Privacy Policy — tap 555

This Privacy Policy ("Policy") describes how tap 555 ("tap 555", "we", "us", "our") collects, processes, stores, and protects personal data provided by or collected about players and visitors ("you", "your") in connection with the tap 555 platform at tap-555.app. This Policy forms part of the tap 555 Terms & Conditions and should be read alongside the Terms & Conditions and the Responsible Gaming Policy.

By registering an account with tap 555, making a deposit, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not create an account or use the platform.

1. Information We Collect

1.1 Registration Data

When you create a tap 555 account, we collect the information you provide directly, including:

• Full legal name — used for KYC verification and account identification;
• Date of birth — used to verify that you meet the 18+ age requirement;
• Email address — used for account communications and security alerts;
• Mobile phone number — used for two-factor authentication (2FA) and account recovery;
• Residential address — collected during KYC verification and used for identity confirmation.

1.2 Identity Verification (KYC) Documents

To comply with our Know Your Customer (KYC) obligations and to process withdrawals, we may request copies of identity documents including your Bangladesh National Identity Card (NID), passport, or birth certificate. These documents are processed and stored securely in an encrypted document management system with restricted access.

1.3 Financial Data

When you make a deposit or request a withdrawal, we collect transaction data including the payment method used (e.g., bKash, Nagad, Rocket, Upay, or bank account details), transaction amounts in BDT, and transaction timestamps. We do not store full payment credentials. Mobile wallet numbers and bank account details are tokenised immediately upon submission and stored only in tokenised form.

1.4 Usage and Technical Data

tap 555 automatically collects certain technical data when you access the platform, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Pages visited, games played, bets placed, and session duration;
• Referring URL (the page you visited before arriving at tap-555.app);
• Login timestamps and session activity logs.

This data is used for security monitoring, fraud detection, platform performance optimisation, and responsible gaming analysis (e.g., identifying potential problem gambling patterns).

1.5 Communications Data

When you contact tap 555 support via live chat or email, we retain records of those communications including the content of messages, timestamps, and the support agent who handled the interaction. This data is used for quality assurance, dispute resolution, and regulatory compliance.

1.6 Data We Do Not Collect

tap 555 does not collect: biometric data, social media profile data (we have no social login functionality), precise real-time GPS location, or health-related information. We do not use third-party advertising networks that set tracking cookies.

2. How We Use Your Data

tap 555 processes personal data on the following legal bases and for the following purposes:

Purpose	Legal Basis	Data Categories Used
Account registration and management	Contract performance	Registration data
Age and identity verification (KYC)	Legal obligation	Registration data, KYC documents
Processing deposits and withdrawals	Contract performance	Financial data, registration data
Fraud prevention and security monitoring	Legitimate interest	Usage data, financial data, technical data
Responsible gaming monitoring	Legal obligation / legitimate interest	Usage data, financial data
Customer support and dispute resolution	Contract performance / legitimate interest	Communications data, registration data
Marketing communications (opt-in only)	Consent	Registration data, usage data
Platform analytics and improvement	Legitimate interest	Technical data, usage data
Compliance with applicable law	Legal obligation	All categories as required

2.1 Marketing Communications

tap 555 sends promotional emails, SMS messages, and on-platform notifications about bonus offers, seasonal promotions (including Eid offers, BPL season promotions, and Pohela Boishakh specials), and new game launches only to players who have opted in to marketing communications during registration or via their account settings. You may withdraw your marketing consent at any time by updating your notification preferences in account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect receipt of transactional communications (such as deposit confirmations, withdrawal updates, and security alerts), which are sent as a necessary part of account management.

2.2 Automated Decision-Making

tap 555 uses automated systems for certain decisions, including fraud scoring (to flag suspicious login attempts or unusual transaction patterns) and responsible gaming monitoring (to identify accounts that may be showing signs of problem gambling). Where an automated decision results in an account action that materially affects you — such as a temporary account lock — you have the right to request human review of that decision by contacting the support team.

3. Data Sharing & Disclosure

tap 555 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

3.1 Payment Processors

To process deposits and withdrawals, tap 555 shares necessary transaction data with payment service providers including the operators of bKash, Nagad, Rocket, and Upay mobile wallets, and with Bangladeshi banks facilitating bank transfer transactions. These providers process your data solely for the purpose of completing the relevant financial transaction and are contractually prohibited from using it for any other purpose.

3.2 Identity Verification Services

tap 555 may use third-party identity verification services to assist with KYC document processing. These services operate under strict data processing agreements and are permitted to use your identity data only for the purpose of verifying the documents submitted for your tap 555 account.

3.3 IT and Infrastructure Providers

tap 555 uses third-party cloud hosting, database management, and platform infrastructure providers to operate the platform. These providers may process personal data as a technical consequence of hosting the platform. All infrastructure providers are selected based on their security credentials and are bound by data processing agreements that restrict their use of player data to infrastructure provision only.

3.4 Legal and Regulatory Disclosure

tap 555 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by applicable law, court order, or where tap 555 has a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of players or third parties, or defend tap 555's legal rights.

3.5 Business Transfers

In the event that tap 555 undergoes a merger, acquisition, or sale of all or part of its business assets, player personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, tap 555 will notify affected players via the registered email address before their data is transferred and becomes subject to a different privacy policy.

4. Cookies & Tracking

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store preferences and session state. tap 555 uses cookies and similar technologies (including local storage and session storage) to operate the platform and improve the player experience.

4.2 Categories of Cookies Used by tap 555

Cookie Category	Purpose	Can Be Disabled?
Strictly Necessary	Maintain login sessions, remember language and currency preferences, enable core platform functionality	No — required for the platform to function
Functional	Remember game display preferences, chat window state, and notification settings	Yes — disabling may affect platform experience
Analytics	Collect anonymised data on page visits, session duration, and feature usage to help us improve the platform	Yes — opt out via account settings

tap 555 does not use advertising cookies, social media tracking pixels, or cross-site behavioural tracking technologies. Analytics data collected via analytics cookies is anonymised before processing and cannot be used to identify individual players.

4.3 Managing Cookies

You can control cookie settings through your browser preferences. Most modern browsers allow you to view, block, or delete cookies via the settings or preferences menu. Please note that disabling strictly necessary cookies will prevent you from logging in and using core platform features. Disabling functional or analytics cookies will not affect your ability to play games or make transactions on tap 555.

5. Data Security

tap 555 takes the security of player data seriously and has implemented a layered set of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. Key measures include:

• Transport layer encryption: All data in transit between your device and tap 555 servers is encrypted using TLS 1.3;
• Encryption at rest: Sensitive data fields (including KYC document stores and payment tokens) are encrypted at rest using AES-256 encryption;
• Access controls: Internal access to player data is restricted on a need-to-know basis. All internal access is authenticated, logged, and subject to periodic review;
• Two-factor authentication: All internal staff accounts with access to player data require 2FA. Players are strongly encouraged to enable 2FA on their own accounts;
• Penetration testing: The tap 555 platform undergoes regular security assessments including penetration testing by independent security specialists;
• Intrusion detection: Network-level and application-level intrusion detection systems monitor for unusual access patterns in real time;
• Incident response: tap 555 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to players, affected players will be notified promptly via the registered email address.

Despite these measures, no internet-based platform can guarantee absolute security. tap 555 encourages all players to use strong, unique passwords, to enable 2FA, and to report any suspicious account activity to the support team immediately.

6. Data Retention

tap 555 retains personal data for as long as is necessary for the purposes for which it was collected, taking into account legal, regulatory, and operational requirements. The following retention periods apply:

Data Category	Retention Period	Reason
Registration data (active accounts)	Duration of account plus 5 years	Legal and regulatory obligation
KYC documents	Duration of account plus 5 years	Anti-money laundering compliance
Transaction records	7 years from transaction date	Financial record-keeping obligation
Support communications	3 years from last interaction	Dispute resolution and quality assurance
Technical / usage logs	12 months on a rolling basis	Security monitoring and fraud prevention
Self-excluded accounts	Duration of exclusion plus 7 years	Responsible gaming compliance

Where personal data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data (e.g., platform usage statistics that cannot identify any individual player) may be retained indefinitely for operational and analytical purposes.

7. Your Privacy Rights

Players whose data is processed by tap 555 have the following rights in relation to their personal data. To exercise any of these rights, contact the tap 555 support team at [email protected] with the subject line "Privacy Rights Request". Requests are processed within 30 days of receipt of a verified request.

• Right of access: You may request a copy of the personal data tap 555 holds about you. We will provide this in a structured, readable format.
• Right to rectification: If any personal data held about you is inaccurate or incomplete, you may request that it be corrected. Minor corrections (such as updating a phone number) can be made directly via account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing. Note that tap 555 may be unable to delete certain data that is required to be retained under applicable law (e.g., transaction records subject to financial record-keeping obligations).
• Right to restrict processing: You may request that tap 555 restrict the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to data portability: You may request that tap 555 provide your personal data in a machine-readable format (e.g., CSV or JSON) so that it can be transferred to another service provider.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interest, in which case tap 555 will assess whether its legitimate interest overrides your objection in the specific circumstances.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8. Contact & Complaints

8.1 Contact Details

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by tap 555, please contact the privacy team via email at [email protected] with the subject line "Privacy Enquiry". The support team operates 24 hours a day, 7 days a week, and aims to respond to privacy enquiries within 3 business days.

8.2 Complaints

If you are not satisfied with how tap 555 has handled your personal data or responded to a privacy rights request, you may raise a formal complaint by emailing [email protected] with the subject line "Privacy Complaint". tap 555 will acknowledge your complaint within 5 business days and provide a substantive response within 30 days. Where a complaint cannot be resolved within 30 days, tap 555 will notify you of the reason for the delay and provide an updated resolution timeline.

8.3 Policy Updates

tap 555 reviews this Privacy Policy periodically and updates it when necessary to reflect changes in our data practices, platform features, or applicable law. The current version of the Privacy Policy is always available at tap-555.app/privacy-policy. The "Last updated" date at the top of this page indicates when the most recent revision was made. Where a material change is made to this Policy — such as a new category of data being collected, a new data sharing arrangement, or a significant change to retention periods — tap 555 will notify registered players via the registered email address at least 14 days before the change takes effect, giving you the opportunity to close your account if you do not accept the updated terms.

8.4 Children's Privacy

The tap 555 platform is strictly for adults aged 18 and over. tap 555 does not knowingly collect personal data from persons under the age of 18. If tap 555 becomes aware that personal data from a person under 18 has been collected, that data will be deleted immediately and the associated account will be closed. Parents or guardians who believe that a minor has registered a tap 555 account should contact the support team immediately at [email protected].