r555 Privacy Policy — Your Data, Protected

r555 ("we", "us", "our", "the Platform") operates the online casino and sports betting service available at r555.lat, serving players primarily located in Bangladesh. We understand that your personal data is important, and we are committed to handling it with care, transparency, and respect. This Privacy Policy describes how r555 collects, uses, discloses, and protects information that identifies or can reasonably identify you as an individual ("personal data").

This Policy applies to all personal data processed in connection with your use of the r555 Platform, including data collected during account registration, payment processing, gaming activity, customer support interactions, and general browsing of r555.lat. By creating an account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall agreement between you and r555. Capitalised terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

r555 is the data controller responsible for your personal data collected and processed through the Platform. As data controller, r555 determines the purposes and means by which your personal data is processed. All data-related enquiries, requests, and complaints should be directed to the r555 data team at the contact address provided in Section 14 of this Policy.

Where r555 engages third-party service providers to process personal data on our behalf — such as payment processors, identity verification providers, and cloud infrastructure operators — those providers act as data processors under written agreements that require them to process data only on r555's instructions and to maintain appropriate security standards.

r555 collects the following categories of personal data in the course of providing the Platform to registered players:

r555 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, or health data, except where health-related information is voluntarily provided by a player in the context of a responsible gaming or self-exclusion request.

r555 collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or responding to surveys or promotions.
• Automated technical collection: Data collected automatically when you access r555.lat, including IP address, device identifiers, browser information, and session activity, via server logs and first-party cookies.
• Payment service providers: Transaction confirmation data and payment method references received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank when you initiate deposits or withdrawals.
• Identity verification partners: Verification outcomes and document authenticity signals received from third-party KYC (Know Your Customer) service providers used to confirm your identity and age.
• Gaming platform providers: Game session data and outcome records received from game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi in connection with games you play on the Platform.

r555 processes your personal data only where there is a lawful basis for doing so. The primary purposes for which we process your data, and the corresponding legal basis for each, are set out below:

• Account registration and operation: Processing is necessary for the performance of the contract between you and r555 (the Terms & Conditions). Without this processing, r555 cannot provide you with access to the Platform.
• Payment processing: Processing is necessary to execute the deposit and withdrawal transactions you request, forming part of the contractual service r555 provides.
• Age and identity verification: Processing is necessary for compliance with r555's legal obligation to verify that all players are aged 18 or above and to meet applicable anti-money laundering requirements.
• Fraud prevention and security: Processing is necessary for the legitimate interests of r555 and its players in detecting, preventing, and investigating fraud, money laundering, account compromise, and other security threats.
• Responsible gaming monitoring: Processing is necessary for compliance with responsible gaming obligations and for the legitimate interest of r555 in protecting vulnerable players from gambling-related harm.
• Customer support: Processing is necessary for the performance of the contract and for the legitimate interest of r555 in resolving player issues effectively and maintaining quality assurance records.
• Platform improvement and analytics: Processing is based on the legitimate interest of r555 in understanding how the Platform is used and improving the player experience, provided that such interests are not overridden by your rights.
• Marketing communications: Where you have given explicit consent, r555 may send you promotional communications about new games, offers, and events relevant to the Bangladesh market. You may withdraw this consent at any time by contacting [email protected].

r555 does not sell or rent your personal data to any third party. We may share your data with the following categories of recipients, strictly to the extent necessary for the purposes described in this Policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the financial data necessary to process your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC and document verification services receive identity data necessary to confirm your age, identity, and the authenticity of documents you submit for account verification.
• Game content providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session and account identifiers necessary to deliver their games through the r555 Platform.
• IT and cloud infrastructure providers: Service providers who host, maintain, and secure the r555 Platform infrastructure process technical and personal data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: r555 may be required to disclose personal data to regulatory bodies, law enforcement agencies, or courts in response to lawful requests, court orders, or to comply with anti-money laundering and counter-terrorism financing obligations.
• Professional advisers: Lawyers, auditors, and other professional advisers may receive limited personal data where necessary in connection with legal proceedings, regulatory compliance, or corporate transactions, subject to obligations of confidentiality.

r555 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required for anti-money laundering compliance and financial audit purposes.
• Gaming activity records: Retained for a minimum of three (3) years from the date of each session or wager, to support dispute resolution and responsible gaming monitoring obligations.
• Customer support communications: Retained for three (3) years from the date of the last interaction, to maintain quality assurance records and support the resolution of late-arising disputes.
• Technical and security logs: Retained for twelve (12) months from collection, or longer where a security investigation is ongoing.
• Marketing consent records: Retained for the period of your consent and for three (3) years thereafter as evidence of the consent given.

Once the applicable retention period expires, r555 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Where complete deletion is not immediately practicable due to backup system architecture, r555 will isolate the data from active processing until deletion can be completed.

r555 implements a layered approach to data security, combining technical controls, organisational policies, and contractual obligations on third-party partners to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and r555.lat is encrypted using Transport Layer Security (TLS) to prevent interception in transit.
• Credential hashing: Account passwords are stored using industry-standard one-way hashing algorithms. r555 staff cannot view your password in plain text under any circumstances.
• Access controls: Access to systems holding personal data is restricted to r555 personnel who require it for their specific role, on a least-privilege basis. All access is logged and audited.
• Secure payment processing: Payment transactions are processed through established, security-certified channels. r555 does not store full payment instrument details on its own servers.
• Intrusion detection and monitoring: r555 employs automated monitoring tools to detect and alert on anomalous access patterns, potential data breaches, and other security incidents in real time.
• Staff training: All r555 personnel with access to personal data receive regular data protection and security awareness training.

r555 uses first-party cookies and similar tracking technologies on r555.lat to deliver a functional, secure, and personalised browsing experience. r555 does not use third-party advertising cookies or cross-site tracking technologies that share your data with external advertising networks.

The cookies used on r555.lat fall into the following categories:

• Essential cookies: Strictly necessary for the Platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences, such as responsible gaming limit settings, display preferences, and notification choices. Disabling these cookies may affect the personalised features of the Platform.
• Analytics cookies: Used by r555 to understand aggregated, anonymised usage patterns — such as which pages are most visited and how players navigate the Platform — in order to improve the user experience. These cookies do not track you personally across other websites.

You can manage cookie preferences through your browser settings. Please note that blocking essential cookies will prevent you from logging in to your r555 account and using core Platform features. r555 does not respond to "Do Not Track" browser signals at this time, as there is no universal standard for how such signals should be interpreted.

Subject to applicable law and the legitimate interests of r555 in complying with legal obligations, you have the following rights in relation to your personal data held by r555:

• Right of access: You may request a copy of the personal data r555 holds about you, together with information about how it is processed.
• Right to rectification: You may request that r555 correct any inaccurate or incomplete personal data held about you. You can update basic profile information directly from within your account settings.
• Right to erasure: In certain circumstances, you may request that r555 delete your personal data. This right is subject to r555's legal obligation to retain certain records — for example, financial transaction data that must be kept for anti-money laundering compliance cannot be deleted on request before the applicable retention period expires.
• Right to restrict processing: You may request that r555 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent — for example, for marketing communications — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing of your personal data where it is based on r555's legitimate interests, on grounds relating to your particular situation. r555 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, please submit a written request to [email protected], including your registered account username and a clear description of the right you wish to exercise. r555 will acknowledge your request within 48 hours and provide a substantive response within thirty (30) days. Complex or multiple requests may take longer, in which case r555 will notify you of the extended timeline.

r555 is strictly an 18+ platform. The Platform is not directed at, and is not intended to be used by, persons under the age of 18. r555 does not knowingly collect or process personal data of individuals under 18 years of age.

Where r555 discovers or has reasonable grounds to believe that personal data has been collected from a person under 18, r555 will promptly close the associated account, delete or anonymise the collected data to the extent permitted by applicable legal obligations, and — where required by anti-money laundering rules — retain only the minimum records necessary to satisfy those obligations.

Parents and guardians who believe their child has created an account on r555.lat should contact [email protected] immediately. r555 supports the use of parental control software to restrict access to gambling websites and encourages households with minors to deploy such tools on shared devices.

r555 operates with the support of service providers — including cloud infrastructure partners and game content providers — who may be located in jurisdictions outside Bangladesh. Where your personal data is transferred to such providers, r555 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

These safeguards include contractual obligations on recipient parties requiring them to process your personal data only for the specified purpose, to implement appropriate technical and organisational security measures, and to delete or return data upon completion of the relevant service. r555 does not transfer personal data to jurisdictions that do not provide adequate protections for the data being transferred without first implementing compensating contractual controls.

r555 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made, r555 will update the "Last Updated" date at the top of this Policy and, where the changes significantly affect your rights, will notify registered players via the email address on record.

Your continued use of the r555 Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. r555 encourages you to review this Policy periodically to stay informed about how your personal data is being protected. If you disagree with any changes to this Policy, you should stop using the Platform and contact [email protected] to arrange account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way r555 processes your personal data, please contact the r555 data team using the details below. All privacy-related enquiries are handled by dedicated staff and are treated with strict confidentiality.

• Email: [email protected]
• Subject line (recommended): Privacy Request — [your registered username]
• Response time: Acknowledgement within 48 hours; substantive response within 30 days
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

Please include your registered account username, the specific right you wish to exercise or the nature of your query, and any relevant supporting details to allow r555 to handle your request promptly and accurately.