he55 Privacy Policy – How We Handle Your Data

Introduction

he55 is committed to handling all personal data responsibly, transparently, and in a manner consistent with applicable data protection principles. We collect only the data that is genuinely necessary to provide and improve our services, verify player identity, process payments, and comply with our legal obligations. We do not sell your personal data to third parties for their own marketing purposes.

This Privacy Policy should be read alongside our Terms and Conditions, which govern the use of the he55 platform. Both documents form part of the agreement between you and he55. If there is any conflict between the two documents in relation to data handling, this Privacy Policy takes precedence.

1. Data We Collect

he55 collects personal data through several channels: directly from you when you register or use the platform, automatically through your device and browser when you access the platform, and from third-party payment providers when you make a deposit or withdrawal. The categories of personal data we collect are as follows:

2. How We Use Your Data

he55 uses the personal data we collect for the following specific purposes. We will not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent:

• To create and manage your he55 player account, including verifying your identity and age during the registration process.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records.
• To verify your eligibility to use the platform, including age verification and geographic eligibility checks, and to complete KYC procedures as required.
• To detect and prevent fraudulent activity, money laundering, collusion, and other forms of platform abuse, including monitoring betting patterns that may indicate prohibited conduct.
• To personalise your experience on the he55 platform, including displaying relevant game recommendations and promotional offers based on your gaming activity.
• To provide customer support, respond to queries and complaints, and resolve disputes in accordance with our Terms and Conditions.
• To comply with applicable laws and regulations, including anti-money laundering obligations, and to respond to lawful requests from competent authorities.

3. Legal Basis for Processing

he55 processes your personal data on the basis of one or more of the following legal grounds, depending on the nature and purpose of each processing activity:

• Contractual necessity: processing required to deliver the services you have requested — including account management, payment processing, and game access.
• Legal obligation: processing required to comply with applicable laws, such as KYC and anti-money laundering regulations, and to respond to lawful requests from authorities.
• Legitimate interests: processing carried out in he55's legitimate business interests, such as fraud detection, platform security, and product improvement — balanced against your privacy rights.
• Consent: where you have given explicit consent to specific processing activities, such as receiving promotional communications. You may withdraw consent at any time by contacting [email protected].

4. Data Sharing and Disclosure

he55 does not sell your personal data to third parties. We do not share your data with third-party advertisers for their own marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment service providers: he55 shares transaction data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to process your deposit and withdrawal requests. These providers have their own privacy policies and are responsible for their own data handling practices.
• Game providers: game outcome and session data may be shared with third-party game software providers (such as Pragmatic Play, Evolution Gaming) to the extent necessary for game operation, dispute resolution, and RNG audit purposes.
• Legal and regulatory authorities: he55 will disclose personal data in response to a valid legal request, court order, or regulatory requirement from a competent authority. We will notify you of such a disclosure where we are legally permitted to do so.
• Fraud prevention and security partners: anonymised or aggregated data may be shared with fraud detection service providers to improve platform-wide security. No personally identifiable data is shared for this purpose without your consent.

Where personal data is shared with any third party, he55 takes reasonable steps to ensure that the receiving party handles the data securely and in a manner consistent with this Privacy Policy. he55 is not responsible for the independent privacy practices of third-party payment providers or game software companies beyond the data shared for the specific purposes described above.

5. Data Security

he55 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include 256-bit SSL (Secure Socket Layer) encryption for all data transmitted between your device and the he55 platform; encrypted storage of account credentials (passwords are hashed and never stored in plain text); access controls that restrict internal access to personal data on a strict need-to-know basis; and regular security audits of the platform's infrastructure.

While he55 takes data security seriously and maintains robust protections, no online system can guarantee absolute security against all possible threats. Players are responsible for maintaining the security of their own device, browser, and account credentials. If you suspect that your he55 account has been accessed without your authorisation, contact [email protected] immediately.

6. Data Retention

he55 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention principles are as follows:

• Active account data (identity, financial, gaming activity) is retained for the duration of your registered account plus a minimum of 5 years following account closure, to comply with financial record-keeping obligations.
• KYC verification documents are retained for a minimum of 5 years following the date of submission, or longer if required by applicable anti-money laundering regulations.
• Device and session data (IP logs, browser data) is retained for up to 12 months for fraud prevention and security monitoring purposes. After this period, such data is deleted or anonymised.

7. Your Data Rights

As a he55 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact he55 support at [email protected]. We will respond to all valid requests within 30 days of receipt:

• 👁️

  Right of Access

  You may request a copy of all personal data that he55 holds about you, along with information about how it is being processed.

• ✏️

  Right of Rectification

  If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.

• 🗑️

  Right of Erasure

  You may request the deletion of personal data that is no longer necessary for the purposes it was collected, subject to any legal retention obligations that require he55 to retain the data for a specified period.

• ⏸️

  Right to Restrict Processing

  In certain circumstances, you may request that he55 suspend the processing of your personal data without deleting it — for example, while the accuracy of the data is being contested.

• 📦

  Right to Data Portability

  You may request a copy of your personal data in a structured, commonly used, machine-readable format, where processing is based on consent or contractual necessity.

• 🚫

  Right to Object

  You may object to the processing of your personal data where he55 relies on legitimate interests as the legal basis, including objecting to the use of your data for direct marketing purposes.

Please note that some data rights are subject to exceptions. For example, he55 may be unable to delete account data that is required to be retained under anti-money laundering or financial record-keeping regulations. Where a right cannot be exercised in full due to such a legal obligation, he55 will explain the reason in its response to your request.

8. Cookies and Tracking

he55 uses cookies — small text files stored on your device — to ensure the platform functions correctly and to improve your experience. We use the following categories of cookies:

• Essential cookies: required for the platform to function. These include session authentication cookies that keep you logged into your account. They cannot be disabled without impairing core platform functionality.
• Preference cookies: used to remember your platform settings such as language preference and display options, so you do not need to re-enter them each time you visit.
• Analytics cookies: used to collect anonymised data about how players navigate and use the platform, helping he55 identify areas for improvement. No personally identifiable data is included in analytics reporting.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the he55 platform. Essential session cookies cannot be turned off without preventing you from logging into your account.

9. Third-Party Services

The he55 platform integrates with a number of third-party service providers to deliver its full range of features. These providers may independently collect and process certain data when you interact with their services within the he55 platform. he55 is not responsible for the privacy practices of these independent providers beyond the data-sharing arrangements described in Section 4 above. The main third-party categories are:

• Game software providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi operate their own game platforms that are embedded within he55. Their game engines and RNG systems may collect session data independently for audit and fair-play certification purposes.
• Payment providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard process financial transaction data under their own terms of service and privacy policies. Players should review the relevant provider's privacy policy before using that payment method.
• Platform analytics and security services may process anonymised usage data to support fraud detection and platform performance monitoring. No personally identifiable data is shared with these services beyond what is described in this policy.

10. Protection of Minors

he55 is strictly an adults-only platform. Registration is prohibited for any person under the age of 21. he55 does not knowingly collect personal data from individuals under 21 years of age. If he55 becomes aware that personal data has been collected from a player who does not meet the minimum age requirement, that data will be deleted and the account will be closed immediately. If you believe that a minor has registered on the platform, please notify he55 at [email protected] without delay.

11. Changes to This Privacy Policy

he55 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. The revised policy will be published at he55.bio/privacy-policy with an updated effective date. Where changes are material, he55 will make reasonable efforts to notify registered players via the platform or registered contact details. Your continued use of the he55 platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy. If you do not agree to the revised policy, you must stop using the platform and may request account closure by contacting [email protected].

12. Contact and Data Requests

For any privacy-related queries, data subject access requests, or concerns about how he55 handles your personal data, please contact our support team. We aim to respond to all privacy requests within 30 days. Our support team is available 24/7 and operates on Bangladesh Standard Time (BST, UTC+6).