a clear, structured English-language format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data — such as your verified legal name and date of birth — can only be updated through the formal KYC re-verification process.
• Right to erasure: You may request that 555bit delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that we may be required to retain certain data for legal compliance purposes even after an erasure request.
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, and to opt out of direct marketing communications at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

7 Data Retention Policy

555bit retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal obligations, to resolve disputes, and to enforce our agreements. The specific retention periods we apply to each data category are set out below.

When personal data reaches the end of its applicable retention period, 555bit will either securely delete it using industry-standard data destruction methods or permanently anonymise it so that it can no longer be linked to any individual. Anonymised data may be retained indefinitely for aggregate statistical and analytical purposes.

8 Updates to This Policy

555bit reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. The effective date at the top of this document indicates when the current version was last revised. When material changes are made — such as the introduction of a new data processing purpose or a change in data sharing arrangements — we will notify registered players by email to the address on their account, providing a summary of the key changes and a link to the updated policy.

Continued use of the 555bit platform following notification of a policy update constitutes acceptance of the revised Privacy Policy. If you disagree with any change to this policy, you have the right to request account closure and deletion of your personal data (subject to any legally mandated retention obligations) by contacting [email protected] before the effective date of the update.