ak555 Privacy Policy

This Privacy Policy ("Policy") describes how ak555 ("we", "us", "our", or "the Platform") collects, uses, discloses, and safeguards personal data relating to individuals ("you", "the Player") who register for or otherwise interact with the ak555 online casino and sports betting platform, accessible at ak555.io and through any associated mobile interfaces.

This Policy is incorporated by reference into the ak555 Terms & Conditions and forms part of the agreement between you and ak555. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

ak555 takes its obligations regarding data protection and player privacy seriously. We are committed to handling personal data transparently, securely, and only for clearly defined and legitimate purposes. Our data practices are designed to align with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

This Policy applies to all data collected in connection with the ak555 platform, including data collected during account registration, gameplay, deposits and withdrawals, customer support interactions, and marketing communications. It covers data collected through our website, live chat, email, and any other channel through which you interact with ak555.

For the purposes of this Policy, ak555 acts as the data controller in respect of personal data collected from players using the Platform. As data controller, ak555 determines the purposes for which and the means by which personal data is processed.

All inquiries relating to data protection, privacy rights, or this Policy should be directed to the ak555 data protection contact point. You may reach us at any time via the email address set out in Section 14 of this Policy. We aim to respond to all data-related enquiries within five business days of receipt.

ak555 collects the following categories of personal data in connection with the operation of the Platform. We collect only the data that is necessary for the specific purpose for which it is collected — this is the principle of data minimisation, and it guides our collection practices at every stage.

ak555 does not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data except where a government-issued ID document unavoidably contains such information as a consequence of its standard format — in which case we process only the minimum elements necessary to confirm identity and age.

ak555 collects personal data through a combination of direct provision by the player, automated technical means, and — in limited circumstances — from trusted third-party sources. The primary collection methods are described below:

• Direct provision: You provide data directly to ak555 when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in promotions, or update your account settings.
• Automated technical collection: When you access or use the Platform, our systems automatically collect technical data including your IP address, browser information, device identifiers, session timestamps, and page interaction data. This occurs through server logs, cookies, and similar tracking technologies (see Section 09).
• Payment providers: When you initiate a transaction via bKash, Nagad, Rocket, Upay, or a partner bank, limited transaction confirmation data is shared with ak555 by the payment provider to enable reconciliation and fraud prevention.
• Identity verification services: Where ak555 uses a third-party KYC or identity verification service to validate your identity documents, that service may return data fields — such as document validity status and name-match results — to ak555 for the sole purpose of completing your verification.
• Fraud prevention and AML data providers: ak555 may cross-reference account data against commercially available watchlists, sanctions lists, and fraud databases as part of its anti-money-laundering (AML) and know-your-customer (KYC) obligations.

ak555 does not purchase marketing lists or collect personal data from social media platforms without explicit player consent. We do not use public social media profiles as a source of personal data for account verification or profiling purposes.

ak555 processes personal data only for specific, documented purposes and only where a recognised legal basis for that processing exists. The following table sets out our primary processing activities, their purposes, and the corresponding legal basis:

ak555 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose of the disclosure:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank receive only the minimum transaction data required to process your deposit or withdrawal. These providers are bound by their own data protection obligations and are not permitted to use your data for any purpose other than processing the specific transaction.
• KYC and identity verification services: Where a third-party KYC provider is used to validate your identity documents, that provider receives a copy of the relevant document and returns only a structured verification result. Raw document images are not retained by the KYC provider beyond the verification session.
• Game studio providers: Game studios such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi may receive a unique player session token to enable game loading and round resolution. They do not receive your name, contact details, or financial data.
• Fraud prevention and AML screening services: We may share identity data fields with screening services to check against international sanctions lists and fraud databases as part of our compliance obligations.
• IT infrastructure and hosting providers: Contracted third parties who provide server infrastructure, cloud hosting, or platform maintenance services may have incidental access to data stored on their systems, subject to strict data processing agreements and confidentiality obligations.
• Legal and regulatory authorities: ak555 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where it is legally required to do so, including in response to a valid court order or statutory notice.
• Professional advisers: Lawyers, auditors, and accountants engaged by ak555 may access personal data to the minimum extent necessary to perform their professional services, subject to professional confidentiality obligations.

ak555 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any legal obligations that require retention for a specified minimum period. Our general retention schedule is set out below:

• Active account data: Retained for the duration of your account's active status plus a minimum of five years after account closure, to satisfy financial record-keeping and AML compliance obligations.
• KYC and identity documents: Retained for a minimum of five years after account closure or the last transaction date, whichever is later, in line with anti-money-laundering regulatory requirements.
• Transaction and financial records: Retained for a minimum of seven years from the date of the relevant transaction to comply with financial reporting obligations.
• Support communications: Retained for three years from the date of the last communication, or longer if the communication relates to an unresolved complaint or legal matter.
• Responsible gaming records: Self-exclusion and deposit limit history is retained for a minimum of five years after account closure to support player welfare obligations and prevent circumvention.
• Marketing data: Retained until you withdraw consent or for a maximum of three years from the date of last engagement, whichever is earlier.
• Technical and log data: Server logs and access records are retained for a rolling period of 12 months, after which they are deleted or anonymised.

When personal data is no longer required and the relevant retention period has expired, ak555 will securely delete or anonymise the data so that it can no longer be linked to any individual. Data that has been fully anonymised — such that no individual can be identified from it, directly or indirectly — may be retained indefinitely for statistical and analytical purposes.

ak555 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security programme includes technical, organisational, and procedural controls proportionate to the sensitivity of the data we hold and the risks associated with its processing.

• Encryption in transit: All data transmitted between your device and the ak555 platform is encrypted using 256-bit Transport Layer Security (TLS). We enforce HTTPS across all Platform endpoints and do not serve any page over an unencrypted HTTP connection.
• Encryption at rest: Sensitive data fields — including identity document data and financial account details — are encrypted at rest using AES-256 encryption. Database-level encryption is applied to all production data stores.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. All ak555 staff and contractors who handle personal data are subject to role-based access controls, and all access events are logged for audit purposes.
• Two-factor authentication (OTP): All player accounts have access to OTP-based two-step verification. We strongly recommend that all players enable this feature. Internal staff access to production systems requires multi-factor authentication without exception.
• Intrusion detection and monitoring: Our infrastructure is monitored continuously for suspicious activity, including anomalous login patterns, unusual transaction volumes, and potential data exfiltration attempts.
• Penetration testing: ak555 engages independent security professionals to conduct periodic penetration tests of our platform infrastructure and web application security posture.
• Incident response: In the event of a data breach that is likely to result in a risk to players, ak555 has documented incident response procedures in place to contain the breach, assess the impact, and notify affected individuals in a timely manner.

Notwithstanding these measures, no data transmission over the internet or method of electronic storage can be guaranteed to be 100% secure. ak555 takes all reasonable steps to protect your data but cannot guarantee absolute security. You also have a role to play in keeping your data safe — we strongly encourage you to use a strong, unique password for your ak555 account and to enable OTP verification.

ak555 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve user experience, and gather analytical data about how the Platform is used. A cookie is a small text file placed on your device by a web server. Cookies cannot execute programs or transmit viruses, and they do not access other files on your device.

We use the following categories of cookies:

• Strictly necessary cookies: These are essential for the Platform to function. They enable core features such as session management, account authentication, security token validation, and game loading. These cookies cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: These cookies collect anonymised information about how players use the Platform, such as which pages are visited most frequently and whether error messages are displayed. This data helps us improve the Platform's performance and usability. No personally identifiable information is collected by these cookies.
• Functional cookies: These cookies allow the Platform to remember choices you have made — such as your preferred language, time zone display (Bangladesh Standard Time), or interface settings — to provide a more personalised experience.
• Session identification cookies: Used to maintain your logged-in state during a session. These are deleted automatically when you close your browser or after a defined period of inactivity.

ak555 does not use third-party advertising cookies or behavioural retargeting technologies on the Platform. We do not share cookie-derived data with advertising networks or social media platforms.

You may control or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair or prevent your ability to log in or use core Platform features. Instructions for managing cookies in the most common browsers are available through your browser's help documentation.

ak555 respects your rights in relation to your personal data. Subject to applicable law and certain limited exceptions (such as where compliance with your request would conflict with our legal obligations), you have the following rights:

• Right of access: You have the right to request a copy of the personal data that ak555 holds about you, together with information about how it is used. We will respond to access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update most account details directly from within your account dashboard.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you believe the data has been processed unlawfully. This right is subject to our legal obligation to retain certain records.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is contested or while an objection is being assessed.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of our legitimate interests. Where you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Privacy Request". We will verify your identity before processing any request to protect against unauthorised disclosure. We will respond within 30 calendar days and will notify you if additional time is required to process a complex request.

The ak555 platform is strictly for adults aged 21 years and above. ak555 does not knowingly collect or process personal data relating to individuals under 21 years of age. Our registration process includes an age declaration requirement, and age verification is enforced at the point of first withdrawal.

If ak555 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data, suspend the associated account, and — where appropriate — return any deposited funds to the originating payment method. If you are a parent or guardian and believe that your child has registered an account on ak555 without your knowledge, please contact us immediately at [email protected].

ak555 takes its obligations regarding the protection of minors seriously. Our platform includes technical controls to detect activity patterns inconsistent with adult use, and our support team is trained to act promptly on any report of underage access.

ak555 primarily processes and stores player data within secure data centre infrastructure. In the course of delivering certain services — including KYC verification, game software delivery, and payment processing — personal data may be processed by service providers whose infrastructure is located outside Bangladesh. In such cases, ak555 ensures that appropriate safeguards are in place to protect your personal data at a standard equivalent to that applied within Bangladesh.

Safeguards for international transfers may include contractual data processing agreements incorporating internationally recognised data protection clauses, technical security measures including end-to-end encryption, and due diligence assessments of the data protection frameworks applicable in the destination jurisdiction.

ak555 does not transfer personal data to any jurisdiction that we have assessed as providing an inadequate level of data protection without implementing supplementary technical and contractual safeguards. If you would like more information about the specific safeguards applicable to a particular international transfer, please contact us using the details in Section 14.

ak555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our privacy programme. When material changes are made, we will update the "Last Updated" date at the top of this page and, where the changes significantly affect player rights or our use of personal data, we will notify registered players by email or via an in-account notification.

Your continued use of the Platform following the publication of any updated Policy constitutes acceptance of the revised terms. We recommend that you review this page periodically to stay informed of how ak555 handles your personal data. If you disagree with any changes to this Policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

Archived versions of previous Privacy Policy documents are available on request by contacting our support team. We maintain version records so that we can demonstrate the policy in effect at any given point in time.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ak555 handles your personal data, please do not hesitate to get in touch. Our data protection contact point is available 24 hours a day, 7 days a week, including Bangladeshi public holidays:

• Email (data privacy requests): [email protected] — please use the subject line "Data Privacy Request"
• Email (general support): [email protected]
• Live chat: Available from within your account dashboard, 24/7
• Response time target: We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 5 business days (Bangladesh Standard Time, UTC+6)