Privacy Policy — 55rr0

1. Information We Collect

55rr0 collects personal data through several channels: information you provide directly during registration and account management, information generated automatically as you use the platform, and information received from trusted third-party service providers involved in payment processing and identity verification.

1.1 Information You Provide Directly

When you create a 55rr0 account or interact with the platform, you may provide the following categories of personal information:

• Registration data: Full name, date of birth, email address, mobile phone number, and a chosen username and password.
• Identity verification (KYC) documents: Copies of your national identity card (NID), passport, or other government-issued photo identification submitted to verify your age and identity before withdrawal processing.
• Address information: Residential address in Bangladesh (district, city, postal code) required for compliance and fraud prevention.
• Payment information: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, BRAC Bank), or card details (Visa, Mastercard) used for deposits and withdrawals in BDT. Full card numbers are never stored by 55rr0 — card payments are handled by a PCI-DSS-compliant payment processor.
• Communications: Any messages, emails, or chat transcripts sent to the 55rr0 support team.
• Responsible gaming preferences: Self-exclusion requests, deposit limits, session time settings, and reality check configurations applied to your account.

1.2 Information Collected Automatically

When you access the 55rr0 platform via a web browser or mobile device, the following data is collected automatically through technical means:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage and session data: Pages visited, features used, games launched, bets placed, session start and end times, and clickstream data showing how you navigate the platform.
• Log data: Server logs recording requests made to the 55rr0 infrastructure, including timestamps, error codes, and request volumes associated with your account.
• Location data: Approximate geographic location derived from your IP address. 55rr0 does not collect precise GPS location data from your device.
• Cookie and tracking data: See Section 5 (Cookies & Tracking) for a detailed breakdown of the cookies and tracking technologies used on the platform.

1.3 Information from Third Parties

55rr0 may receive personal data about you from the following categories of third parties:

• Payment service providers: Confirmation of transaction status, payment method ownership verification, and fraud screening results from bKash, Nagad, Rocket, Upay, and card processing partners.
• Identity verification providers: Results of automated document and biometric verification performed as part of the KYC process.
• Game providers: Technical data regarding your gameplay sessions on games hosted by third-party studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and WM Casino. This data is used for dispute resolution and auditing.
• Fraud and risk screening services: Risk scores, device fingerprinting results, and flagged activity reports from third-party fraud prevention tools used to protect the integrity of the platform.

2. How We Use Your Data

55rr0 uses the personal data it collects for specific, clearly defined purposes. We do not use your data for any purpose beyond those stated in this Privacy Policy without first obtaining your explicit consent.

Purpose	Data Used	Legal Basis
Account registration and management	Name, email, phone, username, password	Contract performance
Age and identity verification (KYC)	NID / passport, date of birth, address	Legal obligation
Processing deposits and withdrawals in BDT	Payment method details, transaction history	Contract performance
Fraud prevention and security monitoring	IP address, device data, session logs, payment data	Legitimate interest
Customer support	Account data, support communications	Contract performance
Responsible gaming management	Deposit limits, session data, self-exclusion status	Legal obligation / Legitimate interest
Platform analytics and improvement	Usage data, session data, device data	Legitimate interest
Promotional communications (opt-in only)	Email address, name, gaming preferences	Consent

55rr0 will never use your personal data to make automated decisions that produce legal or similarly significant effects on you without human review, except where automated processing is strictly necessary for fraud prevention and where you are notified and provided with a right of appeal.

3. Legal Basis for Processing

Every instance of personal data processing carried out by 55rr0 rests on one of the following legal bases:

• Contract performance: Processing is necessary to fulfil our contractual obligations to you as a registered 55rr0 player — including account management, payment processing, and game access.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, KYC obligations, and age verification mandates.
• Legitimate interest: Processing is necessary for the legitimate business interests of 55rr0, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your fundamental rights.
• Consent: For processing activities that are not strictly necessary — particularly marketing emails and optional analytics — 55rr0 obtains your explicit consent at the point of registration or through your account preferences. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4. Data Sharing & Disclosure

55rr0 may share your personal data with the following categories of recipients:

4.1 Service Providers

We engage carefully selected third-party service providers who process personal data on our behalf under written data processing agreements. These providers include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank), identity verification partners, cloud infrastructure providers, and customer support tooling vendors. All service providers are contractually prohibited from using your data for any purpose other than delivering the specific service they provide to 55rr0.

4.2 Game Providers

When you play games hosted by third-party studios — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and WM Casino — limited technical session data is shared with the relevant provider to load and run the game. This data exchange is necessary for gameplay and is governed by the respective provider's own data processing agreement with 55rr0. Game providers do not receive your financial payment details.

4.3 Legal and Regulatory Disclosure

55rr0 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law or valid legal process. We will, where permitted by law, notify you of such a disclosure request before complying. Where immediate disclosure is legally mandated without prior notice (for example, in the context of an active criminal investigation), we will notify you as soon as legally permissible after the fact.

4.4 Business Transfers

In the event that 55rr0 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held by 55rr0 may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and provided with information about how your data will be handled by the new entity, including any changes to this Privacy Policy.

5. Cookies & Tracking

55rr0 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how users navigate the site. We do not deploy advertising cookies or share tracking data with ad networks.

5.1 Types of Cookies Used

Cookie Type	Purpose	Duration
Essential / Session Cookies	Maintain your logged-in session, remember your language and currency (BDT) preferences, and enable core platform functionality such as the game lobby and account dashboard.	Session (deleted on browser close)
Authentication Cookies	Securely identify your account after login to prevent repeated sign-in prompts within a single browsing session.	Up to 30 days (if "Remember Me" is selected)
Analytical Cookies	Collect anonymised usage statistics — page views, session durations, feature engagement — to help 55rr0 improve the platform experience for players in Bangladesh.	Up to 13 months
Security Cookies	Support fraud detection and account security by identifying unusual login patterns or device changes associated with your account.	Up to 90 days

You can manage or delete cookies through your browser settings at any time. Disabling essential cookies will impair your ability to log in and use the 55rr0 platform. Disabling analytical and security cookies will not prevent you from accessing the platform but may reduce the effectiveness of certain security protections.

6. Data Retention

55rr0 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of 5 years following account closure, to satisfy anti-money laundering record-keeping obligations.
• Transaction records: All deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years from the date of the transaction in accordance with financial record-keeping requirements.
• KYC documents: Identity verification documents are retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Support communications: Customer support tickets and chat transcripts are retained for 3 years from the date of the final interaction.
• Analytical data: Anonymised usage and session data is retained for up to 13 months, after which it is aggregated or deleted.
• Marketing consent records: Records of your marketing consent or withdrawal of consent are retained for the duration of your account plus 3 years, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is either permanently deleted from 55rr0 systems or irreversibly anonymised so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.

7. Your Rights

As a user of the 55rr0 platform, you hold the following rights with respect to your personal data:

• Right of Access: You may request a copy of all personal data that 55rr0 holds about you. We will provide this in a structured, commonly used electronic format.
• Right to Rectification: If any personal data held by 55rr0 is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. You may update many data fields directly from your account profile.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to overriding legal retention obligations — for example, we cannot delete transaction records that we are legally required to retain.
• Right to Restrict Processing: You may request that 55rr0 temporarily suspend the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request that your data be transferred directly to another service provider in a machine-readable format.
• Right to Object: You may object at any time to the processing of your personal data where that processing is based on legitimate interest — including profiling for fraud prevention purposes. 55rr0 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent — in particular, for marketing communications — you may withdraw that consent at any time through your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

8. Data Security

55rr0 implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction.

8.1 Technical Safeguards

• All data in transit is encrypted using TLS 1.2 or higher (256-bit SSL).
• All data at rest is encrypted using AES-256 encryption on 55rr0 servers.
• Passwords are stored using modern one-way hashing algorithms (bcrypt with a suitable work factor) — 55rr0 never stores plaintext passwords.
• Payment card data is handled exclusively by PCI-DSS Level 1 compliant payment processors. 55rr0 servers never touch raw card numbers.
• Multi-factor authentication (MFA) is available to all registered players and is mandatory for all 55rr0 staff accounts with access to personal data.
• Automated intrusion detection systems monitor the 55rr0 infrastructure for anomalous access patterns and trigger alerts for immediate review.

8.2 Organisational Safeguards

• Access to personal data is restricted to 55rr0 employees and contractors who have a specific, documented need to access that data in the course of their duties.
• All staff with access to personal data undergo training on data protection principles and are bound by confidentiality obligations.
• 55rr0 conducts periodic internal security audits and vulnerability assessments of its platform infrastructure.

8.3 Data Breach Response

In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, 55rr0 will notify affected users without undue delay and no later than 72 hours after becoming aware of the breach — or as promptly as operational circumstances allow. The notification will include the nature of the breach, the categories and approximate number of individuals affected, the likely consequences, and the measures taken or proposed to address the breach.

If you believe that your 55rr0 account has been compromised, please contact the support team immediately at [email protected] and change your password without delay.

8.4 Children's Privacy

The 55rr0 platform is strictly intended for adults aged 18 and above. 55rr0 does not knowingly collect or process personal data from individuals under the age of 18. If 55rr0 becomes aware that a registered user is under 18, the account will be closed immediately and any personal data associated with that account will be deleted in accordance with applicable law, except where retention is required for legal or regulatory reasons. If you believe that a person under 18 has created a 55rr0 account, please contact [email protected] immediately.

8.5 Changes to This Privacy Policy

55rr0 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Material changes will be communicated to registered players via email and an in-platform notification at least 14 days before the changes take effect. The "Last Updated" date at the top of this page will be revised accordingly. Continued use of the 55rr0 platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, you must cease using the platform and may request account closure by contacting [email protected].

This Privacy Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between you and 55rr0.