Privacy Policy
for dewi355

This Privacy Policy (the "Policy") describes how dewi355 (the "Company", "Platform", "We", "Us", or "Our") collects, processes, stores, protects, and shares personal data in connection with the operation of the dewi355 online casino and sports betting platform. The Policy applies to all personal data processed through the dewi355 website and any associated mobile-optimised interfaces used to access the platform.

This Policy is part of a suite of governance documents that govern your relationship with dewi355, alongside the Terms & Conditions and the Responsible Gaming Policy. In the event of any conflict between this Policy and the Terms & Conditions regarding the handling of personal data, this Privacy Policy shall take precedence with respect to data protection matters.

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or enhancements to the platform. Where material changes are made, we will notify registered players by email or by prominently displaying a notice on the platform. The "Last Updated" date at the top of this document indicates when the most recent revision took effect. We encourage you to review this page periodically.

For the purposes of applicable data protection legislation, dewi355 acts as the data controller in respect of personal data collected from users of the platform. As data controller, dewi355 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data-related inquiries, access requests, correction requests, deletion requests, and formal complaints regarding the handling of your personal data should be directed to our dedicated support team at support@dewi355. We will acknowledge receipt of all privacy-related correspondence within 5 business days and endeavour to provide a full response within 30 calendar days of receipt.

When you register an account, use the platform, or contact our support team, you provide us with personal data directly. The categories of data we collect in this way include:

• Registration data: Full legal name, date of birth, gender, email address, Bangladeshi mobile phone number, and residential address.
• KYC verification documents: Copies of your National Identity Card (NID), passport, or other government-issued photo identification; proof of your registered payment method (e.g., bKash account screenshot); and proof of address documentation such as a utility bill or bank statement.
• Payment data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details (for bank transfer methods), and transaction reference numbers. We do not store full card numbers for Visa or Mastercard transactions — card payments are processed by PCI-DSS compliant payment processors who handle card data directly.
• Communications data: The content of any messages you send to our customer support team via live chat, email, or WhatsApp, including any attachments or documents shared during a support interaction.
• Responsible gaming data: Self-exclusion requests, deposit limit settings, loss limit preferences, session time-out configurations, and any information shared with our responsible gaming team regarding problem gambling concerns.

In addition to data you provide directly, dewi355 automatically collects certain technical and behavioural data when you access or use the platform. This includes:

• Device and technical data: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and device identifiers.
• Usage and session data: Pages visited, games played, time spent on each section, session start and end times, clickstream data, and search queries made within the platform.
• Transaction logs: A complete record of all deposits, withdrawals, bonus activations, and wagers placed on the platform, including timestamps, amounts in BDT, game identifiers, and outcome records.
• Geolocation data: Approximate geographic location derived from your IP address, used to verify geographic eligibility and to detect suspicious login attempts from unexpected locations.

This automatically collected data is primarily used to ensure platform security, detect fraud, resolve disputes, improve platform performance, and comply with our regulatory obligations.

dewi355 processes your personal data for the following primary purposes, each of which is necessary to deliver and operate the platform in the way our players in Bangladesh and beyond expect:

• Account creation and management: To register your account, verify your identity, maintain your account records, and enable you to log in securely and access all platform features.
• Processing deposits and withdrawals: To receive your deposits via bKash, Nagad, Rocket, Upay, or bank transfer, and to process your withdrawal requests to your verified payment method in Bangladeshi Taka.
• KYC and age verification: To confirm that you are aged 18 or above and that the identity you registered with matches a verified government-issued document, as required by our compliance programme.
• Providing gaming and betting services: To operate the casino games, live dealer tables, sports betting markets, fishing games, and all other services available on the dewi355 platform.
• Customer support: To receive and respond to your inquiries, resolve disputes, investigate complaints, and provide technical assistance through our 24/7 support channels.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, collusion, account takeover attempts, bonus abuse, money laundering, and other prohibited activities on the platform.
• Regulatory compliance: To maintain records required by our licensing obligations, including complete transaction histories, KYC documentation, and responsible gaming intervention records.

With your explicit consent, dewi355 may use your email address and mobile number to send you promotional communications, including notifications about new games, seasonal bonuses (for example, Eid promotions, Pohela Boishakh offers, and BPL cricket season bonuses), and personalised deposit match offers. Marketing messages from dewi355 are always labelled clearly as promotional communications.

You may withdraw your consent to receive marketing communications at any time by clicking the unsubscribe link in any marketing email, by sending a request to support@dewi355, or by updating your communication preferences within your account settings. Withdrawal of marketing consent does not affect your ability to receive transactional messages such as deposit confirmations, withdrawal notifications, and account security alerts, which are sent as a necessary part of the platform service regardless of marketing preferences.

dewi355 does not engage in unsolicited bulk marketing (spam). We do not share your contact details with third-party marketers or advertising networks. All marketing communications come directly from dewi355.

The following categories of cookies are used on the dewi355 platform:

• Essential / session cookies: These cookies are strictly necessary to maintain your logged-in session, remember your language preferences, and ensure the platform functions correctly. Without these cookies, core platform features — including the ability to log in, make deposits, and play games — cannot operate. These cookies expire when you close your browser or log out, whichever occurs first.
• Functional cookies: These cookies remember your account preferences such as display settings, game lobby filters, and previously selected payment methods, so that you do not need to re-enter these preferences on each visit. Functional cookies are stored for up to 90 days.
• Analytics cookies: We use first-party analytics tools to collect aggregated, anonymised data about how players navigate the platform — for example, which game categories are most visited, how long sessions last on average, and which pages have the highest exit rates. This data is used solely to improve the platform experience. No individual player is identified in analytics reports.
• Security cookies: These cookies help us detect and prevent fraudulent login attempts, account takeovers, and automated bot activity. They store a short-lived token that allows our security systems to verify that a session is being operated by a human user from a consistent device.

You can control and manage cookies through your web browser settings. All major browsers — including Chrome, Firefox, Safari, and the Android default browser commonly used in Bangladesh — allow you to view, block, or delete cookies at any time through their privacy or settings menus.

Please be aware that disabling essential or session cookies will prevent you from logging in to your dewi355 account and will impair the core functionality of the platform. If you choose to block all cookies, you may be unable to use the platform. Disabling analytics or functional cookies will not prevent you from using the platform, but may reduce the personalisation of your experience.

dewi355 does not use Flash cookies (Local Shared Objects), web beacons, or pixel tags for tracking purposes. We do not participate in cross-site tracking networks or advertising exchange platforms.

dewi355 does not sell, rent, or trade your personal data to any third party. However, in order to deliver our services and meet our legal obligations, we may share specific categories of your data with the following categories of recipients:

• Payment service providers: To process your deposits and withdrawals, we share transaction data — including your mobile wallet number or bank details — with the relevant payment provider (e.g., bKash, Nagad, Rocket, Upay, or the applicable bank). These providers process your payment data under their own privacy policies and are responsible for securing your financial information during the transaction.
• Game software providers: The casino games and live dealer tables on dewi355 are powered by third-party software providers including Pragmatic Play, Evolution Gaming, Spribe, and others. These providers may receive your anonymous player ID and game session data to deliver the game experience and to audit game outcomes. Personal identifiers such as your name, email, or NID are not shared with game providers.
• Identity verification services: To fulfil KYC obligations, we may use third-party identity verification technology providers to validate the authenticity of documents you submit. These providers process document data under strict confidentiality agreements and are not permitted to retain or repurpose your identity data.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory directive, dewi355 may be legally obliged to disclose your personal data to law enforcement agencies, financial intelligence units, or other government bodies. We will always seek to limit such disclosures to the minimum data required by the specific legal request.
• Professional advisors: Our legal, auditing, and compliance advisors may have access to your data where necessary to provide their professional services to dewi355, subject to strict confidentiality obligations.

All third-party service providers who process personal data on behalf of dewi355 are required to enter into a written data processing agreement that obligates them to: process data only on our documented instructions; implement appropriate technical and organisational security measures; not engage sub-processors without our prior written authorisation; assist us in responding to data subject rights requests; and securely delete or return all personal data upon termination of the service relationship.

dewi355 conducts due diligence on all third-party data processors before onboarding them and periodically reviews their data security practices to ensure continued compliance with the standards set out in our data processing agreements.

dewi355 employs a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• SSL/TLS encryption: All data transmitted between your device and the dewi355 platform is encrypted using a minimum of 256-bit SSL/TLS encryption, the same standard used by major international financial institutions.
• Encrypted data storage: Personal data and KYC documents stored on our servers are encrypted at rest. Database access is restricted to authorised personnel and is protected by multi-factor authentication.
• Access controls: Internal access to player personal data follows a strict need-to-know principle. Only personnel who require access to personal data to perform their specific job function are granted that access, and all access events are logged for audit purposes.
• Fraud detection systems: Automated fraud detection systems monitor transaction patterns, login behaviour, and account activity in real time to identify and block suspicious activity before it can affect your account.
• Regular security assessments: The dewi355 platform undergoes periodic security reviews to identify and remediate potential vulnerabilities in the infrastructure, application layer, and third-party integrations.

While dewi355 employs robust security measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, dewi355 will notify affected players without undue delay and will take immediate remediation steps.

dewi355 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, and audit obligations. The following retention schedule applies:

• Active account data: Retained for the full duration of the account's active status plus a period of five (5) years after account closure, to meet standard financial and audit record-keeping requirements.
• KYC identity documents: Retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later, in accordance with anti-money laundering record-keeping obligations.
• Transaction records: All deposit, withdrawal, and wagering records are retained for a minimum of five (5) years after the date of the transaction, to support financial audits and regulatory reporting.
• Customer support communications: Support chat logs and email correspondence are retained for two (2) years from the date of the interaction, unless the communication is related to an open dispute or regulatory inquiry, in which case it is retained until the matter is fully resolved.
• Marketing consent records: Records of your consent to receive marketing communications — and any subsequent withdrawal of that consent — are retained for three (3) years from the date of the most recent consent action.
• Self-exclusion records: Records of self-exclusion requests and responsible gaming interventions are retained indefinitely to prevent re-registration during an active exclusion period and to support responsible gaming compliance.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player.

As a player of dewi355, you hold the following rights in relation to your personal data:

• Right of access: You have the right to request a copy of all personal data that dewi355 holds about you, along with information about how that data is being processed. We will provide this in a structured, commonly used, machine-readable format where technically feasible.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Basic account details such as your email address and mobile number can be updated directly in your account settings. Name or date-of-birth corrections require re-submission of supporting KYC documentation.
• Right to erasure ("right to be forgotten"): You have the right to request the deletion of your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose for which it was collected, or if you withdraw consent and there is no other lawful basis for processing. This right is subject to overriding legal and regulatory obligations; we cannot delete data that we are legally required to retain.
• Right to restrict processing: You have the right to request that we restrict the processing of your personal data in specific circumstances — for example, while a dispute regarding the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract with you, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another data controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have the absolute right to object to the use of your data for direct marketing purposes at any time, with no need to provide a reason.
• Right to withdraw consent: Where we process your data based on your consent — for example, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of the rights listed above, please contact our support team at support@dewi355 with the subject line "Privacy Rights Request" and a description of the right you wish to exercise. We may ask you to verify your identity before processing the request to protect against unauthorised access to your data.

Certain rights described in Section 7.1 are not absolute and may be subject to limitations in specific circumstances. In particular:

• The right to erasure cannot be exercised in respect of data that dewi355 is legally obliged to retain under anti-money laundering regulations, financial record-keeping requirements, or a specific regulatory directive.
• The right to data portability applies only where processing is carried out by automated means and is based on consent or contractual necessity — it does not apply to processing based on legal obligation or legitimate interests.
• The right to restrict processing may conflict with our ability to provide you with platform services during the restriction period. Where a restriction would prevent us from fulfilling our obligations to you, we will notify you of this limitation before applying the restriction.

If you are not satisfied with how dewi355 has handled your personal data or your rights request, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. We would, however, appreciate the opportunity to address your concern directly before you escalate to a regulatory body — please contact us first at support@dewi355 and we will do our best to resolve the matter promptly.

For any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by dewi355, please contact our dedicated support team using one of the following channels. All privacy-related inquiries are handled with the highest priority.

• Email: support@dewi355 — please use the subject line "Privacy Inquiry" or "Data Rights Request" to ensure your message is routed to the correct team.
• WhatsApp: +880 1700 000355 — available during support hours for real-time assistance with privacy-related questions.
• Live Chat: Available 24 hours a day, 7 days a week, directly on the dewi355 platform. Our live chat agents can assist with general privacy questions and can escalate formal data rights requests to the appropriate team.
• Response time: We aim to acknowledge all privacy-related correspondence within 5 business days and to provide a complete written response within 30 calendar days of receipt. For complex requests that require additional investigation, we will notify you of the extended timeline before the 30-day deadline.
• Support hours: 24 hours a day, 7 days a week. All support is provided in English. Time zone: Bangladesh Standard Time (BST, UTC+6).

By creating and using a dewi355 account, you confirm that you have read, understood, and agreed to this Privacy Policy in full. If you do not agree with any part of this Policy, you should discontinue use of the platform and contact our support team to request account closure and deletion of your personal data (subject to the retention obligations described in Section 6.2).

This Privacy Policy was last reviewed and updated on 1 January 2026. dewi355 reserves the right to amend this Policy at any time. Material amendments will be communicated to registered players by email or by a prominent notice displayed on the platform prior to the amended Policy taking effect.

We thank you for trusting dewi355 with your personal data. Protecting that trust through responsible and transparent data handling practices is a commitment we take seriously — for every player in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and across Bangladesh.