xx555 Privacy Policy — How We Protect Your Data

1 Introduction & Scope

This Privacy Policy applies to all personal data collected, processed, and stored by xx555 in connection with your use of the xx555 website located at xx555.im and any associated mobile platform or application (collectively, "the Platform"). It governs how xx555 handles personal data belonging to registered players, prospective players who browse the platform prior to registration, and any other individual who interacts with the xx555 website.

By registering an account on xx555, or by continuing to use the xx555 platform after this policy has been made available to you, you acknowledge that you have read and understood the practices described in this Privacy Policy and that you consent to the collection and use of your personal data as described herein.

This Privacy Policy should be read alongside the xx555 Terms & Conditions and the xx555 Responsible Gaming Policy, both of which form part of the overall contractual and data-governance framework governing your use of the platform. In the event of any conflict between this Privacy Policy and those documents on a privacy-related matter, this Privacy Policy shall prevail.

xx555 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email notification or an on-platform alert. The effective date at the top of this page will always reflect the date of the most recent revision. Continued use of the platform following an update constitutes acceptance of the revised policy.

2 Data We Collect

xx555 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and from third-party identity verification and payment processing partners. The categories of personal data we collect are described in the table below.

You are not obligated to provide all of the personal data described above. However, certain categories of data — particularly identity, contact, and financial data — are necessary for account creation and operation. If you choose not to provide these, xx555 may be unable to open or maintain your account, process transactions, or deliver customer support.

3 How We Use Your Data

xx555 uses the personal data it collects for specific, documented purposes. We do not use your data for any purpose that is incompatible with the purposes for which it was originally collected. The legal bases and specific purposes for each category of data processing are set out below.

• Account Creation & Management: Identity and contact data are used to create and manage your xx555 player account, verify your identity, maintain accurate account records, and communicate with you about your account status.
• Payment Processing: Financial data is used to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer. This data is shared with our payment partners only to the extent necessary to complete the relevant transaction.
• KYC & Age Verification: Identity and verification data is used to confirm that you meet the 18+ age requirement and to verify that the identity you have registered with is accurate and legitimate.
• Fraud Prevention & Security: Technical data and usage data are analysed to detect suspicious account activity, prevent fraud, identify potential money laundering patterns, and protect both players and the platform from unauthorised access.
• Responsible Gaming Monitoring: Usage data — including bet frequency, bet sizes, win/loss patterns, and session durations — is monitored to identify players who may be exhibiting signs of problem gambling, allowing us to proactively offer responsible gaming tools and support.
• Customer Support: Communications data is used to respond to your support enquiries, resolve disputes, and maintain a record of interactions for quality assurance purposes.
• Platform Improvement: Aggregated and anonymised usage data is used to understand how players interact with the xx555 platform, identify areas for improvement, and develop new features and game offerings.
• Marketing Communications: Where you have opted in to receive marketing communications, contact data is used to send you information about promotions, bonuses, and new features on xx555. You may opt out of marketing communications at any time via your account settings or by contacting support.
• Legal & Regulatory Compliance: All categories of data may be used where necessary to comply with applicable laws, respond to lawful requests from regulatory authorities, and fulfil our anti-money laundering and know-your-customer obligations.

4 Data Sharing & Third Parties

xx555 does not sell your personal data to any third party. However, in order to operate the platform effectively and meet our legal obligations, we share certain categories of personal data with the following categories of third-party recipients. In every case, data is shared only to the minimum extent necessary for the stated purpose, and all third-party partners are required to handle your data in accordance with applicable data protection standards.

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive the financial data necessary to process your deposits and withdrawals. These partners operate under their own privacy and security frameworks and are independently responsible for the data they collect during payment processing.
• Game Studio Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game providers may receive a player session token and anonymised account identifier necessary to deliver their games within the xx555 platform environment. Game providers do not receive your full identity data.
• Identity Verification Services: Third-party KYC and age verification service providers may receive identity and verification documents in order to complete the identity verification process on behalf of xx555.
• IT Infrastructure Providers: Cloud hosting, server management, and cybersecurity service providers who process data on our behalf under strict data processing agreements may have access to personal data as part of platform operations. These providers act solely on xx555's instructions and may not use your data for any independent purpose.
• Regulatory & Law Enforcement Authorities: xx555 is required by law to report certain types of activity — including suspected money laundering — to the relevant financial intelligence and law enforcement authorities. In such cases, the required data will be disclosed without prior notification to the player concerned.
• Legal Advisors: Where xx555 seeks legal advice or is involved in legal proceedings, personal data may be disclosed to legal counsel as necessary for those purposes, subject to legal professional privilege obligations.

5 Cookies & Tracking Technologies

xx555 uses cookies and similar tracking technologies on the platform to ensure the site functions correctly, to remember your preferences, and to gather analytical data that helps us improve the user experience. A cookie is a small text file placed on your device by a website. It does not execute code or deliver viruses.

You can control the use of non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling essential cookies will affect the functionality of the xx555 platform and may prevent you from logging in or completing transactions. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, or Samsung Internet).

6 Data Retention

xx555 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data held by xx555.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual. Where anonymisation is applied, the resulting data may be retained and used for aggregated platform analytics without restriction.

Where a player submits a valid data deletion request (see Section 8), xx555 will assess whether the data subject to the request falls within an active legal retention obligation. Data that must be retained for legal or regulatory compliance purposes cannot be deleted ahead of the applicable retention schedule, but the player will be informed of this and the expected deletion date.

7 Data Security

xx555 implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal information against unauthorised access, accidental loss, disclosure, alteration, and destruction. Our security programme includes the following measures.

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and the xx555 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This ensures that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive data — including payment method details and KYC documents — is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel only and is subject to comprehensive audit logging.
• Access Controls: Internal access to player personal data is governed by a strict role-based access control framework. Only those xx555 staff members whose job function genuinely requires access to specific categories of player data are granted that access.
• Intrusion Detection & DDoS Protection: The xx555 platform is protected by real-time intrusion detection systems and distributed denial-of-service (DDoS) mitigation infrastructure to guard against malicious external attacks.
• Regular Security Audits: xx555 conducts periodic internal and third-party security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All xx555 personnel with access to personal data receive data protection and security awareness training and are contractually bound by confidentiality obligations.

While xx555 takes all reasonable precautions to protect your personal data, no online system can be guaranteed to be 100% secure. You also have a responsibility to protect your account by using a strong, unique password, keeping your login credentials confidential, and logging out of the platform when using a shared or public device. If you believe your account may have been compromised, please contact xx555 support immediately.

8 Your Privacy Rights

As an xx555 player, you hold a number of rights in relation to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact the xx555 support team. We will respond to all privacy rights requests within 30 days of receipt. Where a request is complex or where we receive multiple requests from the same individual, we may extend this period by a further 60 days, and we will inform you of any such extension within the initial 30-day window.

• Right of Access: You have the right to request a copy of the personal data that xx555 holds about you, along with information about the purposes for which it is processed and the categories of third parties with whom it is shared. This is known as a Subject Access Request (SAR).
• Right to Rectification: If any of the personal data xx555 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain information directly through your account settings dashboard.
• Right to Erasure: In certain circumstances — for example, where your data is no longer necessary for the purpose it was collected, or where you withdraw your consent and there is no other lawful basis for processing — you have the right to request that xx555 delete your personal data. This right is subject to legal retention obligations as described in Section 6.
• Right to Restriction: You have the right to request that xx555 restrict the processing of your personal data in certain circumstances — for example, while we verify the accuracy of data you have disputed, or while we assess a deletion request.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests grounds in certain circumstances.
• Right to Data Portability: Where processing is carried out by automated means and is based on your consent or on a contract with you, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.

9 Minors & Age Verification

The xx555 platform is strictly for adults aged 18 and above. xx555 does not knowingly collect, store, or process personal data belonging to individuals under the age of 18. Age verification is a mandatory part of the xx555 registration and KYC process, and no real-money gaming or betting activity is permitted until age verification has been satisfactorily completed.

If xx555 becomes aware that personal data belonging to an individual under the age of 18 has been collected — whether through a false declaration at registration or any other means — the following steps will be taken immediately: the account will be suspended, all deposits will be returned via the original payment method, any winnings will be voided, and all personal data associated with the account will be deleted from our systems as promptly as possible, subject to any legal retention obligations that may apply.

xx555 uses a combination of date-of-birth declaration, document-based KYC verification, and behavioural risk indicators to detect and prevent access by underage individuals. These controls are reviewed and updated regularly to ensure they remain effective. We take our responsibility to protect minors from the harms of gambling extremely seriously, and any attempt to circumvent our age verification measures will be treated as a serious breach of our Terms & Conditions.

10 Changes to This Policy

xx555 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform and services. All updates will be published on this page at xx555.im/privacy-policy, and the effective date at the top of this document will be updated accordingly.

Where a proposed change is material — meaning it significantly affects how we collect, use, or share your personal data, or materially affects your rights — xx555 will provide reasonable advance notice of the change by sending an email notification to your registered email address and/or displaying a prominent notice within your account dashboard. We will allow a reasonable period for you to review the changes before they take effect.

Your continued use of the xx555 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised policy, you should stop using the platform and submit an account closure request to the support team, at which point your data will be handled in accordance with our standard account closure and retention procedures.