ze555 Privacy Policy

1 Data We Collect

ze555 collects personal data through several channels: directly from you when you register and use the platform, automatically through your use of the site, and in certain cases from trusted third-party sources such as payment processors and identity verification services. The categories of data we collect are set out below.

1.1 Registration & Account Data

When you create a ze555 account, we collect the following information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (to verify you are 18 years of age or older).
• Valid email address.
• Bangladesh mobile number (used for account verification and two-factor authentication via SMS OTP).
• Preferred BDT payment method (e.g., bKash number, Nagad number, bank account).
• Username and hashed password (we never store passwords in plain text).

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to confirm your eligibility as an adult player, ze555 may request:

• A copy of your Bangladesh National Identity Card (NID), passport, or other government-issued photo ID.
• A recent utility bill, bank statement, or similar document confirming your residential address in Bangladesh.
• A selfie photograph holding your ID document, requested at our discretion for enhanced verification cases.

KYC documents are processed by our internal compliance team and, where applicable, by an accredited third-party identity verification service operating under equivalent data protection standards.

1.3 Financial Transaction Data

Every deposit and withdrawal processed through ze555 generates a transaction record. This record includes the transaction amount in BDT (৳), the payment channel used (bKash, Nagad, Rocket, Upay, DBBL, City Bank, or BRAC Bank), the transaction reference number, timestamp (Bangladesh Standard Time, UTC+6), and the resulting account balance. We retain this data for financial audit and anti-money-laundering (AML) compliance purposes.

1.4 Gameplay & Betting Activity Data

ze555 logs all gaming and betting activity associated with your account, including game titles played, bet amounts, outcomes, session durations, bonus usage, and responsible gaming tool activations (e.g., deposit limit changes, cool-off requests). This data is used to deliver our service, resolve disputes, and monitor for problem gambling indicators.

1.5 Technical & Device Data

When you access ze555, our servers and analytics systems automatically collect certain technical data, including:

• IP address and approximate geolocation (city/region level).
• Device type, operating system, and browser version.
• Referring URL and on-site navigation path.
• Session timestamps and page interaction data.

This technical data is used for security monitoring, fraud detection, platform optimisation, and aggregate analytics. It is not used to build individual marketing profiles.

1.6 Communications Data

If you contact ze555 customer support via email or live chat, we retain a record of those communications — including your messages and our responses — to maintain service continuity, train support staff, and resolve any disputes that may arise.

2 How We Use Your Data

ze555 uses personal data only for the purposes for which it was collected, or for compatible purposes that a reasonable person would expect. The primary purposes for which we process your data are as follows:

Marketing Communications

ze555 will only send you promotional emails or SMS messages regarding bonuses, seasonal offers (Eid, Pohela Boishakh, BPL season), and platform updates if you have opted in to marketing communications during registration or subsequently through your account preferences. You may withdraw this consent at any time by updating your notification settings or by emailing [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

3 Legal Basis for Processing

ze555 processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual necessity: Processing required to fulfil our obligations under the ze555 Terms & Conditions — including operating your account, processing bets, and handling deposits and withdrawals.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC/AML obligations and the prevention of underage gambling.
• Legitimate interests: Processing carried out for purposes that are in ze555's or a third party's legitimate interests, including fraud prevention, platform security, and aggregate analytics, provided those interests are not overridden by your fundamental rights.
• Consent: Processing that relies on your freely given, specific, and informed consent — such as receiving marketing communications. You may withdraw consent at any time without detriment to your account standing.

4 Data Sharing & Disclosure

ze555 does not sell or rent your personal data. We share your data only in the following limited circumstances:

4.1 Service Providers

We share personal data with third-party service providers who process data on our behalf, strictly for the purpose of delivering the ze555 service. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, DBBL, City Bank, and BRAC Bank — to process BDT deposits and withdrawals.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who receive session tokens and bet data required to deliver their game content.
• Identity verification providers: Accredited KYC/AML screening services that assist with document verification and sanctions screening.
• Cloud infrastructure & cybersecurity providers: Who provide the hosting, monitoring, and security infrastructure on which ze555 operates.

All service providers are contractually bound to process your data only as directed by ze555, to maintain appropriate security standards, and to refrain from using your data for their own commercial purposes.

4.2 Legal & Regulatory Disclosures

ze555 may disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where required to do so by applicable law, by court order, or where we have a good-faith belief that such disclosure is necessary to prevent fraud, financial crime, or imminent harm to a person.

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ze555's business, personal data held by ze555 may be transferred to the acquiring or successor entity. In such an event, ze555 will notify affected players and ensure that equivalent data protection standards are maintained by the successor entity.

4.4 With Your Consent

ze555 will not share your data with any other third party unless you have given your explicit prior consent for a specific sharing purpose. You may withdraw such consent at any time.

5 Cookies & Tracking Technologies

ze555 uses cookies and similar client-side storage technologies (localStorage, sessionStorage) to operate the platform and improve your experience. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot access other files on your device.

Types of Cookies We Use

Managing Cookies

You can control cookie behaviour through your browser settings. Most modern browsers allow you to view, delete, and block cookies on a per-site basis. Note that disabling strictly necessary cookies will impair your ability to log in and use ze555 — the platform cannot function without session cookies. Disabling analytics or functional cookies will not affect your ability to play games or place bets, but may result in a less personalised experience.

ze555 does not use cookies to track your activity on other websites or to serve you personalised advertisements on third-party platforms.

6 Data Retention

ze555 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. Our standard retention periods are set out below:

• Account & registration data: Retained for the lifetime of your active account, plus a minimum of 5 years following account closure, to comply with AML record-keeping requirements.
• KYC identity documents: Retained for a minimum of 5 years from the date of verification, or longer if required by applicable law.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Gameplay and betting logs: Retained for a minimum of 3 years for dispute resolution and responsible gaming monitoring purposes.
• Customer support communications: Retained for 3 years from the date of the last communication in the relevant thread.
• Marketing preference data: Retained until you withdraw consent or close your account, whichever is sooner.
• Technical/device logs: Retained for up to 12 months on a rolling basis, unless a security investigation requires extended retention.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.

7 Your Data Rights

As a ze555 player, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include sufficient information to verify your identity. We will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data ze555 holds about you, along with information about how it is processed and with whom it is shared.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections (e.g., mobile number, email address), you may update these directly through your account settings.
• Right to Erasure: In certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected and is not subject to a legal retention obligation — you may request that ze555 delete your personal data.
• Right to Restriction: You may request that ze555 restrict the processing of your personal data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you have the right to receive a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data where ze555 relies on legitimate interests as the legal basis. ze555 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where ze555 processes your data on the basis of your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

8 Data Security Measures

ze555 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• Transport layer security: All communications between your browser or device and ze555 servers are encrypted using TLS 1.2 or higher. The ze555.app domain is HTTPS-enforced, and all HTTP requests are automatically redirected to HTTPS.
• Password security: Passwords are stored using industry-standard one-way hashing algorithms (bcrypt). ze555 never stores passwords in plain text and never transmits them after initial creation.
• Two-factor authentication (2FA): Registered players are strongly encouraged to enable SMS OTP-based 2FA. Accounts with 2FA active are significantly more resistant to credential-based takeover attacks.
• Access controls: Internal access to production data is governed by role-based access controls. Staff are granted only the minimum data access required for their specific role. All privileged access is logged and subject to periodic review.
• Intrusion detection & monitoring: ze555 operates real-time security monitoring tools that detect and alert on unusual traffic patterns, brute-force login attempts, and other indicators of compromise.
• Penetration testing: The ze555 platform undergoes regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, ze555 will notify affected players without undue delay and will take all reasonably available steps to contain the breach and mitigate its impact.

9 Children's Privacy

Age verification is a mandatory step during the ze555 registration process. Players are required to confirm their date of birth at sign-up, and a formal KYC document verification process is applied to all accounts. Any account found — through automated screening, manual review, or a third-party report — to belong to an individual under 18 years of age will be immediately suspended. All associated funds will be returned to the originating payment source where technically possible, all bonuses will be forfeited, and all gameplay records will be deleted.

If you are a parent or guardian and believe that a minor in your care has registered with ze555 or has accessed the platform, please contact us immediately at [email protected]. We will treat such reports as a priority and take prompt action to investigate and close the account.

ze555 supports responsible gaming organisations and parental control initiatives that help families restrict access to online gambling content. Tools such as device-level content filtering software can help prevent minors from accessing gambling websites.

10 Policy Updates & Contact

ze555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Policy, we will notify registered players by sending an email to the address on file and by updating the "Last Updated" date at the top of this document.

Minor updates — such as clarifications of existing practices or corrections of typographical errors — may be made without individual notification. It is your responsibility to review this Privacy Policy periodically. Your continued use of ze555 following the publication of an updated Privacy Policy constitutes your acceptance of the revised version.

Previous Versions

Previous versions of this Privacy Policy are archived by ze555 and are available on request. If you wish to review a prior version, submit your request to [email protected] with the subject line "Privacy Policy Archive Request".

How to Contact Us

For all privacy-related enquiries, data rights requests, or concerns about how ze555 handles your personal data, please contact our support team. We aim to respond to all privacy enquiries within 30 days of receipt. All communications regarding privacy must be submitted in English.

Contact email: [email protected]

Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6).