bnn55 Privacy Policy – How We Handle Your Data

1. Introduction & Scope

This Privacy Policy ("Policy") is issued by bnn55 ("bnn55", "we", "us", "our") and applies to all personal data collected from users ("you", "Player", "User") who access or use the bnn55 platform available at bnn55.org, including its casino, sports betting, live dealer, and payment services.

By registering a bnn55 account, making a deposit, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read alongside the bnn55 Terms and Conditions, which are available at bnn55.org/terms-conditions. In the event of any conflict between this Policy and the Terms and Conditions on matters of data handling, this Policy shall prevail.

bnn55 is committed to processing personal data responsibly, transparently, and in compliance with applicable data protection principles. This commitment extends to all Pakistani players using the Platform regardless of their city of residence, whether Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, or elsewhere in Pakistan.

2. Data We Collect

bnn55 collects personal data through several channels. The categories of data we collect include:

Registration Data: Full legal name, date of birth, email address, mobile phone number, and residential address as provided during account creation. This data is required to establish and maintain your bnn55 account.

Identity Verification (KYC) Data: Government-issued photo identification (CNIC, passport, or driving licence), proof of address documentation, and proof of payment method. This data is required to comply with anti-money laundering obligations and to verify that you meet the 18+ age requirement.

Financial Data: Details of payment methods used to deposit and withdraw on bnn55, including Easypaisa account references, JazzCash account references, and bank account details where applicable. Full payment credentials such as card numbers are not stored by bnn55 – these are handled by our certified payment processing partners.

Transactional Data: Records of all deposits, withdrawals, bets placed, games played, bonus claims, and other financial and gaming activity conducted through your bnn55 account.

Technical Data: IP address, device type and identifier, browser type and version, operating system, screen resolution, session timestamps, and general geographic location derived from IP address.

Communications Data: Records of your interactions with bnn55 customer support, including live chat transcripts, email correspondence, and any formal complaints or feedback submitted through the Platform.

Behavioural Data: Information about how you navigate and use the bnn55 Platform, including pages visited, games played, features accessed, and time spent in session, collected via cookies and analytics tools as described in Section 6 of this Policy.

3. How We Use Your Data

bnn55 uses the personal data collected for the following purposes:

• Account Management: Creating, maintaining, and administering your bnn55 account, processing your login, and enabling access to all Platform features.
• Identity Verification: Completing KYC checks to verify your age (18+), identity, and payment method ownership as required by our regulatory obligations and platform terms.
• Payment Processing: Facilitating PKR deposits via Easypaisa, JazzCash, and partner banks, and processing PKR withdrawals to your verified payment methods.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, money laundering, and other prohibited activities on the bnn55 Platform.
• Regulatory Compliance: Maintaining records required under applicable anti-money laundering, responsible gaming, and financial regulations, and responding to lawful requests from regulatory or law enforcement authorities.
• Customer Support: Responding to your queries, resolving disputes, and providing assistance via live chat, email, and other support channels.
• Responsible Gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling, enforcing deposit limits and self-exclusion requests, and providing mandatory responsible gaming interventions where warranted.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the bnn55 Platform, fix technical issues, and develop new features and products.
• Marketing Communications: Sending you relevant promotions, bonus offers, and platform news, subject to your marketing communication preferences. You may opt out of marketing communications at any time through your account settings or by contacting [email protected].

4. Legal Basis for Processing

bnn55 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform our obligations under the bnn55 Terms and Conditions, including account management, payment processing, and bet settlement.
• Legal Obligation: Processing required to comply with applicable anti-money laundering legislation, responsible gaming regulations, tax obligations, and lawful orders from regulatory authorities.
• Legitimate Interests: Processing carried out in pursuit of bnn55's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit consent, including sending marketing communications and, where required, certain cookie-based tracking. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Payment Data & PKR Transactions

bnn55 integrates with Easypaisa, JazzCash, HBL, UBL, Meezan Bank, and Bank Alfalah for PKR deposit and withdrawal services. When you initiate a payment transaction, the relevant payment credentials are transmitted directly to our certified payment processing partners via encrypted channels. bnn55 does not store full payment credentials such as card numbers or mobile wallet PINs on our servers.

bnn55 retains references and metadata associated with payment transactions – such as Easypaisa transaction IDs, JazzCash reference numbers, deposit and withdrawal amounts in PKR, and timestamps – for the purposes of transaction reconciliation, fraud prevention, customer support, and regulatory recordkeeping.

All payment data retained by bnn55 is encrypted at rest using industry-standard encryption. Access to payment records is restricted to authorised bnn55 personnel on a strict need-to-know basis and is subject to access logging and audit controls.

6. Cookies & Tracking Technologies

bnn55 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used include:

• Strictly Necessary Cookies: Required for core Platform functionality including login session management, security features, and payment process continuity. These cookies cannot be disabled without materially impairing Platform performance.
• Analytics Cookies: Used to collect anonymised data about how users interact with the bnn55 Platform, including pages visited, session duration, and feature usage. This data is used in aggregate form to improve the Platform experience.
• Preference Cookies: Used to remember your Platform settings such as language preferences and responsible gaming configurations between sessions.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using core bnn55 services but may affect personalisation features and analytics-driven improvements.

7. Third-Party Sharing

bnn55 does not sell or rent your personal data to third parties. We may share your personal data with the following categories of third parties only to the extent necessary for the purposes described in this Policy:

• Payment Processors: Easypaisa, JazzCash, and banking partners for the purpose of processing PKR transactions on your behalf.
• Game Providers: Certified casino and slot game providers who supply games featured on the bnn55 Platform. These providers may receive anonymised session identifiers for the purpose of game delivery and RNG certification.
• Identity Verification Services: Third-party KYC and age verification service providers engaged by bnn55 to assist with identity document verification.
• Fraud Prevention Services: Third-party fraud detection and anti-money laundering screening services.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or legitimate regulatory request, bnn55 will disclose personal data to the relevant authorities. bnn55 will notify affected users of such disclosures where permitted by law.

All third parties with whom bnn55 shares personal data are bound by appropriate data processing agreements and are required to implement technical and organisational measures to protect the data they process on our behalf.

8. International Data Transfers

bnn55 operates internationally and some of our service providers, including game suppliers and platform infrastructure providers, may process personal data outside Pakistan. Where personal data is transferred to jurisdictions that do not provide an equivalent level of data protection, bnn55 ensures that appropriate safeguards are in place, including contractual data protection clauses and technical security measures.

By using the bnn55 Platform, you acknowledge and consent to the transfer of your personal data to service providers in other jurisdictions for the purposes described in this Policy, subject to the safeguards described above.

9. Data Retention

bnn55 retains personal data for as long as necessary to fulfil the purposes outlined in this Policy, including:

• Account data is retained for the duration of your active bnn55 account and for a period of at least five years following account closure, in accordance with our anti-money laundering recordkeeping obligations.
• KYC and identity verification documents are retained for a minimum of five years following the date of verification or account closure, whichever is later.
• Financial transaction records are retained for a minimum of seven years in accordance with applicable financial record-keeping requirements.
• Customer support communications are retained for three years from the date of the interaction unless a longer period is required for dispute resolution or regulatory purposes.
• Analytics data collected via cookies is retained in anonymised and aggregated form for up to two years.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

10. Your Data Rights

As a user of the bnn55 Platform, you have the following rights in relation to your personal data:

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We may require identity verification before processing your request. Standard requests are processed free of charge within 30 days.

11. Children's Privacy

bnn55 is an adult-only platform. Access to all bnn55 services is strictly limited to individuals aged 18 and above. bnn55 does not knowingly collect, process, or retain personal data from any person under the age of 18.

If we become aware that personal data has been collected from a person under 18 years of age, we will take immediate steps to delete that data, close the associated account, and return any deposited funds in accordance with applicable regulations. If you believe a minor has accessed bnn55 using your details or device, please contact us immediately at [email protected].

12. Security Measures

bnn55 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bnn55 Platform
• Encryption at rest for all stored personal data and payment references
• Role-based access controls limiting internal data access to authorised personnel on a strict need-to-know basis
• Regular third-party security audits and penetration testing of the bnn55 Platform infrastructure
• Two-factor authentication options for player accounts and mandatory multi-factor authentication for all administrative access to bnn55 backend systems
• Automated monitoring and alerting for unusual access patterns or potential data breach indicators
• Formal incident response procedures with defined notification timelines in the event of a confirmed data security incident

Notwithstanding these measures, no system is completely immune to security risks. You are responsible for maintaining the security of your bnn55 login credentials and for immediately notifying us at [email protected] if you suspect any unauthorised access to your account.

13. Changes to This Privacy Policy

bnn55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our business practices, or the services offered on the Platform. The date of the most recent revision is displayed at the top of this page.

Where changes are material – meaning they significantly affect how we process your personal data or your rights in relation to that data – we will notify you via email to your registered address and/or by a prominent notice on the bnn55 Platform prior to the changes taking effect.

Your continued use of the bnn55 Platform following notification of changes constitutes acceptance of the revised Policy. If you do not agree with the changes, you should cease using the Platform and request account closure by contacting [email protected].

14. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bnn55, please contact our Data Support team at: [email protected] with the subject line "Privacy Enquiry".

We will acknowledge all privacy-related correspondence within 72 hours and provide a substantive response within 30 days. For data rights requests (Section 10), the 30-day response period begins upon receipt of a verified request.

If you are dissatisfied with bnn55's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or supervisory body in your jurisdiction. bnn55 will cooperate fully with any such investigation.