55fb Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 55fb ("55fb", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Player") who access or use the 55fb platform available at 55fb.io, including its mobile-optimised interface and all associated services.

55fb is committed to handling your personal data with transparency, integrity, and care. We process personal data only where there is a clear lawful basis for doing so, and we take commercially reasonable technical and organisational measures to keep that data secure at every stage of its lifecycle.

This Policy applies to all personal data collected in connection with the 55fb platform, whether you are a registered account holder, a visitor browsing without an account, or an individual who contacts our support team. By using the 55fb platform, you acknowledge that you have read and understood this Policy.

2 Data Controller

For the purposes of applicable data protection law, 55fb acts as the data controller in respect of the personal data of its Players and site visitors. As data controller, 55fb determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data protection enquiries, subject access requests, correction requests, and deletion requests should be directed to the 55fb Data Protection team at [email protected] with the subject line "Data Protection Request — [Your Account Username]".

55fb will acknowledge receipt of any data subject request within two business days and will provide a substantive response within fourteen calendar days of receiving all information necessary to verify your identity and process the request.

3 Personal Data We Collect

55fb collects the following categories of personal data, depending on the nature of your interaction with the platform:

55fb does not collect sensitive personal data (such as biometric data, health records, religious beliefs, or political opinions) unless specifically required by law enforcement or anti-money laundering regulations, in which case collection will be limited to the minimum necessary and handled with heightened safeguards.

4 How We Collect Your Data

55fb collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in a promotion.
• Automated technologies: Technical and usage data collected automatically through cookies, server logs, and similar tracking technologies when you access the 55fb platform from any device.
• Payment service providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and other integrated payment partners when you make a deposit or withdrawal. This data is limited to transaction reference numbers, amounts, and timestamps.
• Identity verification providers: Where 55fb uses a third-party KYC or identity verification service to process identity documents, that provider may return a verification result (pass/fail) along with the data points required to complete verification.
• Fraud prevention services: Device fingerprinting and behavioural analytics data collected by fraud prevention partners to protect the integrity of the platform and its Players.
• Publicly available sources: In limited circumstances related to AML compliance, 55fb may consult publicly available registers, sanctions lists, or court records to verify Player information.

5 How We Use Your Personal Data

55fb uses the personal data it collects for the following documented purposes:

• Account management: Creating and maintaining your 55fb account, authenticating your identity at login, processing account settings changes, and managing account closures or suspensions.
• Transaction processing: Receiving and crediting deposits, processing withdrawal requests, maintaining accurate transaction records, and resolving payment disputes.
• Identity verification (KYC): Verifying that you meet the minimum age requirement of 21 years, confirming your identity to prevent fraud and money laundering, and fulfilling legal and regulatory obligations.
• Customer support: Responding to your enquiries, resolving disputes, investigating complaints, and providing technical assistance via live chat or email.
• Platform security and fraud prevention: Detecting and preventing unauthorised account access, bonus abuse, collusion, money laundering, and other prohibited conduct outlined in the Terms & Conditions.
• Responsible gaming: Monitoring gameplay patterns for indicators of problem gambling behaviour, enforcing self-exclusion and deposit limit settings, and fulfilling our duty of care obligations to Players.
• Promotions and marketing: Sending promotional offers, bonus notifications, and platform updates to Players who have opted in to marketing communications. You may opt out at any time by contacting support.
• Legal compliance: Meeting obligations under applicable anti-money laundering laws, record-keeping requirements, and responding to lawful requests from competent authorities.
• Platform improvement: Analysing aggregated and anonymised usage data to understand how Players interact with the platform, identify technical issues, and improve the overall user experience.

6 Legal Basis for Processing

55fb processes personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

• Contractual necessity: Processing required to perform the contract between you and 55fb — including account creation, transaction processing, and customer support — is conducted on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal obligation: Processing required to comply with applicable law — including KYC identity checks, AML record-keeping, and responding to lawful authority requests — is conducted on the basis of legal obligation.
• Legitimate interests: Processing conducted to protect the security and integrity of the platform, prevent fraud, and improve platform performance is based on 55fb's legitimate business interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing for optional purposes — such as sending promotional marketing communications — is conducted only where you have given clear, informed, and freely withdrawable consent. Withdrawal of consent will not affect the lawfulness of any processing carried out before the withdrawal.

7 Cookies & Tracking Technologies

55fb uses cookies and similar technologies (including local storage, session storage, and device fingerprinting) to operate the platform, remember your preferences, maintain session security, and analyse how the platform is used. The following cookie categories are in use:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences such as language settings, currency display, and responsible gaming reminder intervals so that your experience is consistent across sessions.
• Analytics cookies: Collect anonymised data about how Players navigate the platform, which pages receive the most traffic, and where technical errors occur. This data is used exclusively for internal platform improvement and is not shared with external advertising networks.
• Security cookies: Used by fraud prevention and bot-detection systems to distinguish legitimate human Players from automated scripts, protecting the integrity of the platform and the fairness of games.

55fb does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural profiling technologies. Your browsing activity on the 55fb platform is not shared with external advertising networks.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect the ability of the platform to function correctly and may prevent login.

8 Data Sharing & Disclosure

55fb does not sell, rent, or trade personal data. Data is shared with third parties only in the following limited and documented circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, and other integrated payment partners receive only the data necessary to process your transaction — typically your registered mobile number and the transaction amount. These providers are contractually bound to handle your data securely and may not use it for any other purpose.
• Identity and KYC verification providers: Where a third-party identity verification service is used to process KYC documents, your identity data is shared with that provider solely for the purpose of verification. Results and a minimum necessary data set are returned to 55fb; the provider does not retain your documents for its own commercial purposes.
• Fraud prevention and security providers: Technical and behavioural data may be shared with fraud prevention partners to detect and prevent prohibited conduct. These providers act as data processors operating under contractual data processing agreements.
• Game software providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive pseudonymised session identifiers to facilitate game delivery and record round outcomes. They do not receive your full identity or financial data.
• Legal and regulatory authorities: 55fb will disclose personal data to competent authorities — including law enforcement agencies and financial intelligence units — where required to do so by applicable law, valid legal process, or court order. We will notify you of such disclosure where legally permitted to do so.
• Professional advisers: In limited circumstances, personal data may be shared with lawyers, auditors, or insurers in connection with the exercise or defence of legal claims. Such sharing is subject to strict confidentiality obligations.

All third parties with whom 55fb shares personal data are required to maintain adequate data security standards and are prohibited from using your data for any purpose beyond that for which it was originally shared.

9 International Data Transfers

The 55fb platform primarily serves players located in Bangladesh. Certain third-party service providers — including game studios and fraud prevention partners — may be located outside Bangladesh, meaning that your personal data may be transferred to and processed in jurisdictions that may not provide the same level of data protection as your home country.

Where such international transfers occur, 55fb ensures that appropriate safeguards are in place, which may include:

• Contractual clauses requiring the recipient to handle the data with a standard of protection equivalent to that applied by 55fb.
• Binding corporate rules where the recipient is part of a corporate group with an approved group-wide data protection framework.
• Adequacy determinations where the receiving jurisdiction has been assessed as providing an adequate level of data protection.

You may request further information about the safeguards in place for international data transfers by contacting our Data Protection team at [email protected].

10 Data Retention

55fb retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is either securely deleted from active systems or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised aggregated data may be retained indefinitely for statistical and analytical purposes.

11 Security Measures

55fb implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data exchanged between your device and the 55fb platform is encrypted using TLS 1.2 or higher (256-bit SSL). HTTPS is enforced across all pages; HTTP connections are automatically redirected.
• Encryption at rest: Personal data stored in 55fb databases is encrypted using AES-256. Payment-related data such as mobile banking account numbers is additionally tokenised so that raw account numbers are never stored in application databases.
• Access controls: Access to production systems and databases containing personal data is restricted to authorised 55fb personnel on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication (MFA).
• Network security: The 55fb platform is protected by web application firewalls (WAF), intrusion detection systems (IDS), and DDoS mitigation infrastructure. All network traffic is monitored continuously for anomalous patterns.
• Vulnerability management: 55fb conducts regular vulnerability assessments and penetration testing of its platform. Critical vulnerabilities are patched within 24 hours of identification; high-severity issues within 72 hours.
• Incident response: 55fb maintains a documented data breach incident response plan. In the event of a data breach that poses a risk to your rights, we will notify affected Players promptly and take immediate remedial action.

While 55fb takes all commercially reasonable steps to protect your data, no system is completely immune to security risks. You also have a role to play in keeping your account secure — including using a strong, unique password and enabling two-factor authentication (2FA).

12 Your Data Subject Rights

As a data subject whose personal data is processed by 55fb, you hold the following rights. These rights may be subject to limitations where 55fb has a legal obligation to retain data, or where exercising a right would prejudice the rights of another person:

• Right of access: You have the right to request a copy of the personal data that 55fb holds about you, along with information about how it is used and with whom it is shared. Such requests are fulfilled free of charge within 14 calendar days.
• Right to rectification: You have the right to request correction of any personal data that 55fb holds about you that is inaccurate or incomplete. You may update basic account details directly through your account settings panel.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that 55fb may be legally required to retain certain data — such as financial transaction records — notwithstanding an erasure request.
• Right to restriction: You may request that 55fb restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you do not wish the data to be deleted.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests (including profiling for fraud prevention purposes) where you have grounds relating to your particular situation. You have an unconditional right to object to processing for direct marketing purposes.

To exercise any of the above rights, please contact the 55fb Data Protection team at [email protected] with the subject line "Data Subject Request — [Right Being Exercised] — [Your Account Username]". We will verify your identity before processing any request.

13 Children & Minors

The 55fb platform is intended exclusively for individuals who are 21 years of age or older. 55fb does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21.

If 55fb becomes aware — through our KYC verification procedures, parental notification, or any other means — that personal data has been collected from a minor, we will immediately suspend the relevant account, delete the minor's personal data from our active systems, and return any real-money balance to the funding source where it is technically possible to do so.

14 Third-Party Links

The 55fb platform does not contain links to external third-party websites. All navigation and functionality is contained within the 55fb domain. Game content delivered by licensed third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — is embedded within the 55fb platform under licence and does not redirect Players to external sites.

55fb is not responsible for the privacy practices or data security standards of any third-party studio whose games are hosted on the platform. Technical session data shared with game studios is governed by contractual data processing agreements, as described in Section 8 of this Policy.

15 Amendments to This Policy

55fb reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, the revised Policy will be published on this page with an updated effective date at the top of the document.

Where practicable, 55fb will notify active Players of material changes via the mobile number or email address registered to their account. However, it is each Player's responsibility to review this Policy periodically to remain informed of how their personal data is being handled.

Continued use of the 55fb platform following publication of an updated Privacy Policy constitutes acknowledgement of the revised terms. If you do not agree with the revised Policy, you should stop using the platform and request account closure in accordance with the Terms & Conditions.

16 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or have a concern about how 55fb has handled your personal data, please contact us using the details below:

• Email: [email protected] — use subject line "Privacy Enquiry" or "Data Subject Request" as appropriate
• Response time: We aim to acknowledge all privacy-related enquiries within two business days and provide a full response within fourteen calendar days.
• Escalation: If you are dissatisfied with our response to a data subject request or complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.

55fb takes all privacy complaints seriously. Every complaint received is logged, investigated by a member of our Data Protection team, and responded to in writing. We do not penalise Players for raising legitimate privacy concerns and will never close or suspend an account solely because a Player has exercised a data subject right or filed a complaint.