top555 Privacy Policy — How We Handle Your Personal Data

Who We Are

top555 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://top555.win (the "Platform"). top555 is the data controller responsible for personal data collected through the Platform. We are committed to handling all personal information with transparency, care, and in accordance with internationally recognised data protection standards.

This Privacy Policy applies to all users of the top555 Platform, including registered account holders, visitors who browse without registering, and any individual who contacts top555 through any communication channel. By using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

Data We Collect

top555 collects personal data through several channels: directly from you when you register an account or contact support, automatically through your use of the Platform, and occasionally from third-party service providers as part of our verification and fraud-prevention obligations. The categories of data we collect include:

top555 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or medical information. If any such data is incidentally disclosed during a support interaction, it will not be processed for any purpose beyond resolving the immediate matter and will be deleted promptly.

How We Use Your Data

top555 processes personal data only for clearly defined, legitimate purposes. We do not sell your personal data to third parties. The primary purposes for which your data is used are described below:

• Account Creation & Management: To register your account, verify your identity, maintain your profile, and process login requests securely.
• Payment Processing: To facilitate deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or linked bank account) and to maintain accurate financial records.
• KYC & Regulatory Compliance: To verify your age (18+), confirm your identity, and satisfy anti-money laundering (AML) and Know Your Customer (KYC) obligations under applicable gaming and financial regulations.
• Fraud Prevention & Security: To detect and investigate suspicious activity, protect against unauthorised account access, prevent multi-accounting, and safeguard the integrity of games and betting markets.
• Customer Support: To respond to enquiries, complaints, and responsible gaming requests, and to keep records of communications for quality assurance and dispute resolution.
• Personalisation & Platform Improvement: To analyse usage patterns and tailor your experience on the Platform, including recommending relevant games or promotions based on your activity history.
• Marketing Communications: To send promotional emails, SMS notifications, or in-Platform messages about bonuses, new games, and seasonal offers — only where you have provided consent or where permitted by law. You may opt out at any time.
• Responsible Gaming Monitoring: To identify signs of problem gambling behaviour using your gameplay and deposit data, and to trigger welfare interventions such as reality-check prompts or account limit reviews.
• Legal Obligations: To comply with court orders, regulatory investigations, or lawful requests from competent authorities.

Legal Basis for Processing

top555 processes your personal data under one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accept at registration — including account management, payment processing, and gameplay.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing necessary for top555's legitimate business interests — such as fraud prevention, security monitoring, responsible gaming oversight, and analytics — provided those interests are not overridden by your own rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

top555 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. However, we may share your data with carefully selected third parties in the following circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive only the data necessary to process your transactions. These providers are contractually bound to process data solely for payment purposes.
• Identity Verification Providers: Third-party KYC and AML service providers may receive identity documents and biometric data to perform verification checks. All such providers are subject to strict data processing agreements.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a limited set of anonymised technical data (e.g., session token, game round ID) necessary to deliver game content. These providers do not receive your full identity or financial data.
• IT & Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers may process technical data as part of Platform operations, under contractual data protection obligations.
• Regulatory Authorities & Law Enforcement: top555 may disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required by law, court order, or regulatory mandate. We will notify affected users where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of top555's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights under this Policy will continue to apply.

All third parties with whom top555 shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the purposes specified in their agreements with top555.

Cookies & Tracking Technologies

top555 uses cookies and similar tracking technologies (web beacons, pixel tags, local storage objects) on the Platform. Cookies are small text files placed on your device that help us recognise returning visitors, maintain session security, and gather analytics data about Platform usage.

The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function — including login session management, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how users navigate the Platform — which pages are visited most, where users drop off, and how long sessions last. This data helps us improve the Platform experience.
• Functional Cookies: Remember your preferences such as language settings, display options, and game history to provide a more personalised experience on return visits.
• Marketing & Targeting Cookies: Used to deliver relevant promotional content within the Platform and, where consent has been given, to support retargeting activities. These are only activated with your explicit consent.

You may manage or withdraw consent for non-essential cookies through your browser settings. Disabling certain cookies may limit some Platform features but will not prevent you from accessing the core gaming and betting services.

Data Retention

top555 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active Account Data: Retained for the lifetime of the account plus a minimum of five years following permanent account closure, in order to satisfy AML record-keeping obligations.
• Transaction Records: Financial transaction data is retained for a minimum of seven years from the date of the transaction, in compliance with standard financial record-keeping requirements.
• KYC Documents: Identity and address verification documents are retained for five years following account closure or the date of the last transaction, whichever is later.
• Support Communications: Customer support records are retained for three years from the date of the last interaction, unless a longer period is required for an ongoing dispute or regulatory matter.
• Marketing Consent Records: Records of consent and opt-out preferences are retained for the duration of the relationship plus three years, to demonstrate compliance with consent obligations.
• Technical & Usage Logs: Server logs and session data are typically retained for 90 days, after which they are anonymised or deleted.

When personal data is no longer required, top555 securely deletes or anonymises it using industry-standard data destruction methods. Anonymised data that cannot be re-linked to any individual may be retained indefinitely for statistical and analytical purposes.

Data Security

top555 implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal information against unauthorised access, disclosure, alteration, loss, or destruction.

• Encryption in Transit: All data transmitted between your device and top555 servers is encrypted using TLS 1.2 or higher (HTTPS). This prevents interception of data in transit, including login credentials, payment details, and KYC documents.
• Encryption at Rest: Sensitive personal data stored in our databases — including identity information, payment method details, and KYC documents — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Internal access to personal data is strictly limited to authorised top555 personnel and service providers who require it for legitimate operational purposes. Role-based access controls and multi-factor authentication are applied to all internal systems.
• Penetration Testing & Audits: top555 conducts regular security audits and penetration tests to identify and remediate vulnerabilities in Platform infrastructure and application code.
• Incident Response: top555 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to affected individuals, top555 will notify the relevant supervisory authority and, where required, affected players within legally mandated timeframes.

International Data Transfers

top555 operates internationally and may transfer your personal data to servers or service providers located outside of Bangladesh. This may include transfers to countries that do not have data protection laws equivalent to those in your home jurisdiction.

Where such transfers occur, top555 ensures that adequate safeguards are in place to protect your data, including contractual clauses requiring receiving parties to apply data protection standards consistent with this Privacy Policy, and by selecting service providers that hold internationally recognised security certifications.

By using the top555 Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Bangladesh as described in this section. If you have concerns about international data transfers, please contact us at [email protected].

Your Rights Over Your Personal Data

top555 respects your rights over your personal information. Depending on your location and applicable law, you may be entitled to exercise some or all of the following rights:

• Right of Access: You may request a copy of the personal data top555 holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that top555 restricts its processing of your personal data in certain circumstances — for example, while the accuracy of data is contested.
• Right to Data Portability: You may request a structured, commonly used, machine-readable copy of personal data you have provided to top555, to transfer to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. top555 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Rights Request". top555 will respond within 30 calendar days. We may require identity verification before processing a rights request to prevent unauthorised access to your data.

Children's Privacy

The top555 Platform is strictly intended for individuals aged 18 years and above. top555 does not knowingly collect, solicit, or process personal data from individuals under the age of 18. Age verification is a mandatory step in the account registration process, and top555 employs KYC controls to detect and remove underage accounts.

If you are a parent or guardian and believe that a minor in your care has provided personal data to top555 or has opened an account, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action, including account closure and deletion of any data collected from the underage individual, in accordance with our legal obligations.

Third-Party Links

The top555 Platform may contain references to or integrations with third-party services — such as game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) and payment processors (bKash, Nagad, Rocket, Visa, Mastercard). While top555 selects these partners carefully, we are not responsible for the privacy practices or content of third-party services once you leave the top555 Platform environment.

We encourage you to review the privacy policies of any third-party service provider whose services you use in connection with your top555 account. This Privacy Policy applies solely to data processed by top555 as the data controller.

Amendments to This Policy

top555 reserves the right to update or revise this Privacy Policy at any time to reflect changes in legal requirements, business practices, or Platform functionality. Where changes are material, top555 will provide advance notice via email to your registered address and/or via a prominent notice on the Platform.

The effective date of the current version of this Policy is clearly stated at the top of this document. We encourage you to review this Policy periodically. Your continued use of the top555 Platform following any update constitutes acceptance of the revised Policy. If you do not agree with any material amendment, you should discontinue use of the Platform and may request account closure in accordance with the process described in our Terms & Conditions.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or top555's handling of your personal data, please contact us in writing. All data protection enquiries should include your full registered name and account username (if applicable) to allow us to locate and identify your records accurately.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Privacy Policy Enquiry" or "Data Subject Rights Request"
• Response Time: top555 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 calendar days (Bangladesh Standard Time, UTC+6).

For urgent matters — such as suspected data breaches affecting your account — please mark your email subject line with "URGENT – Data Security" to ensure immediate escalation to our security team.