Privacy Policy — How 556bet Protects Your Data

When you register for and use a 556bet account, we collect personal data across several categories. The table below summarises the data types we collect, the source of each data type, and the primary reason for its collection.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. If you choose to disclose such information voluntarily in support communications, we will handle it with the highest degree of care and will not retain it beyond the resolution of the relevant support case.

556bet processes your personal data only where we have a legitimate and clearly defined purpose for doing so. The following list describes every primary use of your data on the 556bet platform, together with the legal basis under which each processing activity is conducted.

• Account creation and management: We use your identity and contact data to create and maintain your 556bet account, verify your eligibility, and ensure only you can access your account. This processing is necessary to perform the contract between you and 556bet.
• Payment processing: Your financial data — specifically your registered mobile financial service number — is used to credit deposits to your account and process withdrawal requests to your nominated wallet. This is a contractual necessity and cannot be opted out of while maintaining an active account.
• Identity verification and KYC: We are obligated to verify the identity of players before processing withdrawals. This is a compliance requirement consistent with anti-money-laundering (AML) best practice, and the legal basis for this processing is legal obligation.
• Fraud prevention and security: Technical data including IP address, device fingerprint, and session metadata is analysed by our security systems to detect account takeover attempts, duplicate account registration, and prohibited conduct as defined in our Terms & Conditions. The legal basis is our legitimate interest in protecting the platform and our users.
• Responsible gaming monitoring: Usage data — including session length, betting frequency, deposit patterns, and loss velocity — is monitored by our responsible gaming systems to identify players who may be exhibiting signs of problem gambling. Where such patterns are detected, we may proactively reach out or apply temporary account restrictions. The legal basis is both legal obligation and legitimate interest in player welfare.
• Customer support: Communication data is used by the 556bet support team to resolve queries, process complaints, and handle disputes. Support interactions are logged for quality assurance and, where relevant, to create an audit trail for disputed transactions.
• Marketing communications (opt-in only): With your explicit consent at registration or via account settings, we may send you personalised promotional emails or SMS messages about bonuses, new game launches, seasonal offers tied to events such as BPL, Eid, or Pohela Boishakh, and platform updates. You may withdraw this consent at any time with no impact on your account or service access.
• Platform analytics and improvement: Aggregated, anonymised usage data is used to understand how players navigate the platform, which game categories are most popular, and where technical or UX issues may exist. This data cannot be used to identify individual players and is retained for up to twenty-four months.

556bet does not sell or rent your personal data. We share data with third parties only where it is strictly necessary for the delivery of the platform, and only under contractual arrangements that require those parties to protect your data to a standard consistent with this Privacy Policy.

The categories of third parties with whom we may share data are as follows:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive only the transaction reference data required to process deposits and withdrawals. These are established, regulated mobile financial services operating under the Bangladesh Bank's oversight. 556bet does not share your full identity profile with payment providers beyond what is required for transaction authorisation.
• Game content providers: Third-party game studios — including Pragmatic Play, Evolution, PG Soft, JILI, Spribe, and Ezugi — may receive a session token and anonymised player identifier to initialise game sessions. These providers do not receive your name, NID number, mobile number, or any other directly identifying personal data.
• Identity verification services: Where we use a third-party KYC verification provider to assist with identity document authentication, that provider receives a copy of the document you submit and processes it under a strict data processing agreement. Verification results are returned to 556bet; the document copy is not retained by the provider beyond the verification workflow.
• Infrastructure and hosting providers: 556bet's platform is hosted on cloud infrastructure operated by reputable providers. These providers act as data processors and have no independent right to access or use your personal data. All hosting infrastructure used by 556bet implements encryption at rest and in transit as standard.
• Legal and regulatory authorities: In the event of a valid legal request, court order, or regulatory investigation, 556bet may be required to disclose specific player data to law enforcement or regulatory bodies. We will notify affected players of such disclosures where we are legally permitted to do so.

556bet uses cookies and similar tracking technologies to maintain session state, ensure platform security, and understand aggregate usage patterns. The following table describes the categories of cookies used on the 556bet platform.

Most web browsers allow you to control cookie behaviour through browser settings, including blocking all cookies, accepting only first-party cookies, or clearing cookies on browser close. Note that disabling strictly necessary cookies will prevent you from logging in and using the 556bet platform. Instructions for managing cookies are available in your browser's help documentation.

556bet does not use third-party advertising cookies and does not participate in cross-site behavioural advertising networks. No data collected via cookies on the 556bet platform is shared with advertising technology companies.

556bet implements a layered approach to data security that covers network infrastructure, application security, access controls, and operational procedures. The key security measures applied to your personal data include the following:

• Transport Layer Security (TLS): All data exchanged between your browser or mobile device and the 556bet platform is encrypted using TLS 1.2 or higher. Outdated protocols (SSL 3.0, TLS 1.0, TLS 1.1) are disabled.
• AES-256 encryption at rest: Sensitive data stored in 556bet's databases — including identity document references, payment method records, and hashed credentials — is encrypted at rest. Encryption keys are managed separately from the encrypted data and rotated on a defined schedule.
• Password hashing: Account passwords are never stored in plaintext. 556bet uses a modern, salted cryptographic hashing algorithm to store credential data. Even in the event of a database breach, stored password hashes cannot be reversed to recover original passwords.
• Role-based access control (RBAC): Internal access to personal data is restricted on a need-to-know basis. Support agents can access account and transaction data relevant to active support cases; they cannot access identity document vaults, raw payment data, or security logs unless their role explicitly requires it.
• Intrusion detection and monitoring: 556bet operates continuous security monitoring across platform infrastructure. Anomalous activity — including mass login attempts, unusual data export patterns, and API abuse — triggers automated alerts and, where warranted, immediate defensive action.
• Data breach response: In the event of a confirmed data breach affecting personal data, 556bet will notify affected players via their registered email address as promptly as operationally possible and will take immediate remediation steps to contain the breach and prevent further exposure.

As a registered 556bet player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the support team via live chat or by emailing [email protected] (plain text only — not a clickable link). All requests are acknowledged within two Bangladesh Standard Time business days and fulfilled within five business days.

• Right of access: You may request a copy of all personal data held about you by 556bet. We will provide this in a structured, readable format via your registered email address.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Identity data corrections may require re-submission of supporting documents.
• Right to erasure: You may request deletion of your personal data and account. Erasure requests will be fulfilled subject to our data retention obligations (see Section 7 below). Data that must be retained for legal or regulatory compliance purposes cannot be deleted ahead of the applicable retention period.
• Right to restrict processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved. During a restriction, we will retain your data but will not process it for purposes beyond the restriction.
• Right to data portability: You may request that your personal data be provided in a machine-readable format (CSV or JSON) so that it can be transferred to another service provider.
• Right to object to marketing: You may object to the processing of your data for direct marketing purposes at any time, without providing a reason. This can be done via account settings or by contacting support. Objections are acted upon within 48 hours.

556bet retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account plus five years following account closure. This retention period is required to fulfil AML record-keeping obligations and to respond to any post-closure regulatory enquiries or legal disputes.
• Transaction records: All deposit and withdrawal records are retained for seven years from the date of the transaction, consistent with financial record-keeping best practice.
• Identity verification documents: KYC documents (NID copies, passport scans, etc.) are retained for five years from the date of verification or from the date of account closure, whichever is later.
• Support and communication records: Live chat transcripts and support email threads are retained for two years from the date of the interaction. Recordings used solely for staff training purposes are deleted within ninety days.
• Technical and security logs: IP address logs, login records, and security event logs are retained for twelve months and then deleted unless they form part of an active fraud investigation.
• Marketing consent records: Records of marketing opt-in and opt-out events are retained for three years after the most recent consent change, to allow 556bet to demonstrate compliance with consent requirements if challenged.

When retention periods expire, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Anonymised, aggregated data (which cannot be used to identify you) may be retained indefinitely for statistical and platform improvement purposes.

556bet may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes — changes that affect how we collect, use, or share your personal data in ways that are meaningfully different from the current policy — we will notify you by sending a summary of the changes to your registered email address at least fourteen days before the changes take effect.

Minor or clarificatory changes (such as correcting typographical errors, improving plain-language explanations, or adding examples to existing practices) may be made without advance notice. The effective date shown at the top of this page will always reflect the date of the most recent update.

If you disagree with any material change to this Privacy Policy and do not wish to continue using 556bet under the revised terms, you may request account closure and data deletion by contacting support before the change takes effect. Continued use of 556bet after a material change has taken effect constitutes your acceptance of the revised Privacy Policy.

For all privacy-related enquiries, data access requests, or complaints, contact the 556bet data team at: [email protected] (plain text — not a clickable link). Our support team is available 24/7 via live chat from your account dashboard, with an average response time of two to five minutes for live chat and up to one Bangladesh Standard Time business day for email enquiries.