Privacy Policy
ch555 Online Casino

When you create a ch555 account and use our platform, we collect personal information in the following categories. We have organised these categories to make it as clear as possible exactly what data ch555 holds about you and where it comes from.

ch555 does not knowingly collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity document photographs are provided for age and identity verification — in which case such images are handled with heightened security and deleted after verification is complete.

ch555 uses the personal data we collect for specific, legitimate purposes only. We do not use your data for any purpose that is incompatible with the purposes listed below. Each purpose is tied to a clear operational or legal necessity.

• Account creation and management: To register your account, verify your identity, maintain your account settings, and process your login sessions securely across your devices.
• Payment processing: To process deposits via bKash, Nagad, Rocket, Upay, and bank transfer, and to process withdrawal requests back to your verified payment method. Financial data is used solely for transaction processing and fraud prevention — never for marketing.
• Identity and age verification (KYC): To verify that you are who you claim to be and that you are at least 18 years of age, in compliance with our anti-money-laundering and responsible gaming obligations. KYC data is handled with the highest level of security and access control.
• Platform operation and service delivery: To deliver the games, sportsbook markets, live casino tables, and promotional offers that make up the ch555 platform. This includes personalising your game lobby based on your play history where you have consented to personalisation.
• Fraud prevention and security: To detect and prevent fraudulent account activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions. Automated fraud detection systems process Technical Data and Gaming Activity Data continuously for this purpose.
• Responsible gaming compliance: To monitor gaming behaviour for signs of problem gambling and to enforce any responsible gaming limits, time-out periods, or self-exclusion orders that you or our responsible gaming team have applied to your account.
• Customer support: To respond to your support queries, complaints, and account requests, and to maintain records of communications for quality assurance and dispute resolution purposes.
• Marketing communications (with your consent): To send you promotional emails and SMS messages about ch555 bonuses, tournaments, seasonal offers (such as Eid and Pohela Boishakh promotions), and new game launches — only where you have opted in to receive marketing communications. You may withdraw this consent at any time.
• Platform improvement and analytics: To analyse aggregated, anonymised usage data to understand how players navigate ch555.app, identify technical issues, and improve the platform's performance and user experience.
• Legal compliance: To comply with applicable laws and regulations, respond to lawful requests from financial intelligence or law enforcement authorities, and enforce our Terms & Conditions.

ch555 processes your personal data under the following legal bases, depending on the specific purpose of processing:

• Contract performance: Processing your account data, payment data, and gaming activity data is necessary to perform the contract between you and ch555 — i.e., to provide you with the platform services you signed up for. Without this processing, ch555 cannot deliver its core services to you.
• Legal obligation: Identity verification, age verification, and anti-money-laundering checks are required by law. ch555 processes KYC and transaction data to fulfil these legal obligations. ch555 cannot waive these obligations on a player's request.
• Legitimate interests: Fraud prevention, platform security, abuse detection, and anonymised analytics are processed on the basis of ch555's legitimate interest in maintaining a safe, fair, and functional platform for all players. ch555 has assessed that these interests do not override players' fundamental privacy rights.
• Consent: Marketing communications (promotional emails and SMS) are sent only on the basis of your explicit, freely given consent. You may withdraw this consent at any time by updating your communication preferences in Account Settings, or by contacting ch555 support. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

ch555 does not sell, rent, or trade your personal data to any third party. We share your data only in the specific, limited circumstances described below, and only with parties who are contractually obligated to handle your data securely and in accordance with this Privacy Policy.

• Payment processors and mobile wallet providers: When you make a deposit or withdrawal, transaction data (including your mobile wallet number or bank account details and the transaction amount) is shared with the relevant payment processor — bKash, Nagad, Rocket, Upay, or your bank — solely to complete the transaction. These providers have their own privacy policies governing their handling of transaction data.
• Identity verification service providers: During KYC verification, your identity document images and personal details may be processed by a third-party identity verification provider. These providers are contractually bound to use your data exclusively for verification purposes and to delete it after the verification process is complete.
• Game providers: When you play a game supplied by a third-party studio (such as Pragmatic Play, Evolution Gaming, or Spribe), certain technical and session data is shared with that provider to operate the game. Game providers do not receive your full personal profile — only the data necessary to run the game session.
• Fraud prevention and security partners: Aggregated, pseudonymised technical data may be shared with specialist fraud prevention service providers to identify and block fraudulent activity. These providers do not receive your full identity profile.
• Legal and regulatory authorities: ch555 will disclose personal data to law enforcement, financial intelligence units, or other competent authorities when required to do so by a lawful order, court ruling, or regulatory requirement. ch555 will notify affected players of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of ch555's business, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any resulting change to this Privacy Policy before the transfer takes effect.

ch555.app uses cookies and similar tracking technologies to operate the platform correctly, remember your preferences, maintain your login session, and gather anonymised analytics data. The following categories of cookies are used on ch555.app:

ch555 does not use advertising or tracking cookies that share your behaviour data with third-party advertising networks. The analytics data collected via analytics cookies is aggregated and anonymised before analysis — it cannot be used to identify you individually.

You can manage or delete cookies at any time through your browser settings. Most modern browsers allow you to block specific categories of cookies, delete all cookies on exit, or browse in private/incognito mode. Please note that disabling strictly necessary cookies will prevent ch555.app from functioning correctly — you will not be able to log in or play games without these cookies active.

ch555 retains your personal data for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: While your ch555 account is active, all account, identity, contact, financial, and gaming activity data is retained in full to support account operation, payment processing, and compliance obligations.
• Post-closure account data: After your account is closed — whether voluntarily or by ch555 — your identity, contact, and financial transaction data is retained for a minimum of 5 years from the date of closure. This retention is required to comply with anti-money-laundering regulations, respond to regulatory enquiries, and resolve any outstanding disputes.
• KYC verification documents: Identity document images and verification records are retained for 5 years from the date of verification, or 5 years from account closure, whichever is later. After this period, document images are securely deleted.
• Support communications: Customer support chat transcripts and email correspondence are retained for 3 years from the date of the communication to support quality assurance, dispute resolution, and training purposes.
• Technical and usage logs: Server logs, IP address records, and session data are retained for up to 12 months for security and fraud investigation purposes, after which they are either deleted or fully anonymised.
• Marketing consent records: Records of your marketing consent (including the date and method of opt-in and any subsequent opt-out) are retained for the lifetime of your account plus 3 years, to demonstrate compliance with applicable marketing regulations.

Where retention is based solely on consent (e.g., marketing data), you may request earlier deletion by withdrawing your consent and submitting a data deletion request as described in Section 7 below. Where retention is required by law (e.g., AML records), ch555 cannot delete data before the legally mandated retention period expires, even at your request.

ch555 respects your rights over your own personal data. You may exercise any of the following rights at any time by contacting the ch555 Data Privacy team at the email address displayed in the footer of this page. ch555 will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, ch555 may extend this period by an additional 30 days, with prior notification.

• Right of access: You have the right to request a copy of all personal data that ch555 holds about you, along with information about how it is used, where it came from, and with whom it has been shared. ch555 will provide this information in a clear, readable format.
• Right to rectification: If any personal data that ch555 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented. For minor corrections (such as updating your contact email), you may also make changes directly in your Account Settings.
• Right to erasure (right to be forgotten): You may request that ch555 delete your personal data. ch555 will honour such requests where retention is not required by law or legitimate business necessity. Note that data retained to comply with AML regulations or to resolve active disputes cannot be deleted until the relevant retention period expires.
• Right to restriction of processing: You may request that ch555 restrict the processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data, or if you object to processing but do not want deletion. During a restriction period, your data will be stored but not actively used.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to ch555 in a structured, commonly used, machine-readable format (e.g., CSV or JSON), and to transmit that data to another service provider, where technically feasible.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing carried out on the basis of ch555's legitimate interests, on grounds relating to your particular situation. ch555 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

ch555 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following controls:

• TLS/SSL encryption in transit: All data transmitted between your browser and ch555.app is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed continuously. The padlock icon in your browser address bar confirms an active encrypted connection.
• Encryption at rest: Sensitive personal data — including identity documents, financial records, and hashed credentials — is encrypted at rest using AES-256 encryption on ch555's storage infrastructure.
• Access controls: Access to systems containing personal data is restricted to authorised ch555 personnel on a role-based, need-to-know basis. All internal access is logged and reviewed. Multi-factor authentication is required for all administrative access to production systems.
• Password hashing: ch555 never stores account passwords in plain text. Passwords are stored as salted cryptographic hashes using a modern, computationally expensive hashing algorithm. Even in the unlikely event of a database breach, stored password hashes cannot be reversed to reveal original passwords.
• Penetration testing and vulnerability management: ch555 conducts periodic security assessments of its platform infrastructure. Identified vulnerabilities are triaged and remediated according to their severity on a defined schedule.
• Data breach response: ch555 maintains a documented data breach response plan. In the event of a confirmed data breach that poses a risk to your personal data, ch555 will notify affected players promptly with details of what data was affected, what steps ch555 has taken, and what you should do to protect yourself.

While ch555 takes every reasonable precaution to protect your data, no platform can guarantee absolute security against all threats. You are also responsible for maintaining the security of your own account — use a strong, unique password, enable SMS two-factor authentication, and never share your login credentials with anyone.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how ch555 has handled your personal data, please contact the ch555 Data Privacy team directly. The contact details are displayed in the footer of this page.

When submitting a privacy enquiry or data rights request, please include the following information to help us handle your request efficiently:

• Your full registered name and ch555 username
• Your registered mobile number (for identity verification purposes)
• A clear description of your request or concern
• Any relevant dates or transaction references, if applicable

ch555 is committed to resolving all privacy-related enquiries within 30 days. For complex requests, we may require up to 60 days and will keep you informed of progress throughout. If you are not satisfied with ch555's response to your privacy concern, you have the right to escalate your complaint to the appropriate data protection authority in your jurisdiction.

ch555 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable regulations. The effective date at the top of this document will be updated whenever a new version is published. Material changes will be communicated to registered players via account notification before they take effect. Continued use of ch555.app after the effective date of any update constitutes acceptance of the revised Privacy Policy.