top55 Privacy Policy

1 Information We Collect

top55 collects personal data through multiple touchpoints during your interaction with the platform. The categories of data we collect, and the circumstances under which each category is gathered, are described in detail below. We collect only the minimum data necessary to deliver a safe, compliant, and high-quality betting and gaming experience to players in Bangladesh.

1.1 Registration Data

When you create a top55 account, we collect the following information:

• Full legal name (as it appears on your Bangladesh National Identity Card or passport)
• Date of birth (to verify you are aged 18 or above)
• Residential address in Bangladesh (city, district, full postal address)
• Email address
• Mobile phone number (used for account security and payment verification)
• Chosen username and hashed password (passwords are never stored in plain text)

This data is collected under a contractual necessity basis — it is required to open and operate a top55 account. Without it, we cannot create an account for you.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) programme, we may collect copies of identity documents including your Bangladesh National Identity Card (NID), passport, birth certificate, and proof of address documents such as utility bills or bank statements. These documents are used strictly for age and identity verification and anti-money laundering compliance. KYC documents are stored securely and are never shared with third parties except as required by law.

1.3 Financial & Payment Data

top55 processes deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer. When you make a deposit or request a withdrawal, we collect and record:

• The payment method type used (e.g., bKash, Nagad, Visa)
• The mobile wallet number or bank account number associated with the transaction
• Transaction amounts in Bangladeshi Taka (৳) and transaction timestamps
• Transaction reference IDs provided by the payment provider

1.4 Betting & Gaming Activity Data

To operate the sportsbook and casino, top55 records details of every bet and game session associated with your account. This includes: sports markets wagered on (e.g., BPL cricket, IPL T20, football), odds accepted, bet amounts in ৳, game titles played (e.g., slot titles from Pragmatic Play, Microgaming, NetEnt; live casino tables from Evolution Gaming, Ezugi), session start and end times, win/loss outcomes, and bonus wagering progress. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

1.5 Technical & Device Data

When you access top55 via a browser or mobile device, we automatically collect certain technical information including: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, pages visited on top55, and session duration. This data is used for fraud detection, platform security, and improving the top55 user experience. We do not use IP addresses to build individual advertising profiles.

1.6 Communications Data

If you contact top55 via live chat, email, or any other support channel, we retain records of those communications including the content of messages exchanged, the date and time of contact, and the outcome or resolution of any query or dispute. These records are kept for quality assurance, compliance, and dispute resolution purposes.

2 How We Use Your Data

top55 uses your personal data for a defined set of purposes, each grounded in a lawful basis. We do not use your data for purposes that are incompatible with those listed below, and we do not engage in automated decision-making that produces legal effects without human oversight.

2.1 Account Management & Service Delivery

The primary purpose for which we use your data is to operate and maintain your top55 account. This includes creating and securing your account, processing deposits and withdrawals via bKash, Nagad, Rocket, and Upay, settling bets and game rounds, managing bonus entitlements, and delivering 24/7 English-language customer support. Without processing your personal data for these purposes, top55 cannot provide its services to you.

2.2 Identity Verification & Fraud Prevention

top55 uses your registration data, KYC documents, and technical data to verify your identity, confirm you are aged 18 or above, and prevent fraudulent activity on the platform. Our fraud prevention systems analyse transaction patterns, device fingerprints, and IP data to detect multi-accounting, bonus abuse, money laundering, and other prohibited conduct defined in the top55 Terms & Conditions. This processing is carried out on the basis of both contractual necessity and our legitimate interest in maintaining a safe platform.

2.3 Regulatory & Legal Compliance

top55 is required to process and retain certain categories of personal data to comply with applicable anti-money laundering (AML) obligations and general financial record-keeping requirements. This includes retaining transaction records in ৳ for a minimum of seven years and retaining KYC documents for a minimum of five years after account closure. Where top55 receives a lawful request for data from a competent authority, we will comply with that request in accordance with applicable law and will notify the affected player where we are legally permitted to do so.

2.4 Responsible Gaming Monitoring

top55 uses betting and gaming activity data, combined with account login patterns and deposit frequency, to monitor for signs of problem gambling. Where our systems or support team identify patterns consistent with harmful gambling behaviour, we may proactively contact the player, apply protective account limits, or escalate to the responsible gaming team. This processing is carried out on the basis of our legitimate interest in player welfare and in accordance with our Responsible Gaming Policy.

2.5 Service Improvement & Analytics

Aggregated and anonymised technical and behavioural data is used to understand how players navigate and use the top55 platform, which cricket markets and slot titles are most popular among Bangladesh players, and where the platform experience can be improved. This analytics processing does not identify individual players and is carried out on a legitimate interest basis. top55 does not share individual-level analytics data with third parties.

2.6 Marketing Communications

Where you have provided explicit consent to receive marketing communications from top55, we will use your email address and mobile number to send information about promotions, seasonal offers (e.g., BPL season, Eid, Pohela Boishakh), and new features on the platform. All marketing communications will be in English. You can withdraw your consent and opt out of marketing communications at any time by contacting top55 live chat support or by using the unsubscribe link included in every marketing email. Opting out of marketing does not affect your ability to use your top55 account.

3 Data Sharing & Third Parties

top55 does not sell your personal data to any third party under any circumstances. We share your personal data only in the limited circumstances described below, and only to the minimum extent necessary for each stated purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, top55 shares the minimum necessary financial data with the relevant payment service provider — for example, your bKash or Nagad mobile wallet number when processing a transaction. Each payment provider operates under its own privacy policy and security standards. top55 does not share your full KYC documents with payment providers; only the transaction-specific data required to execute the payment is transmitted.

3.2 Game Technology Providers

top55's casino games are powered by licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, your session data (account ID, bet amount, game result) is transmitted to the relevant game provider's platform for game-round processing and settlement. Game providers do not receive your full name, KYC documents, or payment method details. Game providers are contractually obligated to handle session data in accordance with applicable data protection standards.

3.3 Identity Verification Partners

top55 may use third-party identity verification services to assist with KYC document checks. Where such a service is used, your identity documents are transmitted to the verification partner over an encrypted connection and are used solely for the purpose of verifying your identity. Verification partners are bound by strict data processing agreements and are not permitted to use your documents for any other purpose.

3.4 Legal & Regulatory Disclosures

top55 will disclose personal data to law enforcement agencies, regulatory authorities, or other competent bodies where required to do so by applicable law, court order, or enforceable governmental request. top55 will not voluntarily disclose player data to any government body without a lawful basis for doing so. Where top55 is legally permitted to notify a player of such a disclosure, we will do so promptly.

4 Cookies & Tracking Technologies

top55 uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device by a website when you visit it. Cookies help top55 remember your session, maintain account security, and understand how the platform is being used. This section explains the specific types of cookies top55 uses and how you can manage them.

4.1 Essential Cookies

Essential cookies are strictly necessary for the top55 platform to function. They maintain your login session so you do not need to re-authenticate with every page load, protect against cross-site request forgery (CSRF), and ensure that the platform's security features operate correctly. Essential cookies cannot be disabled without severely impairing or completely preventing your use of top55.

4.2 Functional Cookies

Functional cookies store your preferences — such as your preferred display language (English), time-zone setting (Bangladesh Standard Time, UTC+6), and any responsible gaming limit configurations you have applied to your account. These cookies improve your experience by reducing the need to reconfigure settings on each visit. You may disable functional cookies, though doing so may result in the loss of saved preferences.

4.3 Analytics Cookies

top55 uses first-party analytics cookies to understand how players navigate the platform — for example, which cricket betting markets are visited most frequently, how long players spend on the slots lobby, and where in the registration flow players encounter difficulties. This data is aggregated and anonymised and is used solely to improve the platform. top55 does not use third-party analytics services that track users across other websites.

4.4 Fraud Detection Cookies

top55 uses cookies as part of its fraud detection systems to identify unusual access patterns, detect multiple accounts operated from the same device, and prevent automated bot activity. These cookies record device fingerprint data and are a necessary component of the platform's security infrastructure.

4.5 What top55 Does NOT Use

top55 does not use advertising cookies, retargeting pixels, social media tracking tags (Facebook Pixel, Twitter tags, TikTok pixels), or any third-party cookie that tracks your behaviour across other websites. The cookies on top55 are limited to the four categories listed above, all of which relate directly to operating and securing the top55 platform.

4.6 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to view all cookies stored by a website, block cookies from specific sites, or clear all cookies when you close the browser. Please note that disabling essential or fraud-detection cookies will prevent you from logging in to your top55 account. For instructions on managing cookies in your specific browser, consult your browser's help documentation.

5 Data Security & Retention

top55 takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure.

5.1 Technical Security Measures

• 256-bit SSL/TLS encryption on all data transmitted between your device and top55 servers.
• Hashed and salted password storage — your password is never stored in plain text; only a cryptographic hash is retained.
• Database encryption at rest — all personal data stored in top55 databases is encrypted.
• Access controls — top55 employee access to player personal data is restricted on a strict need-to-know basis and is logged for audit purposes.
• Regular security audits — top55's platform undergoes periodic security reviews to identify and remediate vulnerabilities.
• Fraud detection systems — real-time monitoring identifies and blocks suspicious access attempts, including brute-force login attacks and credential-stuffing attempts.

5.2 Organisational Security Measures

All top55 staff members who handle personal data receive data protection training before being granted access to any player information. Staff are bound by confidentiality obligations and are prohibited from accessing, copying, or disclosing player data except as required in the performance of their role. Any data breach or suspected breach is escalated to the compliance team immediately and assessed for reporting obligations.

5.3 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, top55 will notify affected players without undue delay via their registered email address. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps top55 is taking to address and remediate the incident. top55 will also notify relevant authorities where legally required.

5.4 Data Retention

top55 retains your personal data for the minimum period necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations. The specific retention periods for each category of data are set out in the table in Section 1. Once the applicable retention period has expired, your data is securely and permanently deleted or anonymised so that it can no longer be linked to you as an individual.

6 Your Privacy Rights

top55 respects your rights over your personal data. The following rights are available to all top55 players, and you can exercise any of them by contacting top55's English-language support team via 24/7 live chat or by emailing [email protected] (plain text — not a clickable link). top55 aims to respond to all privacy rights requests within 30 days of receipt.

Right to Access

You have the right to request a copy of all personal data top55 holds about you. Upon a verified access request, top55 will provide you with a structured, machine-readable export of your personal data free of charge. Your identity will be verified before the data export is released to ensure it is not delivered to an unauthorised party.

Right to Rectification

If any personal data top55 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For example, if your registered address has changed or your name is recorded incorrectly, contact top55 support and the correction will be made within 14 days, subject to verification of the updated information.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing. Please note that top55 is legally required to retain certain categories of data (particularly financial transaction records and KYC documents) for defined periods, and erasure requests cannot override these legal obligations. Where erasure is not possible in full, top55 will explain which data must be retained and why.

Right to Restrict Processing

You have the right to request that top55 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being resolved, or where you have objected to processing and the legitimate interest grounds are being assessed. Where processing is restricted, top55 will retain your data but will not actively process it beyond storage.

Right to Data Portability

For data that you have provided to top55 and that is processed on the basis of your consent or contractual necessity, you have the right to receive that data in a structured, commonly used, machine-readable format (e.g., JSON or CSV) and to transmit it to another service provider. top55 will provide this export free of charge within 30 days of a verified portability request.

Right to Object

You have the right to object to top55 processing your personal data where that processing is based on our legitimate interests — for example, processing for direct marketing purposes. Where you object to marketing, top55 will cease sending you promotional communications immediately. Where you object to other legitimate-interest processing, top55 will assess whether its legitimate interests are overridden by your individual rights and will notify you of the outcome within 30 days.

Right to Withdraw Consent

Where top55 processes your personal data on the basis of your explicit consent (e.g., for marketing emails), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent for marketing communications, contact top55 live chat support or click the unsubscribe link in any marketing email.

7 Children & Minors

If top55 becomes aware, through KYC verification or any other means, that a player is under the age of 18, the account will be immediately and permanently closed, all deposits will be returned to the originating payment method, and any data collected from the minor will be securely deleted in accordance with top55's data retention and erasure procedures.

Parents and guardians of minors in Bangladesh are strongly encouraged to install parental control software on shared family devices to prevent access to online gambling websites. If you suspect that a minor in your household has accessed top55 or created an account using your payment details, contact top55 live chat support immediately. For further guidance on protecting minors and managing your own gambling behaviour, please visit the Responsible Gaming page.

8 Policy Updates & Contact

top55 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform's security and privacy infrastructure. When a material change is made to this Privacy Policy, top55 will post the updated version on this page with a revised effective date at the top of the document. Where the change significantly affects how your personal data is used, top55 will notify you via your registered email address.

Your continued use of the top55 platform after the effective date of any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Privacy Policy, you should cease using top55 and request account closure via live chat support.

This Privacy Policy is written in English and the English text shall be the authoritative version in all circumstances. In the event of any translation or paraphrase — whether automated or manual — the English text on this page shall prevail.

How to Contact top55 About Privacy

For any questions, concerns, or requests related to this Privacy Policy or the way top55 handles your personal data, please contact top55's English-language compliance and support team using the details below. All privacy-related enquiries are handled in English and will receive a response within 30 days.

• Live Chat: Available 24/7 via the top55 platform (peak response under 3 minutes, 08:00–23:00 BST)
• Email: [email protected] (plain text — not a clickable link)
• Language: English
• Response time: Within 30 days for formal privacy rights requests; within 24 hours for general enquiries