z5555 Privacy Policy

Overview & Scope

This Privacy Policy ("Policy") describes how z5555 ("z5555", "we", "us", "our") collects, uses, stores, discloses, and protects personal information about individuals ("you", "Player", "User") who visit, register with, or otherwise interact with the z5555 online gaming platform at z5555.io (the "Platform").

This Policy applies to all personal data collected through the Platform, including during account registration, identity verification, deposit and withdrawal processing, gameplay activity, customer support interactions, and marketing communications. It covers data collected through the z5555 website, mobile-optimised site, and any related digital touchpoints operated by z5555.

By creating a z5555 account or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood its contents and consent to the data practices described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform and close your account.

This Policy should be read together with the z5555 Terms & Conditions, which govern the overall contractual relationship between you and z5555, and the Responsible Gaming Policy, which outlines the tools and obligations related to safer gambling practices on the Platform.

Data Controller

z5555 is the data controller in respect of all personal data collected through the Platform. As data controller, z5555 determines the purposes for which personal data is processed and the means by which that processing is carried out. z5555 is responsible for ensuring that personal data is handled in accordance with this Policy and applicable data protection principles.

For all privacy-related enquiries, requests to exercise your data rights, or concerns about how your personal data is being used, please contact the z5555 Data Protection team using the contact details provided in Section 15 of this Policy.

Data We Collect

z5555 collects the following categories of personal data about registered players and Platform visitors. The specific data points collected in each category are set out in the table below.

How We Collect Data

z5555 collects personal data through the following means:

4.1 Directly from You

The majority of personal data held by z5555 is provided directly by you during your interaction with the Platform. This includes information submitted during the account registration process (name, date of birth, mobile number), documents uploaded during identity verification, payment details entered during deposit or withdrawal requests, preferences set in your account dashboard, and messages sent to the z5555 support team via live chat.

4.2 Automatically via Technology

When you access the Platform, z5555 automatically collects certain technical and usage data through server logs, session tracking tools, and cookies. This includes your IP address, device and browser information, session timestamps, and navigation activity. This data is collected to maintain Platform security, detect fraud, improve user experience, and comply with anti-money laundering monitoring requirements.

4.3 From Third-Party Payment Processors

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or a linked bank account, z5555 receives transaction confirmation data from the relevant payment processor. This typically includes the transaction reference number, partial payment account identifier, transaction amount in BDT, and timestamp. z5555 does not receive or store full payment credentials — these are handled entirely by the respective payment provider.

4.4 From Identity Verification Providers

Where z5555 uses a third-party identity verification service to cross-reference documents provided by you (for example, to verify a National Identity Card number against a reference database), z5555 may receive a verified / not-verified status response. z5555 does not receive or retain copies of government databases — only the verification outcome is shared with z5555.

Purposes of Processing

z5555 processes your personal data for the following purposes. Each purpose is listed alongside the primary data categories used and the legal basis on which z5555 relies (see Section 6 for legal basis detail).

• Account creation and management: To create, maintain, and operate your z5555 player account, including processing your registration details, managing your profile, and handling account security.
• Identity verification (KYC): To verify your identity and confirm that you meet the minimum age requirement of 21 years, in compliance with responsible gaming obligations and fraud prevention requirements.
• Payment processing: To process deposit and withdrawal requests via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer, and to maintain accurate transaction records in your account.
• Gameplay delivery: To deliver the casino games, sports betting markets, live dealer games, and other gaming products available on the Platform, including recording game outcomes and maintaining your wagering history.
• Fraud prevention and security: To monitor account activity for signs of fraudulent behaviour, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as described in the z5555 Terms & Conditions.
• Responsible gaming: To enforce deposit limits, cooling-off periods, and self-exclusion requests, and to monitor gameplay patterns that may indicate problem gambling behaviour requiring intervention.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance through the live chat and email support channels.
• Legal compliance: To comply with applicable anti-money laundering (AML) obligations, record-keeping requirements, and any lawful requests from competent authorities.
• Service improvement: To analyse aggregated usage data to improve Platform performance, game offerings, user experience, and feature development.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal campaign information via SMS or in-Platform messaging, where you have consented to receive such communications.

Legal Basis for Processing

z5555 relies on the following legal bases for processing personal data:

6.1 Contractual Necessity

The processing of identity data, contact data, financial data, and gameplay data is necessary for z5555 to perform its contractual obligations to you under the z5555 Terms & Conditions. Without this processing, z5555 would be unable to create your account, accept deposits, credit winnings, or deliver the gaming services you have requested.

6.2 Legal Obligation

z5555 is subject to legal obligations in connection with anti-money laundering compliance, fraud prevention, and responsible gaming. Processing of verification data, transaction records, and responsible gaming data is required to meet these obligations. z5555 may be required to retain certain categories of data for prescribed periods regardless of your preferences.

6.3 Legitimate Interests

z5555 processes technical data and usage data on the basis of its legitimate interests in maintaining Platform security, preventing fraud, improving its services, and operating its business effectively. z5555 has assessed that these interests do not override your fundamental rights and freedoms in respect of your personal data.

6.4 Consent

Where z5555 sends marketing communications via SMS or in-Platform messaging, it does so on the basis of your prior consent. You may withdraw your consent to receive marketing communications at any time by updating your communication preferences in your account dashboard or by contacting z5555 support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Data Sharing

z5555 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared only in the circumstances described below, and only to the extent necessary for the specific purpose in question.

7.1 Payment Processors

To process deposits and withdrawals, z5555 shares relevant transaction data with licensed payment providers including bKash, Nagad (Rocket), Upay, Visa, Mastercard, and partner banks (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank). These providers operate under their own terms and privacy policies and are solely responsible for the security of data processed through their systems.

7.2 Game Studios and Content Providers

To deliver live casino and RNG games on the Platform, z5555 passes a session token and, in some cases, a pseudonymous player identifier to the relevant game studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi). No directly identifiable personal data such as your name, mobile number, or NID is passed to game studios.

7.3 Identity Verification Providers

For KYC purposes, z5555 may share identity documents you have submitted with a licensed third-party verification provider. Such providers are engaged under strict contractual data processing agreements and are not permitted to use your data for any purpose other than the verification service contracted by z5555.

7.4 Legal and Regulatory Authorities

z5555 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory directive. z5555 will notify you of any such disclosure where permitted to do so by law.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of z5555's business assets, personal data held about players may be transferred to the acquiring entity as part of the transaction. z5555 will notify registered players via the Platform or by SMS prior to any such transfer and will ensure that the receiving entity agrees to uphold the standards set out in this Policy.

Data Retention

z5555 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The retention periods applied to the principal data categories are as follows:

Upon expiry of the applicable retention period, z5555 will securely delete or anonymise the relevant personal data so that it can no longer be associated with an identifiable individual. Anonymised and aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

Security Measures

z5555 employs a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the z5555 Platform, ensuring that login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted data storage for all sensitive personal data held in z5555 databases, including identity documents, financial records, and verification data. Encryption keys are managed separately from encrypted data.
• Access control policies that restrict access to personal data to only those z5555 staff members and contractors who require it to perform their specific job function. Access is role-based and regularly audited.
• Multi-factor authentication requirements for z5555 staff accessing internal systems that contain personal data.
• Regular penetration testing and security audits of the Platform infrastructure by qualified third-party security professionals.
• Intrusion detection systems and real-time monitoring of network traffic to identify and respond to suspicious activity promptly.
• Data breach response procedures that enable z5555 to identify, contain, and notify affected players of any personal data breach within the timeframes required by applicable obligations.

Notwithstanding the above, no online platform can guarantee absolute security against all possible threats. Players are responsible for maintaining the security of their own login credentials and should contact z5555 support immediately if they suspect unauthorised access to their account.

Cookies & Tracking Technologies

z5555 uses cookies and similar tracking technologies (collectively "Cookies") on the Platform to maintain session continuity, support security measures, and analyse usage patterns. The categories of Cookies used by z5555 are described below.

10.1 Strictly Necessary Cookies

These Cookies are essential for the Platform to function correctly. They enable core features such as maintaining your logged-in session, remembering your account preferences, and supporting the security functions of the Platform. Strictly necessary Cookies cannot be disabled without significantly impairing your ability to use the Platform.

10.2 Performance and Analytics Cookies

These Cookies collect anonymised information about how players interact with the Platform — for example, which pages are visited most frequently, how long sessions last, and which features are used most often. This information is used exclusively to improve Platform performance and user experience. No individually identifiable data is used in this analysis.

10.3 Functional Cookies

These Cookies enable the Platform to remember choices you have made — such as your preferred game lobby view, notification settings, or responsible gaming tool configurations — so that your preferences are preserved between sessions without requiring you to re-enter them each time you log in.

10.4 Managing Cookies

Most web browsers allow you to control Cookie settings through the browser preferences menu. You can choose to block all non-essential Cookies, delete existing Cookies, or receive a notification when a Cookie is set. Please note that disabling certain Cookies may affect the functionality of the Platform. z5555 does not respond to "Do Not Track" browser signals at this time.

Your Rights

As a data subject, you hold the following rights in relation to the personal data z5555 holds about you. To exercise any of these rights, please contact the z5555 Data Protection team via live chat or in writing to the email address in Section 15. z5555 will respond to all data subject requests within 30 days.

• Right of Access: You have the right to request a copy of all personal data that z5555 holds about you, together with information about how that data is being used. z5555 will provide this information free of charge.
• Right to Rectification: If any personal data held by z5555 about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account details directly through your account dashboard; for other corrections, contact z5555 support.
• Right to Erasure: You may request that z5555 delete your personal data. This right applies where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that z5555 may be required by law to retain certain data for prescribed periods even following a valid erasure request.
• Right to Restriction: You may request that z5555 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while a legitimate interests objection is being assessed.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that z5555 provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You have the right to object to processing based on z5555's legitimate interests, including profiling. z5555 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time through your account preferences or by contacting support. Withdrawal of consent does not affect the lawfulness of prior processing.

Minors

The z5555 Platform is strictly for adults aged 21 years and above. z5555 does not knowingly collect personal data from any person under the age of 21. Account registration requires confirmation that the applicant meets the minimum age requirement, and z5555 conducts identity and age verification checks to enforce this policy.

If z5555 discovers that personal data has been collected from an individual who is under the age of 21, it will immediately suspend the associated account, void any balances generated, return net deposits to the verified payment source, and securely delete the personal data of the underage individual as promptly as technically possible.

If you are a parent or guardian and believe that a minor in your care has registered a z5555 account, please contact the support team immediately via live chat or at the email address in Section 15 so that the account can be reviewed and closed without delay.

Third-Party Services

The z5555 Platform may reference or integrate with third-party services including payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), and identity verification services. When you interact with these services through the Platform, your personal data may be processed by those third parties under their own terms and privacy policies.

z5555 selects third-party service providers carefully and requires all providers that process personal data on z5555's behalf to enter into written data processing agreements that impose equivalent data protection obligations. However, z5555 does not accept responsibility for the independent data practices of third-party services that you access outside the z5555 Platform environment.

Players are encouraged to review the privacy policies of any third-party payment or identity service used in connection with their z5555 account to understand how those providers handle personal information.

Policy Changes

z5555 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform functionality, or data processing practices. When material changes are made to this Policy, z5555 will notify registered players by displaying a prominent notice on the Platform or by sending a notification to the mobile number associated with your account.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must discontinue use of the Platform and close your account before the revised Policy takes effect.

z5555 will maintain a record of previous versions of this Policy, which are available upon written request to the z5555 Data Protection team.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data z5555 holds about you, please contact the z5555 Data Protection team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the z5555 Platform. Live chat is the fastest way to reach the support team for urgent data protection matters.
• Email (plain text — not a clickable link): support at z5555.io

z5555 aims to acknowledge all written privacy requests within 4 business hours and to provide a substantive response within 30 days. Where a request is complex or involves a large volume of data, z5555 may extend this period by a further 60 days, in which case you will be notified of the extension and the reasons for it within the initial 30-day period.