5a55 Privacy Policy

Overview

Privacy at a Glance

The following cards summarise the most important aspects of how 5a55 handles your personal data. Please read the full policy below for complete details.

Section 1

Introduction

This Privacy Policy ("Policy") describes how 5a55 (the "Company", "we", "us", or "our") collects, uses, stores, and discloses personal data when you use the 5a55 online gaming platform (the "Platform"), including its website and any associated mobile interface. This Policy applies to all users of the Platform, whether you are a registered account holder, a visitor browsing the site, or a prospective player who has not yet completed registration.

By accessing or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how 5a55 handles personal data, you should discontinue use of the Platform. This Policy is to be read alongside the 5a55 Terms & Conditions, which govern your overall relationship with the Platform.

Section 2

Personal Data We Collect

5a55 collects personal data through several channels: data you provide directly during registration and account use, data generated automatically by your interaction with the Platform, and data received from third-party service providers where permitted and necessary. The categories of data collected are described below.

5a55 does not collect special-category ("sensitive") personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data, except where identity verification regulations specifically require documentary evidence of identity that may incidentally contain such information (e.g. a national ID card photograph).

Section 3

How We Use Your Personal Data

5a55 uses your personal data only for the purposes described in this Policy. We do not use your data for any purpose that is incompatible with the reason for which it was originally collected. The specific purposes for which we use your data are:

• Account management: to create, maintain, and administer your 5a55 account, including verifying your identity and age in accordance with our eligibility requirements.
• Service delivery: to process deposits, withdrawals, and game transactions accurately and securely, and to resolve any discrepancies or disputes relating to financial transactions on the Platform.
• Legal and regulatory compliance: to meet our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and age-verification requirements, and to retain records as required by law.
• Responsible gaming: to monitor gameplay patterns that may indicate problem gambling behaviour, and to apply or offer responsible gaming tools (deposit limits, session reminders, self-exclusion) where appropriate.
• Customer support: to respond to your queries, complaints, and support requests, and to maintain a record of our communications for quality assurance and dispute resolution purposes.
• Platform improvement: to analyse usage patterns, technical performance, and Player feedback in order to improve the Platform's features, stability, and user experience.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, multi-accounting, and other prohibited conduct, including by sharing relevant data with payment processors and law enforcement agencies where required.

5a55 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where profiling is used (for example, to offer relevant promotions), it is based on aggregated, anonymised usage trends rather than individual-level automated scoring.

Section 4

Legal Basis for Processing

5a55 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: processing required to fulfil our obligations under the Terms & Conditions you agreed to when creating your account (e.g. processing deposits and withdrawals, maintaining your account balance).
• Legal obligation: processing required by applicable law, including AML regulations, KYC requirements, and obligations to cooperate with law enforcement authorities.
• Legitimate interests: processing carried out in 5a55's legitimate interests, such as fraud prevention, platform security, service improvement, and responsible gaming monitoring, provided these interests are not overridden by your fundamental rights.
• Consent: where processing is based on your consent (for example, receiving optional marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Section 5

Sharing Your Personal Data

5a55 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment service providers: transaction data (amount, method, reference number) is shared with bKash, Nagad, Rocket, Upay, or relevant bank partners solely to process your deposit or withdrawal. These providers handle the data under their own privacy policies and are not permitted to use it for any other purpose.
• Game and technology providers: game session data may be shared with Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and other certified providers for the purpose of delivering gameplay, verifying results, and resolving game disputes. These providers act as data processors under contractual data-processing agreements with 5a55.
• Identity verification services: identity documents and verification data may be shared with KYC service providers engaged by 5a55 to confirm the identity, age, and eligibility of Players. These providers are contractually bound to use the data exclusively for verification purposes.
• Law enforcement and regulatory authorities: 5a55 will disclose personal data to police, courts, financial intelligence units, or other competent authorities when required to do so by law, court order, or regulatory direction, or where disclosure is necessary to prevent or detect serious crime.
• Business transfers: in the event that 5a55 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any change in the applicable privacy policy.

Section 6

Payment Data and Financial Security

When you make a deposit or withdrawal on 5a55 using bKash, Nagad, Rocket, Upay, or a bank transfer, your payment is processed through the relevant provider's secure infrastructure. 5a55 does not have visibility of, nor does it store, your mobile wallet PIN, OTP codes, internet banking password, or full bank account credentials. The only financial data retained by 5a55 is the type of payment method used, the registered mobile number or account name associated with the payment (for matching purposes), the transaction amount in BDT, and the transaction reference number assigned by the payment provider.

All financial transaction records are retained for a minimum period required by applicable anti-money laundering regulations. This retention is mandatory and cannot be shortened at a Player's request. After the mandatory retention period has elapsed, transaction records are securely deleted or anonymised.

Section 7

Cookies and Tracking Technologies

The 5a55 Platform uses cookies and similar tracking technologies to ensure it functions correctly, to remember your preferences, and to help us understand how Players use the site. The types of cookies we use are:

• Essential cookies: strictly necessary for the Platform to operate. These include session cookies that keep you logged in during a browsing session and security cookies that help protect your account. These cannot be disabled without breaking core functionality.
• Functional cookies: used to remember your in-Platform preferences such as your preferred language, display settings, and last-visited game category. Disabling these will not break the Platform but may result in a less personalised experience.
• Analytics cookies: used to collect aggregated, anonymised data about how users navigate the Platform, which pages are visited most, and where users drop off. This helps us identify and fix usability issues. No individual Player is identifiable from analytics data.
• Security and fraud-detection cookies: used to identify unusual activity patterns, detect automated bot traffic, and help protect the Platform and its users from fraud and abuse.

You can manage or disable non-essential cookies through your browser settings. On most Android and iOS browsers (Chrome, Firefox, Samsung Internet, Safari), you can clear cookies or block third-party cookies in the Privacy section of browser settings. Note that disabling essential cookies may prevent you from logging into your account or using certain Platform features.

Section 8

Data Retention

5a55 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods that are imposed by law or operational necessity: active account data is retained for the lifetime of the account plus a minimum of 5 years after account closure; KYC and identity verification documents are retained for a minimum of 5 years following account closure; transaction records are retained for the period required by applicable AML regulations; support communications are retained for a minimum of 2 years from the date of the last communication in a given thread.

When the applicable retention period expires, personal data is either securely and permanently deleted from 5a55's systems, or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Anonymised data may be retained indefinitely for statistical and platform-improvement purposes.

Section 9

Your Privacy Rights

As a user of the 5a55 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request" and your registered mobile number. We will respond within 30 days.

• Right of access: You may request a copy of the personal data 5a55 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: You may request that inaccurate or incomplete personal data held about you be corrected. You can update most account information directly through your account profile; for data that cannot be self-edited, contact support.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where the processing is unlawful. This right is subject to overriding legal retention obligations.
• Right to restriction: You may request that 5a55 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed or where you have objected to processing based on legitimate interests.
• Right to data portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you may request that your personal data be provided to you in a structured, machine-readable format.
• Right to object: You may object to processing of your personal data where 5a55 relies on legitimate interests as its legal basis. 5a55 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

5a55 will not charge a fee for handling a rights request unless the request is manifestly unfounded or excessive (for example, repetitive requests for the same data). In such cases, 5a55 may charge a reasonable administrative fee or refuse to comply, providing written reasons.

Section 10

Data Security

5a55 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and the Platform; encrypted storage of sensitive data at rest; access controls ensuring that only authorised personnel can access personal data, on a strict need-to-know basis; regular security assessments and penetration testing of the Platform's infrastructure; and multi-factor authentication options for account access.

Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. If you become aware of any security vulnerability, unauthorised use of your account, or suspicious activity, please notify us immediately at [email protected]. 5a55 will investigate all credible security reports promptly and take appropriate remedial action.

Section 11

Children and Minors

The 5a55 Platform is strictly intended for adults aged 21 and above. 5a55 does not knowingly collect personal data from any individual under the age of 21. During registration, all applicants are required to confirm their age and to provide identity documents for KYC verification. If 5a55 discovers that a minor has registered an account or provided personal data, that account will be immediately closed, all associated funds will be returned to their source, and all personal data relating to that minor will be deleted from our systems without delay.

Section 12

Third-Party Links

The 5a55 Platform does not contain links to external third-party websites. All navigation on the Platform stays within the 5a55 domain. In the unlikely event that a third-party link appears — for example, as part of a promotional communication — 5a55 is not responsible for the privacy practices or content of any third-party site. You should review the privacy policy of any external site you visit independently.

Section 13

Changes to This Privacy Policy

5a55 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or the Platform's features. When material changes are made, registered Players will be notified via an in-account message or by email. The updated Policy will display a revised effective date at the top of this page. The most current version of this Policy is always accessible at https://5a55.app/privacy-policy.

Your continued use of the Platform after the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with changes to this Policy, you should stop using the Platform and may request closure of your account by contacting [email protected].

Section 14

Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or need to report a data security concern, please contact the 5a55 privacy team. We are available 24 hours a day, 7 days a week, and aim to respond to all privacy-related enquiries within 30 days.

Email: [email protected]