Privacy Policy — How bs555 Collects, Uses, and Protects Your Data

1 About This Policy

This Privacy Policy ("Policy") describes how bs555 ("bs555", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "your", "Player", "User") who access or use the bs555 online casino and sports betting platform at https://bs555.io and all associated mobile, desktop, and API interfaces (collectively, the "Platform").

This Policy applies to all Players registered from Bangladesh and to all visitors to the Platform, regardless of whether they have completed registration. It forms part of the bs555 Terms and Conditions and should be read in conjunction with our Responsible Gaming Policy.

By accessing the Platform, registering an account, or making a deposit, you confirm that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not accept this Policy, you must not use the Platform.

2 Data Controller

bs555 acts as the data controller for all personal data collected through the Platform. As data controller, bs555 determines the purposes and means by which personal data is processed. We are responsible for ensuring that personal data is handled lawfully, fairly, and transparently in accordance with applicable data protection principles.

All inquiries relating to data protection, privacy rights, and this Policy should be directed to the bs555 Data Protection team via our support channel. Contact details are provided in Section 15 of this Policy.

3 Personal Data We Collect

bs555 collects the following categories of personal data from Players and visitors:

3.1 Registration and Identity Data

• Full legal name as it appears on a government-issued identity document
• Date of birth (used to verify the 21+ age requirement)
• Residential address in Bangladesh (including city: Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar)
• Mobile phone number linked to your bKash, Nagad, or Rocket wallet
• Email address (where provided)
• Username and encrypted password

3.2 Identity Verification (KYC) Documents

• Scanned or photographed copy of National Identity Card (NID), passport, or driving licence
• Proof of residential address (utility bill, bank statement, or similar document dated within the last three months)
• Selfie photograph where required for biometric verification

3.3 Financial and Transaction Data

• Payment method identifiers (bKash wallet number, Nagad number, Rocket number, Upay number, Dutch-Bangla Bank account details, City Bank account details, Visa/Mastercard card number — last four digits only after tokenisation)
• Deposit and withdrawal amounts in BDT
• Transaction timestamps and reference numbers
• Balance history

3.4 Gaming and Betting Activity Data

• Bet history, wager amounts, outcomes, and game session logs
• Sports betting selections (cricket BPL, IPL, T20 World Cup, Bangladesh Tigers internationals, football, kabaddi, and other markets)
• Casino game rounds played, including games from Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe
• Bonus and promotional offer usage
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.5 Technical and Usage Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session start and end times
• Pages visited and features used on the Platform
• Referral source (how you arrived at the Platform)

3.6 Communications Data

• Live chat transcripts with the bs555 support team
• Email correspondence with bs555
• Dispute and complaint records

4 How We Collect Your Data

bs555 collects personal data through the following channels:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or update your account settings.
• Automatically: through cookies, session tracking technologies, and server logs when you access and navigate the Platform.
• From payment partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard provide transaction confirmation data to bs555 to facilitate deposit and withdrawal processing.
• From identity verification partners: third-party KYC service providers may share verification outcomes and document validation results with bs555 as part of the account approval process.
• From fraud prevention services: risk management partners may share signals about device reputation or transaction risk with bs555 for AML and fraud screening purposes.

5 Purposes and Legal Basis for Processing

The table below sets out the purposes for which bs555 processes personal data and the corresponding lawful basis for each purpose:

6 Data Sharing and Disclosure

bs555 does not sell, rent, or trade personal data. We share personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

6.1 Payment Processing Partners

bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive transaction data necessary to execute and confirm deposits and withdrawals. These partners process data under their own privacy policies and applicable financial services regulations.

6.2 Identity Verification and KYC Providers

bs555 engages regulated third-party KYC service providers to verify the identity documents submitted by Players. These providers receive only the data strictly required to perform verification and are bound by confidentiality agreements and applicable data protection obligations.

6.3 Game Technology Providers

Game providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive session data and bet history to the extent required to deliver gameplay and resolve disputes. These providers operate under separate data processing agreements with bs555.

6.4 Fraud and Risk Management Services

bs555 uses reputable fraud detection and AML screening services that may process technical and transactional data. All such providers are contractually bound to use data exclusively for the purpose of fraud prevention and AML compliance.

6.5 Legal and Regulatory Disclosure

bs555 may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, to comply with a legal process, to enforce our Terms and Conditions, or to protect the rights, property, or safety of bs555, our Players, or the public.

6.6 Business Transfers

In the event that bs555 undergoes a merger, acquisition, or sale of assets, personal data held by bs555 may form part of the assets transferred. In such circumstances, Players will be notified prior to their data being transferred and becoming subject to a different privacy policy.

7 Cookies and Tracking Technologies

bs555 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies may be set when you visit bs555:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, odds format, and responsible gaming tool configurations.
• Analytics Cookies: Help bs555 understand how Players use the Platform, which pages are visited most frequently, and where technical issues occur. Data collected is aggregated and anonymised.
• Marketing Cookies: Used to deliver relevant promotional content to Players who have opted in to marketing communications. bs555 does not share marketing cookie data with third-party advertisers.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies may affect the functionality of certain Platform features. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate.

8 Data Security

bs555 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bs555 servers
• AES-256 encryption for personal and financial data stored at rest
• Strict role-based access controls limiting staff access to personal data on a need-to-know basis
• Multi-factor authentication for all internal administrative systems
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• 24/7 security monitoring with automated alerting for anomalous activity
• Payment card data tokenisation — full card numbers are never stored on bs555 infrastructure

9 Data Retention

bs555 retains personal data for the period necessary to fulfil the purposes set out in this Policy, and in accordance with applicable legal and regulatory requirements. The general retention periods applied by bs555 are as follows:

• Account and Identity Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, to comply with AML and KYC record-keeping obligations.
• Financial and Transaction Data: Retained for a minimum of seven (7) years to satisfy financial record-keeping requirements.
• Gaming and Betting Activity Data: Retained for a minimum of five (5) years following account closure for dispute resolution and regulatory audit purposes.
• Support and Communications Data: Retained for three (3) years following the date of the most recent communication.
• Technical and Usage Data (including cookies): Retained for up to thirteen (13) months on a rolling basis.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be deleted immediately due to technical system constraints, it will be isolated from active processing until deletion is completed.

10 International Data Transfers

bs555 is a platform serving the Bangladesh market. Some of our third-party service providers — including game technology providers, KYC partners, and fraud prevention services — may be based outside Bangladesh and may process data in jurisdictions with different data protection frameworks.

Where personal data is transferred to a third-party processor outside Bangladesh, bs555 ensures that adequate safeguards are in place to protect that data to a standard equivalent to the protections afforded under this Policy. Such safeguards include contractual data processing agreements incorporating internationally recognised data protection clauses, and in some cases, binding corporate rules adopted by the receiving entity.

By registering an account with bs555, you acknowledge and consent to your personal data being transferred to and processed by third-party processors in other countries as described in this section, subject always to the safeguards described above.

11 Exercising Your Data Rights

To exercise any of the data rights described in the summary section above — including rights of access, rectification, erasure, restriction, portability, and objection — please contact the bs555 Data Protection team through one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, on any page of the bs555 Platform
• Email: [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request"

bs555 will acknowledge all data rights requests within two (2) business days and will endeavour to fulfil valid requests within thirty (30) calendar days of receipt. In cases where a request is complex or numerous, we may extend this period by a further thirty days and will notify you accordingly.

To protect your data, bs555 may require you to verify your identity before fulfilling a data rights request. This is to ensure that personal data is disclosed only to the person to whom it relates.

12 Children and Minors

The bs555 Platform is strictly for adults aged 21 years and over. bs555 does not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been collected from a minor, we will immediately close the associated account, delete all data collected, and report the matter to the appropriate authorities where required by law.

13 Third-Party Links

The bs555 Platform may contain references to third-party game providers and payment services. While bs555 carefully selects all third-party partners, we are not responsible for the privacy practices or content of third-party services. This Privacy Policy applies solely to data collected by bs555 through the Platform. We encourage you to review the privacy policies of any third-party services you interact with.

14 Changes to This Privacy Policy

bs555 reserves the right to update or amend this Privacy Policy at any time. All changes will be posted on this page with an updated effective date. Where changes are material — meaning they significantly affect the way we process your personal data or the rights you hold — bs555 will provide advance notice via the mobile number or email address registered to your account, or through a prominent platform notice, no fewer than seven (7) days before the changes take effect.

Your continued use of the bs555 Platform after any updated Privacy Policy takes effect constitutes your acceptance of the revised Policy. If you do not accept the updated Policy, you should cease using the Platform and contact support to arrange account closure.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bs555 holds about you, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 from any page on the bs555 Platform
• Subject Line for Data Requests: "Privacy Policy Inquiry" or "Data Rights Request"
• Support Language: English
• Response Time: Within 2 business hours during BST peak hours; live chat responses within 2 minutes
• Time Zone: Bangladesh Standard Time (BST, UTC+6)