app5 Privacy Policy

app5 is an online betting and casino platform available at app5.io, operated as an internationally licensed offshore platform. We provide sports betting — with a particular focus on cricket markets relevant to Bangladesh, including the BPL, IPL, and ICC T20 World Cup — as well as live casino games, slots, and other gaming products to registered players.

For the purposes of this Privacy Policy, app5 acts as the data controller in respect of all personal data collected from players and visitors to the platform. Any questions regarding this policy or our data practices should be directed to our support team using the contact details set out in Section 14.

This policy applies to all individuals who access app5, including registered players, prospective players who have begun but not completed registration, and visitors to the app5.io website who have not registered an account.

app5 collects two broad categories of personal data: information you provide to us directly, and information collected automatically when you use the platform.

Data You Provide Directly:

• Registration data: Full name, date of birth, email address, phone number, and the city or district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar).
• Identity verification (KYC) data: Government-issued photo identification (National Identity Card, passport, or birth registration certificate), and proof of payment method ownership where required.
• Financial data: Payment method details including mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and card details (Visa, Mastercard) where applicable. Full card numbers are not stored by app5 — these are processed by our payment partners via tokenised systems.
• Communication data: Messages sent to our support team via live chat, email, or any other channel, including the content of those messages and any attachments.
• Responsible gaming data: Deposit limits, session time settings, cooling-off preferences, and self-exclusion elections that you configure in your account settings.

Data Collected Automatically:

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, time spent on each page, navigation paths, search queries within the platform, game sessions played, bet history, and deposit and withdrawal activity.
• Cookie data: Preferences, session tokens, and analytics identifiers stored via cookies and similar technologies (see Section 7).
• Geolocation data: Approximate geographic location derived from your IP address, used to assess jurisdictional eligibility and detect fraudulent access patterns. app5 does not collect precise GPS-level location data.

app5 collects personal data through the following channels:

• Account registration: Data entered by you when creating your app5 account, including during the KYC verification process.
• Platform activity: Data generated automatically as you navigate the platform, place bets, play games, and conduct financial transactions.
• Customer support interactions: Data shared by you when contacting our support team for assistance.
• Payment processors: Confirmation and reference data provided by bKash, Nagad, Rocket, Upay, and banking partners upon processing a transaction. Full financial credentials are handled by those providers, not stored by app5 directly.
• Cookies and tracking technologies: Data collected passively via browser cookies, local storage, and analytics tools as described in Section 7.
• Third-party verification services: Identity and document verification data returned by KYC service providers used to validate the authenticity of documents you submit.

app5 processes personal data on the following legal grounds:

app5 uses the personal data it collects for the following specific purposes:

• Account administration: Creating and maintaining your app5 account, authenticating your identity at login, and managing your account preferences and settings.
• Transaction processing: Facilitating deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and bank transfer, and maintaining an accurate transaction record for each player.
• KYC compliance: Verifying that you meet the minimum age requirement of 21 years, confirming your identity, and fulfilling the due diligence obligations required under our offshore licensing framework.
• Fraud and security: Detecting and preventing unauthorised access to accounts, identifying and investigating suspicious betting patterns, and protecting the integrity of the app5 platform for all players.
• Responsible gaming: Monitoring play behaviour to identify potential indicators of problem gambling and providing appropriate interventions, including enforcing deposit limits, cooling-off periods, and self-exclusions that you have set.
• Customer support: Responding to queries, investigating complaints, and improving the quality and responsiveness of our support functions.
• Platform improvement: Analysing aggregated usage data to improve the design, performance, and feature set of the app5 platform. This analysis uses anonymised or pseudonymised data wherever possible.
• Marketing (consent-based only): Sending promotional offers, bonus notifications, and news about new games or features, but only where you have explicitly opted in to receive such communications. You may withdraw this consent at any time via your account settings or by contacting support.
• Legal compliance: Meeting any reporting, audit, or disclosure obligations imposed on app5 by its offshore licensing authority or applicable law.

app5 does not sell, rent, or trade your personal data. We share it only with the following categories of third party, and only to the extent strictly necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and card processing partners receive transaction reference data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and security standards.
• KYC and identity verification providers: Third-party document verification services that process the identity documents you submit during the KYC process. These providers are contractually bound to process your data solely for verification purposes.
• Game content providers: Platform providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive pseudonymised player session data for the purpose of game delivery, fairness auditing, and jackpot calculation. These providers do not receive your name, contact details, or payment information.
• IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity partners who provide the technical infrastructure on which app5 operates. These providers act as data processors under binding data processing agreements.
• Legal and regulatory authorities: app5 may disclose personal data to its offshore licensing authority, law enforcement agencies, or courts of competent jurisdiction where required to do so by law or in connection with the investigation of fraud, money laundering, or other criminal activity.

All third parties with whom app5 shares personal data are subject to contractual obligations requiring them to protect that data in accordance with standards no less stringent than those applied by app5 itself.

app5 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookie are used:

• Strictly necessary cookies: Session authentication tokens and security cookies required for the platform to function. These cannot be disabled without preventing access to the platform.
• Functional cookies: Cookies that remember your preferences, language settings, and display options to personalise your experience on app5.
• Analytics cookies: Anonymised usage data collected by first-party analytics tools to help app5 understand how players navigate the platform and where improvements can be made. No personal identifiers are included in this data set.
• Fraud detection cookies: Device fingerprinting and session tokens used to detect suspicious access patterns, account takeover attempts, and multi-accounting behaviour.

app5 does not use third-party advertising or retargeting cookies. You may control cookie preferences through your browser settings. Note that disabling functional or analytics cookies will not affect your ability to place bets or access your account, but may limit some personalisation features.

app5 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and app5's servers.
• Encryption at rest for all stored personal data using AES-256 or equivalent standards.
• Role-based access controls that restrict employee access to player data on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by independent security firms.
• Two-factor authentication (2FA) available to all players and mandatory for all internal staff accessing player data systems.
• Automated intrusion detection systems that monitor for unusual access patterns in real time.
• Secure data backup procedures with encrypted offsite storage and regular recovery testing.

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, app5 will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach. Notifications will be sent to the email address registered on your account.

app5 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by our offshore licensing obligations or applicable legal frameworks. The following retention periods apply as standard:

At the end of the applicable retention period, personal data is either securely and permanently deleted or irreversibly anonymised so that it can no longer be linked to any individual.

As an app5 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond to all verified requests within 30 days:

• Right of access: You may request a copy of all personal data that app5 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data held by app5 is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account details directly via your account settings panel.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to app5's legal and licensing obligations — in particular, transaction records and KYC documents must be retained for the periods specified in Section 9 and cannot be deleted on request during those periods.
• Right to restrict processing: You may request that app5 limit its processing of your data in certain circumstances, for example while a dispute about data accuracy is being resolved.
• Right to data portability: You may request a copy of the personal data you have provided to app5 in a structured, machine-readable format for transfer to another service provider.
• Right to object: You may object to processing based on legitimate interests (including profiling) and to direct marketing at any time. Objecting to marketing will result in immediate removal from all promotional communications.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

app5 is strictly an adult platform. Access to all services is limited to individuals who are 21 years of age or older. app5 does not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory component of the KYC process, and accounts for which age cannot be confirmed will be suspended pending satisfactory verification.

If app5 becomes aware that personal data has been collected from a person under the age of 21 without the verified consent of a parent or guardian, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on app5, please contact our support team immediately at [email protected] so that we may investigate and act accordingly.

app5 operates as an offshore platform, and some of the third-party service providers described in Section 6 — including payment processors, KYC providers, and cloud infrastructure partners — may process personal data in jurisdictions outside of Bangladesh. Where such transfers occur, app5 ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require the recipient to apply data protection standards equivalent to those described in this policy.

By registering an account on app5, you acknowledge that your personal data may be transferred to, stored in, and processed in countries other than Bangladesh. In all cases, app5 maintains contractual responsibility for ensuring that your data is handled with the same level of care regardless of where it is processed.

app5 reviews this Privacy Policy on a regular basis and may update it to reflect changes in our data practices, updates to our platform's features, or amendments to the legal or regulatory environment in which we operate.

Material changes — those that affect how we collect, use, or share your personal data in ways not previously disclosed — will be communicated to all registered players by email at least 14 days before they take effect, and will be highlighted via a notice on the app5 platform. Non-material changes (such as corrections of typographical errors or clarifications that do not alter the substance of our practices) may be made without prior notice.

The date at the top of this policy reflects when it was last substantively updated. Continued use of app5 following the effective date of any changes constitutes acceptance of the revised Privacy Policy.

If you have any questions about this Privacy Policy, wish to exercise any of the data rights described in Section 10, or wish to raise a privacy-related complaint, please contact the app5 data support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Privacy Request — [Your Account Username]"
• Response time: Within 30 calendar days of receipt of a verified request
• Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Languages: English and Bengali

If you are not satisfied with the way in which app5 has handled a privacy complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction or to the licensing authority that oversees app5's offshore operations.