hehr555 Privacy Policy

hehr555 collects personal information through several channels: directly from you when you register an account or submit KYC documents; automatically through your use of the platform; and, in limited circumstances, from third-party sources such as payment providers and fraud-prevention services. The categories of data we collect are described below.

Registration and Account Data

When you create a hehr555 account, we collect the following information:

• Full legal name (as it appears on your government-issued identification).
• Date of birth (to verify that you meet the 18+ age requirement).
• Residential address (street, city, district, and division within Bangladesh, or international equivalent).
• Email address and Bangladeshi mobile number.
• Username and (hashed, never plain-text) account password.
• Preferred language and currency settings.

KYC Verification Documents

To comply with anti-money-laundering (AML) regulations and to enforce the mandatory 18+ age restriction, hehr555 requires identity verification before processing withdrawals. KYC documents collected include:

• Copies of government-issued photo identification (Bangladesh National ID Card, passport, or driving licence).
• Proof of address documents (utility bill, bank statement, or government correspondence issued within three months).
• Proof of payment method ownership (screenshot of bKash, Nagad, Rocket, or Upay account; or bank statement for bank transfer methods).

Transaction and Financial Data

hehr555 records information related to every deposit and withdrawal you make, including transaction amounts in BDT, payment method used, transaction timestamps (Bangladesh Standard Time, UTC+6), and transaction reference numbers. We do not store full bank account credentials or mobile financial service PINs — payment authentication is handled directly by the respective payment provider.

Usage and Behavioural Data

We automatically collect data about how you interact with the hehr555 platform, including:

• IP address and approximate geographic location.
• Device type, operating system, and browser type.
• Pages visited, games played, bet history, session duration, and navigation patterns.
• Responsible gaming activity data, including any deposit limits, time-out periods, or self-exclusion requests you have submitted.

hehr555 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.

Payment Service Providers: When you deposit or withdraw funds, your transaction data is shared with the relevant payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard — solely for the purpose of processing the transaction. These providers operate under their own privacy policies and are independently regulated. hehr555 is not responsible for the data practices of payment providers once data has been transmitted to them for transaction processing purposes.

Game Technology Providers: hehr555 integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by one of these studios, your account identifier and game session data may be transmitted to the relevant studio's servers to facilitate gameplay. These studios receive only the minimum data required to run the game and are contractually prohibited from using your data for any other purpose.

Identity Verification and Fraud Prevention Services: hehr555 may use third-party KYC and identity verification platforms to assist with document verification. These providers process your identification documents on our behalf and are bound by data processing agreements that require them to maintain the confidentiality and security of your information.

Legal and Regulatory Disclosures: hehr555 may be required by law, court order, or regulatory authority to disclose certain personal data. In such cases, we will disclose only the information specifically required and will, where permitted by law, notify you of the disclosure request.

hehr555 implements a layered approach to data security, combining technical, administrative, and physical safeguards to protect your personal information against unauthorised access, loss, destruction, or alteration.

Technical Safeguards:

• 256-bit SSL/TLS encryption for all data transmitted between your device and hehr555 servers.
• Encrypted storage for all sensitive personal data and KYC documents at rest.
• Hashed password storage — your account password is never stored in plain text; only a cryptographic hash is retained.
• Two-factor authentication (2FA) available for account login to provide an additional layer of security beyond your password.
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals.
• Firewall and intrusion detection systems protecting hehr555 servers from unauthorised access attempts.

Administrative Safeguards: Access to personal data held by hehr555 is restricted to employees and contractors who require it to perform their job functions. All personnel with access to personal data are subject to confidentiality obligations and receive regular data protection training. Access rights are reviewed periodically and revoked promptly when no longer required.

Data Retention: hehr555 retains your personal data for different periods depending on the category of data and the purpose for which it was collected:

• Account data: Retained for the duration of your account and for a minimum of five years after account closure, to comply with AML record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• KYC documents: Retained for a minimum of five years from the date of verification, or longer if required by applicable law.
• Customer support communications: Retained for three years from the date of the interaction.
• Marketing consent records: Retained for as long as you remain opted in, plus one year after opt-out to provide an audit trail.
• Analytics data: Retained in anonymised, aggregated form indefinitely; identifiable usage data is anonymised after 24 months.

When personal data is no longer required for the purposes for which it was collected and no legal obligation requires its retention, hehr555 securely deletes or anonymises the data using industry-standard methods.

hehr555 enforces the 18+ age requirement through mandatory date-of-birth collection at registration and through KYC document verification prior to the processing of any withdrawal. Our systems are designed to flag accounts where the declared age is inconsistent with other account data, and such accounts are suspended pending investigation.

If hehr555 becomes aware — through our own detection systems, a report from a parent or guardian, or any other means — that personal data belonging to a person under the age of 18 has been collected, we will take immediate steps to delete that data from our systems and to close the associated account. Any deposits made by an underage player will be returned to the payment source after deducting any bonuses credited to the account.

Parents and guardians who suspect that a minor has created a hehr555 account or has accessed the platform are strongly encouraged to contact our support team without delay. We take reports of underage access very seriously and will prioritise the investigation and resolution of all such reports.

hehr555 also recommends that parents and guardians consider installing parental control or internet filtering software on shared devices to prevent minors from accessing online gambling platforms. Several reputable filtering tools are available free of charge and can block access to gambling-related websites across all browsers and applications on a device.