dd555 Privacy Policy

1. Introduction

dd555 ("dd555", "we", "us", "our") is committed to protecting and respecting the privacy of every person who uses our online betting and casino platform at https://dd555.io (the "Platform"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by dd555.

This policy applies to all users of the dd555 Platform, including registered account holders, visitors who have not yet registered, and any individual who contacts our support team. It covers personal data collected via the Platform's website, mobile-optimised pages, live chat, email correspondence, and any other channel through which you interact with dd555.

Please read the following carefully to understand our practices regarding your personal data. This Privacy Policy is incorporated by reference into the dd555 Terms & Conditions. Terms not defined in this policy have the meanings assigned to them in the Terms & Conditions.

The effective date of this version of the Privacy Policy is 1 January 2026. We will notify registered users of any material updates via email and/or a prominent notice on the Platform.

2. Data Controller

For the purposes of applicable data protection law, dd555 is the data controller in respect of the personal data of its users. This means that dd555 determines the purposes and means of processing your personal data.

If you have any questions about this Privacy Policy or about how dd555 handles your personal data, you may contact our data protection team at any time using the contact details provided in Section 15 of this policy. We endeavour to respond to all data-related enquiries within 10 business days.

3. Data We Collect

dd555 collects the following categories of personal data from users of the Platform:

Category	Examples of Data	When Collected
Identity Data	Full legal name, date of birth, nationality, gender, National ID / passport number	Registration & KYC verification
Contact Data	Email address, mobile phone number, residential address (city, district, division)	Registration & account updates
Financial Data	bKash / Nagad / Rocket / Upay account references, bank account details, deposit and withdrawal history, transaction amounts in BDT (৳)	Deposits, withdrawals & cashier operations
KYC Documents	Scanned / photographed copies of government-issued ID, proof of address, payment method ownership evidence	Identity verification process
Gaming Activity Data	Game sessions, bet amounts, wager history, win/loss records, bonus usage, session durations, responsible gaming tool usage	Ongoing during Platform use
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, referring URL	Automatically upon Platform visit
Usage Data	Pages visited, features used, click paths, time on page, search queries within the Platform	Automatically upon Platform use
Communication Data	Support ticket content, live chat transcripts, email correspondence with dd555 staff	When you contact support
Marketing Preferences	Opt-in / opt-out status for promotional emails, SMS, and push notifications	Registration & preference updates

dd555 does not knowingly collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) other than what may be incidentally present in identity documents submitted for KYC verification. Such incidental sensitive data is used solely for the purpose of identity verification and is not processed for any other purpose.

4. How We Collect Your Data

dd555 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account preferences.
• Automated technologies: Technical and usage data collected automatically via cookies, web beacons, server logs, and similar tracking technologies when you visit or interact with the Platform. See Section 8 for full details on our cookie practices.
• Third-party sources: Identity and address verification data obtained from third-party KYC service providers for the purpose of confirming the accuracy of information you have provided to dd555. Financial data received from payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank) to confirm transaction status.
• Game providers: Gaming activity data relayed to dd555 by third-party game providers (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) for the purpose of account crediting, dispute resolution, and responsible gaming monitoring.

5. How We Use Your Data

dd555 uses the personal data it collects for the following specific purposes:

• Account management: To create, maintain, and administer your dd555 account, including processing your registration, managing your balance, and enabling you to access Platform features.
• Identity verification (KYC): To verify your identity, confirm your age (21+ requirement), and fulfil our responsible gaming and anti-money laundering obligations.
• Transaction processing: To process deposits, withdrawals, bonus credits, and other financial transactions on your account accurately and promptly in Bangladeshi Taka (BDT ৳).
• Customer support: To respond to your enquiries, resolve complaints, investigate disputes, and provide general assistance via support channels.
• Platform security & fraud prevention: To monitor for and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions.
• Regulatory compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory bodies or law enforcement, and maintain records as required by financial compliance rules.
• Responsible gaming: To monitor betting patterns and session durations in order to identify potential problem gambling behaviour, enforce self-exclusion and deposit limits, and provide timely support to at-risk players.
• Platform improvement: To analyse aggregated usage data in order to improve the design, performance, game selection, and overall user experience of the dd555 Platform.
• Marketing communications: To send promotional offers, bonus notifications, and news about dd555 to users who have opted in to receive such communications. You may opt out at any time.
• Legal proceedings: To establish, exercise, or defend legal claims arising in connection with your use of the Platform.

6. Legal Bases for Processing

dd555 processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform our contract with you — the Terms & Conditions you accepted at registration — including account management, transaction processing, and customer support.
• Legal obligation: Processing that is required to comply with applicable legal obligations, including identity verification (KYC), anti-money laundering checks, and record-keeping requirements.
• Legitimate interests: Processing carried out for dd555's legitimate business interests where those interests are not overridden by your rights. This includes fraud prevention, Platform security, and aggregated analytics for product improvement.
• Consent: Processing based on your explicit consent, specifically the sending of direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Sharing Your Personal Data

dd555 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Payment processors: Financial data is shared with our payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank) solely to process your deposit and withdrawal requests.
• KYC and identity verification providers: Identity and document data is shared with third-party KYC service providers engaged by dd555 to verify player identities and fulfil age and anti-money laundering obligations.
• Game providers: Account reference data and gaming activity is shared with licensed game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and others) to facilitate game play, resolve disputes, and maintain integrity of game outcomes.
• IT and hosting providers: Technical and account data is accessible to dd555's cloud hosting, database, and platform infrastructure providers under strict data processing agreements that prohibit use for any purpose other than providing services to dd555.
• Legal and regulatory authorities: dd555 may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts when required to do so by applicable law, court order, or regulatory directive.
• Professional advisors: Legal advisors, auditors, and accountants may have access to personal data to the extent necessary to provide professional services to dd555, subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of dd555's assets, personal data held by dd555 may be transferred to the acquiring entity, subject to equivalent data protection obligations.

8. Cookies & Tracking Technologies

dd555 uses cookies and similar tracking technologies on the Platform to provide a functional, personalised, and secure user experience. The following types of cookies may be set when you use the Platform:

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly. They enable core features such as user authentication, session management, security token validation, and shopping cart / cashier functionality. These cookies cannot be disabled without rendering the Platform unusable.
• Performance and analytics cookies: These cookies collect aggregated, anonymised information about how visitors use the Platform — such as which pages are visited most frequently and whether error messages are received. This data is used solely to improve Platform performance and user experience. No personally identifiable information is collected by these cookies.
• Functional cookies: These cookies allow the Platform to remember choices you have made (such as your preferred language or display settings) and to provide enhanced, personalised features during your session.
• Targeting and marketing cookies: With your consent, dd555 may use targeting cookies to deliver promotional content relevant to your interests. These cookies track your browsing activity on the Platform and are used to measure the effectiveness of dd555's marketing campaigns. You may opt out of targeting cookies at any time via your browser settings.

You may control cookie settings via your browser's privacy or cookie settings menu. Please note that disabling certain categories of cookies may impair the functionality of the dd555 Platform. For further guidance on managing cookies in popular browsers, please refer to your browser's help documentation.

In addition to cookies, dd555 may use web beacons (transparent image files) embedded in emails to confirm that promotional emails have been opened. Web beacon data is used solely to measure email campaign effectiveness and is not linked to any individually identifiable browsing activity.

9. Data Retention

dd555 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. The following general retention periods apply:

• Account data and KYC documents: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, in accordance with financial compliance and anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming activity logs: Retained for a minimum of 3 years from the date of each recorded session.
• Support and communication records: Retained for 2 years from the date of last correspondence, unless the communication is relevant to an ongoing dispute or legal proceeding.
• Marketing preference records: Retained for the duration of the account relationship and for 1 year after opt-out to demonstrate compliance with consent requirements.
• Technical and log data: Automatically deleted or anonymised within 12 months of collection, unless retained for a specific security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to system architecture constraints, it is isolated from active processing until deletion can be completed.

10. Your Data Rights

As a dd555 account holder or Platform user based in Bangladesh, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data that dd555 holds about you. We will provide this within 30 days of receiving your verified request.
• Right to rectification: If you believe that any personal data dd555 holds about you is inaccurate or incomplete, you may request that it be corrected or updated. You may update many data fields directly via your account settings.
• Right to erasure ("right to be forgotten"): You may request that dd555 delete your personal data. This right is subject to legal retention obligations — where dd555 is required by law to retain certain data (e.g., KYC and transaction records for anti-money laundering purposes), erasure may be deferred until the retention obligation expires.
• Right to restriction of processing: You may request that dd555 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified following a rectification request.
• Right to data portability: You may request a copy of personal data you have provided to dd555 in a structured, commonly used, machine-readable format, to the extent technically feasible.
• Right to withdraw consent: Where processing is based on your consent (specifically, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object to marketing: You may object to dd555 using your personal data for direct marketing at any time. Upon receiving such an objection, dd555 will cease processing your data for that purpose immediately.

To exercise any of the above rights, please contact dd555 at [email protected] with the subject line "Data Rights Request" and include your registered username and a description of your request. dd555 may request additional information to verify your identity before processing a data rights request.

11. Data Security

dd555 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between user devices and the dd555 Platform.
• Encryption at rest for all databases containing personal data, including KYC documents and financial records.
• Role-based access controls ensuring that dd555 staff can access personal data only to the extent required by their specific job function.
• Multi-factor authentication for all administrative access to dd555's back-end systems and databases.
• Regular security assessments including vulnerability scanning and penetration testing of Platform infrastructure.
• Incident response procedures for detecting, investigating, and responding to data security breaches, including notification obligations where applicable.
• Staff training on data protection and information security, conducted upon onboarding and on an ongoing periodic basis.

While dd555 takes every reasonable step to protect your personal data, no method of electronic transmission or data storage is 100% secure. In the event of a data security incident that poses a risk to the rights and freedoms of affected users, dd555 will notify affected individuals and relevant authorities in accordance with applicable legal requirements.

You are responsible for maintaining the confidentiality of your account login credentials. If you suspect that your account has been accessed without your authorisation, please contact dd555 immediately at [email protected].

12. Children & Minors

The dd555 Platform is strictly intended for adults aged 21 years and above. dd555 does not knowingly collect personal data from individuals under the age of 21. If dd555 becomes aware that a user is under 21, the account will be immediately suspended, all deposits returned, and any personal data associated with that account will be deleted or anonymised as soon as practicable.

Parents and guardians who believe that a minor may have registered with dd555 or provided personal data to dd555 without consent are encouraged to contact our support team at [email protected] immediately so that the appropriate action can be taken without delay.

dd555 employs age verification checks during the registration process and may request documentary proof of age (such as a National Identity Card or passport) before allowing access to real-money gaming features.

13. Third-Party Links

The dd555 Platform may contain links to third-party websites or services, for example links to payment provider portals or game provider support pages. This Privacy Policy applies solely to the dd555 Platform. dd555 is not responsible for the privacy practices of any third-party website or service, and we encourage you to review the privacy policies of any third-party sites you visit via links on the Platform.

The inclusion of a link to a third-party site on the dd555 Platform does not constitute an endorsement of that site or of its privacy practices by dd555.

14. Changes to This Privacy Policy

dd555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. The effective date at the top of this policy will be updated to reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect the way dd555 collects, uses, or shares your personal data — dd555 will notify registered users via email to the address associated with their account, and/or via a prominent notice on the Platform homepage, at least 7 days prior to the changes taking effect.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated policy. If you do not agree with any changes to this policy, you should cease using the Platform and may request account closure as described in the Terms & Conditions.

Previous versions of this Privacy Policy are available upon request by contacting [email protected].

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way dd555 processes your personal data, please contact us using the following details:

• Data Protection Enquiries: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights Requests: "Data Rights Request"
• Subject Line for Privacy Complaints: "Privacy Complaint"
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Within 10 business days for data rights requests; within 5 business days for general privacy enquiries

All formal privacy complaints must be submitted in writing to [email protected] with a clear description of the concern, your registered username, and any supporting information. dd555 will acknowledge all formal privacy complaints within 48 hours and will endeavour to provide a full response within 10 business days.