555e Privacy Policy — How We Protect Your Personal Data

1 Introduction and Scope

This Privacy Policy ("Policy") describes how 555e ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who register an account, visit the website at https://555e.io, or otherwise interact with any of our products and services.

This Policy applies to all personal data processed in connection with your use of the 555e platform, including data collected through the website, any associated mobile-optimised interfaces, customer support channels, and payment processing workflows. It applies regardless of whether you are a registered account holder or a visitor who has not yet completed registration.

By creating an account on 555e or by continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read, understood, and accepted the data practices described herein. If you do not agree to this Policy, you must immediately cease using the platform and contact our support team to close your account.

This Policy should be read alongside our Terms & Conditions, available at /terms-conditions, and our Responsible Gaming Policy, available at /responsible-gaming. Together, these documents form the complete framework of your rights and obligations as a 555e player.

2 Personal Data We Collect

555e collects the following categories of personal data in connection with your use of the platform. The specific data points collected in each category depend on the features you use and the stage of your account lifecycle.

We do not collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, health information, or political opinions unless you voluntarily disclose such information in a support communication, in which case it is used solely to respond to your query and is not stored in your account profile.

3 How We Collect Your Data

555e collects personal data through the following primary channels:

• Direct provision by you: Data you enter when completing the account registration form, submitting identity verification documents, initiating a deposit or withdrawal, completing a responsible gaming self-assessment, or contacting our support team.
• Automated technical collection: Data collected automatically by our platform infrastructure when you access the website, including IP address, device identifiers, browser characteristics, and session behaviour data captured through server logs and first-party analytics tools.
• Payment provider data feeds: Transaction reference data and payment confirmation signals received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, Mastercard, and other payment partners when you initiate financial transactions on the platform.
• Game provider data feeds: Game session data, round results, and bet records transmitted to 555e by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi as part of normal game operation.
• Fraud prevention and compliance services: Risk signals and identity verification outcomes received from third-party fraud prevention and KYC service providers engaged by 555e to verify player identities and protect the integrity of the platform.
• Cookies and tracking technologies: Behavioural and session data collected via first-party cookies and similar technologies deployed on the 555e website. See Section 6 for full details.

4 Purposes and Legal Basis for Processing

555e processes your personal data only for specific, documented purposes. The table below sets out each processing purpose, the legal basis under which we rely on it, and the categories of data involved.

Where we rely on your consent as the legal basis for processing — specifically for promotional communications — you may withdraw that consent at any time by contacting our support team or by updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

5 Sharing Your Data with Third Parties

555e does not sell, rent, or commercially trade your personal data to unaffiliated third parties. We share your personal data only in the following carefully defined circumstances:

• Payment processing partners: We share the minimum necessary financial and identity data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, Mastercard, and other payment service providers solely to process your deposit and withdrawal transactions. These partners are contractually bound to use your data only for payment processing purposes.
• Game providers: We share session and account data with licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) to facilitate your gameplay. Game providers receive only the data necessary to authenticate your session and record game outcomes.
• Identity verification and fraud prevention services: We share identity documents and related data with third-party KYC and AML compliance service providers to verify your identity and prevent fraudulent account activity. These providers operate under strict data processing agreements.
• Customer support platforms: We may use third-party live chat and ticketing infrastructure to deliver customer support. Support agents operating on these platforms have access to your account data on a need-to-know basis only.
• Legal and regulatory disclosure: We may disclose your personal data to law enforcement authorities, government agencies, or financial regulators where we are required to do so by applicable law, court order, or regulatory directive. In such cases, we will disclose only the minimum data required to satisfy the legal obligation.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of the 555e business or assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer via your registered email address with reasonable advance notice.

6 Cookies and Tracking Technologies

555e uses cookies and similar tracking technologies to operate core platform functionality, maintain session security, and understand how players interact with the website. The following types of cookies are in use on the 555e platform:

• Strictly necessary cookies: These cookies are essential for the website to function. They maintain your login session, remember your account preferences, and support secure payment flows. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: These cookies remember your language preferences, preferred game categories, and other personalisation settings to improve your experience on return visits. They do not track your activity across other websites.
• Analytics cookies: First-party analytics tools use cookies to collect aggregated, anonymised data about how players navigate the website. This data is used internally to improve platform design and performance. 555e does not use third-party analytics platforms that share your data with external advertising networks.
• Security cookies: These cookies are used to detect fraudulent login attempts, identify unusual session activity, and protect your account from unauthorised access. They are a component of our active security infrastructure.

By continuing to use the 555e website after this Policy has been made available to you, you consent to the use of the cookies described above. You may manage your browser's cookie settings at any time; however, disabling strictly necessary or security cookies may prevent you from accessing certain features of the platform, including your account dashboard and payment functions.

7 Data Security and Storage

555e employs a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and the 555e platform infrastructure.
• Encryption at rest for all stored personal data and financial records.
• Strict access controls limiting employee access to personal data on a need-to-know basis, enforced through role-based permissions and multi-factor authentication for administrative systems.
• Regular third-party security audits and penetration testing of the 555e platform infrastructure.
• Automated monitoring and alerting systems designed to detect and respond to suspicious access patterns or potential data breaches in real time.
• Physical security controls at data centre facilities, including access logging and environmental monitoring.

Despite these measures, no data transmission over the internet and no data storage system can be guaranteed to be 100% secure. In the event of a data breach that affects your personal data and poses a risk to your rights, 555e will notify you via your registered email address as promptly as is reasonably practicable and will take all available steps to mitigate the impact of the breach.

You are responsible for maintaining the security of your own account credentials. 555e will never ask you to disclose your password via email, live chat, or any other channel. If you suspect that your account has been compromised, contact our support team immediately.

8 Data Retention Periods

555e retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following retention framework applies:

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained for statistical or analytical purposes without restriction.

9 Your Privacy Rights

As a registered player on the 555e platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with a clear description of your request. We will respond within 30 calendar days of receiving a valid request.

• Right of access: You have the right to request a copy of all personal data that 555e holds about you. We will provide this information in a structured, commonly used, and machine-readable format where technically feasible.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For security reasons, changes to identity data may require re-verification.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to our legal retention obligations and may not result in complete erasure of all data categories.
• Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in specific circumstances, such as where the accuracy of the data is contested or where you have objected to processing.
• Right to data portability: You have the right to receive your personal data in a structured, machine-readable format and to request that it be transmitted directly to another service provider where technically feasible and legally permissible.
• Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interest as the legal basis. In such cases, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where we rely on your consent for any processing activity (such as promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10 Children and Minors Under 21

The 555e platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21. If 555e discovers or is notified that a registered account holder is under 21 years of age, the account will be closed immediately, all personal data associated with that account will be deleted to the extent permitted by legal retention obligations, and any deposited funds will be returned after identity verification.

If you believe that a minor has registered an account on 555e or that personal data belonging to a minor has been collected by our platform, please contact us immediately at [email protected] so that we can take prompt corrective action. 555e takes the protection of minors extremely seriously and welcomes reports of suspected underage account activity.

11 International Data Transfers

555e primarily serves players based in Bangladesh. In the course of operating our platform, your personal data may be processed on servers or by service providers located in other countries. Where such international transfers occur, 555e ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Safeguards for international data transfers may include contractual data processing agreements with receiving parties, technical security requirements equivalent to those applied to data stored within Bangladesh, and restrictions on the purposes for which transferred data may be used by receiving parties. 555e does not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing the compensating contractual and technical measures described above.

12 Changes to This Privacy Policy

555e reserves the right to update, amend, or replace this Privacy Policy at any time. Where a proposed change materially affects how we collect or use your personal data, we will notify you via your registered email address at least 14 calendar days before the change takes effect. For minor clarifications or corrections that do not affect your substantive rights, we may update the Policy without advance individual notice.

The "Last Updated" date at the top of this document always reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of the 555e platform following the effective date of any amendment constitutes acceptance of the revised Policy.

13 Contact and Data Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which 555e processes your personal data, please contact our support team through any of the following channels:

• Live Chat: Available directly through the 555e website at https://555e.io. Our support agents are available 24 hours a day, 7 days a week and can escalate data privacy enquiries to our data handling team.
• Email: [email protected] — please include "Privacy Enquiry" in the subject line of your email to ensure it is routed to the correct team. Email responses are typically provided within 24 hours.
• Data Rights Requests: To exercise any of the privacy rights described in Section 9, please contact us via email with a clear description of your request and proof of identity. We will acknowledge receipt within 3 business days and provide a full response within 30 calendar days.
• Operating Hours: Our core support team operates on Bangladesh Standard Time (BST, UTC+6). Automated chat and email receipt confirmation are available at all times.

555e is committed to resolving all data privacy concerns in a timely and transparent manner. If you are not satisfied with the outcome of a privacy enquiry, you retain the right to escalate the matter through appropriate legal or regulatory channels available to you under applicable Bangladeshi law.