tap55 Privacy Policy

tap55 is an online betting and casino platform operated at tap55.io, designed specifically for players based in Bangladesh. References to "tap55", "we", "us", or "our" throughout this Privacy Policy refer to the tap55 platform and its operating entity.

tap55 acts as the data controller in respect of the personal data collected from registered players and website visitors. As data controller, tap55 determines the purposes and means by which personal data is processed and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

For all data-related enquiries, requests, or complaints, players may contact tap55 at: [email protected]. All correspondence should include the subject line "Data Privacy Request" and the registered mobile number associated with the player's tap55 account to facilitate prompt identification and response.

tap55 collects personal data across the following categories, as summarised in the data table above. In addition to the categories described there, tap55 may also collect the following data in specific circumstances:

• Verification Documents: Where KYC (Know Your Customer) verification is required, tap55 may request scanned copies or photographs of government-issued identity documents, such as a Bangladesh National Identity Card (NID), passport, or driving licence, together with a recent utility bill or bank statement as proof of address.
• Selfie Verification: In certain circumstances, tap55 may request a live selfie photograph to confirm that the person submitting identity documents is the same individual as the account holder.
• Source of Funds: For players making large or unusually structured transactions, tap55 may request documentary evidence of the source of funds used for deposits, such as a salary slip, bank statement, or business income documentation, in compliance with anti-money-laundering obligations.
• Responsible Gaming Declarations: Where a player voluntarily discloses information about their gambling habits, financial circumstances, or wellbeing in the context of using responsible gaming tools, tap55 will record this information for the purpose of delivering appropriate player protection measures.

tap55 does not intentionally collect special category data (such as health data, racial or ethnic origin, political opinions, religious beliefs, or biometric data) except where such data is incidentally included in documents provided for identity or source-of-funds verification. Where this occurs, such data will not be further processed beyond the immediate verification purpose and will be stored securely in accordance with Section 9 of this policy.

tap55 collects personal data through the following mechanisms:

• Direct Provision: Data you provide during registration, account updates, KYC verification, payment setup, customer support interactions, and responsible gaming tool activation.
• Automated Collection: Technical and usage data collected automatically when you access the tap55 platform, including via cookies, server logs, session tracking, and device fingerprinting technologies.
• Third-Party Verification Providers: Identity and age verification data returned by regulated KYC verification partners following submission of your identity documents through the tap55 platform.
• Payment Processors: Transaction confirmation data received from payment providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard following deposit or withdrawal processing.
• Fraud Prevention Services: Risk scores, device reputation signals, and behavioural indicators received from third-party fraud detection providers integrated within the tap55 platform infrastructure.

tap55 uses the personal data it collects for the following specific and lawful purposes:

• Account Management: Creating, maintaining, and administering your tap55 player account, including processing deposits and withdrawals, recording bet and game activity, and responding to account-related queries.
• Identity & Age Verification: Confirming that all registered players are natural persons aged 21 or above, in compliance with tap55's player protection obligations.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and maintaining accurate transaction records in Bangladeshi Taka (৳).
• Fraud & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and other forms of prohibited conduct as defined in the tap55 Terms & Conditions.
• Responsible Gaming: Monitoring player activity patterns for indicators of problem gambling and, where tools such as deposit limits, cooling-off periods, or self-exclusion are activated, administering those tools effectively.
• Customer Support: Responding to support requests, resolving disputes, and maintaining records of communications for quality assurance and audit purposes.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the performance, design, and feature set of the tap55 platform for the benefit of all Bangladesh players.
• Legal Compliance: Retaining records and responding to lawful requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction as required by applicable law.
• Communications: Sending transaction confirmation messages, security alerts, policy update notices, and — where you have opted in — promotional communications about tap55 offers and events.

tap55 does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:

• KYC & Identity Verification Providers: Regulated third-party providers engaged to perform age and identity verification checks on behalf of tap55. These providers are contractually bound to process data only for the specified verification purpose and in accordance with applicable data protection standards.
• Payment Processing Partners: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data necessary to process your requested transaction. tap55 does not share full identity documents with payment processors.
• Fraud Prevention & Security Services: Third-party fraud detection platforms that receive anonymised or pseudonymised risk signals to assist in identifying suspicious account activity. These providers do not receive your full identity profile.
• Technology Infrastructure Providers: Cloud hosting, database management, and cybersecurity vendors who process data on tap55's behalf under strict data processing agreements that prohibit any independent use of the data.
• Legal & Regulatory Authorities: tap55 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by a valid legal order, court directive, or applicable regulatory obligation. tap55 will, where legally permissible, notify the affected player of such a disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of tap55's assets, personal data held by tap55 may be transferred to the acquiring entity, subject to the acquiring entity assuming the same data protection obligations as described in this policy. Affected players will be notified prior to any such transfer.

All third parties with whom tap55 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using that data for any purpose beyond the specific operational purpose for which it was shared.

tap55 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Active Account Data: Personal and transactional data associated with an active tap55 account is retained for the full duration of the account's active status plus a minimum of 5 years following account closure.
• KYC Verification Documents: Identity documents submitted for KYC purposes are retained for a minimum of 5 years following account closure, in compliance with applicable anti-money-laundering record-keeping obligations.
• Financial Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of 7 years from the date of the transaction.
• Customer Support Records: Communications with tap55 customer support, including chat transcripts and email correspondence, are retained for 3 years from the date of the most recent interaction.
• Technical & Usage Logs: Server logs and session data are retained for up to 12 months for security and fraud investigation purposes, after which they are anonymised or deleted.
• Marketing Preferences: Records of your marketing opt-in or opt-out status are retained for the duration of your account plus 3 years to demonstrate compliance with applicable marketing regulations.

When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, tap55 will securely delete or permanently anonymise that data. Deletion processes are carried out in accordance with industry-standard data sanitisation procedures.

As a tap55 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and include your registered mobile number for account identification:

• Right of Access: You may request a copy of all personal data that tap55 holds about you. tap55 will provide this information within 30 days of receiving a verified request, free of charge for the first request per calendar year.
• Right to Rectification: If any personal data held by tap55 is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections may require supporting documentation for verification.
• Right to Erasure: You may request the deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose it was collected. This right is subject to overriding legal obligations — for example, tap55 cannot delete transaction records required to be retained under anti-money-laundering law.
• Right to Restriction: You may request that tap55 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing pending verification of tap55's legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request that tap55 provide your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your personal data where that processing is based on tap55's legitimate interests. tap55 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications or analytics cookies), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

tap55 uses cookies and similar tracking technologies on its platform. The following categories of cookies may be placed on your device when you access tap55.io:

• Strictly Necessary Cookies: These cookies are essential for the tap55 platform to function. They maintain your login session, store your language preference, and enable core platform features such as the bet slip and account balance display. These cookies cannot be disabled without preventing core platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players use the tap55 platform, including which pages are visited most frequently and where errors occur. This data is used solely to improve the platform experience and is not linked to individual player identities.
• Functional Cookies: These cookies remember your preferences and personalisation choices — such as your preferred sports view or default stake amount — to deliver a more tailored experience on subsequent visits.
• Security Cookies: These cookies support tap55's fraud detection and account security systems by identifying unusual access patterns, detecting bots, and flagging potentially compromised sessions for review.

You can manage or disable non-essential cookies through your browser settings at any time. Most modern browsers allow you to view, delete, and block cookies on a per-site basis. Please note that disabling certain cookies may affect the functionality of the tap55 platform, particularly in relation to personalisation and analytics features.

tap55 does not use cross-site tracking cookies for the purpose of serving targeted advertising on third-party websites. Cookies placed by tap55 operate exclusively within the tap55.io domain.

tap55 implements a layered security architecture to protect the personal data it holds. Key technical and organisational security measures in place include:

• TLS 1.2/1.3 encryption for all data in transit between player devices and tap55 servers.
• AES-256 encryption for sensitive data fields stored at rest, including passwords, payment identifiers, and identity document references.
• Role-based access controls (RBAC) ensuring that tap55 staff members can only access personal data that is strictly necessary for their specific operational role.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security specialists.
• 24/7 automated intrusion detection and anomaly monitoring on all platform infrastructure.
• Secure data centre facilities with physical access controls, redundant power and connectivity, and environmental monitoring.
• Staff data protection training and confidentiality obligations contractually binding on all employees and contractors who handle player data.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, tap55 will notify affected players without undue delay and will document the breach, its impact, and the remedial actions taken in accordance with applicable data protection obligations.

The tap55 platform is strictly intended for adults aged 21 and above. tap55 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. Age verification is conducted as a mandatory step during the registration process and, where required, through subsequent KYC document checks.

If tap55 discovers or is notified that personal data has been collected from an individual who is under the age of 21, the associated account will be immediately suspended, all transactions will be voided, and the personal data of the minor will be securely deleted from tap55's systems to the extent permitted by legal record-keeping obligations.

Parents or guardians who have reason to believe that their child has registered on the tap55 platform should contact [email protected] immediately with the subject line "Minor Account Report". tap55 will prioritise all such reports and take immediate action upon verification.

The tap55 platform integrates with a number of third-party service providers to deliver its full feature set. These include live casino game studios such as Evolution Gaming and Ezugi, payment processors including bKash, Nagad, Rocket, and Upay, and technology infrastructure providers supporting platform hosting and security.

Each of these third-party providers operates under their own privacy policies and data protection frameworks. tap55 requires all third-party providers who process personal data on its behalf to enter into data processing agreements that align with the standards described in this Privacy Policy and that prohibit any use of player data for purposes beyond the specific service being provided to tap55.

tap55 does not operate social media pages, external affiliate platforms, or third-party promotional microsites. Any website or social media page purporting to represent tap55 that is not accessible directly at tap55.io should be treated with caution and reported to [email protected].

tap55 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. Where amendments are material — such as changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — tap55 will notify registered players via their registered email address or mobile number at least 14 days before the changes take effect.

The "Last Updated" date at the top of this Privacy Policy and in the Table of Contents will be revised each time the policy is amended. Players are encouraged to review this page periodically to stay informed of any updates. Continued use of the tap55 platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

If you do not agree with the terms of an amended Privacy Policy, you should discontinue use of the tap55 platform and contact [email protected] to request account closure and, where applicable, the deletion of your personal data subject to applicable legal retention obligations.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data tap55 holds about you, please contact the tap55 data team at:

• Email: [email protected] — subject line: "Data Privacy Request"
• Response Time: Within 5 business days (Bangladesh Standard Time, UTC+6)
• Language: English

tap55 is committed to resolving all data privacy concerns promptly and fairly. If you submit a complaint and are not satisfied with tap55's response within 30 calendar days, you may escalate the matter to the relevant data protection authority or consumer protection body in Bangladesh.

tap55 will maintain a record of all data rights requests and complaints received, together with the actions taken in response, for a minimum period of 3 years from the date of resolution.