hhe555 Privacy Policy

1 Information We Collect

hhe555 collects personal data through several channels: directly from you when you register, make deposits, contact support, or interact with platform features; automatically through your use of the website and mobile platform; and in limited cases from third-party service providers such as payment processors and identity verification partners. The categories of personal data we collect are described below.

hhe555 does not knowingly collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than for identity verification), or health data beyond what is voluntarily disclosed by players using our responsible gaming tools.

2 How We Use Your Data

hhe555 processes your personal data only where a legitimate legal basis exists for doing so. The primary legal bases we rely upon are: (a) performance of a contract — processing necessary to operate your account and deliver the services you have requested; (b) legal obligation — processing required to comply with applicable anti-money laundering, know-your-customer, and data protection regulations; (c) legitimate interests — processing that is proportionate and in hhe555's interest without overriding your fundamental rights; and (d) consent — where you have given clear, freely withdrawable consent, such as for marketing communications.

• Account management: Creating, maintaining, and securing your hhe555 account; processing login and authentication; enabling two-factor authentication.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and linked bank accounts; reconciling transaction records.
• Identity verification: Confirming that you are who you say you are and that you meet the 18+ age requirement; screening against sanctions and politically exposed persons (PEP) lists.
• Fraud and security: Detecting and preventing fraudulent transactions, multi-accounting, bonus abuse, and unauthorised access attempts.
• Responsible gaming: Monitoring betting patterns to identify potential problem gambling indicators; applying deposit limits, cool-off periods, or self-exclusion as requested or mandated.
• Customer support: Responding to queries, resolving disputes, and providing technical assistance via email, live chat, and WhatsApp.
• Marketing (with consent): Sending promotional offers, bonus announcements, cricket betting tips, and seasonal promotions (e.g., Eid, Pohela Boishakh, BPL season specials) where you have opted in to receive such communications.
• Analytics and improvement: Analysing aggregate, anonymised usage data to improve platform performance, game selection, and user experience.

hhe555 will not use your personal data for purposes that are materially different from those stated above without first obtaining your explicit consent or updating this Privacy Policy with reasonable prior notice.

3 Data Sharing and Disclosure

hhe555 does not sell your personal data. We share data only with the limited categories of recipients described below, and only to the extent necessary for the stated purpose. All third-party processors engaged by hhe555 are contractually required to implement appropriate technical and organisational security measures and to process data solely on hhe555's documented instructions.

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank receive transaction data necessary to process your deposits and withdrawals. These parties are independent data controllers for their own payment processing activities.
• Identity verification partners: Third-party KYC service providers receive identity documents and biometric check data solely for the purpose of verifying your age and identity. Results are returned to hhe555 and documents are not retained by the verification provider beyond the regulatory minimum.
• Game providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive your anonymised player ID and bet data to operate their games. They do not receive your name, contact details, or payment information.
• Fraud and security services: Anti-fraud and cybersecurity vendors may process your IP address, device fingerprint, and transaction metadata to identify suspicious activity patterns.
• Legal and regulatory authorities: hhe555 will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies when required to do so by applicable law, court order, or binding regulatory directive.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of hhe555's assets, personal data held by hhe555 may be transferred to the acquiring entity, subject to equivalent privacy protections. Affected players will be notified in advance.

4 Cookies and Tracking Technologies

hhe555 uses cookies and similar technologies (including local storage and session tokens) to operate the platform, maintain your session, prevent fraud, and collect aggregate analytics. Cookies are small text files stored on your device. They do not contain executable code and cannot access other files on your device.

hhe555 does not deploy third-party advertising cookies or social media tracking pixels. You can control or delete cookies through your browser settings at any time. Please note that disabling strictly necessary or fraud prevention cookies may prevent you from accessing certain features of the platform or may trigger additional security checks on your account.

5 Data Retention

hhe555 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide; specific retention periods may vary based on regulatory requirements applicable in the relevant jurisdiction.

• Account data (active accounts): Retained for the full duration of the account relationship plus a minimum of five years following account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction records: Financial transaction data is retained for a minimum of seven years following the transaction date in accordance with financial record-keeping requirements.
• Identity verification documents: Copies of national ID, passport, and verification selfies are retained for five years following account closure or the last verification event, whichever is later.
• Support communications: Live chat transcripts, email correspondence, and WhatsApp interaction logs are retained for three years from the date of the communication.
• Marketing consent records: Records of your opt-in or opt-out preference are retained for as long as they are relevant plus two years, to demonstrate compliance with consent obligations.
• Analytics data: Aggregate, anonymised analytics data may be retained indefinitely as it contains no personally identifiable information.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual. Where deletion is not immediately possible due to technical or operational constraints, the data is quarantined and restricted from further processing until deletion can be completed.

6 Data Security

hhe555 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures are reviewed and updated on a regular basis to keep pace with evolving threats.

• Encryption in transit: All data transferred between your device and hhe555 servers is encrypted using TLS 1.3 with 256-bit AES cipher suites. Our SSL certificate is maintained and renewed by a trusted Certificate Authority.
• Encryption at rest: Sensitive data stored in hhe555 databases — including identity documents, payment references, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff access is role-based, logged, and subject to regular review. All access to production data requires multi-factor authentication.
• Penetration testing: hhe555 engages independent third-party security specialists to conduct penetration tests and vulnerability assessments on a periodic basis. Critical findings are remediated within defined SLA timescales.
• Incident response: hhe555 maintains a documented data breach response plan. In the event of a breach that is likely to result in risk to affected individuals, hhe555 will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.
• Staff training: All hhe555 personnel who handle personal data receive regular data protection and information security training as a condition of their employment or contract.

7 Your Rights and Choices

As a player on hhe555, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid, verified request.

• Right of access: You may request a copy of all personal data hhe555 holds about you, along with information about how it is being processed. This is provided free of charge for the first request in any 12-month period.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections may require supporting documentation.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful. Note that we may be required to retain certain data by law — in those cases we will explain what we must keep and why.
• Right to restrict processing: In certain circumstances you may ask hhe555 to restrict processing of your data — for example while a rectification request is under review.
• Right to data portability: You may request a copy of the personal data you provided to hhe555 in a structured, commonly used, machine-readable format, where technically feasible.
• Right to object: You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though hhe555 may be entitled to continue processing if there are compelling legitimate grounds.
• Marketing opt-out: You may unsubscribe from hhe555 marketing communications at any time by clicking the unsubscribe link in any marketing email, by updating your account notification preferences, or by contacting [email protected].

8 Contact and Policy Updates

hhe555 reviews this Privacy Policy at least annually and whenever a material change to our data processing activities occurs. The effective date at the top of this page is updated with every revision. Where changes are material — meaning they affect your rights or the way your data is used in a significant way — hhe555 will notify registered players by email to the address on their account prior to the change taking effect. Continued use of the platform after the effective date of a revised policy constitutes acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way hhe555 handles your personal data, please contact us using the details below. We take all privacy concerns seriously and will acknowledge your communication within 2 business days and provide a substantive response within 30 days.

• Email: [email protected] — subject line "Privacy Enquiry"
• WhatsApp: +880 1700 555 888 (available 24/7, Bangladesh Standard Time UTC+6)
• Response times: Acknowledgement within 2 business days; full response within 30 calendar days of a verified request.

hhe555 is committed to resolving privacy concerns directly and promptly. We encourage players to contact our support team as the first step for any data-related concern. Our team is trained to handle data rights requests and privacy inquiries with confidentiality and professionalism.