554bd Privacy Policy

i Introduction

This Privacy Policy ("Policy") applies to all users of the 554bd website located at https://554bd.net and any associated mobile-optimised services (collectively, the "Platform"). It describes the types of personal information we collect, the purposes for which that information is used, the parties with whom it may be shared, the security measures we apply to protect it, and the rights you hold as a data subject. By accessing the Platform and using its services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

554bd is committed to operating its platform in a responsible and privacy-conscious manner. This Policy is written in plain language to ensure that players across Bangladesh — in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur and Mymensingh — can clearly understand how their data is used. We do not use unnecessarily complex legal language to obscure our data practices. If anything in this Policy is unclear, you are encouraged to contact our support team at the address provided at the end of this document.

★ Privacy at a Glance

The six principles below summarise how 554bd approaches your personal data. Full details are in the sections that follow.

1 1. Information We Collect

554bd collects personal information from you in several ways, including directly when you register an account, make a deposit, contact our support team, or interact with Platform features. We also collect certain information automatically when you visit the Platform. The categories of personal information we collect are as follows:

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or biometric data. Our data collection is limited to what is necessary and proportionate to the services we provide.

2 2. How We Use Your Information

The personal information we collect from you is used for the following purposes. We process your data only for the specific purposes listed below and do not repurpose it for uses that are incompatible with the original reason for collection:

• Account creation and management: to register your account, verify your identity through our KYC process, manage your account settings and maintain accurate account records.
• Transaction processing: to process deposits from and withdrawals to your registered bKash, Nagad, Rocket or Upay mobile wallet, to maintain accurate financial records, and to resolve any payment disputes that may arise.
• Platform operation and improvement: to deliver, maintain, monitor, troubleshoot and improve the features and functionality of the Platform, including analysing usage patterns to inform product development decisions.
• Security and fraud prevention: to detect, investigate and prevent fraudulent transactions, money laundering, account takeovers, multi-accounting, bonus abuse and other prohibited conduct. Security monitoring of the Platform is an ongoing activity and is essential to protecting all players.
• Responsible gaming compliance: to monitor gaming activity for signs of problem gambling, to deliver responsible gaming alerts and communications, to process self-exclusion requests and deposit limit settings, and to comply with our responsible gaming obligations.
• Customer support: to respond to your queries, complaints and requests submitted via our support channel, to maintain records of support interactions for quality assurance purposes, and to resolve disputes.
• Marketing and promotional communications: to send you information about promotions, bonuses and offers that may be of interest to you, where you have not opted out of receiving such communications. You can opt out of marketing communications at any time by contacting our support team.

We do not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Decisions about account suspension, bonus eligibility and withdrawal approval involve human oversight by our compliance and support teams.

3 3. Legal Basis for Processing

554bd processes your personal data on the following legal bases. Each processing activity is matched to at least one of the following lawful bases:

• Contractual necessity: processing that is required to perform our contract with you (the Terms & Conditions), including account management, payment processing and customer support activities.
• Legitimate interests: processing that serves 554bd's legitimate interests in operating a secure, fraud-free platform and improving its services, provided those interests are not overridden by your rights and freedoms. This includes security monitoring, fraud detection and analytics.
• Legal obligation: processing that is necessary for 554bd to comply with applicable legal requirements, including anti-money-laundering obligations, identity verification requirements and responses to lawful requests from regulatory or law enforcement authorities.
• Consent: where we rely on your consent as the legal basis for processing — for example, for optional marketing communications — you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4 4. Sharing Your Information

554bd does not sell, rent or trade your personal data to unaffiliated third parties for their own commercial or marketing purposes. We may share your personal data only in the following limited circumstances:

• Payment service providers: we share the minimum necessary data with your mobile financial service provider (bKash, Nagad, Rocket or Upay) solely for the purpose of processing your deposit or withdrawal transaction. These providers operate under their own privacy policies and data protection obligations.
• Identity verification providers: where KYC verification is required, we may share identity documentation with our appointed verification service provider for the sole purpose of confirming your identity. Data shared for KYC purposes is not used by the provider for any other purpose.
• Fraud prevention and security services: we may share data with fraud prevention service providers and cybersecurity tools that help us detect and prevent fraudulent activity on the Platform. These providers act as data processors under our instruction and are contractually bound to protect your data.
• Legal and regulatory authorities: we may disclose personal data to law enforcement agencies, regulatory bodies, courts or other authorities where required to do so by applicable law, court order or regulatory direction. We will notify you of such a disclosure where we are legally permitted to do so.

5 5. Payment Data and Mobile Wallets

554bd processes all financial transactions exclusively through Bangladesh's leading mobile financial services: bKash, Nagad, Rocket and Upay. When you make a deposit or request a withdrawal, we collect the mobile number registered to your wallet and the transaction reference generated by the mobile financial service. We do not have access to your mobile wallet PIN, password or any authentication credentials associated with your mobile financial service account. These remain entirely within your mobile financial service provider's systems and are never transmitted to or stored by 554bd.

Transaction records, including deposit amounts, withdrawal amounts, dates, times and wallet reference numbers, are retained in our secure systems for a minimum of five years from the date of the transaction. This retention period is necessary for accounting, audit, and anti-money-laundering compliance purposes. After the mandatory retention period has elapsed, transaction records are securely deleted in accordance with our data disposal procedures.

6 6. Cookies and Tracking Technologies

554bd uses cookies and similar tracking technologies on the Platform to ensure its correct operation and to improve the user experience. A cookie is a small text file placed on your device by a website you visit. Cookies allow a website to remember your preferences, keep you logged in during a session, and collect aggregate usage statistics. The Platform uses the following categories of cookies:

• Essential cookies: these are strictly necessary for the Platform to function correctly. They enable core features such as maintaining your login session, keeping your account secure during a browsing session, and processing financial transactions. These cookies cannot be disabled without breaking the Platform's core functionality.
• Analytics cookies: these cookies collect anonymous, aggregate information about how users interact with the Platform — for example, which pages are most visited, how long users spend on each page, and where users navigate from. This information helps us understand how the Platform is used and where improvements can be made. Analytics data is not linked to your personal identity.
• Preference cookies: these cookies remember your settings and preferences on the Platform, such as your language selection. They allow the Platform to provide you with a more personalised experience on return visits without requiring you to re-enter your preferences each time.

You can control and manage cookies through your mobile browser settings. Please note that disabling essential cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. Disabling analytics or preference cookies will not affect your ability to use the Platform's core features.

7 7. Data Retention

554bd retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, or as required by applicable law. The following retention periods apply: account registration data and KYC documentation are retained for the duration of your account plus a minimum of five years after account closure; financial transaction records are retained for a minimum of five years from the date of the transaction; gaming activity records are retained for a minimum of two years; support communication records are retained for a minimum of two years from the date of the last interaction.

When personal data is no longer required for the purposes for which it was collected and no legal obligation requires its continued retention, 554bd will securely delete or anonymise the data in accordance with its internal data disposal procedures. Anonymised, non-identifiable aggregate data may be retained indefinitely for statistical and analytical purposes, as it can no longer be attributed to any individual.

8 8. Data Security

554bd takes the security of your personal data seriously and implements a range of technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, loss or destruction. Our security measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and our servers, ensuring that your account credentials, personal information and financial data cannot be intercepted in plain text during transmission.
• Access controls and authentication: access to systems holding personal data is restricted to authorised personnel only, on a need-to-know basis. All staff with access to player data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion detection and monitoring: our infrastructure is monitored around the clock for signs of unauthorised access attempts, unusual traffic patterns and other indicators of potential security incidents. Security alerts are reviewed and acted upon promptly by our technical team.
• Secure data storage: personal data is stored in access-controlled, encrypted database systems. Database backups are encrypted and stored separately from primary systems to ensure data can be recovered in the event of a system failure without compromising data security.

No security system is completely impenetrable and 554bd cannot guarantee the absolute security of your personal data. In the event of a data security incident that poses a risk to your rights and freedoms, 554bd will notify affected players as promptly as practicable and will take all reasonable steps to contain and remediate the incident.

9 9. Your Rights

As a data subject, you hold the following rights in relation to the personal data that 554bd holds about you. To exercise any of these rights, please contact our support team using the contact details provided at the end of this Policy. We will respond to all verified data rights requests within 14 business days of receipt:

• Right of access: you have the right to request a copy of the personal data that 554bd holds about you, along with information about how that data is used and with whom it has been shared.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. We will act on rectification requests promptly and update our records accordingly.
• Right to erasure: you have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and consent is the only legal basis for processing), or where the data has been processed unlawfully. Note that this right is subject to our legal obligations to retain certain data — for example, financial transaction records must be retained for compliance purposes and cannot be erased on request during the mandatory retention period.
• Right to restriction: you have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while we verify the accuracy of data you have disputed, or while a complaint about our processing practices is under investigation.
• Right to object: you have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis, and where you believe your rights and freedoms override those interests. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time.

To exercise any of the above rights, please contact our support team with your registered mobile number and a clear description of the right you wish to exercise. We may need to verify your identity before processing your request. We will not charge a fee for responding to data rights requests except where requests are manifestly unfounded or excessive, in which case a reasonable administrative charge may apply.

10 10. Children's Privacy

The 554bd Platform is intended exclusively for adults aged 21 and above. We do not knowingly collect, process or retain personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be returned and any winnings generated will be forfeited in accordance with our Terms & Conditions.

11 11. Third-Party Links

The 554bd Platform may contain links to game provider websites, payment service information pages or other third-party resources. These links are provided for informational purposes only. 554bd does not operate, control or endorse the content or privacy practices of any third-party website, and this Policy does not apply to any website other than the 554bd Platform itself. When you click on a link to a third-party site, we encourage you to read the privacy policy of that site carefully before providing any personal information. 554bd accepts no responsibility or liability for the privacy practices of any third-party website linked from the Platform.

12 12. Changes to This Policy

554bd reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data we collect, the purposes for which we use it, or the parties with whom we share it — we will provide advance notice to registered players via their registered contact details before the change takes effect. The notice period for material changes will be a minimum of 7 days, except where a change is required urgently to address a security vulnerability or comply with an immediate legal obligation.

The date at the top of this Policy reflects when the Policy was last reviewed and updated. Continued use of the Platform following the effective date of any amendment to this Policy constitutes your acceptance of the amended Policy. If you do not accept the amended Policy, you must cease using the Platform and request account closure. Archived versions of this Policy are available upon request by contacting our support team.

13 13. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or to 554bd's data practices generally, please contact our support team. We handle all privacy-related enquiries with the same priority as account support requests and aim to respond within 14 business days. For data access, rectification, erasure or objection requests, please include your registered mobile number in your communication so that we can verify your identity before processing your request.