555mm Privacy Policy

1. Who We Are

555mm operates the online casino and sports betting platform accessible at https://555mm.io (the "Platform"). References to "555mm", "we", "us", or "our" throughout this Privacy Policy refer to the operator of the Platform.

555mm serves registered players in Bangladesh and provides online gaming services including casino games, live dealer tables, crash games such as Aviator, slots, and sports betting markets covering cricket — including BPL and IPL fixtures — and other major sporting events.

For all privacy-related enquiries, data access requests, and complaints, please contact us at [email protected]. Our customer support team operates 24 hours a day, seven days a week, and responds to privacy enquiries within two (2) business days.

2. Personal Data We Collect

555mm collects personal data across several categories depending on how you interact with the Platform. The table below summarises the categories of data collected and the circumstances in which each category is gathered.

2.1 Data You Provide Directly

When you register an account on 555mm, you provide identity and contact data voluntarily. When you submit KYC documents — such as your National Identity Card or passport — you provide additional identity data required for verification under our responsible gaming and anti-fraud obligations. When you contact our support team, you may provide additional personal information within the content of your message.

2.2 Data Collected Automatically

When you access the 555mm Platform, our servers automatically log certain technical and usage data, including your IP address, device identifiers, browser type and version, and the pages or game sessions you engage with. This data is collected for security monitoring, fraud detection, and platform performance optimisation. It is not used to build commercial advertising profiles.

2.3 Data From Third Parties

555mm may receive limited personal data from third-party payment processors — such as bKash, Nagad, Rocket, and Upay — for the purpose of verifying transaction authenticity and matching deposits to registered accounts. We do not receive full payment credentials from these processors; only the minimum data needed to confirm transaction status.

3. How We Use Your Personal Data

555mm uses the personal data it collects for the following purposes:

• Account management: To create and maintain your player account, authenticate your identity at login, and apply personalised account settings.
• KYC and age verification: To verify that you meet the minimum age requirement of 21 years, confirm your identity, and comply with responsible gaming obligations.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and local bank transfers; to match transactions to your account; and to detect and prevent fraudulent payment activity.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and provide technical assistance.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling, to apply deposit limits, cooling-off periods, and self-exclusion instructions where requested or required.
• Security and fraud prevention: To detect, investigate, and prevent account takeover attempts, bonus abuse, collusion, money laundering, and other prohibited activities.
• Platform improvement: To analyse aggregated usage patterns and improve the games, features, and user experience offered on the Platform.
• Marketing communications: To send promotional offers, bonus notifications, and seasonal promotions to players who have opted in to receive such communications. Marketing use is always subject to your current opt-in status.
• Legal compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and enforce the Terms & Conditions.

4. Legal Basis for Processing

555mm processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to provide the services described in the Terms & Conditions, including account management, payment processing, and customer support.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where these interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable laws, including identity verification, anti-money-laundering obligations, and responses to lawful authority requests.
• Consent: Processing for marketing communications and optional analytics cookies, where you have provided clear opt-in consent. You may withdraw this consent at any time.

5. Cookies & Tracking Technologies

5.1 What Cookies We Use

The 555mm Platform uses the following categories of cookies and similar tracking technologies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without preventing you from using the Platform.
• Functional cookies: Remember your preferences such as language settings, game volume preferences, and last-visited game categories.
• Analytics cookies: Collect anonymised data about how players navigate the Platform to help us improve game selection, page layout, and overall performance. These are only activated with your consent.
• Security cookies: Help detect and prevent fraudulent login attempts, automated bot activity, and account takeover attacks.

5.2 Managing Cookies

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. Disabling functional cookies may reduce the quality of your experience but will not prevent you from placing bets or accessing games.

6. Data Sharing & Disclosure

555mm does not sell, rent, or trade your personal data. We may share your data with third parties only in the following circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and other payment partners receive only the data required to authenticate and complete transactions. Their handling of your data is governed by their own privacy policies.
• Identity verification providers: Third-party KYC verification services that assist in document authentication and age verification. These providers are contractually bound to use your data solely for verification purposes and to apply equivalent data security standards.
• Technology and hosting partners: Cloud infrastructure providers, server hosting companies, and content delivery networks that process data on our behalf under strict data processing agreements.
• Game software providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers required to deliver their games. They do not receive your full identity or payment data.
• Legal and regulatory authorities: Where required by law, court order, or legitimate request from a relevant authority, 555mm may disclose personal data. We will always seek to limit disclosure to the minimum required by the applicable request.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the Platform, your personal data may be transferred to the acquiring entity, who will be required to honour the commitments set out in this Privacy Policy.

7. Data Retention

555mm retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the lifetime of your account plus a minimum of five (5) years following account closure, to satisfy anti-money-laundering record-keeping obligations.
• Transaction records: Retained for a minimum of seven (7) years from the date of each transaction, in line with standard financial record-keeping practice.
• KYC documents: Retained for five (5) years from the date of submission or from account closure, whichever is later.
• Support communications: Retained for three (3) years from the date of the interaction, unless required longer for ongoing dispute resolution.
• Marketing preferences: Retained for the lifetime of your account. Opt-out records are retained indefinitely to honour your preference.
• Technical and usage logs: Retained for a maximum of twelve (12) months in identifiable form, after which they are anonymised or deleted.

When retention periods expire, personal data is securely deleted or irreversibly anonymised. You may request early deletion of non-legally-required data at any time by contacting [email protected]. Such requests are processed within thirty (30) days.

8. Your Rights Over Your Personal Data

As a registered player on the 555mm Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with your registered account username and a clear description of your request.

• Right of access: You may request a copy of all personal data 555mm holds about you. We will provide this in a readable format within five (5) business days.
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete. Where data is used for KYC purposes, updated documentation may be required.
• Right to erasure: You may request deletion of personal data that is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: You may request a structured, machine-readable export of the personal data you have provided to us directly.
• Right to object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes, where your particular circumstances warrant it.
• Right to withdraw consent: Where processing is based on your consent — including marketing communications and analytics cookies — you may withdraw consent at any time without affecting the lawfulness of prior processing.

9. Children's Privacy

The 555mm Platform is strictly intended for adults aged 21 years and above. 555mm does not knowingly collect, process, or store personal data from persons under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately suspend the relevant account, delete the associated data, and return any deposited funds to the originating payment method.

10. Data Security

555mm implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data at rest in our databases
• Salted cryptographic hashing for all stored passwords — plain-text passwords are never stored
• Role-based access controls limiting database and system access to authorised personnel only
• Intrusion detection and prevention systems monitoring for anomalous access patterns
• Regular independent security audits and penetration testing of Platform infrastructure
• Two-factor authentication available to all registered players and enforced for all internal administrative accounts
• Automated suspicious-activity alerts triggered by unusual login locations, rapid successive failed attempts, and atypical transaction patterns

Despite these measures, no digital platform can guarantee absolute security. In the event of a data breach that materially affects your personal data, 555mm will notify affected players by email within seventy-two (72) hours of discovery of the breach, and will provide clear guidance on the steps you should take to protect yourself.

11. Cross-Border Data Transfers

555mm's primary player base is located in Bangladesh, and we aim to process and store data within infrastructure that meets internationally recognised data security standards. Some of our technology partners — including cloud infrastructure and game software providers — may process data on servers located outside Bangladesh.

Where personal data is transferred internationally, 555mm ensures that appropriate safeguards are in place, including contractual data processing agreements that require the receiving party to apply data security and privacy standards consistent with those set out in this Privacy Policy. We do not transfer personal data to parties that cannot demonstrate equivalent data protection standards.

12. Amendments to This Privacy Policy

555mm may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform services. When we make material changes, we will notify registered players by email to the address on their account and display a prominent notice on the Platform for a period of at least fourteen (14) days before the changes take effect.

The "Last Updated" date at the top of this policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following notification of any amendment constitutes acceptance of the revised policy.

13. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the 555mm privacy team using the details below:

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter through appropriate dispute resolution channels. 555mm is committed to resolving all privacy complaints fairly, transparently, and within a reasonable timeframe. We will always acknowledge receipt of a formal complaint within twenty-four (24) hours and provide a substantive response within ten (10) business days.