gd555 Privacy Policy — How We Protect Your Data
At gd555, protecting your personal information is a fundamental part of how we operate. This Privacy Policy explains in plain terms what data we collect, why we collect it, how it is used, and the rights you have over your information as a player on Bangladesh's most trusted online casino and sports betting platform.
Six Privacy Principles That Guide gd555
Every decision we make about your data is guided by these core principles. They underpin the full Privacy Policy detailed below.
Data Minimisation
gd555 collects only the personal data that is strictly necessary to provide the Platform, verify your identity, process transactions, and comply with legal obligations. We do not gather data for its own sake.
No Sale of Personal Data
gd555 does not sell, rent, or trade your personal information to third-party advertisers or data brokers under any circumstances. Your data exists to serve your account — not to generate advertising revenue.
End-to-End Encryption
All data transmitted between your device and the gd555 Platform is protected by industry-standard TLS/SSL encryption. Sensitive fields such as passwords and payment details are encrypted at rest using strong cryptographic standards.
Your Right of Access
You have the right to request a copy of the personal data gd555 holds about you at any time. Simply contact our support team at [email protected] and we will provide a structured data export within 14 business days.
Right to Erasure
Where gd555 is not required by law to retain your data, you may request deletion of your personal information following account closure. Requests are reviewed and actioned within 30 days in accordance with our data retention schedule.
Marketing Opt-Out
You may withdraw your consent to receive direct marketing communications from gd555 at any time by updating your notification preferences in account settings or by contacting [email protected]. Opt-out requests are processed within 48 hours.
Last Updated: 1 January 2026 | Version: 3.0 | Applies To: All gd555 registered players and site visitors
Table of Contents
- Who We Are
- Data We Collect
- How We Collect Your Data
- Legal Basis for Processing
- How We Use Your Data
- Data Sharing and Disclosure
- Cookies and Tracking Technologies
- Data Retention
- Data Security
- Your Privacy Rights
- Children and Minors
- International Data Transfers
- Changes to This Policy
- Contact and Complaints
1 Who We Are
gd555 ("gd555", "We", "Us", "Our") operates the online casino and sports betting platform accessible at https://gd555.io and all associated mobile-optimised pages and services (collectively, the "Platform"). gd555 is operated by an internationally licensed entity and serves players in the Bangladesh market.
gd555 acts as the data controller in respect of the personal data collected and processed in connection with your use of the Platform. This means that gd555 determines the purposes for which, and the manner in which, your personal data is processed.
For all privacy-related queries, data subject requests, or complaints, you may contact our dedicated Data Protection team at:
- Email: [email protected]
- Response time: Within 4 hours for general queries; within 14 business days for formal data subject requests
- Operating hours: 24/7 email support; Live Chat 24/7; WhatsApp 09:00–23:00 Bangladesh Standard Time (BST, UTC+6)
2 Data We Collect
gd555 collects the following categories of personal data in connection with your use of the Platform:
2.1 Identity and Registration Data
When you register an account on gd555, we collect your legal full name, date of birth, gender (where provided), username, and the residential address you supply during registration. This data is used to create and maintain your account and to fulfil our Know Your Customer (KYC) obligations.
2.2 Contact Data
We collect your email address and mobile telephone number at registration. These are used to send account-related communications, security alerts, verification messages, and, where you have consented, marketing communications.
2.3 Identity Verification Documents
As part of our KYC and Anti-Money Laundering (AML) compliance programme, we may collect copies of government-issued identity documents such as a National Identity Card (NID), passport, or driving licence, as well as proof of address documents (e.g., utility bills, bank statements) and proof of payment method.
2.4 Financial and Transaction Data
We collect details of all deposits, withdrawals, bonuses, and gaming transactions conducted through your account. This includes payment method identifiers (e.g., bKash mobile number, Nagad account reference, bank account number last four digits, card type), transaction amounts in Bangladeshi Taka (৳), timestamps, and transaction reference numbers. We do not store full card numbers or full bank account numbers on our systems.
2.5 Gaming and Betting Activity Data
We collect a detailed record of all games played, bets placed, bet amounts, game outcomes, bonus activations, and wagering history on your account. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.
2.6 Technical and Device Data
We automatically collect certain technical data when you access the Platform, including your IP address, browser type and version, operating system, device type, device identifiers, session duration, page views, and referring URL. This data is used for security monitoring, fraud prevention, and improving Platform performance.
2.7 Responsible Gaming Data
If you use any of gd555's responsible gaming tools — including deposit limits, session time reminders, cooling-off periods, or self-exclusion — we record the settings you apply and any changes you make. This data is used solely to enforce the restrictions you have chosen and to protect your welfare as a player.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity & Registration | Full name, date of birth, username | Account creation, KYC |
| Contact Data | Email, mobile number | Communications, security alerts |
| Verification Documents | NID, passport, proof of address | KYC / AML compliance |
| Financial & Transaction | bKash reference, deposit amount, withdrawal history | Payment processing, AML monitoring |
| Gaming Activity | Bets placed, game history, bonus usage | Account management, dispute resolution |
| Technical & Device | IP address, browser type, session data | Security, fraud prevention |
| Responsible Gaming | Deposit limits set, self-exclusion status | Player welfare enforcement |
3 How We Collect Your Data
gd555 collects personal data through the following means:
- Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal request, contact customer support, participate in a promotion, or use any interactive feature of the Platform.
- Automatically: Through cookies, web beacons, server logs, and similar tracking technologies when you browse the Platform. See Section 7 (Cookies and Tracking Technologies) for full details.
- From third-party service providers: Including identity verification agencies, payment processors (such as bKash, Nagad, Rocket, Upay), fraud prevention services, and game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) in connection with the games you play on their platforms hosted within gd555.
- From publicly available sources: Where required by our AML compliance obligations, gd555 may cross-reference your data against publicly available sanctions lists, politically exposed persons (PEP) databases, and adverse media sources.
4 Legal Basis for Processing
gd555 processes your personal data on the following legal bases:
- Contractual necessity: Processing required to fulfil our obligations to you under the gd555 Terms and Conditions, including creating and managing your account, processing deposits and withdrawals, providing access to games and betting markets, and handling support requests.
- Legal obligation: Processing required to comply with applicable laws and regulations, including KYC and AML obligations, age verification requirements (21+), financial record-keeping requirements, and regulatory reporting obligations imposed by gd555's licensing authority.
- Legitimate interests: Processing carried out in pursuit of gd555's legitimate business interests, including fraud prevention, security monitoring, product improvement, and responsible gaming monitoring — where these interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily in the context of direct marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing conducted before withdrawal.
5 How We Use Your Data
gd555 uses the personal data it collects for the following specific purposes:
- To register and maintain your gd555 account and verify your identity in accordance with our KYC policy.
- To process deposits, withdrawals, and all financial transactions on your account, including transactions via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks.
- To provide you with access to casino games, sports betting markets, and all other Platform services.
- To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, bonus abuse, and other prohibited conduct described in the Terms and Conditions.
- To monitor your gaming activity for responsible gaming purposes, including identifying signs of problem gambling and enforcing any voluntary restrictions you have set on your account.
- To respond to your customer support enquiries, resolve disputes, and maintain a record of your communications with gd555.
- To send you account-related communications, including transaction confirmations, security alerts, KYC requests, and updates to our Terms and Conditions or this Privacy Policy.
- To send you marketing communications about promotions, bonuses, and new Platform features — where you have consented to receive such communications.
- To conduct internal analytics, improve the functionality and user experience of the Platform, and develop new products and services.
- To comply with our legal and regulatory obligations, including responding to lawful requests from law enforcement or regulatory authorities.
6 Data Sharing and Disclosure
gd555 does not sell your personal data to third parties. We share your personal data only in the following circumstances and only to the extent necessary for each purpose:
6.1 Service Providers and Technology Partners
gd555 engages carefully selected third-party service providers who process personal data on our behalf and under our instructions, including: payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and cryptocurrency payment processors), identity verification and KYC service providers, game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), cloud hosting and infrastructure providers, customer support software providers, and fraud prevention and security analytics providers. All such service providers are contractually bound to process your data securely, only for the purposes we specify, and in compliance with applicable data protection standards.
6.2 Legal and Regulatory Disclosure
gd555 may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where required to do so by law, court order, or where such disclosure is necessary to protect the rights, property, or safety of gd555, its players, or the public. This includes disclosure in connection with AML investigations, fraud investigations, or regulatory compliance reporting obligations.
6.3 Business Transfers
In the event of a merger, acquisition, sale of assets, or other corporate restructuring involving gd555, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the implications for the processing of your data.
6.4 Consent-Based Sharing
gd555 will share your personal data with any third party you expressly authorise us to share it with, for example, if you choose to participate in a third-party promotion or affiliate programme that requires the sharing of certain account data with the relevant partner.
7 Cookies and Tracking Technologies
gd555 uses cookies and similar tracking technologies to operate and improve the Platform, personalise your experience, and analyse usage patterns. A cookie is a small text file placed on your device when you visit the Platform.
7.1 Types of Cookies Used
- Strictly Necessary Cookies: Essential for the Platform to function. They enable core features such as user authentication, session management, and security controls. These cookies cannot be disabled without affecting your ability to use the Platform.
- Performance and Analytics Cookies: Used to collect anonymised information about how visitors use the Platform, such as which pages are visited most frequently and how users navigate between pages. This data helps us improve Platform performance and user experience.
- Functional Cookies: Used to remember your preferences and personalise your experience, such as your preferred language, game display settings, and deposit method preferences.
- Marketing Cookies: Used, where you have consented, to deliver relevant promotional messages about gd555 products and services. These cookies track your interactions with our promotional content.
7.2 Managing Cookies
You may control your cookie preferences through your browser settings. Most modern browsers allow you to refuse all or certain types of cookies, delete existing cookies, and receive notifications when new cookies are set. Please note that disabling strictly necessary cookies will prevent you from logging in to your gd555 account and using core Platform features. Disabling performance or marketing cookies will not affect your access to the Platform but may reduce the relevance of content shown to you.
8 Data Retention
gd555 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulation. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Contractual, regulatory, AML obligation |
| KYC / identity documents | Duration of account + 5 years post-closure | AML regulatory requirement |
| Financial transaction records | Duration of account + 7 years post-closure | Financial regulatory obligation |
| Gaming and betting history | Duration of account + 5 years post-closure | Dispute resolution, regulatory reporting |
| Customer support communications | 3 years from date of communication | Dispute resolution, service quality |
| Technical / device / log data | 13 months from collection | Security monitoring, fraud prevention |
| Marketing consent records | 3 years from last consent event | Consent management compliance |
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with gd555's data disposal procedures. Where data is anonymised rather than deleted, the resulting anonymised data is no longer personal data and may be retained indefinitely for statistical and analytical purposes.
9 Data Security
gd555 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- TLS/SSL encryption for all data transmitted between your device and the gd555 Platform.
- AES-256 encryption for sensitive data fields stored on gd555 servers, including passwords (stored as salted hashes) and payment method identifiers.
- Role-based access controls ensuring that gd555 staff can only access personal data that is necessary for the performance of their specific role.
- Regular penetration testing and security audits conducted by independent cybersecurity specialists.
- Multi-factor authentication requirements for all gd555 internal systems that process personal data.
- Continuous monitoring and anomaly detection on all Platform infrastructure.
- Documented incident response procedures for data breach detection, containment, and notification.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, gd555 will notify you without undue delay and provide full details of the nature of the breach, the data affected, the likely consequences, and the measures taken to address it.
10 Your Privacy Rights
Depending on your jurisdiction, you may have the following rights in relation to the personal data gd555 holds about you. gd555 is committed to honouring these rights in a timely and transparent manner.
- Right of Access: You have the right to request confirmation of whether gd555 processes personal data about you, and if so, to receive a copy of that data along with information about how it is used.
- Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data that gd555 holds about you. You may update certain account details directly through your account settings.
- Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and there are no overriding legitimate grounds. This right is subject to gd555's legal obligations to retain certain data.
- Right to Restriction of Processing: You have the right to request that gd555 restricts the processing of your personal data in certain circumstances, for example while the accuracy of the data is contested or while an objection to processing is under consideration.
- Right to Data Portability: Where gd555 processes your personal data on the basis of your consent or contractual necessity, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to the processing of your personal data where gd555 relies on legitimate interests as the legal basis. gd555 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for legal claims.
- Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, and the right to request human review of such decisions.
To exercise any of the above rights, please submit your request to [email protected]. gd555 will respond to all data subject requests within 14 business days. We may need to verify your identity before processing your request. There is no charge for exercising your privacy rights; however, gd555 reserves the right to charge a reasonable fee for manifestly unfounded or excessive requests.
11 Children and Minors
The gd555 Platform is strictly intended for adults aged 21 and above. gd555 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process and is reinforced through our KYC programme.
If gd555 becomes aware that personal data has been collected from a person under the age of 21 — whether through a misrepresentation during registration or any other means — we will immediately suspend the account, delete the personal data collected, and return any deposited funds to the payment source. If you believe that a minor has registered an account on gd555, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.
12 International Data Transfers
gd555 is operated by an internationally licensed entity. In the course of providing the Platform, your personal data may be transferred to and processed in countries outside Bangladesh, including countries where gd555's server infrastructure, game providers, and service providers are located. These countries may have data protection laws that differ from those in Bangladesh.
Where personal data is transferred internationally, gd555 takes appropriate steps to ensure that the receiving entity provides an adequate level of protection for your personal data. These steps may include entering into standard contractual clauses or similar data transfer agreements with the receiving entity, or relying on the receiving entity's certification under a recognised international data privacy framework.
By using the gd555 Platform, you acknowledge and agree that your personal data may be transferred to and processed in jurisdictions outside Bangladesh as described in this section.
13 Changes to This Policy
gd555 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — affecting the way we collect, use, or share your personal data, or affecting your privacy rights — gd555 will notify registered players via email to the address registered on their account, and will display a prominent notice on the Platform, at least 14 days before the revised policy takes effect.
The "Last Updated" date at the top of this document reflects when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how gd555 protects your personal information. Your continued use of the Platform following the effective date of any revision constitutes your acknowledgement of the updated Privacy Policy.
14 Contact and Complaints
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which gd555 processes your personal data, please contact our Data Protection team using the details below. All correspondence should be in English and should include your registered account username and a clear description of your query or complaint.
- Email: [email protected] (response within 4 hours, available 24/7)
- Live Chat: Available 24/7 via the gd555 Platform
- WhatsApp: Available 09:00–23:00 Bangladesh Standard Time (BST, UTC+6)
gd555 aims to acknowledge all formal privacy complaints within 24 hours and to provide a substantive response within 14 business days. Where a complaint requires additional investigation, gd555 will keep you informed of progress and provide a final response within 28 business days.
If you are not satisfied with gd555's response to your privacy complaint, you may have the right to escalate your complaint to a relevant data protection supervisory authority in your jurisdiction. gd555 will cooperate fully with any regulatory investigation arising from such an escalation.
Ready to Experience gd555?
Your privacy is protected every step of the way. Explore our full range of casino games, cricket betting, slots, and more — all secured with SSL encryption and backed by our commitment to responsible gaming.