Privacy Policy — r55

Introduction

r55 ("r55", "we", "us", "our") operates the online betting and casino platform accessible at https://r55.bio and is committed to protecting the privacy and personal data of every individual who interacts with our services. This Privacy Policy describes in full detail how r55 collects, uses, stores, shares, and protects the personal data of registered players and visitors based in Bangladesh and elsewhere.

This policy applies to all data processing activities connected with the r55 platform, including account registration, identity verification (KYC), deposits and withdrawals, sports betting, casino gaming, customer support interactions, and any marketing communications you have opted into. By creating an account or continuing to use r55 after the effective date of this policy, you acknowledge that you have read and understood it in full.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference. If you disagree with any part of this policy, you should discontinue use of the r55 platform and contact us to arrange the closure of your account and deletion of your data where applicable.

Data Controller

For the purposes of data protection law, r55 is the data controller responsible for the personal data collected through the https://r55.bio platform. This means r55 determines the purposes for which your personal data is processed and the manner in which it is processed.

If you have any questions about this Privacy Policy or wish to exercise any of your data rights, you may contact our data team using the details set out in Section 15 of this policy. All enquiries are handled in English and responses are provided within a reasonable timeframe.

Data We Collect

The categories of personal data that r55 may collect from you are set out in the table below. The specific data collected will depend on whether you are a visitor, a registered player, or a verified player who has completed our KYC process.

r55 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request. Such disclosures are handled with the highest level of confidentiality.

How We Collect Your Data

r55 collects personal data through the following channels:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings.
• Automatically: through cookies, server logs, and analytics tools when you access and navigate the r55 platform. This includes technical and usage data as described in Section 3.
• From third parties: from identity verification providers during KYC checks, from payment processors such as bKash and Nagad to confirm transaction details, and from fraud prevention services to assess account risk.

In all cases, data collection is proportionate to the purpose for which it is collected. r55 does not purchase personal data from data brokers or third-party list providers.

Legal Basis for Processing

r55 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: processing that is necessary to perform the contract between you and r55 — for example, processing your deposit to fund your account, or processing your bet to determine the outcome and settle winnings.
• Legal obligation: processing that r55 is required to carry out in order to comply with applicable laws — for example, retaining transaction records and conducting KYC identity verification for anti-money laundering (AML) compliance purposes.
• Legitimate interests: processing carried out for r55's legitimate business interests where those interests are not overridden by your privacy rights — for example, fraud prevention, platform security monitoring, and improving the quality of our services based on aggregate usage data.
• Consent: processing carried out on the basis of your freely given, specific, and informed consent — for example, sending you promotional emails or push notifications about bonuses and seasonal offers. You may withdraw consent for marketing communications at any time.

How We Use Your Data

r55 uses the personal data it collects for the following purposes:

• To create and manage your r55 player account and verify your identity in accordance with our KYC obligations.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other approved payment methods, and to maintain accurate financial records in BDT.
• To operate, maintain, and improve the r55 sports betting, live casino, slots, and fishing game products.
• To detect, investigate, and prevent fraud, money laundering, account takeover, bonus abuse, and other prohibited activities.
• To enforce our Terms & Conditions and comply with applicable laws and regulations.
• To provide customer support, respond to enquiries, and resolve disputes.
• To deliver responsible gaming interventions including deposit limit reminders, loss limit alerts, and self-exclusion enforcement.
• To send you service communications such as account notifications, security alerts, and policy update notices. These communications are non-optional as they relate to the operation of your account.
• To send you marketing communications about r55 bonuses, promotions, and seasonal offers — only where you have given your explicit consent to receive such communications, and only via the channels you have opted into.
• To conduct internal analytics for platform performance monitoring, game provider assessments, and business planning. All analytics for these purposes use aggregated or anonymised data wherever possible.

Data Sharing & Third Parties

r55 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. However, r55 may share your personal data with the following categories of third party in order to operate the platform and comply with legal obligations:

• Payment processors: bKash, Nagad, Rocket, and Upay receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are contractually required to handle your data securely.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game suppliers may receive a player session token and anonymised game-play data necessary to serve game content and settle rounds. They do not receive your identity or financial data.
• Identity verification providers: Third-party KYC and AML screening services receive identity documents and personal details to verify your identity and screen against sanctions and watchlists as required by law.
• Fraud prevention services: r55 uses third-party fraud detection tools that process IP addresses, device fingerprints, and behavioural signals to identify suspicious activity. These providers are bound by strict data processing agreements.
• Legal and regulatory authorities: r55 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, a valid court order, or a legitimate legal process.
• Professional advisers: Lawyers, auditors, and accountants engaged by r55 may access personal data to the extent necessary to provide their professional services, under strict confidentiality obligations.

All third parties with whom r55 shares personal data are required, by contract, to maintain the confidentiality and security of that data and to process it only for the purpose for which it was shared.

Cookies & Tracking

r55 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit r55. They allow us to recognise your device, maintain your session, and gather anonymous usage data.

The types of cookies r55 uses include:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: Used to collect anonymous information about how players use the platform — which pages are visited most, how long sessions last, and where errors occur. This data helps r55 improve the platform experience.
• Functional cookies: Used to remember your preferences such as language settings, preferred payment method, and game lobby layout.
• Marketing cookies: Used to track visits and measure the effectiveness of r55's promotional campaigns. These are only placed where you have consented. You may withdraw consent by adjusting your browser settings at any time.

You can control cookie settings through your web browser. Note that disabling certain cookies may limit your ability to use some features of the r55 platform.

Data Retention

r55 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in order to comply with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping obligations.
• KYC verification documents: Retained for the duration of the account plus five (5) years following closure.
• Support communications: Retained for two (2) years from the date of the last interaction, or longer if the communication relates to a pending dispute or legal matter.
• Marketing preferences and consent records: Retained for two (2) years from the date of your last interaction with a marketing communication, or until you withdraw consent, whichever is earlier.
• Technical and usage data (logs): Retained for up to twelve (12) months in aggregate form for platform analytics, and up to five (5) years in identified form for fraud investigation purposes.

When the applicable retention period expires, personal data is securely deleted or anonymised in a manner that makes re-identification impossible.

Data Security

r55 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the r55 platform.
• AES-256 encryption for personal data stored on r55 servers.
• Role-based access controls ensuring that only authorised personnel can access player data, with access limited strictly to what is necessary for their job function.
• Comprehensive audit logging of all access to personal data systems.
• Regular third-party security assessments and vulnerability testing of the r55 platform infrastructure.
• Secure, tested data backup and recovery procedures to ensure data availability in the event of a system failure.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, r55 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

Players are also responsible for maintaining the security of their own account credentials. Do not share your r55 password with anyone, and contact support immediately if you suspect your account has been compromised.

Your Data Rights

As a registered r55 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us using the details in Section 15. r55 will respond to all valid requests within a reasonable timeframe and at no charge for standard requests.

• Right of Access: You may request a copy of all personal data r55 holds about you, together with information about how it is processed.
• Right of Rectification: You may request that inaccurate or incomplete personal data be corrected without undue delay.
• Right of Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that r55 restrict the processing of your data in certain circumstances — for example, while a complaint is being investigated.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format for transfer to another provider.
• Right to Object: You may object to processing based on legitimate interests, and you may withdraw consent for marketing communications at any time.

Please note that some of these rights are subject to limitations where r55 has an overriding legal obligation to retain or process the data in question — for example, AML record-keeping requirements.

Children & Minors

r55 is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 18. The platform employs age verification checks during registration and KYC to enforce this requirement. If r55 discovers that a minor has registered an account, that account will be immediately closed, all personal data associated with it will be securely deleted, and any funds held in the account will be returned via the original payment method.

If you are a parent or guardian and have reason to believe that a minor in your care has registered an account on r55, please contact our support team immediately at [email protected] so that we can take prompt action.

Marketing Communications

r55 may send you promotional communications about bonuses, seasonal offers (such as BPL and IPL betting promotions, Eid special offers, and Pohela Boishakh campaigns), and new game launches — but only where you have given your explicit consent to receive such communications during registration or through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in your r55 account settings.
• Clicking the unsubscribe link included in any marketing email.
• Contacting our support team directly at [email protected] with a request to be removed from marketing lists.

Withdrawal of consent for marketing communications does not affect your ability to continue using the r55 platform and does not affect service communications (such as security alerts and account notifications) which are non-optional.

Changes to This Policy

r55 reserves the right to update this Privacy Policy at any time in response to changes in applicable law, data protection best practice, or the way in which we operate the platform. When material changes are made, r55 will notify registered players via a prominent notice on the platform interface or by email to the address associated with your account, with reasonable advance notice before the changes take effect.

The most current version of this Privacy Policy is always available at https://r55.bio/privacy-policy. The effective date at the top of this document reflects the date of the most recent revision. Continued use of the r55 platform after the effective date of any revised policy constitutes your acceptance of the updated terms.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to make a complaint about how r55 has handled your personal data, please contact our team using the details below. All enquiries are handled in English. r55 aims to respond to all data-related requests within a reasonable timeframe.

• Email: [email protected]
• WhatsApp: +880 1700 000000
• Support Hours: 24/7 (Bangladesh Standard Time, UTC+6)

r55 takes all privacy complaints seriously and will acknowledge receipt of your complaint promptly, conduct a thorough investigation, and provide a substantive response within a reasonable period. Where a complaint cannot be resolved to your satisfaction, you retain the right to escalate the matter to the appropriate data protection authority.