55bdt Privacy Policy

1 Introduction

55bdt is committed to protecting the privacy and security of every player who chooses to use our online betting and casino platform. This Privacy Policy sets out in clear, plain English the personal data we collect, the reasons we collect it, how long we keep it, who we may share it with, and the rights you have over your own information.

This Policy applies to all users of the 55bdt Platform, including visitors who browse without registering, registered players who hold an active account, and former players whose accounts have been closed. It covers data collected through the website at https://55bdt.io, any mobile-optimised version of the site, and all associated communication channels including email and live chat support.

We take a privacy-first approach to platform design. Our systems are built to collect the minimum amount of personal data required to deliver a secure, reliable, and enjoyable gaming experience for players across Bangladesh — from Dhaka and Chittagong to Sylhet, Khulna, Rangpur, and beyond.

2 Who We Are

For the purposes of this Privacy Policy, the data controller responsible for your personal data is 55bdt, the operator of the online betting and casino platform available at https://55bdt.io ("the Platform"). References to "55bdt", "we", "us", or "our" throughout this Policy refer to the Platform operator.

The 55bdt Platform serves players in the Bangladesh market, offering cricket betting markets including BPL, IPL, T20 World Cup, and Bangladesh Tigers fixtures, as well as live casino games, slots, and crash games — all transacted in Bangladeshi Taka (BDT / ৳) via local payment methods including bKash, Nagad, and Rocket.

If you have any questions or concerns about this Privacy Policy or our data practices, you may contact our Data Protection team at any time. Full contact details are provided in Section 16 of this Policy.

3 Personal Data We Collect

55bdt collects several categories of personal data, depending on the nature of your interaction with the Platform. The table below summarises the categories of data collected and the specific data points within each category:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where a player voluntarily discloses a gambling-related health concern through the Responsible Gaming programme, in which case such disclosure is treated with the highest level of confidentiality.

4 How We Collect Your Data

55bdt collects personal data through the following channels and mechanisms:

• Direct registration: When you create a 55bdt account, you provide Identity Data and Contact Data directly through the registration form.
• KYC verification submissions: When you submit identity documents as part of the Know Your Customer (KYC) process prior to your first withdrawal, we collect and store copies of those documents securely.
• Deposit and withdrawal transactions: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay, we receive Financial Data necessary to process and record the transaction.
• Platform activity: Your Gaming Data is generated automatically as you place bets, play games, and interact with the Platform. This data is recorded in real time to maintain accurate account records.
• Device and browser: Technical Data is collected automatically through standard web server logs and session management cookies each time you access the Platform.
• Support interactions: When you contact the 55bdt support team via live chat or email, we record those Communications Data for quality assurance and dispute resolution purposes.
• Responsible Gaming tools: When you activate a deposit limit, cooling-off period, or self-exclusion, your Responsible Gaming Data preferences are recorded and enforced by the platform.

5 How We Use Your Personal Data

55bdt uses the personal data collected for the following specific and defined purposes only. We do not use your data for any purpose not listed below without first obtaining your explicit consent or updating this Policy with adequate notice.

• Account creation and management: To register your account, maintain it in good standing, and provide you with access to all Platform features including betting markets, casino games, and the cashier.
• Identity and age verification (KYC): To confirm that you are who you say you are and that you meet the minimum age requirement of 21 years old for using the 55bdt Platform.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay accurately and in a timely manner, and to maintain a verifiable transaction record.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, match-fixing, multi-accounting, and other prohibited conduct as defined in the Terms & Conditions.
• Regulatory and legal compliance: To fulfil any applicable anti-money laundering (AML) obligations, respond to lawful requests from law enforcement or regulatory authorities, and maintain records as required.
• Platform improvement and analytics: To analyse aggregated, anonymised usage patterns and identify areas where the user experience, game selection, or technical performance can be improved.
• Customer support: To respond to your queries, resolve disputes, and maintain a history of your interactions with the support team for quality and training purposes.
• Responsible Gaming enforcement: To implement and enforce deposit limits, cooling-off periods, and self-exclusion settings that you have activated, and to monitor gaming behaviour patterns that may indicate problem gambling.
• Promotional communications: Where you have opted in to receive marketing communications, we may send you information about 55bdt promotions, bonus offers, and seasonal campaigns relevant to your interests as a Bangladesh player. You may opt out at any time.

6 Legal Basis for Processing

55bdt processes your personal data on one or more of the following lawful bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing your Identity, Contact, Financial, and Gaming Data is necessary to perform the contract between you and 55bdt — namely, providing you with a functional betting and casino account. Without this processing, we cannot deliver the service.
• Legal obligation: Processing your KYC documents and transaction records is required to comply with applicable anti-money laundering and counter-terrorism financing obligations. We are required to retain certain records for a minimum statutory period regardless of your preferences.
• Legitimate interests: Processing Technical Data and Communications Data for fraud detection, platform security, and support quality assurance serves the legitimate interests of 55bdt and its player community, provided those interests are not overridden by your fundamental privacy rights.
• Consent: Where we send optional marketing communications or deploy non-essential analytics cookies, we rely on your freely given, informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

7 Data Sharing & Third Parties

55bdt does not sell, rent, or trade your personal information to any third party for commercial gain. We share data only where strictly necessary, and only with the following categories of trusted parties who are contractually obligated to handle it securely and in accordance with this Policy:

• Payment processors: Mobile money operators including bKash, Nagad, Rocket, and Upay receive the minimum Financial Data necessary to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and regulatory frameworks.
• Identity verification providers: Third-party KYC and identity verification services receive copies of the identity documents you submit in order to confirm their authenticity and match them against your account registration details.
• Game content providers: Platform game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive your account identifier and session token to authenticate your game session. They do not receive your full identity or payment data.
• IT infrastructure and security providers: Cloud hosting, content delivery, DDoS protection, and cybersecurity vendors who provide the technical infrastructure on which the 55bdt Platform runs may process Technical Data as part of their service delivery. All such providers are bound by data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or legitimate request from a competent authority, 55bdt may disclose personal data to law enforcement agencies or regulatory bodies. We will notify you of such disclosure where permitted by law.

All third-party data processors engaged by 55bdt are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than the specific service they provide to 55bdt.

8 Cookies & Tracking Technologies

The 55bdt Platform uses cookies and similar session-based technologies to ensure the platform functions correctly, to keep you securely logged in during your session, and to gather basic, anonymised analytics data about how the Platform is used.

The following types of cookies may be placed on your device when you access 55bdt:

• Essential cookies: These are strictly necessary for the Platform to function. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. You cannot opt out of essential cookies while using the Platform — without them, core features including login, deposit, and game launch would not work.
• Analytics cookies: These cookies collect anonymised data about which pages are visited most frequently, how long players spend on different sections of the Platform, and where technical errors occur. This data is used solely to improve the Platform experience and is never linked back to your individual identity.
• Preference cookies: These cookies remember your Platform preferences, such as your selected language (English) or display settings, so that you do not need to re-enter them on every visit.

55bdt does not deploy advertising cookies, social media tracking pixels, or any cross-site behavioural tracking technologies. You may manage your cookie preferences through your browser settings. Note that disabling essential cookies may prevent certain features of the Platform from functioning correctly.

9 Data Retention

55bdt retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by law. The following retention periods apply to the main categories of personal data we hold:

• KYC and identity documents: Retained for a minimum of 5 years from the date of account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, again in line with AML obligations.
• Account data (username, contact details, login history): Retained for the duration of the active account and for 90 days following confirmed account closure, after which it is securely deleted or anonymised.
• Gaming data (bet history, game logs): Retained for 2 years from the date of each transaction for dispute resolution and audit purposes, then anonymised.
• Support and communications records: Retained for 2 years from the date of the interaction, to support quality assurance and dispute resolution.
• Marketing preference data: Deleted promptly upon receipt of a valid opt-out request, and in any case within 30 days of the opt-out being recorded.
• Technical / log data: Server logs are retained for 90 days in a rolling window for security and debugging purposes, then permanently deleted.

At the end of the applicable retention period, personal data is either securely and permanently deleted from all 55bdt systems, or irreversibly anonymised such that it can no longer be associated with any individual player.

10 Data Security

55bdt implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 55bdt Platform.
• Encrypted storage of sensitive data at rest, including identity documents, financial records, and hashed account credentials. Passwords are never stored in plain text.
• Access controls: Personal data is accessible only to 55bdt staff and contractors who have a legitimate, role-specific need to access it. Access is governed by the principle of least privilege and is subject to audit logging.
• Two-factor authentication is available to players for their own account login and is enforced internally for all 55bdt staff accounts that have access to player data systems.
• Regular security assessments including vulnerability scanning and penetration testing to identify and remediate potential weaknesses in the Platform's security posture.
• Incident response procedures: In the event of a data security incident that poses a risk to your rights and freedoms, 55bdt will notify affected players promptly and take immediate steps to contain and remediate the incident.

While 55bdt takes all reasonable precautions to secure your personal data, no system is entirely immune to security risk. You are responsible for keeping your own account credentials confidential and for notifying us immediately if you believe your account security has been compromised.

11 Your Data Rights

As a player using the 55bdt Platform, you have the following rights over your personal data. To exercise any of these rights, please contact our support team using the details provided in Section 16.

• Right of Access: You have the right to request a copy of all personal data that 55bdt holds about you. We will provide this in a structured, commonly used format within 30 days of receiving your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For certain data points (such as your registered name), we may require supporting documentation before making the amendment.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes it was collected, where you have withdrawn consent, or where you object to processing and there are no overriding legitimate grounds. Note that this right may be limited where we are required to retain data by law (e.g., AML record-keeping obligations).
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of your data is being contested, or where processing is unlawful but you prefer restriction over erasure.
• Right to Data Portability: Where processing is based on your consent or on a contract with you and is carried out by automated means, you have the right to receive your data in a structured, machine-readable format and to have it transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, in which case we will assess whether our interests override your right.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

We will not charge a fee for exercising your data rights in ordinary circumstances. If a request is manifestly unfounded or excessive (e.g., repetitive requests for the same data), we reserve the right to charge a reasonable administrative fee or to decline the request, providing you with written reasons for that decision.

12 Children & Minors

The 55bdt Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If you are under 21, you must not register an account, deposit funds, or use the Platform in any way.

If 55bdt discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, we will immediately suspend the account in question, permanently delete all associated personal data from our systems, and return any deposited funds to their source where technically possible.

If you are a parent or guardian and believe that a person under 21 has registered a 55bdt account using their own or your details, please contact us immediately at [email protected]. We will act on such notifications as a matter of the highest priority.

13 International Data Transfers

55bdt's primary player base is located in Bangladesh, and we endeavour to keep personal data processing as close to the Bangladesh region as operationally practical. However, certain technical infrastructure components — including cloud hosting, content delivery, and cybersecurity services — may involve data being processed on servers located outside Bangladesh.

Where personal data is transferred to a country that does not offer an equivalent level of data protection to that provided within Bangladesh, 55bdt ensures that appropriate safeguards are in place to protect your data. These safeguards may include standard contractual clauses, data processing agreements with transferee parties, or equivalent recognised transfer mechanisms.

By using the 55bdt Platform and accepting this Privacy Policy, you consent to the transfer of your personal data to servers and processors located outside Bangladesh where necessary for the delivery of the Platform services, subject to the safeguards described in this section.

14 Third-Party Links

The 55bdt Platform may contain links to third-party websites or services — for example, links to game providers' help documentation or to payment providers' own support pages. These third-party sites are not operated by 55bdt and are governed by their own privacy policies, over which we have no control and for which we accept no responsibility.

We strongly recommend that you review the privacy policy of any third-party site you visit via a link from the 55bdt Platform before providing any personal information on that site. The presence of a link to a third-party site on the 55bdt Platform does not constitute our endorsement of that site's privacy or data security practices.

15 Updates to This Privacy Policy

55bdt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The "Last Updated" date at the top of this Policy will be revised whenever a change is made.

Where a material change is made — meaning a change that significantly affects how we process your personal data or reduces your rights under this Policy — we will provide reasonable advance notice by publishing the updated Policy on the Platform and, where practicable, by notifying you via your registered email address.

Your continued use of the 55bdt Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the updated Policy, you must cease using the Platform and may request account closure in accordance with the Terms & Conditions.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that 55bdt holds about you, please contact us through one of the following channels:

• Data Protection Email: [email protected] — please include "Privacy Request" in the subject line so that your message is routed to the correct team promptly.
• Live Chat: Available 24 hours a day, 7 days a week, from within your logged-in 55bdt account dashboard.
• Response Time: We acknowledge all data rights requests within 2 business days and aim to resolve them fully within 30 calendar days. Complex requests may require up to 60 days; we will inform you if this is the case.

For concerns specifically related to responsible gaming, deposit limits, self-exclusion, or problem gambling support, please visit our dedicated Responsible Gaming page or contact our support team via live chat for immediate assistance.

To review the full terms governing your use of the 55bdt Platform, please read our Terms & Conditions.