Privacy Policy – x555 Online Casino

1 Information We Collect

x555 collects personal information from players through several channels: account registration, identity verification, financial transactions, platform usage, and direct communications with our support team. The following table provides a comprehensive overview of the categories of personal data collected, the source of that data, and the legal basis for processing.

x555 does not knowingly collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. If any such information is incidentally disclosed in a support communication, it will not be processed for any purpose and will be deleted from our records.

2 How We Use Your Information

x555 processes the personal data it collects for the specific, legitimate purposes listed below. x555 does not use personal data for purposes that are incompatible with those for which it was originally collected. Where a new use is contemplated, players will be informed in advance and, where required, their consent will be sought.

2.1 Service Delivery and Account Management

• Creating, verifying, and maintaining your x555 player account.
• Processing deposits and withdrawals in BDT (৳) via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Enabling access to all x555 games including live casino, cricket betting, slots, and crash games.
• Administering bonuses, promotional offers, and loyalty rewards for which you are eligible.
• Providing customer support and resolving disputes or complaints submitted by you.

2.2 Legal and Compliance Obligations

• Conducting Know Your Customer (KYC) identity verification to confirm player eligibility and age.
• Performing anti-money-laundering (AML) screening and monitoring of financial transactions.
• Detecting, investigating, and preventing fraudulent activity, bonus abuse, multi-accounting, and other prohibited conduct described in the x555 Terms & Conditions.
• Maintaining transaction and account records for the periods required under applicable financial record-keeping obligations.
• Responding to lawful requests from competent authorities or regulatory bodies where x555 is legally obliged to comply.

2.3 Platform Improvement and Personalisation

• Analysing aggregated, anonymised usage data to improve the performance, reliability, and design of the x555 platform.
• Personalising the game lobby and promotional content displayed to your account based on your game history and preferences, where you have not opted out of personalisation.
• Conducting internal research and reporting on platform performance — all such reporting uses aggregated data and does not identify individual players.

2.4 Responsible Gaming

• Using usage and behavioural data to identify patterns that may indicate problem gambling, and to apply responsible gaming interventions (such as displaying session time reminders) consistent with our Responsible Gaming policy.
• Enforcing deposit limits, loss limits, session time limits, and self-exclusion periods that you have set on your account.
• Retaining self-exclusion records to prevent re-registration during an active exclusion period.

3 Sharing and Disclosure of Data

x555 does not sell your personal data to third parties. Personal data is shared only in the circumstances described below, and only to the extent strictly necessary for the stated purpose.

3.1 Service Providers

x555 works with a limited set of trusted third-party service providers who process personal data on x555's behalf in order to deliver the platform's services. These providers are contractually bound to process data only on x555's instructions and to maintain appropriate data security standards. Current categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card processing partners. These providers receive transaction reference data necessary to process your deposits and withdrawals.
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed providers whose games are available on x555. Game studios may receive a pseudonymous player identifier and game session data to render games and resolve disputes. They do not receive your full identity or payment details.
• KYC and identity verification providers: Third-party services that assist x555 in verifying NID, passport, and age documentation submitted during account verification.
• Hosting and infrastructure providers: Cloud and server infrastructure providers on whose systems x555 operates. These providers are contractually prohibited from accessing or using your personal data for their own purposes.

3.2 Legal Disclosure

x555 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where it is legally compelled to do so by a valid legal order, warrant, or regulatory requirement. x555 will not voluntarily disclose data to government authorities beyond what is strictly required by law, and will where possible notify affected players of such requests unless legally prohibited from doing so.

3.3 Business Transfers

In the event that x555 undergoes a merger, acquisition, restructuring, or sale of all or part of its business, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to how their data will be processed as a result.

4 Cookies and Tracking Technologies

x555 uses cookies and similar tracking technologies on its platform to deliver a functional, secure, and personalised experience. This section explains what cookies x555 uses, why they are used, and how you can manage your cookie preferences.

4.1 What Are Cookies

Cookies are small text files placed on your device (computer, smartphone, or tablet) when you visit x555. They allow the platform to recognise your device across sessions, maintain your login state, remember your preferences, and collect usage analytics. x555 also uses similar technologies such as local storage tokens and session identifiers that function comparably to cookies.

4.2 Types of Cookies Used by x555

4.3 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent core x555 platform functionality — including login, game loading, and payment processing — from operating correctly. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Samsung Internet, or other browser as applicable). x555 does not support a separate cookie preference centre at this time; browser-level controls are the primary management mechanism.

5 Data Retention and Storage

x555 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data has been anonymised rather than deleted, it may be retained indefinitely for aggregated analytical purposes without constituting personal data under applicable data protection principles.

6 Security Measures

The security of your personal data is a top operational priority at x555. We implement layered technical and organisational security measures commensurate with the sensitivity of the data we hold and the nature of the risks involved in operating an online gambling platform.

6.1 Technical Security Controls

• SSL/TLS Encryption: All data transmitted between your device and the x555 platform is encrypted using industry-standard TLS protocols. The x555 platform operates exclusively over HTTPS.
• Data Encryption at Rest: Sensitive data stored in x555 databases — including KYC documents and financial records — is encrypted at rest using AES-256 or equivalent encryption standards.
• Two-Factor Authentication (2FA): x555 offers 2FA for player accounts, delivering one-time passwords (OTPs) to your registered Bangladesh mobile number. x555 strongly recommends enabling 2FA on your account.
• Access Controls: Access to player personal data within x555's internal systems is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo background screening and are bound by confidentiality obligations.
• Penetration Testing and Vulnerability Management: x555 conducts periodic security assessments and vulnerability scans of its platform infrastructure to identify and remediate security weaknesses proactively.

6.2 Incident Response

In the event of a personal data breach that poses a material risk to affected players, x555 will notify impacted players promptly — and in any event within 72 hours of becoming aware of the breach — via their registered email address or mobile number. The notification will describe the nature of the breach, the data affected, the likely consequences, and the steps x555 has taken to address it.

7 Your Privacy Rights

As a registered x555 player, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request". x555 will acknowledge your request within two business days and aim to fulfil it within fourteen calendar days of receipt, except where a longer period is justified by the complexity or volume of the request.

• Right of Access: You have the right to request a copy of the personal data that x555 holds about you. Upon verification of your identity, x555 will provide a structured summary of your data in a readable format.
• Right to Rectification: If any personal data held by x555 is inaccurate or incomplete, you have the right to request that it be corrected. Contact support or update your details directly through your account settings where available.
• Right to Erasure: You may request that x555 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that x555 may be required to retain certain data for legal compliance purposes (see Section 5) even following a valid erasure request.
• Right to Restriction: You may request that x555 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the legal basis for processing.
• Right to Data Portability: Where x555 processes your personal data on the basis of your consent or a contractual obligation, and that processing is carried out by automated means, you may request a machine-readable copy of the data you have provided to x555.
• Right to Object: You have the right to object to x555 processing your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, in which case x555 will cease such processing unless it can demonstrate compelling legitimate grounds that override your objection.
• Right to Withdraw Consent: Where x555 relies on your consent as the legal basis for processing (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

8 Updates to This Policy

x555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform's privacy and security standards. When material changes are made to this policy, x555 will notify registered players via the email address or mobile number on their account at least seven days before the revised policy takes effect.

The "Last Updated" date displayed at the top of this policy indicates when the most recent revision came into effect. Continued use of the x555 platform following notification of a policy update constitutes acceptance of the revised Privacy Policy. If you do not accept the revised terms, you should discontinue use of x555 and contact support at [email protected] to close your account.

The authoritative version of this Privacy Policy is the English-language version published at https://x555.my/privacy-policy. In the event of any discrepancy between this version and any translation or summary, this English version shall prevail.