www5 Privacy Policy

1 Who We Are

www5 is an online betting and casino platform accessible at www5.io, serving registered players primarily in Bangladesh and across South Asia. We provide sports betting (including cricket BPL, T20, and IPL markets), live casino games, slots, and crash games. Our platform accepts Bangladeshi Taka (BDT) and Indian Rupees (INR), with payment support for bKash, Nagad, Rocket, Upay, Visa, and Mastercard.

For the purposes of this Privacy Policy, "www5", "we", "us", and "our" refer to the operators of the www5.io platform. Any reference to "you", "the player", or "the user" refers to any individual who accesses, registers with, or otherwise uses any part of the www5 platform.

Our designated privacy contact for data-related queries and requests is reachable at [email protected]. We aim to respond to all privacy-related correspondence within 5 business days.

2 Data We Collect

The personal data we collect falls into several categories depending on how you interact with the www5 platform. The table below summarises the key categories and specific data points within each:

3 How We Collect Your Data

3.1 Directly From You

The primary source of your personal data is information you provide directly when you register an account, complete identity verification, make deposits or withdrawals, contact our support team, respond to surveys or promotional communications, or use responsible gaming tools. You are in control of what information you share with us in these contexts.

3.2 Automatically During Platform Use

When you access the www5 platform — whether via a web browser on desktop or mobile — our systems automatically collect certain technical data about your device and session. This includes your IP address, browser type, operating system, pages visited, time spent on each section, clickstream data, and error logs. This data is collected using cookies, web beacons, and server log files.

3.3 From Third-Party Service Providers

We may receive supplementary identity or fraud-risk data from third-party identity verification providers that we engage to fulfil our KYC obligations. Additionally, payment processors (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard networks) may share transaction confirmation data with us. Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may transmit game session data to our platform systems for account crediting and history purposes.

3.4 Publicly Available Sources

In limited circumstances — primarily for fraud prevention and account security — we may cross-reference data you have provided against publicly available sources such as sanctions lists, politically exposed persons (PEP) databases, or adverse media monitoring tools.

4 How We Use Your Data

www5 uses your personal data only for the specific purposes outlined below. We do not use data for purposes that are incompatible with those originally communicated to you at the point of collection.

• Account Management: To create, operate, and maintain your www5 account, including processing deposits and withdrawals, recording bet history, and managing account balances in BDT or INR.
• Identity Verification (KYC): To verify your identity, age (21+), and source of funds in compliance with our anti-money laundering obligations and responsible gaming commitments.
• Payment Processing: To execute and record deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and any other accepted payment method.
• Fraud Prevention and Security: To detect and investigate suspicious account activity, unauthorised access attempts, money laundering patterns, and bonus abuse. This includes automated risk-scoring systems applied to account behaviour data.
• Responsible Gaming Compliance: To monitor gambling behaviour against self-imposed limits, enforce self-exclusion periods, send session time reminders, and escalate accounts that show indicators of problem gambling for internal review.
• Customer Support: To respond to queries, complaints, and requests submitted via live chat or email. Support interactions are logged to maintain quality and resolve disputes.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the www5 platform experience, optimise game loading performance, and develop new features relevant to Bangladesh-market players.
• Marketing Communications: To send promotional emails, bonus notifications, and platform news to players who have opted in to receive marketing communications. You may withdraw this consent at any time by contacting [email protected].
• Legal and Regulatory Compliance: To fulfil obligations imposed by applicable law, including responding to lawful data requests from regulatory or law enforcement authorities, and maintaining records required under anti-money laundering legislation.

5 Legal Basis for Processing

Each use of your personal data described in Section 4 is underpinned by one or more of the following lawful bases for processing:

• Contractual Necessity: Processing required to deliver the services you have contracted for when you registered a www5 account, including account management, payment processing, and bet execution.
• Legal Obligation: Processing required to comply with applicable law, including identity verification, anti-money laundering checks, and record retention obligations.
• Legitimate Interests: Processing carried out in pursuit of www5's legitimate business interests — specifically fraud prevention, platform security, responsible gaming monitoring, and platform improvement — where these interests are not overridden by your fundamental privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily marketing communications. Where consent is the basis, you retain the right to withdraw it at any time without affecting the lawfulness of prior processing.

6 Sharing Your Data

www5 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

6.1 Service Providers

We engage carefully selected third-party service providers to support platform operations. These include identity verification providers, payment processors (bKash, Nagad, Rocket, Upay, card networks), cloud infrastructure providers, customer support software vendors, and game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). Each provider operates under a data processing agreement that restricts them from using your data for any purpose other than the contracted service.

6.2 Legal and Regulatory Disclosure

www5 may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities where we are legally obligated to do so, or where disclosure is necessary to prevent serious harm, financial crime, or match-fixing. We will notify you of any such disclosure where we are legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of www5's business assets, player account data may be transferred as part of that transaction. You will be notified in advance of any such transfer and of any resulting changes to this Privacy Policy, with a reasonable period to request account closure if you do not consent to the transfer.

6.4 Aggregated Analytics

We may share aggregated, fully anonymised statistical data — for example, total active players in Dhaka or average session lengths in Chittagong — with analytics partners or for publication in industry reports. This data cannot be used to identify any individual player.

7 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by the www5 platform when you visit our website. They allow the platform to recognise your device across sessions, maintain your login state, remember your preferences, and collect usage analytics. We also use similar technologies such as web beacons (pixel tags) and local storage objects.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, security tokens, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as selected account currency (BDT or INR), language display settings, and responsible gaming alert configurations.
• Analytical Cookies: Collect anonymised data about how players navigate the platform — which game categories are most visited, where users drop off in the registration funnel, and which sports betting markets attract the highest engagement.
• Security and Fraud Prevention Cookies: Used to identify suspicious device fingerprints, detect account sharing, and flag automated bot activity.

7.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies entirely, though doing so may impair your experience on the www5 platform — in particular, session persistence and preference settings may not function correctly if cookies are blocked.

8 Data Retention

www5 retains personal data for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention guidelines apply:

• Active Account Data: Retained for the full duration of your account relationship with www5, plus a post-closure retention period as required by law.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with anti-money laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of 5 years following account closure, or longer if required by applicable law or active investigation.
• Support Correspondence: Retained for 3 years from the date of the most recent interaction, to support quality assurance and dispute resolution.
• Marketing Opt-In Records: Retained for the duration of the marketing relationship and for 2 years following opt-out, as evidence of consent history.
• Technical and Session Logs: Retained for up to 12 months for security monitoring and fraud investigation purposes, then automatically purged.

When data is no longer required and no retention obligation applies, it is securely deleted or irreversibly anonymised using industry-standard data destruction procedures.

9 Your Rights

As a registered player on the www5 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] from the email address associated with your www5 account. We will respond within 30 days of receiving a valid request.

• Right of Access: You may request a copy of all personal data we hold about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (such as updating your mobile number) can be made directly within your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing and we have no overriding legitimate interest. Note that we may be unable to fulfil full erasure requests where retention is required by law (e.g., financial records under anti-money laundering legislation).
• Right to Restrict Processing: In certain circumstances — for example, while you dispute the accuracy of data or are awaiting the outcome of an objection request — you may ask us to temporarily suspend active use of your data.
• Right to Data Portability: Where processing is based on your consent or a contract, and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format (e.g., CSV) suitable for transfer to another provider.
• Right to Object: You may object to processing based on legitimate interests — including direct marketing — at any time. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

10 Data Security

www5 implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, alteration, and disclosure. Our key security measures include:

• TLS/SSL Encryption: All data transmitted between your device and the www5 platform is encrypted using TLS (Transport Layer Security) 1.2 or higher. The platform displays SSL certification indicators in browser address bars.
• Encrypted Data Storage: Sensitive fields — including identity document data, financial account numbers, and passwords — are stored in encrypted form on access-controlled servers. Passwords are hashed using industry-standard cryptographic algorithms and are never stored in plaintext.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Employees who require access to player data for support or compliance purposes operate under confidentiality obligations and role-based access permissions.
• Fraud Monitoring Systems: Automated systems continuously monitor account activity for indicators of unauthorised access, credential stuffing attacks, unusual transaction patterns, and device anomalies.
• Security Testing: The www5 platform undergoes regular security assessments, including vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: In the event of a data security incident that may affect your personal data, www5 will notify affected players without undue delay once the nature and scope of the incident has been confirmed and containment measures are in place.

While www5 takes all reasonable precautions, no online platform can guarantee absolute security. You also play an important role in keeping your account secure: use a strong, unique password, never share your login credentials with anyone, and contact us immediately at [email protected] if you suspect unauthorised access to your account.

11 Children and Minors

The www5 platform is strictly restricted to individuals aged 21 and above. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 21 under any circumstances.

Age verification is a mandatory component of our account registration and KYC processes. All accounts are subject to age verification checks, and accounts where the registered holder is found to be under 21 will be immediately suspended. Any data collected from an underage account will be securely deleted following the suspension process, except where retention is required for legal or investigative purposes.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered an account on www5, please contact us immediately at [email protected]. We will investigate and take appropriate action as quickly as possible.

12 Third-Party Services

The www5 platform integrates with a number of third-party services to deliver its full range of features. Each third-party service provider operates under its own privacy policy in respect of the data it processes independently. www5 is not responsible for the privacy practices of third-party providers, though we do conduct due diligence before engaging any provider and require data processing agreements where applicable.

12.1 Game Providers

Games on the www5 platform are supplied by licensed third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may process session data (game events, bet amounts, win/loss outcomes) through their own certified systems to generate certified game results and return-to-player calculations. This data is shared with www5 for account crediting purposes.

12.2 Payment Processors

Deposits and withdrawals are processed through bKash, Nagad, Rocket, Upay, and card networks (Visa, Mastercard). Transaction data is shared with these providers as required to execute and confirm payments. Your mobile wallet numbers and card details are processed in accordance with each provider's own security and privacy standards, which are independent of www5.

12.3 Identity Verification Providers

To fulfil KYC obligations, www5 may share identity document images and personal data with third-party identity verification service providers operating in the South Asia region. These providers are contractually bound to use your data solely for verification purposes and to apply appropriate security standards.

13 International Data Transfers

www5 is a platform serving the Bangladesh and South Asia market. Some of our third-party service providers — including cloud infrastructure providers, game studios, and identity verification partners — may operate data processing facilities located outside Bangladesh.

Where your personal data is transferred to or processed in a jurisdiction outside Bangladesh, www5 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Privacy Policy. Safeguards include contractual data processing agreements incorporating standard data protection clauses, and selection of providers operating in jurisdictions with adequate data protection frameworks.

By using the www5 platform and registering an account, you acknowledge that your personal data may be processed in jurisdictions outside Bangladesh as described in this section.

14 Changes to This Privacy Policy

www5 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, platform features, or the services we offer. We distinguish between material changes — those that significantly affect how your data is processed or your rights in relation to it — and minor administrative updates.

For material changes, we will provide at least 7 days' advance notice to registered players via email to the address on file and/or through an in-platform notification. The updated policy will clearly display its effective date. Your continued use of the www5 platform after the effective date of a material change constitutes your acceptance of the revised policy.

For minor administrative updates — such as corrections of typographical errors, clarifications that do not alter the substance of the policy, or additions of new contact information — we will update this page without advance individual notification. The date shown in the "Last Updated" field at the top of this policy will always reflect the most recent revision.

We recommend bookmarking this page and reviewing it periodically, particularly if you plan to make significant deposits or engage with new platform features.

15 Contact & Complaints

If you have any questions, concerns, or complaints about how www5 handles your personal data, or if you wish to exercise any of the rights described in Section 9, please contact us using the details below:

• Email: [email protected]
• Response Time: We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 calendar days.
• Operating Hours: Our support team operates 24/7, Bangladesh Standard Time (BST, UTC+6).

When contacting us about a privacy matter, please include your registered account username or email address, a clear description of your request or concern, and — where relevant — the specific right you wish to exercise. This helps us locate your records and respond accurately.

If you are not satisfied with our response to your complaint or believe we are processing your personal data in a manner that is inconsistent with this Privacy Policy, you have the right to escalate the matter to the relevant supervisory authority in your jurisdiction. We take all complaints seriously and will work in good faith to resolve any legitimate concerns raised by our players.