hee55 Privacy Policy

1. Introduction

1.1 hee55 ("we", "us", "our") is committed to safeguarding the privacy of all individuals who register an account or interact with the hee55 platform. This Privacy Policy describes our practices regarding the collection, use, storage, and disclosure of personal data in connection with the hee55 sports betting and online casino platform accessible at hee55.io.

1.2 hee55 operates primarily for players based in Bangladesh. All data practices described in this policy apply to registered players regardless of location, subject to any overriding legal requirements applicable in the player's jurisdiction.

1.3 This policy should be read alongside the hee55 Terms & Conditions, which govern the overall relationship between hee55 and registered players. In the event of a conflict between this Privacy Policy and the Terms & Conditions on a data-related matter, this Privacy Policy takes precedence.

2. Data Controller

2.1 For the purposes of this Privacy Policy, hee55 acts as the data controller — the entity that determines the purposes and means of processing personal data collected through the hee55 platform.

2.2 All data-related enquiries, access requests, correction requests, and deletion requests should be directed to the hee55 Data Protection contact at: [email protected]

2.3 hee55 may appoint third-party data processors who act on our behalf and under our instruction. A list of current categories of data processors is provided in Section 7 of this policy.

3. Data We Collect

3.1 hee55 collects the following categories of personal data from registered players and platform visitors:

Data Category	Specific Data Points	Collection Stage
Identity Data	Full name, date of birth, government-issued ID number, nationality	Registration / KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration
Financial Data	bKash / Nagad / Rocket / Upay account numbers, Visa/Mastercard last four digits, transaction history	Deposit / Withdrawal
Account Data	Username, encrypted password hash, account preferences, responsible gaming settings	Registration / Account use
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Platform access
Usage Data	Pages visited, games played, bets placed, bet amounts, win/loss records, session duration	Platform use
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Customer support interactions
Verification Documents	Scanned copies of national ID, passport, driving licence, utility bills (proof of address)	KYC verification

3.2 hee55 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond facial comparison for identity verification where required), or health data, unless specifically required by law or explicitly provided by the player for responsible gaming self-assessment purposes.

4. How We Collect Data

4.1 Directly from you. The majority of personal data hee55 holds is provided directly by you during registration, KYC verification, deposit and withdrawal transactions, customer support interactions, and when updating your account settings.

4.2 Automatically through platform use. When you access the hee55 platform, our systems automatically collect Technical Data and Usage Data as described in Section 3. This collection is necessary for platform security, fraud prevention, and service quality monitoring.

4.3 From payment service providers. When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, hee55 may receive transaction confirmation data from the relevant payment provider. hee55 does not receive your full payment credentials — only the data necessary to confirm and reconcile the transaction.

4.4 From identity verification partners. Where hee55 uses a third-party KYC or identity verification service to validate documents submitted by players, that service may share verification outcome data with hee55. The underlying document data is processed by the verification partner subject to their own privacy policy.

4.5 Cookies and tracking technologies. hee55 uses cookies and similar technologies on the platform website. Full details are provided in Section 10 of this policy.

5. How We Use Your Data

5.1 hee55 uses personal data for the following purposes:

• Account creation and management: Processing your registration, maintaining your account, and enabling you to access all platform features.
• Identity and age verification (KYC): Confirming that you meet the minimum age requirement of 21 years and verifying your identity in accordance with our anti-money-laundering obligations.
• Transaction processing: Executing deposits and withdrawals via your chosen payment method, reconciling transaction records, and detecting fraudulent or suspicious payment activity.
• Platform security and fraud prevention: Monitoring login patterns, detecting account sharing, identifying automated bot activity, and investigating suspicious betting behaviour.
• Responsible gaming compliance: Monitoring usage patterns to identify potential problem gambling indicators and applying responsible gaming tools (deposit limits, self-exclusion) where appropriate or requested.
• Customer support: Responding to your enquiries, resolving complaints, and maintaining records of support interactions for quality assurance purposes.
• Marketing communications: Sending you promotional offers, new game notifications, and platform updates — only where you have opted in to receive such communications. You may opt out at any time.
• Legal and regulatory compliance: Retaining records as required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and defending legal claims.
• Service improvement: Analysing aggregated, anonymised usage data to improve platform performance, user experience, and product offerings.

5.2 hee55 does not use personal data to make solely automated decisions that produce legal or similarly significant effects on players without providing a mechanism for human review.

6. Legal Basis for Processing

6.1 hee55 processes personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the contract between hee55 and the player — including account creation, transaction processing, and customer support — is carried out on the basis that it is necessary for the performance of that contract.
• Legal obligation: Processing required to comply with applicable laws — including anti-money-laundering regulations, age verification requirements, and responses to lawful regulatory enquiries — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security monitoring, and service improvement is carried out on the basis of hee55's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and optional analytics is carried out on the basis of your explicit consent. You may withdraw consent at any time by contacting [email protected] or updating your account notification preferences.

7. Sharing Your Data

7.1 hee55 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Data sharing is limited to the following categories of recipients, each bound by confidentiality obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard network processors receive transaction data necessary to execute deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks.
• Identity verification providers: Third-party KYC service providers receive identity documents and associated data solely to perform age and identity verification checks on hee55's behalf.
• IT infrastructure providers: Cloud hosting, database management, and cybersecurity service providers who process data as data processors acting under hee55's instruction and subject to data processing agreements.
• Customer support platforms: Live chat and ticketing system providers who process support correspondence data on hee55's behalf.
• Legal and regulatory authorities: hee55 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law or valid legal process.
• Anti-fraud and AML networks: Where hee55 is required or permitted to share data with industry fraud prevention or anti-money-laundering databases to prevent financial crime.

7.2 All third-party data processors engaged by hee55 are required to implement appropriate technical and organisational security measures and to process personal data solely in accordance with hee55's documented instructions.

8. Data Retention

8.1 hee55 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• KYC documents: Retained for a minimum of 5 years following the completion of the relevant verification check or account closure, whichever is later.
• Customer support records: Retained for 3 years from the date of the interaction, unless the interaction relates to an unresolved dispute or legal claim.
• Technical and usage logs: Retained for 13 months from collection for security and fraud analysis purposes, then deleted or anonymised.
• Marketing consent records: Retained for the duration of the account relationship and for 3 years following opt-out, to demonstrate compliance with consent requirements.

8.2 At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for analytical purposes.

9. Security Measures

9.1 hee55 implements a layered set of technical and organisational security controls to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the hee55 platform.
• AES-256 encryption for personal data stored in hee55 databases.
• Role-based access controls ensuring that hee55 staff can only access personal data necessary for their specific job function.
• Multi-factor authentication required for all hee55 staff accessing systems containing personal data.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security specialists.
• Intrusion detection and anomaly monitoring systems operating continuously.
• Formal data breach response procedures, including player notification protocols where a breach poses a risk to individual rights.

9.2 While hee55 employs industry-standard security practices, no system can guarantee absolute security. Players are advised to use strong, unique passwords for their hee55 account and to enable two-step verification (OTP) to add an additional layer of protection.

9.3 If you suspect that your hee55 account has been compromised, contact [email protected] immediately. hee55 will suspend the account pending investigation upon receipt of a credible security report.

10. Cookies and Tracking

10.1 hee55 uses cookies and similar tracking technologies (including local storage and session identifiers) to operate and improve the platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for core platform functionality, including maintaining your login session, storing your language and currency preferences, and enabling secure transactions. These cookies cannot be disabled without affecting platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how players navigate the platform — including pages visited, time on site, and error reports — to help hee55 improve the user experience. These are only placed with your consent.
• Fraud prevention cookies: Used to identify and flag suspicious device behaviour, repeated failed login attempts, and automated access patterns that may indicate fraud or abuse.

10.2 hee55 does not use advertising or cross-site tracking cookies. No personal data collected via hee55 cookies is shared with third-party advertising networks.

10.3 You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the hee55 platform effectively.

11. Your Rights

11.1 As a data subject, you hold the following rights in relation to the personal data hee55 holds about you. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request".

11.2 hee55 will respond to all verified data rights requests within 30 calendar days of receipt. Where a request is complex or voluminous, hee55 may extend this period by a further 60 days and will notify you of the extension within the initial 30-day window.

11.3 hee55 will not charge a fee for processing data rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.

12. Minors

12.1 The hee55 platform is strictly for persons aged 21 years and above. hee55 does not knowingly collect personal data from individuals under the age of 21.

12.2 Where hee55 discovers or has reasonable grounds to believe that personal data has been collected from a person under 21, that account will be closed immediately, all data will be deleted to the extent permitted by law, and any deposits will be returned.

12.3 If you are a parent or guardian and believe your child has registered an account on hee55, please contact [email protected] immediately with details of the account. hee55 will investigate and act promptly.

13. International Data Transfers

13.1 hee55 operates as an offshore platform. Personal data collected from players based in Bangladesh may be transferred to, stored on, or processed by systems located in other countries in connection with the IT infrastructure, payment processing, and KYC services described in Section 7.

13.2 Where personal data is transferred internationally, hee55 ensures that appropriate safeguards are in place — such as standard contractual clauses or adequacy decisions — to protect the data to a standard equivalent to that applied within the hee55 platform.

13.3 By registering an account and using the hee55 platform, players consent to the international transfers described in this section.

14. Changes to This Policy

14.1 hee55 reserves the right to update this Privacy Policy at any time. Where changes are material — for example, a new category of data being collected or a new purpose for processing — registered players will be notified via their registered email address at least 14 days before the change takes effect.

14.2 The "Last updated" date at the top of this page reflects the date of the most recent revision. Players are encouraged to review this policy periodically.

14.3 Continued use of the hee55 platform following notification of a material update constitutes acceptance of the revised Privacy Policy. If you do not accept the revised policy, you should close your account before the effective date of the change.

15. Contact Us

15.1 For any questions, concerns, or requests relating to this Privacy Policy or the personal data hee55 holds about you, please contact the hee55 Data Protection team:

• Email: [email protected] — Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
• Response time: hee55 aims to acknowledge all privacy-related enquiries within 2 business hours (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 calendar days.

15.2 If you are dissatisfied with hee55's handling of a privacy concern after raising it directly with us, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.