rr555 Privacy
Policy & Data Use

rr555 is an online casino and sports betting platform built specifically for players in Bangladesh. We operate in English and support local payment methods including bKash, Nagad, Rocket, and Upay. As part of delivering our service, rr555 necessarily collects and processes certain categories of personal data about registered players.

This Privacy Policy sets out, in plain English, the full scope of our data collection and processing activities. It explains what personal information we gather, the lawful basis on which we process it, how long we retain it, who we may share it with, and — critically — what rights you have as a player to control your own data.

rr555 is the data controller responsible for the personal data of all registered players. If you have any questions about this Policy or about the way rr555 handles your personal information, you can contact our support team at any time using the details provided in Section 13 of this document.

rr555 collects personal data in several ways: directly from you when you register, make a deposit, or contact support; automatically through your use of the platform; and from third-party identity verification partners when you complete the KYC process. The categories of personal data we collect are described in the table below.

rr555 does not collect sensitive personal data categories such as biometric data (beyond the liveness check required for KYC), health information, religious or political beliefs, or racial or ethnic origin data. The liveness check selfie collected during KYC is used solely for identity verification and is not retained beyond the verification process.

rr555 uses the personal data collected from players only for the purposes described below. We do not use your data for any purpose that is incompatible with the original reason for which it was collected without first obtaining your explicit consent.

• Account Management: To create, maintain, and administer your rr555 player account, including processing login requests, managing account settings, and communicating material account-related updates.
• Identity Verification: To verify that you are at least 21 years of age and to confirm your identity during the KYC process, as required by our responsible gaming and anti-fraud policies.
• Payment Processing: To process deposits made via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other supported Bangladeshi payment methods, and to facilitate withdrawal requests back to the same payment method.
• Service Delivery: To provide access to all rr555 platform features, including casino games, live dealer tables, slots, crash games (such as those by Spribe), and cricket betting markets covering the BPL, IPL, T20 World Cup, and Bangladesh Tigers fixtures.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other prohibited conduct as defined in the rr555 Terms & Conditions.
• Responsible Gaming: To monitor player activity for indicators of problem gambling and to enforce responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion requests.
• Customer Support: To respond to enquiries, complaints, and technical issues submitted through live chat or email to [email protected].
• Marketing Communications: To send promotional emails, bonus offers, and platform updates to players who have opted in to receive marketing communications. You may opt out at any time via the account settings or by contacting support.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements, and to respond to lawful requests from competent authorities.
• Platform Improvement: To analyse usage patterns and technical data in aggregated, anonymised form to improve the rr555 platform, fix bugs, and develop new features.

rr555 processes personal data only where we have a valid legal basis for doing so. The legal bases on which we rely are as follows:

• Contractual Necessity: The majority of our data processing is necessary to perform the contract between rr555 and you as a registered player. This includes account management, payment processing, and service delivery. Without processing this data, rr555 cannot provide the platform to you.
• Legal Obligation: Certain processing activities — particularly identity verification (KYC) and anti-money-laundering checks — are carried out because rr555 is legally required to do so to operate responsibly and in compliance with applicable laws.
• Legitimate Interests: rr555 processes technical and usage data to detect fraud, improve platform security, and enhance the overall player experience. These activities serve the legitimate interests of rr555 and its player community, and we have assessed that they do not override your rights as a data subject.
• Consent: Where rr555 relies on your consent as the legal basis for processing — most notably for sending marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing, adjust your preferences in account settings or contact [email protected].

rr555 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may, however, share your personal data with the following categories of trusted third parties, strictly on a need-to-know basis and only to the extent required to deliver the rr555 service or meet legal obligations:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other Bangladeshi financial institutions receive the minimum financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory obligations.
• KYC & Identity Verification Partners: Specialist third-party verification services may receive copies of your identity documents and liveness check data solely for the purpose of confirming your identity and age eligibility. These partners are bound by strict data processing agreements with rr555.
• Game Providers: Software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and gameplay data to facilitate the delivery of their games on the rr555 platform. No personally identifiable information is shared with game providers.
• IT & Infrastructure Providers: Hosting, cloud storage, and cybersecurity service providers that support the technical operation of the rr555 platform may have access to personal data stored on rr555 servers in the course of providing their services. All such providers are contractually bound to process data only on rr555's instructions.
• Legal & Regulatory Authorities: rr555 will disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or where rr555 reasonably believes disclosure is necessary to prevent fraud or protect the safety of our players or staff.

rr555 uses cookies and similar tracking technologies (including local storage and session tokens) on the rr555 platform to provide core functionality, remember your preferences, analyse platform usage, and detect fraud. The following categories of cookies are used by rr555:

• Strictly Necessary Cookies: These cookies are essential for the rr555 platform to function. They manage your login session, maintain your account security token, and ensure your cart/cashier state is preserved across page navigation. These cookies cannot be disabled without disabling core platform features.
• Functional Cookies: These cookies remember your platform preferences such as display language (English), odds format, and responsible gaming settings. They improve your experience by ensuring you do not need to reconfigure your preferences on each visit.
• Analytics Cookies: rr555 uses anonymised analytics data collected via cookies to understand how players navigate the platform, which games are most popular, and where technical issues may arise. This data is aggregated and does not identify individual players.
• Security & Fraud-Detection Cookies: These cookies collect technical signals (including device fingerprint data and IP information) to help rr555 identify and prevent fraudulent account activity, duplicate account creation, and automated bot access.

Most web browsers allow you to control cookies through their settings. You may block or delete cookies, but please note that disabling strictly necessary cookies will impair your ability to log in and use core rr555 platform features. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

rr555 does not use advertising cookies or serve targeted third-party advertisements through the rr555 platform.

rr555 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data rr555 holds:

• Account and Identity Data: Retained for the duration of your active rr555 account and for a minimum of five years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of five years following the date of each transaction, as required by financial record-keeping regulations applicable to online payment processing in Bangladesh.
• KYC Verification Documents: Retained for the duration of your active account and for five years following account closure. Where a verification document has expired, rr555 may request an updated document before processing withdrawals.
• Support Communications: Live chat transcripts and email correspondence are retained for three years following the date of the interaction, to support dispute resolution and quality assurance processes.
• Technical and Usage Data: Server logs and session data are retained for a maximum of 12 months in identifiable form, after which they are anonymised or deleted.
• Marketing Preferences: Records of your marketing consent or opt-out status are retained for as long as your account is active and for three years following account closure to demonstrate compliance with consent obligations.

When personal data is no longer required, rr555 deletes it securely from our systems or renders it permanently anonymous so that it can no longer be associated with any individual player.

rr555 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational security measures designed to protect your information from unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes the following:

• Encryption in Transit: All data transmitted between your browser or device and the rr555 platform is encrypted using 256-bit SSL/TLS technology. This applies to all account activity including login, deposits, withdrawals, and game sessions.
• Encryption at Rest: Sensitive data stored on rr555 servers — including passwords (stored as salted cryptographic hashes) and financial account references — is encrypted at rest using industry-standard encryption standards.
• Access Controls: Access to personal data within rr555's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Intrusion Detection: rr555 operates automated intrusion-detection and threat-monitoring systems that continuously scan for anomalous activity and potential security incidents.
• Two-Factor Authentication: rr555 strongly recommends that all players enable two-factor authentication (2FA) on their accounts. 2FA adds an additional verification step using your registered Bangladesh mobile number, significantly reducing the risk of unauthorised account access.
• Incident Response: In the event of a data security incident that affects your personal data, rr555 will notify affected players promptly and take all reasonable steps to contain and remediate the incident.

As a registered rr555 player, you hold the following rights with respect to your personal data. rr555 is committed to honouring these rights promptly and without creating unnecessary barriers for players in Bangladesh.

To exercise any of the rights described above, please contact the rr555 support team via live chat (available inside your account dashboard) or by email at [email protected]. We will verify your identity before processing any data rights request to ensure that personal data is not disclosed to or amended by an unauthorised party.

rr555 will respond to all verified data rights requests within 30 days of receipt. Where a request is complex or where a large volume of requests has been received, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

The rr555 platform is strictly intended for adults aged 21 years and above. rr555 does not knowingly collect personal data from any person under the age of 21. Our registration process requires all applicants to confirm their age and to provide identity documentation during KYC verification that confirms they meet the minimum age requirement.

If rr555 becomes aware that personal data has been collected from a player who is under the age of 21, we will immediately suspend the relevant account, delete all associated personal data to the extent permitted by law, and void any transactions processed through that account. Any funds deposited by an underage player will be returned to the originating payment method.

Parents and guardians in Bangladesh who are concerned about minors accessing online gambling platforms are encouraged to use parental control tools available through their internet service provider or device operating system to restrict access to gambling websites.

The rr555 platform may, from time to time, contain references to third-party game providers, payment services, or informational resources. Where links to third-party websites or services are present, please be aware that those third parties operate under their own privacy policies and data practices, which are entirely independent of rr555.

rr555 is not responsible for the privacy practices or content of any third-party website or service. We encourage all players to review the privacy policy of any third-party service before providing personal data to that service. rr555's Privacy Policy applies solely to data collected and processed through the rr555 platform at rr555.im.

In particular, players should note that Bangladeshi payment providers such as bKash, Nagad, and Rocket operate their own data governance frameworks and privacy policies. When you make a deposit or withdrawal via one of these providers, the payment transaction is subject to that provider's terms as well as rr555's. rr555 has no control over how those providers handle data on their own systems.

rr555 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable laws, or the features and services offered on the rr555 platform. The following process applies to all updates:

• Material Changes: Where an update materially affects your rights or the way rr555 handles your personal data, we will notify you by email to your registered address at least 7 days before the updated Policy takes effect. Continued use of the rr555 platform after the effective date of a material update constitutes acceptance of the revised Policy.
• Non-Material Changes: Minor updates — such as typographical corrections, clarifications of existing practices, or formatting improvements that do not alter the substance of the Policy — may be made without advance notice. The "Last Updated" date at the top of this document will reflect all changes.
• Version History: The current version of this Privacy Policy is always available at rr555.im/privacy-policy. If you wish to review a previous version of the Policy, please contact our support team and we will provide the relevant version upon request.

We encourage all rr555 players to review this Privacy Policy periodically to stay informed about how we protect your personal data. If you disagree with any updated version of this Policy, you must cease using the rr555 platform and may request account closure through the support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rr555 handles your personal data, our support team is available 24 hours a day, 7 days a week, entirely in English.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available inside your rr555 account dashboard once you are logged in.
• Response Time: Data rights requests and privacy queries are treated as a priority. Email responses are typically provided within a few hours. Live chat responses are immediate during staffed hours (24/7, Bangladesh Standard Time, UTC+6).

When contacting rr555 about a data rights request, please include your registered username and the email address associated with your account so that we can verify your identity and locate your records efficiently. rr555 will never ask you to provide your account password, full bKash or Nagad account number, or PIN in any support communication.