Privacy Policy — tap555

This Privacy Policy ("Policy") describes how tap555 ("tap555", "we", "us", "our") collects, uses, processes, stores, and discloses personal information obtained from individuals ("you", "your", "User") who access or use the tap555 online casino and sports betting platform, available at https://tap555.bio (the "Platform").

tap555 is committed to handling your personal data responsibly and in accordance with internationally recognised data protection principles. By registering an account, accessing the Platform, or using any of the services offered by tap555, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy applies to all registered players, visitors, and any individual whose personal data is processed by tap555 in connection with the Platform. It applies in addition to, and should be read alongside, our Terms & Conditions and our Responsible Gaming policy.

For the purposes of this Policy, tap555 acts as the data controller in respect of personal data collected through the Platform. As data controller, tap555 determines the purposes for which and the means by which personal data is processed.

All data protection enquiries, access requests, and complaints relating to tap555's handling of personal data should be directed to the tap555 Data Protection contact, reachable via the support channels described in Section 15 of this Policy. tap555 will respond to all substantiated data protection requests within a reasonable timeframe.

tap555 collects the following categories of personal data in connection with the operation of the Platform:

tap555 does not collect or process special categories of sensitive personal data (such as health data, biometric data for identification purposes beyond standard KYC liveness checks, political opinions, or religious beliefs) unless this is strictly necessary for regulatory compliance and you have provided explicit consent.

tap555 collects personal data through the following methods:

• Direct Collection: Data you voluntarily provide during account registration, identity verification, payment processing, promotional opt-ins, and support communications.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, via server logs, cookies, pixel tags, and similar tracking technologies. See Section 8 for details on our Cookie Policy.
• Third-Party Sources: Data received from payment processors (bKash, Nagad, Rocket, Upay, partner banks) to confirm transactions; data received from identity verification service providers during KYC checks; data received from fraud prevention and anti-money-laundering screening services.
• Publicly Available Sources: In limited circumstances, tap555 may verify information against publicly available records for compliance or fraud prevention purposes.

tap555 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your tap555 account; providing access to the Platform's features; enabling login and session management.
• Identity and Age Verification: Confirming that you are at least 18 years of age and that you are who you claim to be, in accordance with responsible gaming obligations and anti-money-laundering requirements.
• Payment Processing: Processing deposits and withdrawals in Bangladeshi Taka (BDT) via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer); reconciling financial transactions; handling refunds and disputes.
• Platform Operation and Game Delivery: Providing access to casino games, sports betting markets, and live dealer tables; recording bet placement and settlement; calculating and crediting winnings.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct; protecting the integrity of the Platform.
• Responsible Gaming Compliance: Monitoring gaming activity to identify patterns of potentially problematic gambling; administering self-exclusion requests, deposit limits, and session time controls; contacting players at risk in accordance with our responsible gaming obligations.
• Regulatory Compliance: Meeting applicable legal and regulatory obligations, including record-keeping, reporting, and cooperation with lawful authority requests.
• Customer Support: Responding to enquiries, complaints, and disputes; providing assistance via live chat and email.
• Platform Improvement: Analysing usage patterns and technical performance data to improve the Platform's functionality, user experience, and stability.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time by contacting support.

tap555 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you accepted at registration, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering laws, age verification requirements, and financial record-keeping obligations.
• Legitimate Interests: Processing carried out in pursuit of tap555's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gaming monitoring, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications and optional data uses. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

tap555 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Your data may be shared in the following circumstances only:

• Payment Service Providers: Your financial data is shared with payment processors (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank) to the extent necessary to process deposits and withdrawals. These providers are contractually bound to use your data only for the purpose of executing the relevant transaction.
• Identity Verification Providers: Your identity documents and verification data may be shared with third-party KYC and age-verification service providers engaged by tap555, who process this data strictly on our instructions for verification purposes.
• Fraud and Security Services: Technical and account data may be shared with fraud detection, anti-money-laundering screening, and cybersecurity service providers to protect the integrity of the Platform and comply with applicable obligations.
• Regulatory and Legal Authorities: tap555 may disclose personal data to competent regulatory, law enforcement, or judicial authorities where required to do so by law, court order, or binding regulatory directive. tap555 will notify affected users of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of tap555's assets, personal data held by tap555 may be transferred to the successor entity, subject to equivalent data protection obligations. Users will be notified of any such transfer via the Platform or registered email address.
• Group Companies: tap555 may share data with affiliated group entities for internal administrative, compliance, or operational purposes, subject to the same data protection standards described in this Policy.

tap555 uses cookies and similar tracking technologies (pixel tags, web beacons, local storage) to operate the Platform effectively, analyse user behaviour, and — where you have consented — to deliver relevant promotional content.

You can manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to use the Platform, including logging in and processing payments. Disabling analytics or marketing cookies will not affect your core gaming experience.

tap555 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations.

• Active Account Data: Retained for the duration of your account's existence on the Platform plus a minimum post-closure retention period required by applicable financial regulations (typically 5 years from account closure).
• Transaction Records: Financial transaction data — including deposit and withdrawal records in BDT — is retained for a minimum of 5 years from the date of the transaction to comply with anti-money-laundering record-keeping obligations.
• KYC and Verification Documents: Identity documents submitted for age and identity verification are retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later.
• Support and Communications Data: Live chat transcripts and email correspondence are retained for up to 3 years from the date of the interaction, unless a longer retention period is required in connection with an ongoing dispute or regulatory investigation.
• Gaming Activity Data: Bet history and game activity records are retained for a minimum of 5 years from the date of the activity.
• Marketing Data: Where you have consented to receive marketing communications, your marketing preference data is retained until you withdraw consent, after which it is deleted within 30 days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

tap555 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

• 256-Bit SSL Encryption: All data transmitted between your device and tap555's servers is encrypted using industry-standard 256-bit SSL (Secure Socket Layer) / TLS (Transport Layer Security) technology. This applies to login sessions, payment transactions, and all account interactions.
• Encrypted Data Storage: Sensitive data fields — including payment account details and identity verification data — are stored in encrypted form within tap555's secure database infrastructure.
• Access Controls: Access to personal data within tap555's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary for their specific role, and all internal data access is logged and auditable.
• Two-Factor Authentication: tap555 encourages all players to enable two-factor authentication (2FA) on their accounts as an additional layer of protection against unauthorised login.
• Penetration Testing and Security Audits: The Platform undergoes regular security assessments, including vulnerability scanning and penetration testing, to proactively identify and remediate potential security weaknesses.
• Data Breach Response: In the event of a confirmed personal data breach affecting your rights and freedoms, tap555 will notify affected users without undue delay and take all necessary steps to contain, remediate, and investigate the breach.

As a tap555 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact the tap555 support team using the details in Section 15. tap555 will respond to all valid requests within a reasonable timeframe and without charge in the majority of circumstances.

• Right of Access: You have the right to request a copy of the personal data tap555 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You may update most account information directly within your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that tap555 may be required to retain certain data by law (e.g., financial transaction records) even where an erasure request is made.
• Right to Restriction of Processing: You have the right to request that tap555 restricts the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data pending verification.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where tap555 relies on legitimate interests as the legal basis, and you believe your fundamental rights and freedoms override those interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where tap555 processes your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

tap555 implements age verification procedures at registration and during the KYC process to prevent underage access to the Platform. If tap555 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 18, the relevant account will be immediately closed, all data will be securely deleted (subject to any mandatory retention obligations), and any funds associated with the account will be handled in accordance with applicable law.

If you are a parent or guardian and believe that a minor in your care has registered with tap555 or provided personal data to the Platform, please contact the tap555 support team immediately using the contact details in Section 15. We will investigate and take appropriate action without delay.

The tap555 Platform may contain references to third-party services, including payment providers such as bKash, Nagad, Rocket, and Upay. When you interact with a third-party payment interface (for example, completing a bKash transfer), you are temporarily redirected to that third party's environment, which is governed by the third party's own privacy policy and terms of service.

tap555 has no control over and accepts no responsibility for the privacy practices or content of any third-party services accessed via the Platform. We encourage you to review the privacy policies of all third-party services you use in connection with your tap555 account, particularly your chosen payment provider.

tap555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, regulatory requirements, or the Platform's features and services. The effective date of the current version of this Policy is displayed at the top of this page.

Where a change to this Policy is material — for example, where tap555 introduces a new purpose of processing or a new category of data sharing — registered players will be notified via their registered email address or via a prominent notice on the Platform at login. Minor updates, such as clarifications of existing practices or typographical corrections, may be made without specific notice.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change to this Policy, you must cease using the Platform and contact support to request account closure.

For all data protection enquiries, subject access requests, consent withdrawal requests, or privacy-related complaints, please contact the tap555 Data Protection team through the following channels:

• Live Chat: Available 24/7 directly within the tap555 Platform. This is the fastest way to reach the tap555 support and data protection team. Average response time: 2–5 minutes.
• Email: [email protected] — please include your registered username, a clear description of your request or complaint, and any relevant account details. Responses are typically provided within 24 hours.