heh55 Privacy Policy

heh55 collects personal data from players in Bangladesh in order to operate the Platform, verify player identities, process financial transactions in BDT, and maintain a safe and fair gaming environment. We collect data only where there is a legitimate and proportionate reason to do so. Below is a complete account of the categories of personal data we collect and the circumstances under which each category is gathered.

1.1 Registration Data

When you create a heh55 account, you provide the following information voluntarily:

• Full legal name as stated on your national identity document
• Date of birth (used to verify that you meet the 18+ age requirement)
• Email address (used for account communication and verification links)
• Active Bangladeshi mobile phone number (used for OTP two-factor authentication)
• Preferred mobile financial service account reference — bKash, Nagad, Rocket, or Upay mobile number registered in your name
• A password of your choosing (stored as a salted cryptographic hash — heh55 staff cannot read your plain-text password)

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to protect the integrity of the Platform, heh55 may request the following documents at registration, at the point of first withdrawal, or during periodic account reviews:

• Scanned or photographed copy of a government-issued photo ID (National ID Card, Passport, or Driving Licence)
• Proof of address issued within the last 90 days (utility bill, bank statement, or government correspondence)
• Confirmation of payment method ownership (screenshot of your bKash, Nagad, Rocket, or Upay account in your registered name)
• Selfie photograph holding your identity document, where specifically requested for enhanced verification

1.3 Financial Transaction Data

Every deposit and withdrawal processed through your heh55 account generates a transaction record. This record includes:

• Transaction reference number issued by the payment provider
• Amount in BDT and the timestamp of the transaction
• Payment method used (bKash, Nagad, Rocket, Upay, or bank transfer)
• Transaction status (pending, completed, reversed, or failed)

heh55 does not store full bank account numbers, card numbers, or mobile banking PINs. Payment credentials are handled directly by the respective payment providers (bKash, Nagad, Dutch-Bangla Bank, and others) under their own privacy and security frameworks.

1.4 Gaming Activity Data

heh55 maintains records of all wagering activity conducted through your account, including:

• Game sessions — game title, provider (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, etc.), session start/end time, and stake amounts
• Bet history — individual wager records including amount, outcome, and net result in BDT
• Sports betting selections — fixture, market, odds, stake, and settlement result
• Bonus redemption history — which promotions were activated, the associated wagering progress, and expiry outcomes

1.5 Technical and Device Data

When you access the heh55 Platform through a browser or mobile application, our servers automatically log the following technical data:

• IP address (used for geolocation, fraud detection, and duplicate account monitoring)
• Device type, operating system version, and browser type/version
• Screen resolution and device language settings
• Session timestamps, pages visited within the Platform, and click-path data
• Referring URL (the web address from which you navigated to heh55, if applicable)

1.6 Communications Data

When you contact heh55 customer support — whether by email to [email protected] or via live chat — we retain a record of the conversation, including the content of messages exchanged, the date and time of the interaction, and any attachments or screenshots you submit. These records are used for quality assurance, dispute resolution, and training purposes.

heh55 processes personal data only for defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The following sets out, in detail, the purposes for which heh55 uses the personal data it holds.

2.1 Account Operation and Service Delivery

The primary use of your personal data is to operate your heh55 account and deliver the services you have requested. This includes processing your deposits and withdrawals in BDT via bKash, Nagad, Rocket, or Upay; granting access to games from Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and other providers; applying and managing bonus offers; and providing customer support. Without processing your registration and financial data for these purposes, heh55 is unable to provide the Platform to you.

2.2 Identity Verification and Fraud Prevention

heh55 uses identity and KYC data to verify that account holders meet the minimum age requirement of 18 years and that the personal details on file match the documents provided. We also use technical data — including IP address, device fingerprint, and payment method records — to detect and prevent duplicate accounts, unauthorised account access, payment fraud, money laundering, and bonus abuse. These fraud prevention activities protect both the integrity of the Platform and the interests of legitimate players.

2.3 Responsible Gaming Monitoring

heh55 uses gaming activity data — including session frequency, session duration, deposit patterns, and wagering volumes — to monitor for indicators of problem gambling. Where our responsible gaming systems identify patterns consistent with harmful gambling behaviour, heh55 may reach out to the account holder with information about available support tools (deposit limits, session reminders, self-exclusion), or may temporarily restrict account activity where legally required or where serious risk of harm is identified.

2.4 Platform Improvement and Analytics

Aggregate, anonymised data derived from gaming activity, navigation patterns, and device data is used to improve the heh55 Platform — including improving game loading performance, refining the user interface for Bangladesh market players using mobile devices, and optimising payment processing flows for bKash and Nagad transactions. Analytics processing uses data that cannot be traced back to an individual player.

2.5 Marketing Communications

With your explicit opt-in consent, heh55 may contact you by email or SMS with information about promotions, new games, cricket betting markets (including BPL and T20 World Cup), and seasonal offers relevant to Bangladesh. You may withdraw your marketing consent at any time by updating your notification preferences in your account dashboard or by writing to [email protected]. Withdrawal of marketing consent does not affect heh55's ability to send transactional service communications (e.g., deposit confirmations, withdrawal status updates, or security alerts).

heh55 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data only in the specific, limited circumstances described below, and only to the extent necessary for each stated purpose.

3.1 Payment Service Providers

To process deposits and withdrawals in BDT, heh55 shares transaction-related data (your registered mobile number, transaction amount, and reference) with your chosen payment service provider — bKash, Nagad, Rocket, Upay, or your bank (City Bank, BRAC Bank, Dutch-Bangla Bank, Islami Bank, or Sonali Bank). Each payment provider operates under its own privacy policy and data security framework. heh55 shares only the minimum data necessary to initiate and confirm each transaction.

3.2 Game Technology Providers

Games hosted on the heh55 Platform are delivered by third-party game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. To launch a game and record your session, your account identifier and session token are shared with the relevant game provider. These providers do not receive your full personal registration details (name, date of birth, mobile number) — only the session data necessary to deliver the game. Game providers operate under their own privacy and data security standards.

3.3 Compliance and Legal Obligations

heh55 may disclose personal data to competent authorities — including law enforcement agencies, anti-money laundering bodies, or other regulatory entities — where required by applicable law, court order, or legally binding request. In such cases, heh55 will disclose only the information specifically requested and will, where legally permissible, notify the account holder of the disclosure.

3.4 Platform Infrastructure and Security Vendors

heh55 engages carefully selected infrastructure and security service providers — including cloud hosting providers, content delivery networks, and cybersecurity firms — who may process personal data on heh55's behalf as data processors. All such vendors are contractually bound to process data solely on heh55's documented instructions, to maintain appropriate technical and organisational security measures, and not to use heh55 player data for any purpose of their own.

heh55 uses cookies and similar tracking technologies (local storage, session storage, and pixel tags) to make the Platform function correctly, to maintain your login session, and to gather anonymised analytics data about how players use the Platform. This section explains what types of cookies we use and how you can manage your preferences.

4.1 Types of Cookies Used

4.2 Third-Party Cookies

Game providers such as Evolution Gaming, Pragmatic Play, and Spribe may set their own session cookies when you launch a game within the heh55 Platform. These cookies are limited to the duration of your game session and are used to maintain game state, ensure fair play, and support real-time game delivery. heh55 does not control the cookie behaviour of third-party game providers; we recommend reviewing their respective privacy policies if you have concerns about game-session tracking.

4.3 Managing Cookies

Most modern browsers allow you to view, block, and delete cookies through the browser settings menu. Disabling strictly necessary or fraud detection cookies will impair the Platform's ability to authenticate your session and maintain account security — heh55 cannot be held responsible for any resulting loss of functionality. Disabling functional or analytics cookies will reduce personalisation features but will not prevent you from placing wagers or processing transactions.

heh55 takes the security of your personal data seriously. We implement a layered set of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

5.1 Technical Safeguards

• 256-bit SSL/TLS Encryption: All data in transit between your browser or mobile app and heh55 servers is encrypted using industry-standard TLS 1.2 or 1.3 protocols.
• Password Hashing: Account passwords are never stored in plain text. heh55 uses a modern, salted cryptographic hashing algorithm (bcrypt or equivalent). Even heh55 technical staff cannot retrieve your password — only reset it through a verified process.
• Two-Factor Authentication (2FA): SMS-based OTP two-factor authentication is applied to login and to high-value withdrawal requests, adding an additional verification layer beyond the password.
• Database Access Controls: Player personal data is held in access-controlled database environments. Access is restricted to authorised personnel only, logged, and subject to periodic audit.
• Penetration Testing: heh55 conducts periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

5.2 Organisational Safeguards

• Internal data access is governed by a least-privilege policy — staff members can access only the data required for their specific role.
• All team members with access to player data receive data protection and security awareness training as part of their onboarding and on an annual refresher basis.
• heh55 maintains an incident response protocol. In the event of a data breach that poses a risk to player data, heh55 will assess the severity, contain the incident, and notify affected players within a reasonable timeframe consistent with the nature and scope of the breach.

heh55 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable platform integrity and fraud prevention obligations. The following table summarises our standard retention periods by data category.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual. Anonymised, aggregate data (with no individual identifiers) may be retained indefinitely for statistical and analytical purposes.

As an heh55 player, you have the following rights in relation to your personal data. heh55 is committed to honouring these rights promptly and without unnecessary barriers. To exercise any right listed below, contact [email protected] with the subject line "Data Rights Request" and a description of your request.

7.1 Right to Access

You have the right to request a copy of the personal data that heh55 holds about you. Upon receiving a verified access request, heh55 will provide a structured summary of your data within a reasonable period — typically within 14 business days. The summary will cover the categories of data held, the purposes for which it is processed, and any third parties with whom it has been shared.

7.2 Right to Correction

If any personal data heh55 holds about you is inaccurate or out of date, you have the right to request its correction. For standard account information (email address, mobile number, payment method), corrections can be made directly through the account dashboard. For identity document corrections, contact [email protected] with the updated information and supporting documentation.

7.3 Right to Deletion

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you believe the data has been unlawfully processed. heh55 will assess deletion requests against applicable retention obligations — some data must be retained for the periods specified in Section 6 and cannot be deleted on request during that window. Where deletion is not immediately possible, heh55 will explain the applicable reason and confirm the earliest date at which deletion can be completed.

7.4 Right to Data Portability

You have the right to receive a copy of the personal data you provided to heh55 in a structured, commonly used, machine-readable format (CSV or JSON). This applies to data processed on the basis of your consent or on the basis of a contract with you. Submit a portability request to [email protected] and heh55 will provide the export within 14 business days of identity verification.

7.5 Right to Withdraw Marketing Consent

If you have opted into marketing communications from heh55, you may withdraw that consent at any time — by updating notification preferences in your account dashboard, by clicking the unsubscribe link in any marketing email, or by contacting [email protected]. Withdrawal of marketing consent will be processed within two business days and does not affect any other aspect of your account or heh55's ability to send service-related communications.

7.6 Right to Object to Processing

You have the right to object to heh55 processing your personal data where that processing is based on legitimate interests. Upon receipt of an objection, heh55 will assess whether its legitimate interests are overridden by your individual rights and interests. Where processing is for direct marketing purposes specifically, heh55 will always comply with an objection without requiring justification.

heh55 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, changes in the services we offer, and developments in applicable privacy standards. The most current version of this Privacy Policy is always available at heh55.app/privacy-policy. The "Last Updated" date at the top of this page indicates when the most recent revision was published.

8.1 Material Changes

Where a change to this Privacy Policy is material — meaning it affects the purposes for which we use your data, the categories of data we collect, the third parties with whom we share it, or your rights — heh55 will notify registered account holders via the email address held on their account prior to the change taking effect. Continued use of the Platform after a notified material change constitutes acceptance of the updated Privacy Policy.

8.2 How to Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how heh55 has handled your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request – [Your Account Username]"
• Response Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Expected Response Time: Within 1 business hour for urgent security matters; within 14 business days for standard data rights requests