heh555 Privacy Policy

1 Who We Are

heh555 (referred to in this policy as "heh555", "we", "us", or "our") operates the online casino and sports betting platform accessible at heh555.club. heh555 is the data controller responsible for the personal data you provide when you register an account, make a deposit, place a bet, or otherwise interact with our platform.

Our platform is designed specifically for the Bangladesh market, offering instant payment processing via bKash, Nagad, Rocket, and Upay. All transactions are conducted in Bangladeshi Taka (BDT). Our support team is available 24 hours a day, 7 days a week, to assist with any queries, including those related to this Privacy Policy.

For all data-related enquiries, our designated contact is: [email protected]

2 Categories of Personal Data We Collect

heh555 collects the following categories of personal data from Players and platform visitors. The specific data points collected depend on how you interact with our platform:

3 How We Collect Personal Data

heh555 collects personal data through the following channels:

• Direct submission by you: When you complete the account registration form, submit KYC documents, make a payment, contact our support team, or participate in a promotional campaign.
• Automatic collection: When you visit heh555.club, our servers and analytics tools automatically record Technical Data (IP address, browser type, device information, pages visited, session duration). This data is collected through cookies and similar tracking technologies — see Section 7 for details.
• Third-party payment providers: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay, those payment providers transmit transaction confirmation data to our platform. We do not receive your full mobile banking credentials — only transaction references and confirmation statuses.
• Identity verification services: In certain circumstances, heh555 may use third-party KYC verification services to cross-reference the identity documents you submit. These services return a verification status and do not transmit raw document images to third parties outside of the verification process.
• Fraud prevention tools: Our platform uses automated systems to monitor account activity for signs of fraudulent behaviour. These systems generate risk scores based on behavioral patterns and do not involve manual profiling of individual Players except where a flag is raised for human review.

4 Purposes of Data Processing

heh555 processes your personal data for the following clearly defined purposes:

• Account creation and management: To register your account, maintain your profile, process login authentication, and manage your account preferences and settings.
• Identity and age verification (KYC): To verify that you are who you say you are and that you meet the minimum age requirement of 18 years before permitting deposits, withdrawals, and access to the full game library.
• Payment processing: To process deposits made via bKash, Nagad, Rocket, or Upay and to execute withdrawal requests to your registered payment account. Financial data is used solely for transaction processing and fraud prevention.
• Service delivery: To allow you to access and play our casino games, place sports bets on cricket and other markets, claim bonuses, and use all platform features as a registered Player.
• Customer support: To respond to your enquiries, process complaints, and maintain records of our communications for quality assurance and dispute resolution purposes.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, underage gambling, multi-account abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming compliance: To administer and honour self-exclusion requests, deposit limits, session reminders, and other responsible gaming tools selected by you.
• Legal and regulatory compliance: To comply with applicable laws, respond to lawful requests from governmental or regulatory authorities, and maintain records as required by law.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, usability, and game selection of our platform. This analysis does not involve identifiable personal data.
• Communications: To send you service-related notifications such as deposit confirmations, withdrawal updates, and security alerts. Marketing communications are sent only where you have provided consent.

5 Legal Basis for Processing

heh555 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and heh555 — for example, account creation, payment processing, and game delivery.
• Legal obligation: Processing that is required to comply with applicable laws — for example, KYC/AML obligations, responding to regulatory enquiries, and maintaining financial records.
• Legitimate interests: Processing that is necessary for heh555's legitimate business interests where those interests are not overridden by your rights — for example, fraud detection, platform security, and anonymised analytics.
• Consent: Processing that is based on your freely given, specific, informed consent — for example, optional marketing communications. You may withdraw consent at any time by contacting our support team without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing with Third Parties

heh555 does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and DBBL receive the minimum data necessary to process your transactions. These providers operate under their own privacy policies and are independently regulated.
• KYC and identity verification providers: Third-party verification services receive identity document data solely for the purpose of age and identity verification. They are contractually prohibited from using this data for any other purpose.
• Game software providers: Our casino game providers (including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and others) may receive your Player ID and session token to facilitate gameplay. They do not receive your full identity or financial data.
• Technology infrastructure providers: Hosting, cloud infrastructure, and cybersecurity service providers process technical data on our behalf. All such providers are bound by data processing agreements that restrict their use of your data to the services they provide to heh555.
• Legal and regulatory authorities: Where required by applicable law or a lawful request from a governmental authority, heh555 will disclose personal data to the relevant authority. We will notify affected Players of such disclosures to the extent permitted by law.
• Fraud prevention networks: In cases where fraudulent activity is confirmed, heh555 may share relevant account data with industry fraud prevention bodies to protect the broader online gambling ecosystem.

All third-party data processors engaged by heh555 are subject to contractual data processing agreements that require them to process data only on our documented instructions, maintain appropriate security standards, and not transfer data to further third parties without our prior consent.

7 Cookies & Tracking Technologies

heh555 uses cookies and similar technologies (such as web beacons and pixel tags) on our platform. Cookies are small text files placed on your device that help us deliver a better user experience and gather usage analytics. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the platform to function. These cookies enable you to log in, maintain your session, and complete transactions. They cannot be disabled without impairing platform functionality.
• Performance cookies: Collect anonymised data about how Players navigate the platform — which pages are visited most, how long sessions last, and which games are most popular. This data is used in aggregate form only to improve platform performance.
• Functionality cookies: Remember your preferences such as language settings, preferred payment method, and display preferences so that you do not need to re-enter them on each visit.
• Security cookies: Assist with fraud detection and account security by monitoring for unusual login patterns or suspicious session behaviour.

You may adjust your cookie preferences via your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your heh555 account. Disabling other cookie categories may reduce the quality of your experience but will not prevent basic platform access.

8 Data Retention

heh555 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of 5 years following account closure, to meet legal and regulatory record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, in compliance with anti-money-laundering regulations.
• Transaction records: Financial transaction data is retained for a minimum of 5 years from the transaction date to comply with applicable financial record-keeping laws.
• Support communications: Customer support records are retained for 3 years from the date of the last interaction, unless the matter relates to an ongoing dispute or legal proceeding, in which case retention continues until the matter is resolved.
• Technical and analytics data: Anonymised analytics data may be retained indefinitely in aggregate form. Raw Technical Data (including IP logs) is retained for 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. You may request earlier deletion of your personal data by contacting our support team; however, we may be required to retain certain data for legal compliance reasons even following a deletion request.

9 Data Security

heh555 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes the following measures:

• SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS protocols. Our platform is served exclusively over HTTPS.
• Encryption at rest: Personal data stored in our databases is encrypted using AES-256 encryption. Decryption keys are held separately from the encrypted data and are accessible only to authorised systems.
• Access controls: Access to personal data is restricted to heh555 staff members and authorised third-party processors who have a genuine need to access that data to perform their duties. Access privileges are reviewed regularly and revoked promptly upon role change or departure.
• Intrusion detection: Our infrastructure is monitored around the clock using automated intrusion detection systems. Any anomalous access attempts trigger immediate alerts and investigation.
• Penetration testing: Our platform undergoes regular security testing by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, heh555 will notify affected Players as promptly as practicable and take immediate steps to contain the breach and mitigate harm.

While heh555 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. Players are advised to use a strong, unique password for their heh555 account and to contact our support team immediately if they suspect unauthorised access to their account.

10 Your Data Rights

As a Player on the heh555 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond within 30 days of receiving a verifiable request.

• Right of access: You have the right to request a copy of the personal data heh555 holds about you. We will provide this in a clear, structured format free of charge.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data. We will honour this request where there is no legal obligation requiring us to retain the data. Where retention is legally required, we will inform you of the specific reason and the applicable retention period.
• Right to restriction of processing: In certain circumstances, you may request that we restrict our processing of your data — for example, while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of heh555's legitimate interests. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

11 Children & Minors

heh555 is strictly an adult platform. We do not knowingly collect, process, or store personal data from individuals under the age of 18. Our account registration process includes mandatory age verification steps, and KYC procedures are in place to confirm that all Players meet the minimum age requirement before accessing real-money gaming services.

If heh555 becomes aware that personal data has been collected from a person under the age of 18, that Account will be immediately suspended, any associated funds will be reviewed in accordance with our Terms & Conditions, and all personal data associated with the Account will be deleted as promptly as practicable.

If you are a parent or guardian and believe that a minor has registered an Account on heh555, please contact our support team at [email protected] immediately so that we can take appropriate action.

12 Changes to This Privacy Policy

heh555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, we will:

• Update the effective date at the top of this document.
• Display a prominent notice on the platform informing Players that the Privacy Policy has been updated.
• Where practicable and where the change is particularly significant, notify Players directly via the contact details registered on their Account.

Your continued use of the heh555 platform following the publication of a revised Privacy Policy constitutes your acceptance of those changes. If you do not agree with any updated version of this policy, you must cease using the platform and contact our support team to arrange Account closure.

We recommend that you review this Privacy Policy periodically to stay informed about how heh555 protects your personal data. The current version is always available at heh555.club/privacy-policy.

13 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which heh555 processes your personal data, please contact our support team using the details below:

• Email: [email protected]
• Support hours: 24 hours a day, 7 days a week, 365 days a year
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and provide a full response within 30 days.

We take privacy complaints seriously and will work with you in good faith to resolve any concern promptly. If you are not satisfied with our response, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.