Privacy Policy — How m555 Collects, Uses, and Protects Your Personal Data

1 Introduction

m555 ("the Platform", "we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by m555. This policy applies to all users of the m555 website at https://m555.im and all associated services, features, and products available through the Platform.

Please read this Privacy Policy carefully to understand our practices regarding your personal data and how we will treat it. By creating an account on m555, making a deposit, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this policy and consent to the collection and use of your personal data as described herein.

This Privacy Policy should be read together with our Terms & Conditions, which set out the contractual basis of the relationship between you and m555. In the event of any conflict between this Privacy Policy and the Terms & Conditions with respect to data handling, this Privacy Policy shall prevail.

2 Data We Collect

m555 collects and processes the following categories of personal information:

2.1 Information You Provide Directly

• Registration data: your chosen username, email address, full name, date of birth, and phone number provided when you open an account.
• Identity verification (KYC) data: copies of government-issued photo identification (such as a National Identity Card or passport), proof of address documents, and any additional documentation requested to satisfy our KYC obligations.
• Payment information: mobile banking account details (bKash, Nagad, Rocket, or Upay numbers) used to process deposits and withdrawals in Bangladeshi Taka (৳). m555 does not store full card numbers or banking passwords.
• Communications: messages, emails, and chat transcripts exchanged with our customer support team.
• Preferences and settings: responsible gaming tool selections, notification preferences, and account configuration choices.

2.2 Information Collected Automatically

• Technical data: your IP address, device type, browser type and version, operating system, screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage data: pages visited on m555, features accessed, session duration, click-stream data, and in-platform navigation patterns.
• Transaction and activity logs: betting history, game play records, deposit and withdrawal timestamps, bonus claims and wagering progress.
• Cookie data: as described in Section 6 of this policy.

2.3 Information from Third Parties

m555 may receive personal data about you from third-party identity verification providers, fraud prevention agencies, payment processing partners, and publicly available sources where this is necessary to verify your identity, prevent fraud, or comply with legal obligations.

3 How We Use Your Data

m555 uses the personal data it collects for the following specific purposes:

m555 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where such processing is expressly permitted under applicable law.

4 Legal Basis for Processing

m555 processes your personal data on one or more of the following legal grounds:

• Contractual necessity: processing is required to perform the contract between you and m555 — including operating your account, processing transactions, and delivering gaming services.
• Legal obligation: processing is necessary for m555 to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, KYC requirements, and responsible gaming mandates.
• Legitimate interests: processing is in the legitimate interests of m555 or a third party (such as fraud prevention, platform security, and service improvement), provided those interests are not overridden by your own data protection rights.
• Consent: where m555 relies on your consent as the legal basis for processing (for example, for sending promotional communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5 Sharing Your Personal Data

m555 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only where necessary and subject to appropriate data protection safeguards:

• Payment processing partners: bKash, Nagad, Rocket (Dutch-Bangla Bank), and Upay (UCB) receive transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: third-party KYC service providers who assist m555 in verifying player identity and age in accordance with our compliance obligations.
• Game software providers: studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive pseudonymised session data necessary to operate their games within the m555 platform.
• Fraud prevention and security agencies: where reasonably necessary to detect, prevent, or investigate fraudulent activity, money laundering, or other security threats.
• Regulatory and law enforcement authorities: where m555 is required by law, court order, or regulatory instruction to disclose personal data.
• Professional advisors: lawyers, auditors, and accountants acting in an advisory capacity to m555, subject to binding confidentiality obligations.

Any third-party service provider given access to your personal data is required to process it only in accordance with m555's instructions and for the specified purpose. m555 does not permit third-party processors to use your data for their own independent purposes.

6 Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. m555 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the Platform, remember your preferences, analyse usage patterns, and maintain session security.

6.2 Types of Cookies Used by m555

• Strictly necessary cookies: essential for the Platform to function correctly, including session authentication and security features. These cannot be disabled.
• Functional cookies: used to remember your preferences and account settings between visits, such as language preferences and responsible gaming tool configurations.
• Analytics cookies: used to collect anonymised data about how users interact with the Platform, helping m555 identify areas for improvement. These cookies do not identify you personally.
• Performance cookies: used to monitor Platform performance, detect errors, and ensure reliable service delivery.

6.3 Managing Cookies

You may control or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect the functionality of the m555 Platform and may prevent you from accessing your account or placing bets. Detailed instructions for managing cookies are available in the help documentation of your browser.

7 Data Security

m555 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL (Secure Socket Layer) encryption for all data transmitted between your device and m555 servers.
• Encryption of sensitive data at rest within our database infrastructure.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their specific duties.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Comprehensive audit logging of all access to personal data stores.
• Formal incident response procedures to detect, contain, and report any personal data breach.

While m555 takes all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for keeping your m555 login credentials confidential and for notifying us immediately at [email protected] if you suspect your account has been compromised.

8 Data Retention

m555 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, accounting, or reporting obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

9 Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to your personal data held by m555:

• Right of access: you may request a copy of all personal data m555 holds about you. We will provide this within a reasonable timeframe following identity verification.
• Right to rectification: you may request that inaccurate or incomplete personal data be corrected or updated. You may also update certain account information directly within your account settings.
• Right to erasure: you may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal retention obligations.
• Right to restriction of processing: you may request that m555 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: where processing is based on your consent or on a contract, you may request that m555 provide your personal data in a structured, machine-readable format.
• Right to object: you may object to processing based on m555's legitimate interests, including direct marketing. Where you object to direct marketing, processing for that purpose will cease immediately.
• Right to withdraw consent: where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our data protection team at [email protected] with the subject line "Data Rights Request". We may ask you to verify your identity before processing your request. m555 will respond to all valid requests within 30 days. In cases of complexity or multiple concurrent requests, this period may be extended by a further 30 days, of which you will be notified.

10 Children and Minors

m555 is strictly intended for use by adults aged 21 years and over. We do not knowingly collect or process personal data from individuals under the age of 21. If we discover that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you believe that m555 may have inadvertently collected data from a person under 21, please contact us immediately at [email protected] so that appropriate action can be taken.

11 Third-Party Links

The m555 Platform may contain references to third-party services, payment providers, and game studios. This Privacy Policy applies only to the m555 Platform itself. m555 has no control over the privacy practices of third-party websites or services and is not responsible for their content or data handling.

When you interact with a third-party payment provider such as bKash, Nagad, Rocket, or Upay, that interaction is governed by the privacy policy and terms of the respective provider. We encourage you to review the privacy notices of any third-party service you use in connection with your m555 account.

12 Updates to This Privacy Policy

m555 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will publish the revised policy on this page with an updated effective date. Where required, we will also notify registered users of significant changes via the email address associated with their account.

Your continued use of the m555 Platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with any changes, you must stop using the Platform and may close your account by contacting [email protected].

13 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data protection right, or want to raise a concern about the way m555 handles your personal data, please contact us using the details below. All communications must be in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: Data Rights Request
• Subject Line for Privacy Concerns: Privacy Complaint
• Support Hours: 24 hours a day, 7 days a week
• Response Language: English
• Target Response Time: Within 30 days for formal data rights requests; within 2 hours for general support queries

m555 takes all privacy complaints seriously and will acknowledge receipt of your complaint promptly. If you are not satisfied with our response, you may escalate your complaint through the dispute resolution process described in our Terms & Conditions.