tap555 Privacy Policy

1. Data Controller

tap555, operated at tap555.lat, is the data controller responsible for the personal data collected through this Platform. References to "tap555", "we", "us", or "our" throughout this Privacy Policy refer to the tap555 Platform and its operating entity. For all privacy-related enquiries, please contact us at [email protected].

2. Personal Data We Collect

tap555 collects personal data through several channels. The categories of data we collect are set out below:

2.1 Registration Data

When you create a tap555 account, we collect your full name, date of birth, email address, mobile phone number, and the password you choose. This data is necessary to establish and manage your account.

2.2 Identity Verification (KYC) Data

Before processing your first withdrawal, tap555 requires proof of identity and address. This typically involves a copy of your Bangladesh National Identity Card (N ID), passport, or birth certificate, along with a recent proof of address such as a utility bill or bank statement. KYC documents are stored securely and used solely for identity verification and compliance purposes.

2.3 Financial Data

When you make deposits or request withdrawals, tap555 collects transaction records including amounts, dates, payment methods used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and mobile wallet numbers or partial card details. Full card numbers and bKash PINs are never stored by tap555 — these are handled directly by our certified payment processor partners.

2.4 Gaming and Betting Activity

tap555 records your gaming history, including games played, bets placed, amounts wagered, game outcomes, and session durations. This data is used for account management, responsible gaming monitoring, dispute resolution, and platform improvement.

2.5 Technical and Device Data

When you access tap555, we automatically collect certain technical information: your IP address, device type and model, operating system, browser type and version, referring URL, pages visited, and timestamps. This data is used for security monitoring, fraud prevention, and analytics.

2.6 Communication Data

If you contact tap555 support by email, live chat, or any other channel, we retain a record of that correspondence, including the content of messages and any attachments. This allows us to track support history and resolve disputes effectively.

2.7 Marketing Preferences

Where you have consented to receive marketing communications, we record that consent along with the date, channel, and scope of your preference selections. This helps us ensure we only contact you in ways you have agreed to.

3. Legal Basis for Processing

tap555 processes your personal data on the following legal grounds:

• Contractual necessity: Processing your registration data, financial transactions, and gaming activity is necessary to perform our contract with you — that is, to provide you with access to the tap555 Platform and its services.
• Legal obligation: KYC identity verification and transaction record-keeping are required by applicable anti-money-laundering and financial crime prevention regulations. We are legally obligated to collect, retain, and in some circumstances disclose this data.
• Legitimate interests: Fraud prevention, platform security, abuse detection, and internal analytics are carried out under tap555's legitimate interest in maintaining a safe and fair gaming environment for all players.
• Consent: Marketing communications — including promotional emails, SMS alerts, and bonus notifications — are sent only where you have given explicit consent. You may withdraw this consent at any time.

4. How We Use Your Personal Data

tap555 uses the personal data described in Section 2 for the following purposes:

• Creating and managing your tap555 account, including login authentication and session management.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods.
• Verifying your identity and age (21+) in accordance with our KYC obligations before processing withdrawals.
• Detecting and preventing fraudulent activity, money laundering, collusion, and any other misuse of the Platform.
• Providing customer support and resolving disputes, complaints, or technical issues.
• Sending transactional communications, including deposit confirmations, withdrawal updates, and security alerts — these cannot be opted out of as they relate directly to your account.
• Sending promotional communications, bonus offers, and seasonal promotions (Eid, BPL cricket season, Pohela Boishakh) where you have given consent.
• Monitoring responsible gaming indicators and enforcing deposit limits, cooling-off periods, and self-exclusion requests.
• Improving the tap555 Platform through aggregated, anonymised usage analytics.
• Complying with lawful requests from competent authorities where legally required.

5. Sharing Your Personal Data

5.1 tap555 does not sell your personal data. We share your data only with carefully selected third parties who assist us in delivering Platform services, and only to the extent necessary for those purposes.

5.2 The categories of third parties with whom we may share your data include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners receive the minimum data necessary to process your transactions securely.
• Identity verification providers: Third-party KYC services may process your identity documents to confirm your age, identity, and address on our behalf.
• Game providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe receive session tokens and anonymised player identifiers to facilitate gameplay. They do not receive your full personal profile.
• IT and infrastructure providers: Cloud hosting, database management, and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory direction, tap555 may disclose personal data to law enforcement or government agencies.

5.3 All third-party service providers who process personal data on tap555's behalf are bound by contractual data protection obligations and are not permitted to use your data for their own independent purposes.

6. Data Retention

tap555 retains personal data only for as long as is necessary for the purposes described in this Privacy Policy or as required by applicable law. The general retention periods we apply are summarised below:

Where you request deletion of your account and personal data, tap555 will action your request within 30 days, subject to the mandatory retention periods above. Data that must be retained for legal reasons will be isolated and not used for any operational purpose during the retention period.

7. Cookies and Tracking Technologies

7.1 tap555 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and support analytics. A "cookie" is a small text file placed on your device when you visit tap555.lat.

7.2 The types of cookies tap555 uses include:

• Essential cookies: Required for the Platform to function. These include session cookies that keep you logged in while navigating the site. These cannot be disabled.
• Analytics cookies: Help us understand how players use tap555 — which pages are visited most, how long sessions last, and which games are most popular. Data is aggregated and anonymised.
• Preference cookies: Remember your settings, such as your preferred language or notification preferences, to provide a more personalised experience on return visits.
• Security cookies: Help detect and prevent fraudulent login attempts, account takeovers, and other suspicious activity.

7.3 You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will affect the functionality of the tap555 Platform and may prevent you from logging in or completing transactions.

8. Your Privacy Rights

As a tap555 player, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data tap555 holds about you. We will respond within 30 days of a verified request.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information directly in your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to mandatory legal retention obligations.
• Right to restriction: You may request that tap555 restrict processing of your personal data in certain circumstances — for example, while a dispute is being resolved.
• Right to data portability: You may request that tap555 provide your personal data in a structured, commonly used format so that you can transfer it to another service provider.
• Right to object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring, where you have grounds to do so.
• Right to withdraw consent: Where processing is based on your consent (such as marketing), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact tap555 at [email protected] with the subject line "Privacy Request". We will verify your identity before processing the request and aim to respond within 30 days.

9. Data Security Measures

tap555 takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your information against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption on all data transmitted between your device and the tap555 Platform.
• Hashed and salted password storage — tap555 staff cannot view your plain-text password.
• Two-factor authentication (2FA) via OTP, available to all players and strongly recommended.
• Role-based access controls limiting which internal staff can access personal data and under what circumstances.
• Regular security audits and penetration testing of the Platform infrastructure.
• Secure, encrypted storage of KYC documents with strict access logging.
• Automated anomaly detection to flag suspicious account activity in real time.

9.2 In the event of a personal data breach that poses a risk to your rights and freedoms, tap555 will notify affected individuals and relevant authorities within the timeframes required by applicable law. Notification will be sent to the email address registered on your account.

10. Children's Privacy and Age Restriction

tap555 is strictly for adults aged 21 and above. The Platform is not directed at, and does not knowingly collect personal data from, any individual under the age of 21. If we discover that personal data has been collected from a person under 21, we will delete that data immediately and permanently close the associated account.

If you believe a minor has registered on tap555, please notify us immediately at [email protected] so that we can investigate and take appropriate action without delay.

11. International Data Transfers

tap555 is operated for the Bangladesh market and stores the majority of player data on servers located in the Asia-Pacific region. In limited circumstances, data may be transferred to or processed by service providers located outside Bangladesh — for example, game providers headquartered in Europe or payment technology partners with global infrastructure.

Where personal data is transferred internationally, tap555 ensures that appropriate safeguards are in place, including contractual obligations on the receiving party that meet applicable data protection standards, to ensure your data receives a comparable level of protection to that provided under this Privacy Policy.

12. Third-Party Services

The tap555 Platform integrates third-party game providers whose software is delivered within the tap555 interface. While tap555 vets all Game Providers for security and fairness, we are not responsible for the privacy practices of third-party providers in respect of data they collect independently through their own software.

tap555 does not include external links to third-party websites. All navigation within the tap555 Platform remains within tap555.lat. If you are ever directed to an external site claiming to be affiliated with tap555, treat this with caution and contact [email protected] to verify its legitimacy.

13. Changes to This Privacy Policy

tap555 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Where changes are material, we will notify registered players by email to the address on file at least 7 days before the updated Policy takes effect.

The current version of this Privacy Policy is always available at tap555.lat/privacy-policy. The effective date at the top of this document reflects the date on which the current version came into force. Continued use of the tap555 Platform after the effective date of any update constitutes your acceptance of the revised Policy.

14. Contact and Complaints

For all privacy-related queries, data access requests, or complaints, please contact the tap555 Privacy team at [email protected] with the subject line "Privacy Request". We aim to acknowledge all privacy enquiries within 48 hours and resolve them within 30 days.

If you are not satisfied with tap555's response to your privacy complaint, you may escalate the matter in accordance with applicable laws in your jurisdiction. tap555 is committed to working constructively to resolve all privacy concerns in good faith.