bg55 Privacy Policy — How We Handle Your Personal Data

1Introduction

bg55 ("we", "us", "the Platform") operates the online betting and casino services accessible at https://bg55.io. We are committed to protecting the personal data of all individuals who interact with our platform, including registered players, visitors, and support enquirers. This Privacy Policy sets out in plain and formal English how we collect, use, store, share, and protect your personal data, and what rights you have in relation to that data.

This Privacy Policy applies to all personal data processed in connection with bg55.io — including data collected through the website itself, via customer support channels, through payment processing interactions, and through our KYC (Know Your Customer) identity verification procedures. It applies to all players accessing bg55 from Bangladesh and any other jurisdiction where the platform is available.

This Privacy Policy should be read alongside the bg55 Terms & Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your relationship with bg55. Capitalised terms used in this Privacy Policy and not defined herein carry the meanings assigned to them in the bg55 Terms & Conditions.

2Data We Collect

bg55 collects personal data that falls into the following categories. We collect only what is necessary to deliver our services, comply with applicable obligations, and protect the security and integrity of the platform.

bg55 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data (other than problem gambling disclosures made voluntarily through our responsible gaming tools), or political opinions. If you voluntarily disclose such information in a support communication, it will be used solely to address your enquiry and will not be retained beyond what is necessary for that purpose.

3How We Collect Your Data

bg55 collects your personal data through the following channels and mechanisms:

• Direct provision by you: When you complete the account registration form, submit KYC documents, initiate a deposit or withdrawal, contact customer support, or respond to a promotion, you directly provide us with personal data.
• Automated technical collection: When you visit bg55.io, our web servers automatically record technical data including your IP address, browser type, device identifiers, and pages visited. This data is collected via server logs and first-party cookies.
• Payment processing partners: When you transact via bKash, Nagad, Rocket, Upay, or any other supported payment channel, the relevant payment provider shares transactional confirmation data with bg55 to facilitate deposit crediting and withdrawal processing.
• KYC and identity verification services: bg55 may work with third-party KYC verification providers who process your identity documents on our behalf. These providers share the outcome of their verification checks with bg55 but are contractually prohibited from using your data for any independent purpose.
• Fraud prevention and security services: bg55 uses automated fraud detection tools that generate risk signals based on behavioural and technical data associated with your account activity. These signals inform account security decisions but do not constitute automated legal decisions about your account without human review.

4How We Use Your Data

bg55 uses the personal data we collect for the following purposes. Each purpose is tied to a specific legal basis, which is detailed in Clause 5 below.

• Account management: To create, verify, maintain, and administer your bg55 player account, including processing login authentication and maintaining your account balance in ৳ BDT.
• Service delivery: To enable you to place sports bets, access cricket markets (BPL, T20, ICC events, Bangladesh Tigers), participate in casino games (slots, live dealer, instant-win), and use all other features of the bg55 platform.
• Payment processing: To process deposits and withdrawals through your registered payment method (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) and to maintain accurate financial records.
• Identity verification and KYC compliance: To verify your identity, age (21+ requirement), and the legitimacy of your payment methods in accordance with responsible gaming and fraud prevention obligations.
• Customer support: To respond to your support requests, resolve account queries, investigate complaints, and communicate important account notifications.
• Responsible gaming: To administer self-exclusion requests, deposit limits, cooling-off periods, and other player protection tools you activate, and to monitor for indicators of problem gambling behaviour where relevant.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, bonus abuse, and other prohibited conduct as defined in the bg55 Terms & Conditions.
• Platform improvement: To analyse aggregated and anonymised usage data to improve the bg55 platform's functionality, product range, and user experience.
• Legal compliance: To comply with applicable legal obligations, respond to lawful requests from authorities, and maintain records required by law.

bg55 does not use your personal data for automated decision-making that produces legal or similarly significant effects without the involvement of a qualified human reviewer. Where automated tools flag an account for investigation, a member of the bg55 compliance team reviews the flag before any material action is taken.

5Legal Basis for Processing

bg55 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and bg55 — including account creation, service delivery, payment processing, and KYC verification — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of bg55's legitimate interests in operating a secure, fair, and sustainable betting platform. These interests do not override your fundamental data protection rights.
• Legal obligation: Processing required to comply with applicable legal obligations — including financial record-keeping, responding to lawful authority requests, and age verification — is carried out on the basis of legal compliance.
• Consent: Where bg55 seeks to send you optional marketing communications or use non-essential cookies, we will request your explicit consent before doing so. You may withdraw consent at any time by contacting [email protected] or adjusting your account notification preferences.

6Sharing Your Data

bg55 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Game studio partners: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game providers receive the minimum session data necessary to deliver their game products within the bg55 platform. These partners operate under data processing agreements that restrict their use of your data to service delivery only.
• Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other payment providers receive transaction data necessary to process your deposits and withdrawals. Each provider is subject to its own privacy policy and applicable Bangladeshi financial data regulations.
• KYC and identity verification providers: Third-party KYC services receive identity document data solely to conduct verification checks on bg55's behalf. These providers are contractually prohibited from retaining or repurposing your data beyond the scope of the verification service.
• Fraud prevention and security services: Anonymised or pseudonymised risk signals may be shared with fraud intelligence partners to protect the platform against coordinated fraud or money laundering. No directly identifiable personal data is shared beyond what is strictly required for the specific fraud investigation.
• Legal and regulatory authorities: bg55 may disclose personal data in response to a lawful request, court order, or regulatory requirement from a competent authority. bg55 will take reasonable steps to notify affected players of such disclosures where legally permissible.
• Business succession: In the event of a merger, acquisition, or sale of all or part of bg55's business, player data may be transferred to the successor entity, which will be required to honour the terms of this Privacy Policy or provide you with advance notice of any material changes.

All third parties with whom bg55 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond the scope of their engagement with bg55.

7Cookies & Tracking Technologies

bg55.io uses cookies and similar browser-based technologies to ensure the platform functions correctly and to gather anonymised analytical data that helps us improve the user experience. The cookies deployed on bg55.io fall into the following categories:

• Strictly necessary cookies: These cookies are essential to the operation of bg55.io. They maintain your authenticated session, remember your account preferences, and ensure that the platform functions securely. These cookies cannot be disabled without impairing core platform functionality.
• Analytical / performance cookies: These cookies collect anonymised data about how players interact with bg55.io — including pages visited, time spent, and navigation paths. This data is used exclusively to improve platform performance and is not linked to your personal identity.
• Functional cookies: These cookies remember choices you have made on the platform (such as language preference and display settings) to personalise your experience. They do not track your activity across other websites.

bg55 does not use advertising cookies, retargeting cookies, or any cross-site tracking technology on bg55.io. You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent certain platform features from operating correctly.

8Data Security

bg55 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and bg55.io servers, ensuring that your personal and financial data cannot be intercepted in transit.
• Encryption at rest for sensitive stored data, including identity documents submitted during KYC verification and payment method details.
• Role-based access controls ensuring that only authorised bg55 personnel with a documented operational need can access personal data, and only to the extent required for their specific role.
• Regular security audits, penetration testing, and vulnerability assessments of the bg55.io platform infrastructure.
• Two-factor authentication (2FA) available to all registered players for account login, providing an additional layer of protection against unauthorised account access.
• Incident response procedures that require bg55 to investigate and, where appropriate, notify affected players of any confirmed data breach that poses a significant risk to their rights or interests.

While bg55 takes all reasonable precautions to protect your personal data, no internet-based platform can guarantee absolute security against all threats. You are responsible for maintaining the confidentiality of your own account credentials and for notifying bg55 immediately at [email protected] if you suspect any unauthorised access to your account.

9Data Retention

bg55 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to protect bg55's legitimate interests in the event of a dispute or investigation. The following retention periods apply:

• Account and identity data: Retained for the full duration of your account and for a minimum of five years following account closure, in line with standard financial record-keeping and anti-money laundering obligations.
• Transaction and financial records: Retained for a minimum of five years following the date of each transaction, consistent with financial compliance requirements.
• KYC and verification documents: Retained for the duration of the account and for five years post-closure, or longer if required by a specific legal obligation or ongoing investigation.
• Customer support and communications data: Retained for three years from the date of the most recent interaction, or longer if the communication relates to an unresolved dispute.
• Analytical and technical data: Anonymised analytical data (from which no individual can be identified) may be retained indefinitely for platform improvement purposes. Raw technical log data containing IP addresses is deleted after 12 months.
• Responsible gaming records: Self-exclusion records and responsible gaming correspondence are retained for the full period of the exclusion plus five years thereafter, to ensure the exclusion is honoured in the event of a re-registration attempt.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction or re-identification.

10Your Data Rights

As a player registered with bg55, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact bg55 in writing at [email protected], clearly stating your registered name, account reference, and the specific right you wish to exercise. bg55 will respond within 14 calendar days of receipt of a valid request.

• Right of access: You may request a copy of all personal data that bg55 holds about you, along with information about the purposes for which it is processed and the parties with whom it has been shared.
• Right to rectification: You may request that bg55 correct any inaccurate or incomplete personal data held about you. bg55 will complete verified corrections within 7 working days.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where the processing lacks a lawful basis. This right is subject to bg55's legal obligations to retain certain records and to its legitimate interest in preventing fraud by formerly excluded or banned players.
• Right to restriction of processing: You may request that bg55 restrict the processing of your personal data while a correction or objection request is being assessed, or where processing is unlawful but you prefer restriction to erasure.
• Right to data portability: Where processing is based on your consent or a contract, you may request that bg55 provide your personal data in a structured, commonly used, and machine-readable format suitable for transfer to another service provider.
• Right to object: You may object to the processing of your personal data where bg55 relies on legitimate interests as the legal basis, including profiling for responsible gaming monitoring. bg55 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

If you are dissatisfied with bg55's response to your data rights request, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

11Children & Minors

bg55 is strictly an adult platform. Registration and use of bg55.io is prohibited for any person under the age of 21 years. bg55 does not knowingly collect personal data from individuals under 21. Age verification is a mandatory component of the bg55 KYC process, and accounts found to belong to persons under 21 will be immediately suspended and all associated data will be deleted in accordance with our data retention policy.

If you are a parent or guardian and you believe that a person under your care has registered with bg55 or provided personal data to bg55 without your consent, please contact us immediately at [email protected]. bg55 will investigate and take prompt corrective action, including account closure and data deletion where confirmed.

12Third-Party Links

bg55.io does not include links to third-party websites, social media platforms, or external services within the main platform interface. However, game studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) operate game engines delivered within bg55.io under licence. These studios' embedded technologies are subject to their own privacy practices, and bg55 recommends that you review the relevant studio's privacy documentation if you have concerns about data handling within a specific game engine.

bg55 is not responsible for the privacy practices of any third-party game studio or payment provider. The bg55 Privacy Policy governs bg55's own data handling only. Each third-party partner's data practices are governed by that partner's own privacy policy and applicable law.

13International Data Transfers

bg55 serves players in Bangladesh and processes data primarily within the jurisdiction in which the platform is operated. Some of our third-party service providers — including KYC verification partners, game studio technology providers, and fraud prevention services — may process personal data in jurisdictions outside Bangladesh. Where such transfers occur, bg55 ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

In all cases of international data transfer, bg55 applies a data minimisation approach, sharing only the specific data points required for the third party to perform their contracted function and prohibiting any secondary use or retention beyond the scope of that function.

14Amendments to This Policy

bg55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When a material change is made, bg55 will notify registered players via their registered mobile number or email address and will publish the updated version at https://bg55.io/privacy-policy with a revised effective date.

Your continued use of the bg55 platform following the publication of an amended Privacy Policy constitutes your acceptance of the updated terms. If you do not accept a revised Privacy Policy, you must discontinue use of the platform and may request account closure by contacting [email protected]. bg55 will provide a full withdrawal of your real-money balance upon closure, subject to completion of KYC verification requirements.

15Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data bg55 holds about you, please contact the bg55 Data & Privacy team using the details below. All communications should be submitted in English.