55zz Privacy Policy

1 Introduction

55zz operates Bangladesh's most trusted online casino and sports betting platform at 55zz.io. As part of delivering a secure, personalised, and legally compliant service to players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh, 55zz collects and processes certain personal data about the individuals who use its platform.

This Privacy Policy sets out in full detail what personal data 55zz collects, the purposes for which it is processed, the legal grounds on which processing is carried out, who data is shared with, how long data is retained, and what rights you have with respect to your own personal information. This policy covers all data processing activities connected with the 55zz platform — including the website at 55zz.io, the mobile-optimised platform, live chat and email support channels, and all financial transaction flows.

This Privacy Policy should be read alongside the 55zz Terms & Conditions, which govern the overall contractual relationship between 55zz and its registered users. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a data protection matter, this Privacy Policy shall prevail.

55zz takes data protection seriously. All personal data handled by 55zz is processed with appropriate technical and organisational safeguards in place. The platform uses 256-bit SSL encryption for all data in transit and applies strict internal access controls to data at rest. These measures are described in detail in Section 10 of this policy.

2 Data We Collect

55zz collects personal data in several categories depending on the nature of your interaction with the platform. The following table summarises the categories of data collected and provides examples within each category:

55zz does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or biometric data beyond what is strictly necessary for identity verification purposes. Where liveness selfies are collected as part of a KYC check, they are used solely for identity verification and are not processed for biometric profiling or facial recognition beyond that specific purpose.

3 How We Collect Your Data

55zz collects personal data through a combination of direct input from users, automated technical collection, and information received from third-party partners. The specific collection methods are as follows:

Direct Input

You provide data directly to 55zz when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact customer support, update your account profile, or interact with any feature that requires you to submit personal information. This includes data entered into registration forms, identity verification uploads, and support chat conversations.

Automated Technical Collection

When you access the 55zz platform — whether on desktop or via a mobile browser in Bangladesh — certain technical data is collected automatically. This includes your IP address, device identifiers, browser configuration, operating system, and session activity logs. This collection takes place via server logs, cookies, and similar tracking technologies described in Section 7 of this policy.

Third-Party Sources

In certain circumstances, 55zz may receive personal data about you from third-party sources. This includes identity verification data returned by KYC service providers, transaction confirmation data from payment processors such as bKash, Nagad, Rocket, and Upay, fraud screening signals from anti-fraud technology partners, and game activity data returned by game content providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe.

Data received from third-party sources is handled with the same level of care and under the same data protection standards as data collected directly. Third-party providers who supply data to 55zz are contractually required to have lawful grounds for sharing that data.

4 Legal Basis for Processing

Every personal data processing activity carried out by 55zz is conducted on one or more recognised legal grounds. The primary legal bases applicable to 55zz's processing activities are:

• Contractual Necessity: The majority of data processing at 55zz is necessary to perform the contractual obligations set out in the Terms & Conditions. This includes processing identity data to open and manage your account, processing financial data to execute deposits and withdrawals, and processing game activity data to settle bets and credit winnings.
• Legal Obligation: Certain processing is required to enable 55zz to comply with applicable legal and regulatory obligations. This includes the KYC identity verification process, anti-money laundering (AML) transaction monitoring, and the retention of financial records for audit and compliance purposes.
• Legitimate Interests: Where 55zz has a legitimate business interest in processing data that does not override your fundamental rights and freedoms, processing may be carried out on this basis. Examples include fraud prevention, platform security monitoring, technical performance analysis, and service improvement activities.
• Consent: Where processing is not covered by the above grounds — principally in the case of optional marketing communications — 55zz will ask for your explicit consent before processing. Consent-based processing is always accompanied by a clear opt-out mechanism, and withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

5 How We Use Your Data

55zz uses the personal data it collects for the following specific purposes. Each purpose is matched to its applicable legal basis:

• Account Creation and Management: To open and maintain your 55zz account, verify your identity, manage your account settings, and keep your profile information up to date. (Legal basis: Contractual necessity)
• Financial Transaction Processing: To process deposits from and withdrawals to your bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank account. To maintain accurate records of all financial transactions associated with your account. (Legal basis: Contractual necessity, Legal obligation)
• Game and Betting Service Delivery: To provide access to casino games, sports betting markets, and all other platform features. To settle bets, credit winnings, apply bonus funds, and maintain your game history. (Legal basis: Contractual necessity)
• KYC and Regulatory Compliance: To verify your identity and age, screen for politically exposed person (PEP) status, conduct anti-money laundering checks, and comply with any applicable reporting obligations. (Legal basis: Legal obligation)
• Fraud Prevention and Platform Security: To detect and prevent fraudulent activity, money laundering, account takeover attempts, collusion, and bonus abuse. To protect the integrity of the platform and the security of all users. (Legal basis: Legitimate interests, Legal obligation)
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling, to implement self-exclusion and limit-setting tools, and to communicate responsible gaming information to at-risk users. (Legal basis: Legal obligation, Legitimate interests)
• Customer Support: To respond to your queries, complaints, and support requests via live chat and email. To maintain records of support interactions for quality assurance and dispute resolution purposes. (Legal basis: Contractual necessity, Legitimate interests)
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the functionality, performance, and user experience of the 55zz platform. Data used for this purpose is aggregated and anonymised wherever possible. (Legal basis: Legitimate interests)
• Marketing Communications: To send promotional emails, SMS messages, and in-platform notifications about bonuses, new games, seasonal promotions (including Eid offers, Pohela Boishakh tournaments, and BPL betting events), and other 55zz services — but only where you have opted in to receive such communications. (Legal basis: Consent)

55zz does not use personal data for automated individual decision-making that produces legal or similarly significant effects, except in the context of fraud detection systems where automated screening may result in a transaction being flagged for manual review. In all such cases, a human review is conducted before any account action is taken.

6 Data Sharing & Third Parties

55zz does not sell, rent, or trade personal data to any third party for commercial purposes. Data is shared with third parties only in the following defined circumstances, and only to the extent strictly necessary for the stated purpose:

Payment Processors

Transaction data — including your wallet number, transaction amount, and account reference — is shared with payment processors including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank solely to execute the financial transactions you have requested. Each payment partner operates under its own privacy policy and is subject to applicable financial data protection regulations.

Game Content Providers

A unique player session token (not your personal identity details) is passed to game content providers — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe — to authenticate your game session. These providers may independently collect technical data such as your IP address and device type as part of game delivery and fairness monitoring. Game providers operate under their own data policies and are certified under independent gaming standards.

Identity Verification Partners

As part of the KYC process, identity documents and verification selfies may be submitted to accredited identity verification service providers for automated document checking and liveness verification. These partners are contractually prohibited from using your data for any purpose other than the specific verification task for which it was submitted.

Fraud Prevention Services

Technical data including IP addresses, device fingerprints, and behavioural patterns may be shared with fraud detection and anti-money laundering screening services. The purpose of this sharing is the protection of the platform and its users — not commercial profiling.

Legal and Regulatory Authorities

55zz may be required to disclose personal data to governmental or law enforcement authorities where required to do so by applicable law, valid legal process, or in response to a lawful order. 55zz will notify you of any such disclosure where legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, or sale of assets involving the 55zz business, personal data held by 55zz may be transferred to the relevant successor entity as part of that transaction. In such cases, 55zz will provide reasonable notice to registered users and the successor entity will be required to honour this Privacy Policy.

7 Cookies & Tracking Technologies

The 55zz platform uses cookies and similar tracking technologies to operate essential platform functions, remember your preferences, measure platform performance, and support fraud prevention. The categories of cookies used by 55zz are as follows:

55zz does not use third-party advertising cookies or share cookie data with advertising networks. The tracking technologies deployed on 55zz.io are limited to those necessary for the operational, analytical, and security purposes described above.

You can manage cookie preferences for functional and analytics cookies through your account settings dashboard. Note that disabling strictly necessary or security cookies is not supported and may prevent you from accessing the platform. Most modern browsers also allow you to control cookies at the browser level — consult your browser's help documentation for instructions specific to your device.

8 Data Retention

55zz retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data held by 55zz:

• Account and Identity Data: Retained for the duration of your active account relationship with 55zz, plus a minimum of 5 years following account closure. This retention period is required to satisfy financial record-keeping and anti-money laundering obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction. This period is aligned with financial compliance requirements applicable to gambling platforms operating in Bangladesh.
• KYC Verification Documents: Retained for the duration of your account relationship, plus 5 years following closure. Identity documents are stored in encrypted form with access restricted to authorised compliance personnel only.
• Communications and Support Records: Live chat transcripts and email correspondence are retained for 2 years from the date of the interaction, except where a support interaction is related to a formal complaint or dispute, in which case records are retained for 5 years.
• Technical and Usage Data: Server logs and session data are retained for 12 months on a rolling basis. Aggregated and anonymised analytics data may be retained indefinitely as it no longer constitutes personal data.
• Marketing Preference Data: Opt-in records are retained for the duration of the active marketing relationship, plus 3 years following opt-out, to demonstrate compliance with consent requirements.

When data reaches the end of its applicable retention period, it is securely deleted or anonymised in accordance with 55zz's internal data lifecycle management procedures. Secure deletion methods are applied to both digital records and any physical document copies held during the verification process.

9 Your Data Rights

As a user of the 55zz platform, you hold a number of rights in relation to your personal data. 55zz is committed to honouring these rights promptly and without undue obstacle. Your rights are as follows:

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". Please include your registered account username and a description of the right you wish to exercise. 55zz will acknowledge your request within 2 business days and provide a substantive response within 30 days. Where a request is complex or requires additional verification, the response period may be extended by up to 30 additional days with prior notification.

Please note that certain rights are subject to limitations where the data in question is required for legal compliance purposes — for example, the right to erasure does not apply to financial transaction records that must be retained for anti-money laundering compliance. Where a right cannot be fulfilled in full, 55zz will explain the specific reason in its response.

10 Data Security

55zz employs a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. The key security controls in place are:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and 55zz servers is encrypted using industry-standard TLS 1.2 or higher. This applies to account login sessions, financial transactions, game sessions, and support interactions.
• Encryption at Rest: Sensitive personal data — including identity documents, financial records, and KYC verification materials — is encrypted at rest using AES-256 encryption. Encryption keys are managed under strict key management procedures with regular rotation.
• Access Controls: Access to personal data within 55zz's internal systems is restricted on a need-to-know basis. Staff access is controlled through role-based permissions, multi-factor authentication, and audit logging. No staff member has unnecessary access to user personal data.
• Two-Factor Authentication (2FA): Registered users are strongly encouraged to enable 2FA on their 55zz accounts via their registered Bangladesh mobile number. 2FA provides a significant additional barrier against unauthorised account access.
• Fraud Detection Systems: Automated fraud detection and anomaly monitoring systems analyse session and transaction patterns in real time to identify and respond to security threats. Suspicious activity triggers immediate review by the 55zz security team.
• Regular Security Audits: 55zz conducts periodic security reviews of its platform infrastructure, data handling procedures, and third-party integrations to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: In the event of a personal data breach that poses a risk to user rights and freedoms, 55zz will notify affected users and relevant authorities within the timeframe required by applicable law. Affected users will be informed of the nature of the breach, the data involved, and the steps being taken to address it.

11 Children & Underage Users

The 55zz platform is strictly intended for adults aged 21 and above. 55zz does not knowingly collect, process, or retain personal data from individuals below the age of 21. Age verification is a mandatory step in the 55zz account registration and KYC process, and accounts that cannot be verified as belonging to an adult aged 21 or above will be suspended pending resolution.

If 55zz becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted immediately and the associated account will be permanently closed. Any funds deposited by a verified underage user will be returned to the source payment method after deducting any winnings obtained, which will be forfeited in accordance with the Terms & Conditions.

12 Changes to This Policy

55zz reserves the right to update this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, or platform services. When material changes are made to this policy, 55zz will notify registered users via the email address on file at least 7 days before the updated policy takes effect, except where an immediate update is required to comply with a legal or regulatory obligation.

The current version of this Privacy Policy, together with its effective date and version number, is always available at 55zz.io/privacy-policy. The version number and last-updated date at the top of this document identify which version you are reading. 55zz maintains an internal archive of prior policy versions, which may be requested by contacting support.

Your continued use of the 55zz platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must cease using the platform and contact support to request account closure and data deletion where applicable.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 55zz handles your personal data, please contact the 55zz data protection team using the details below. All privacy-related enquiries are treated as a priority and handled by trained staff.

• Email: [email protected] — use subject line "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available within your logged-in account dashboard — select "Privacy & Data" from the support menu
• Response Time: All privacy enquiries are acknowledged within 2 business days (Bangladesh Standard Time, UTC+6)
• Platform: 55zz.io — serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh

55zz aims to resolve all privacy-related concerns directly and promptly. If you are not satisfied with the response you receive, you may escalate your concern in writing to the senior data protection officer at the same email address with the subject line "Escalation — Privacy Complaint".