p555 Privacy Policy — How We Protect Your Data

01 Introduction

This Privacy Policy (hereinafter referred to as "the Policy") sets out the practices of p555 (hereinafter referred to as "p555", "we", "us", or "the Platform") with respect to the collection, processing, storage, disclosure, and protection of personal data belonging to individuals (hereinafter referred to as "you", "the User", or "the Player") who access, register with, or otherwise interact with the services provided through p555.io.

p555 operates as Bangladesh's premier online casino and sports betting platform, serving registered players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh. In the course of providing those services, we necessarily collect and process certain categories of personal data. This Policy is designed to make that processing fully transparent.

By creating an account with p555, accessing the platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the p555 Terms and Conditions, which are incorporated by reference.

02 Data We Collect

p555 collects personal data in the following categories, depending on your interaction with the platform:

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly necessary for age and identity verification purposes.

03 How We Use Your Data

p555 processes your personal data for the following purposes, each of which corresponds to a lawful basis described in Section 4:

• Account management: Creating, maintaining, and securing your p555 account, including verifying your identity at registration and during KYC processes.
• Service delivery: Processing deposits and withdrawals in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, Upay, and partner banks; crediting winnings; settling bets; and delivering game results.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, account takeover attempts, bonus abuse, and other violations of our Terms and Conditions.
• Responsible gaming: Monitoring gaming behaviour to identify signs of problem gambling and applying account restrictions (deposit limits, self-exclusion) at the player's request or where p555 identifies a welfare concern.
• Customer support: Responding to enquiries, processing complaints, and providing technical assistance through our 24/7 support channel.
• Legal and regulatory compliance: Meeting obligations under applicable laws, responding to lawful requests from regulatory bodies or law enforcement authorities, and maintaining records for audit purposes.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the functionality, performance, and user experience of the p555 platform.
• Marketing communications: Sending promotional offers, bonus notifications, and news about new games or events to players who have given their explicit consent. This includes seasonal promotions tied to events such as Eid, BPL, IPL, T20 World Cup, and Pohela Boishakh.

p555 does not use automated decision-making or profiling in a manner that produces legal or similarly significant effects on individual users, without first providing a meaningful opportunity to contest or review that decision.

04 Legal Basis for Processing

For each processing activity described in Section 3, p555 relies on one or more of the following lawful bases:

• Contractual necessity: Processing that is necessary to perform the contract between you and p555 — i.e., delivering the services you have registered to use, processing your transactions, and maintaining your account.
• Legal obligation: Processing that is required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing that is necessary for p555's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, informed, and specific consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

05 Data Sharing

p555 does not sell your personal data to any third party. We may share your data with carefully selected third parties only in the following circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other financial institutions, solely to the extent necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification services used to confirm the identity and age of registered players in compliance with our legal obligations.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi may receive anonymised session tokens to deliver game content. These providers do not receive your personal identity or financial data beyond what is strictly necessary for game delivery.
• IT infrastructure and hosting providers: Secure cloud hosting and infrastructure providers who process data on behalf of p555 under strict data processing agreements that prohibit independent use of your data.
• Legal and regulatory authorities: Competent courts, regulatory bodies, law enforcement agencies, and other public authorities, where p555 is legally required to disclose information.
• Professional advisors: Lawyers, auditors, and insurers, under obligations of professional confidentiality, where necessary for the operation or protection of p555's business.

p555 does not transfer your personal data to recipients outside of the relevant operating jurisdiction without ensuring that an adequate level of data protection is in place, whether through contractual protections, binding corporate rules, or equivalent safeguards.

06 Cookies & Tracking

p555 uses cookies and similar tracking technologies on the p555.io platform. Cookies are small text files stored on your device that allow the platform to recognise returning visitors, maintain session state, and collect usage analytics.

The categories of cookies used by p555 are as follows:

• Strictly necessary cookies: Essential to the operation of the platform. These cookies enable core functionality such as maintaining your login session, storing your language and currency preferences, and ensuring the security of your account. These cookies cannot be disabled without breaking core platform features.
• Performance and analytics cookies: Used to collect anonymised information about how visitors interact with the platform — for example, which pages are visited most frequently and where users encounter errors. This data helps p555 improve the platform experience. No personally identifiable information is collected through analytics cookies.
• Functional cookies: Allow the platform to remember your preferences and customisations, such as your preferred game category or responsible gaming settings. Disabling these cookies may reduce the quality of your experience.
• Marketing cookies: Used only with your consent to deliver personalised promotional content and to measure the effectiveness of p555's marketing campaigns. These cookies do not track your activity outside the p555.io domain.

You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to use core p555 features. Your cookie preferences do not affect our right to process personal data collected through means other than cookies.

07 Data Retention

p555 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law, whichever is longer. The following indicative retention periods apply:

• Account data (identity, contact, financial): Retained for the duration of the account and for a minimum of 5 years following account closure, to meet anti-money laundering and regulatory audit requirements.
• Transaction records: Retained for a minimum of 7 years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC documentation: Retained for a minimum of 5 years following account closure or the completion of the KYC review, whichever is later.
• Support communications: Retained for a minimum of 3 years from the date of the last interaction, to support dispute resolution and quality assurance.
• Technical and usage data: Retained in anonymised or aggregated form indefinitely for platform analytics; individually identifiable technical data is retained for a maximum of 24 months.
• Marketing preference records: Retained for the duration of the account plus 3 years, to evidence consent and opt-out history.

Upon expiry of the relevant retention period, p555 will securely delete or anonymise your personal data in a manner that prevents reconstruction of the original information.

08 Data Security

p555 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the p555 platform.
• Encrypted storage of sensitive personal and financial data at rest, using industry-standard encryption algorithms.
• Role-based access controls ensuring that only authorised p555 personnel, whose job functions require it, have access to personal data.
• Multi-factor authentication requirements for p555 staff accessing systems that hold personal data.
• Regular security audits and penetration testing conducted by independent security specialists.
• Incident response procedures to detect, contain, and notify affected users and relevant authorities in the event of a data breach, in accordance with applicable notification obligations.
• Secure data disposal protocols ensuring that physical and digital storage media containing personal data are destroyed or wiped to a standard that prevents data recovery.

In the event of a data security incident that is likely to result in a risk to your rights and freedoms, p555 will notify you without undue delay using the contact details registered on your account, and will provide full details of the nature of the incident, the data affected, and the steps being taken to address it.

09 Your Rights

As a p555 user, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and your registered username:

• Right of access: You may request a copy of the personal data that p555 holds about you, along with information about how it is being processed. We will respond to verified access requests within 30 days.
• Right to rectification: If your personal data is inaccurate or incomplete, you may request that it be corrected. Where technically feasible, you may update certain data directly through your account settings.
• Right to erasure ("right to be forgotten"): Subject to our legal retention obligations, you may request the permanent deletion of your personal data. This right may be limited where p555 is required to retain data for regulatory compliance purposes.
• Right to restriction of processing: In certain circumstances, you may request that p555 limits the manner in which it processes your data — for example, while the accuracy of data is being contested, or where you have objected to processing pending verification of legitimate grounds.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data that is based on legitimate interests, including profiling. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

10 Children's Privacy

The p555 platform is strictly for adults aged 21 years and above. p555 does not knowingly collect personal data from any individual under the age of 21. If you are under 21, you are not permitted to register an account, access any p555 service, or provide any personal data to p555.

In the event that p555 becomes aware that personal data has been collected from an individual who is under the age of 21, we will immediately suspend the relevant account and take steps to delete all associated personal data from our systems without delay. Any deposits or winnings associated with an underage account will be handled in accordance with our Terms and Conditions and applicable law.

p555 employs age verification measures at registration and may conduct additional age verification checks at any point during the account lifecycle. Providing false age information at registration constitutes a serious breach of our Terms and Conditions.

11 Third-Party Services

The p555 platform integrates with a number of third-party services to deliver its full range of features. While p555 takes care to partner only with reputable, security-conscious providers, we cannot accept responsibility for the privacy practices of third parties operating under their own independent policies.

Third-party integrations present on the p555 platform include:

• Game studios: Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi, and other certified game providers. When you play a game, a connection is established with the game provider's servers to deliver the game content in real time. The data exchanged is limited to anonymised session identifiers and game outcome data necessary for fair play certification.
• Payment gateways: bKash, Nagad, Rocket, Upay, and banking partners. When you initiate a deposit or withdrawal, relevant transaction data is shared with the selected payment provider solely to execute the transaction. Each provider operates under its own privacy and security standards.
• Analytics providers: p555 uses privacy-preserving analytics tools to understand aggregate platform usage. These tools are configured to anonymise IP addresses and do not build individual user profiles for advertising purposes.

Links to any third-party websites or services are not present on the p555 platform beyond the payment and game integrations described above. p555 does not endorse, control, or accept liability for the content or privacy practices of any external website.

12 Changes to This Policy

p555 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we offer. The date of the most recent revision is displayed at the top of this document.

Where changes are material — for example, where we introduce a new category of data collection, a new processing purpose, or a new category of data sharing — p555 will notify registered users in advance by displaying a prominent notice on the platform or by sending an email to the address registered on your account. For minor, non-material changes (such as corrections of typographical errors or clarifications that do not alter the substance of the Policy), we may update this document without individual notice.

Your continued use of the p555 platform following the publication of any revised Privacy Policy constitutes your acknowledgement of, and agreement to, the updated terms. If you do not agree with a revised Policy, you should cease using the platform and, if you wish, close your account by contacting our support team.

13 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way p555 processes your personal data, please contact our dedicated data support team using the details below:

• Email: [email protected] (plain text — this address is not a clickable link)
• Subject line for data rights requests: "Data Rights Request – [Your Username]"
• Subject line for privacy complaints: "Privacy Complaint – [Your Username]"
• Support availability: 24 hours a day, 7 days a week, including all Bangladesh public holidays
• Target response time: Within 2 business days for privacy enquiries; within 30 calendar days for formal data rights requests

p555 takes all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it within 2 business days and provide a substantive response within 30 calendar days. Where a complaint relates to a potential data breach, it will be escalated to our security team immediately for priority investigation.