heh55 Privacy Policy

1. Introduction

heh55 is committed to protecting the privacy and personal data of all players who use our online casino and sports betting platform. We recognise that trust is the foundation of our relationship with every player in Bangladesh, and we take our data protection responsibilities seriously.

This Policy explains in clear and plain terms what information we collect about you, the reasons we collect it, how long we keep it, who we share it with, and what choices and rights you have in relation to your data. We encourage you to read this Policy carefully and to contact us if you have any questions about our data practices.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are available on the heh55 website. All three documents together govern your relationship with heh55.

2. Personal Data We Collect

heh55 collects personal data in the following categories. We collect only the data that is reasonably necessary for the purposes described in this Policy.

Category	Examples	Purpose
Identity Data	Full name, date of birth, National ID number, passport number	Account registration, age verification, KYC compliance
Contact Data	Email address, mobile number, residential address	Account communication, support, transaction notifications
Financial Data	bKash/Nagad/Rocket account references, transaction history, deposit and withdrawal records	Payment processing, fraud prevention, regulatory compliance
Technical Data	IP address, browser type, device identifiers, operating system, session timestamps	Security monitoring, fraud detection, platform optimisation
Usage Data	Games played, betting history, session duration, page interactions	Responsible gaming monitoring, product improvement, bonus eligibility
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Customer support, dispute resolution, quality assurance
Verification Documents	Scanned ID documents, proof of address, selfie photographs	KYC identity verification, withdrawal authorisation

heh55 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity document photographs for KYC purposes), or health data, unless you voluntarily disclose such information through a support interaction.

3. How We Collect Your Data

heh55 collects personal data through the following channels:

• Direct Registration: When you create a heh55 account, you provide your name, date of birth, email address, mobile number, and residential address directly through our registration form.
• Identity Verification: When you submit KYC documents (National ID, passport, proof of address, selfie), we collect and store those documents and the data within them.
• Transactions: Each deposit and withdrawal you make generates a transaction record that includes payment method references, amounts, timestamps, and processing status.
• Platform Usage: Our servers automatically log technical and usage data each time you access heh55, including your IP address, device information, pages visited, games launched, and session duration.
• Cookies and Similar Technologies: heh55 uses cookies, web beacons, and local storage to maintain your session, remember your preferences, and gather aggregated analytics. See Section 9 for full details.
• Support Interactions: When you contact heh55 support by email or live chat, we retain records of those communications for quality assurance, dispute resolution, and training purposes.
• Third-Party Verification Providers: Where we use third-party identity verification services to confirm your identity documents, those providers may return data to us confirming the result of the verification check.

4. How We Use Your Personal Data

heh55 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your heh55 player account, including processing login requests and account updates.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfers, Visa, and Mastercard, and to maintain accurate financial records.
• Identity & Age Verification: To confirm that you are at least 21 years of age and that the identity information you have provided is accurate, as required for responsible gaming compliance.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account sharing, bonus abuse, and other breaches of our Terms & Conditions.
• Responsible Gaming: To monitor usage patterns for signs of problem gambling and to give effect to deposit limits, cooling-off periods, and self-exclusion requests you have submitted.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
• Legal Compliance: To fulfil obligations under applicable laws, including financial record-keeping requirements and responses to lawful requests from regulatory or law enforcement authorities.
• Service Improvement: To analyse aggregated usage data and improve the performance, design, and game offering of the heh55 platform.
• Marketing Communications: To send you promotional emails and SMS messages about heh55 offers, bonuses, and events — but only where you have opted in to receive such communications. You may opt out at any time.

5. Legal Basis for Processing

heh55 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your player account, process transactions, and deliver the gaming services you have requested.
• Legal Obligation: Processing is necessary for heh55 to comply with its legal obligations, including age verification, anti-money laundering checks, and the maintenance of financial records.
• Legitimate Interests: Processing is carried out in pursuit of heh55's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming oversight — where those interests are not overridden by your rights.
• Consent: Where heh55 processes your data for optional purposes — such as sending marketing communications — we do so on the basis of your explicit consent. You may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Personal Data

heh55 does not sell, rent, or otherwise trade your personal data to third parties for their own commercial purposes. We share your personal data only in the following limited circumstances:

• Payment Processors: We share necessary transaction data with payment service providers (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners) to facilitate deposits and withdrawals. These providers process data only as required to complete the transaction.
• Identity Verification Providers: We use regulated third-party KYC providers to verify identity documents. These providers receive only the data necessary to conduct verification checks and are bound by strict confidentiality obligations.
• Game Providers: Game suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive the minimum data necessary to provide their gaming services within the heh55 platform (typically a pseudonymous player identifier and game session data).
• IT & Infrastructure Providers: We use third-party hosting, security, and analytics providers to operate the heh55 platform. These providers act as data processors under our instruction and may not use your data for their own purposes.
• Legal & Regulatory Authorities: heh55 will disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by law, or when we believe such disclosure is necessary to prevent fraud, protect the rights of heh55, or protect the safety of our players.
• Business Transfers: In the event that heh55 undergoes a merger, acquisition, or sale of assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer in advance.

7. International Data Transfers

heh55 is operated primarily to serve players in Bangladesh. Some of our third-party service providers — including game suppliers and infrastructure partners — may process data on servers located outside Bangladesh. Where data is transferred internationally, heh55 takes reasonable steps to ensure that equivalent levels of data protection are applied through contractual data processing agreements with those providers.

By using the heh55 platform, you acknowledge that your data may be processed in jurisdictions outside Bangladesh as part of our normal service delivery operations.

8. Data Retention

heh55 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to the following retention guidelines:

• Active Account Data: Retained for the full duration of your account's active period plus seven years after account closure, to meet standard financial record-keeping obligations.
• Transaction Records: All deposit and withdrawal records are retained for seven years from the date of the transaction.
• KYC Documents: Identity documents are retained for seven years from the date of verification or account closure, whichever is later.
• Support Communications: Email and chat transcripts are retained for three years from the date of the interaction.
• Marketing Consent Records: Records of your marketing opt-in or opt-out preferences are retained for the lifetime of your account plus two years, to demonstrate compliance with consent requirements.
• Technical Logs: Server and security logs are retained for a maximum of 12 months from the date of creation, unless a specific security investigation requires extended retention.

When personal data is no longer required and the applicable retention period has expired, heh55 securely deletes or anonymises that data so that it can no longer be linked to an identifiable individual.

9. Cookies & Tracking Technologies

heh55 uses the following types of cookies and similar technologies on the platform:

• Essential Cookies: These cookies are strictly necessary to operate the heh55 website. They maintain your login session, remember your account preferences, and ensure the platform functions correctly. Essential cookies cannot be disabled without preventing you from using the platform.
• Performance Cookies: These cookies collect aggregated, anonymous data about how players use heh55 — such as which pages are most visited and how long sessions last. We use this data to improve the platform's performance and design. No personally identifiable information is collected by performance cookies.
• Functional Cookies: These cookies remember choices you have made on heh55 — such as your preferred language, display settings, or game lobby layout — to provide a more personalised experience during future visits.

heh55 does not use third-party advertising cookies, retargeting pixels, or cross-site behavioural profiling technologies. You can manage cookie settings through your browser's privacy preferences. Disabling non-essential cookies will not prevent you from using the core features of heh55.

10. Security Measures

heh55 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• All data transmissions between your device and heh55 servers are encrypted using 256-bit SSL/TLS protocols.
• Player account passwords are stored using one-way cryptographic hashing. heh55 staff cannot retrieve your password in plain text.
• Access to personal data within heh55's internal systems is restricted on a strict need-to-know basis. Staff members access only the data required to perform their specific role.
• heh55 conducts regular internal security reviews and vulnerability assessments of its platform infrastructure.
• Payment card data is never stored on heh55 servers. All card transactions are processed through PCI-DSS compliant payment gateways.
• In the event of a personal data breach that poses a risk to your rights, heh55 will notify affected players as soon as practicable and will take all reasonable steps to contain and remediate the breach.

11. Your Data Protection Rights

As a heh55 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of all personal data that heh55 holds about you. We will respond within five business days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections (such as updating your phone number) can be made directly in your account settings.
• Right to Erasure: You may request that heh55 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal obligations to retain certain records for a defined period.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute over the accuracy of your data is being resolved.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format, or that we transfer it directly to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis, and where you believe your interests override ours in the specific context.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

12. Children's Privacy

The heh55 platform is strictly intended for adults aged 21 and above. heh55 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has registered an account or provided personal data, we will immediately close that account, delete the data, and return any deposits in accordance with our responsible gaming obligations.

If you are a parent or guardian and believe that your child has registered an account on heh55, please contact us immediately at [email protected]. We will investigate and take appropriate action within 24 hours of receiving your report.

13. Third-Party Links

The heh55 platform may contain references to third-party services — such as game providers, payment partners, or external resources — whose own privacy practices are governed by their respective privacy policies. heh55 is not responsible for the privacy practices of third-party services and does not endorse or accept liability for the content or data handling of any external parties.

We encourage you to review the privacy policy of any third-party service you interact with in connection with heh55.

14. Changes to This Privacy Policy

heh55 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via the email address on file or through an on-screen notification upon login. The revised Policy will be published on this page with an updated effective date at the top.

Your continued use of heh55 following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes, you should stop using the platform and contact us to close your account.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way heh55 handles your personal data, please contact our support team using the details below:

• Support Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)
• Response Time: Data rights requests acknowledged within 24 hours; fully resolved within five business days.

heh55 is committed to resolving all privacy-related enquiries fairly and promptly. If you are not satisfied with our response to a privacy concern, you may escalate the matter through the dispute resolution process outlined in our Terms & Conditions.