558h Privacy Policy

1 Information We Collect

558h collects personal information from you in the course of account registration, identity verification, payment processing, gameplay, and customer support interactions. The categories of personal data we collect are described below. We collect only the information that is reasonably necessary to provide the services you have requested and to comply with our legal obligations.

1.1 Information You Provide Directly

When you register for a 558h account or use our services, you voluntarily provide us with personal information including but not limited to:

• Identity data: your full legal name, date of birth, and national identity card (NID) number or passport number (where provided for verification purposes).
• Contact data: your registered mobile number and email address.
• Address data: your residential address in Bangladesh, including district and division.
• Financial data: your bKash, Nagad, Rocket, or Upay mobile banking number; Visa or Mastercard details (card number, expiry, and billing postcode) where applicable. Full card numbers are not stored on 558h servers — they are passed directly to our encrypted payment gateway.
• Verification documents: scanned or photographed copies of identity documents submitted during the Know Your Customer (KYC) verification process.
• Support communications: the content of any messages, emails, or live chat transcripts exchanged between you and the 558h support team at [email protected].

1.2 Information Collected Automatically

When you access and use the 558h platform, our systems automatically collect certain technical and behavioural data, including:

• Device and browser data: your IP address, device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, and device identifier.
• Usage data: pages visited, games launched, bet amounts placed, session duration, navigation paths, and in-platform search queries.
• Transaction data: deposit and withdrawal history, transaction timestamps, transaction reference numbers, and payment method used.
• Geolocation data: approximate geographic location derived from your IP address, used to confirm your presence in Bangladesh and to comply with territorial access controls. We do not collect precise GPS-level location data.
• Cookie and tracking data: data collected through first-party cookies, session tokens, and analytics scripts, as described in Section 4 of this Policy.

2 How We Use Your Data

558h uses the personal information we collect for the following purposes. Each purpose is tied to a legitimate legal or operational basis, which is described further in Section 3.

2.1 Marketing Communications

558h may send you promotional communications — including bonus offers, seasonal promotions tied to events such as BPL, IPL, Pohela Boishakh, and Eid, and platform news — via SMS or email to your registered contact details. You will only receive marketing communications if you have given your consent at the time of registration or subsequently opted in through your account settings. You may withdraw your consent to marketing communications at any time by contacting [email protected] or adjusting your notification preferences in your account dashboard.

2.2 Responsible Gaming Monitoring

558h uses automated systems to monitor player behaviour for indicators of problem gambling. This monitoring uses your gameplay data, deposit frequency, session duration, and wagering patterns to identify unusual activity. Where the system flags a concern, a member of our responsible gaming team may contact you via your registered email. This processing is carried out in the interest of player welfare and forms part of our duty of care to all registered players.

3 Legal Basis for Processing

558h processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to fulfil our obligations under the account registration agreement and Terms & Conditions — including providing gaming services, processing payments, and handling withdrawals — is carried out on the basis that it is necessary for the performance of a contract to which you are a party.
• Legal obligation: Certain processing activities — including KYC identity verification, AML transaction monitoring, and the retention of financial records — are required by applicable law. 558h processes personal data for these purposes to comply with its legal obligations.
• Legitimate interests: 558h processes some personal data on the basis of legitimate business interests, including fraud prevention, platform security monitoring, responsible gaming oversight, and internal analytics used to improve the platform. Where we rely on legitimate interests, we have assessed that our interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent — primarily for sending marketing communications — you retain the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out before withdrawal.

4 Cookies and Tracking Technologies

The 558h platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. A cookie is a small text file placed on your device by our web server when you visit the 558h platform. Cookies allow us to recognise your device on return visits, maintain your session, and remember your preferences.

4.1 Types of Cookies Used

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing cookies. These cannot be disabled without disrupting core platform functionality such as login, wallet access, and game loading.
• Performance and analytics cookies: Used to collect anonymous aggregated data about how visitors use the 558h platform — pages visited, time on page, error events — to help us improve the product. This data is processed in aggregate and is not linked to individual player identities.
• Functional cookies: Used to remember your preferences, such as your preferred language setting and display preferences. These improve your experience but are not essential for core platform operation.
• Session cookies: Temporary cookies deleted automatically when you close your browser. Used to maintain your active session and shopping cart state during a single visit.

4.2 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to block all cookies, block third-party cookies only, or delete cookies that have already been set. Please note that blocking strictly necessary cookies will prevent you from logging in to your 558h account or accessing the gaming lobby. Instructions for managing cookies are available in the help documentation for your specific browser (Chrome, Firefox, Safari, Edge, or Samsung Internet).

5 Data Sharing and Disclosure

558h does not sell or rent your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

5.1 Service Providers

558h engages trusted third-party service providers who process personal data on our behalf as data processors. These include:

• Payment gateway providers: who process deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, Visa, and Mastercard integrations. These providers are contractually obligated to process your financial data only for the purpose of executing the payment transaction.
• Game content providers: including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. Game providers receive only the data necessary to render the game (e.g., player session token and stake amount). They do not receive your full identity or payment details.
• KYC and identity verification services: who assist in verifying the authenticity of identity documents submitted by players during the account verification process.
• Cloud hosting and infrastructure providers: who provide the servers, databases, and network infrastructure on which the 558h platform operates. These providers are bound by strict data processing agreements.
• Analytics providers: who process anonymised usage data to help 558h understand platform performance and user behaviour.

5.2 Legal and Regulatory Disclosures

558h may disclose your personal data to competent authorities — including law enforcement agencies, financial intelligence units, and regulatory bodies — where we are legally required to do so, or where disclosure is necessary to prevent, detect, or investigate fraud, money laundering, or other criminal activity. We will notify you of any such disclosure where we are legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the 558h business, personal data held by 558h may be transferred to the acquiring entity as part of the transaction. In such circumstances, we will ensure that the receiving entity is bound by privacy obligations at least as protective as those set out in this Policy, and we will notify affected players by email prior to any transfer taking effect.

6 Data Retention

558h retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to provide you with our services, and to comply with our legal obligations. The following general retention principles apply:

• Active account data: Personal data associated with an active 558h account is retained for the duration of the account's existence and for a period of at least 5 years following account closure, in compliance with applicable financial record-keeping obligations.
• Transaction records: Deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years from the date of the transaction, in accordance with AML record-keeping requirements.
• KYC verification documents: Identity verification documents are retained for the period required by applicable law, which is generally 5 years from the date of verification or from the date of the last transaction on the account.
• Support communications: Customer support tickets, email correspondence, and live chat transcripts are retained for up to 3 years from the date of the interaction, or longer if the matter relates to an ongoing dispute or legal proceeding.
• Marketing consent records: Records of your marketing consent or opt-out are retained for the period of your account and for 2 years following account closure, to demonstrate compliance with consent obligations.
• Cookie and analytics data: Anonymised analytics data derived from cookies is retained for up to 26 months from collection.

When your personal data is no longer required for any of the above purposes and no legal obligation requires its continued retention, 558h will securely delete or anonymise that data in accordance with our internal data deletion procedures.

7 Data Security

558h implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security programme includes the following core measures:

• SSL/TLS encryption: All data transmitted between your device and the 558h platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser's address bar confirms that your connection is encrypted.
• Encrypted data storage: Sensitive personal data, including identity document records and financial data, is stored in encrypted form at rest. Encryption keys are managed separately from the encrypted data.
• Access controls: Access to personal data within 558h's systems is restricted on a need-to-know basis. Only staff members whose role requires access to specific categories of personal data are granted that access. Access permissions are reviewed regularly.
• Two-factor authentication (2FA): Administrative access to systems holding personal data requires multi-factor authentication. Players are also encouraged to enable 2FA on their 558h accounts for an additional layer of protection.
• Penetration testing and security audits: 558h conducts periodic security assessments, including vulnerability scanning and penetration testing, to identify and address weaknesses in our platform infrastructure.
• Incident response: 558h maintains an incident response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players promptly and take immediate steps to contain and remediate the breach.

While 558h takes these measures to protect your personal data, no system is entirely immune to risk. You also play an important role in keeping your account secure — please refer to Section 3 of the 558h Terms & Conditions for guidance on your account security responsibilities.

8 Your Privacy Rights

As a 558h player, you hold the following rights in relation to your personal data. These rights are consistent with internationally recognised data protection principles. To exercise any of the rights listed below, please contact 558h at [email protected] with the subject line "Privacy Rights Request".

• Right of access: You have the right to request a copy of the personal data that 558h holds about you, including information about how it is used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain contact details directly within your 558h account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer needed for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the processing was unlawful. Please note that this right is subject to overriding legal obligations — for example, we are required to retain financial records for a minimum of 5 years and cannot delete them on request during this period.
• Right to restriction of processing: You may request that we restrict our processing of your personal data in certain circumstances — for example, while the accuracy of data is contested, or while an objection to processing is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes. We will honour your objection unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent — including the receipt of marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

8.1 Response Timeframes

558h will acknowledge all privacy rights requests within 5 business days of receipt and will provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days with prior notification. All privacy requests should be sent in English to [email protected] to ensure they are handled accurately and efficiently.

This Privacy Policy was last reviewed and updated on 1 January 2026. 558h reserves the right to update this Policy at any time. Material changes will be communicated to registered players via their registered email address. Continued use of the 558h platform after any revision constitutes your acceptance of the updated Policy.