Privacy Policy — How bnb55 Handles Your Data

Introduction

This Privacy Policy ("Policy") is issued by bnb55 ("Platform", "Operator", "we", "us" or "our") and applies to all personal data collected from individuals ("User", "you" or "your") who access, register on, or otherwise interact with the bnb55 website at https://bnb55.cam and all associated services, features and content (collectively, the "Services").

bnb55 is committed to protecting the privacy of its users and to processing personal data in accordance with applicable data protection law. This Policy describes our practices in clear terms so that you can make informed decisions about your personal information.

By accessing or using the Services, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must discontinue use of the Services immediately.

Definitions

The following terms carry the meanings defined below throughout this Policy. Where the context permits, the singular includes the plural and vice versa.

Data Controller Identity

For the purposes of applicable data protection law, bnb55 acts as the Data Controller in respect of personal data collected through the platform. The Operator is responsible for determining why and how your personal data is processed, and for ensuring that processing activities comply with applicable legal obligations.

Where bnb55 engages third-party service providers — such as payment processors, identity verification services, analytics providers and game content suppliers — those providers act as Data Processors under binding contractual agreements that require them to process data solely in accordance with bnb55's documented instructions and applicable data protection standards.

Personal Data We Collect

bnb55 collects personal data through several channels: data you provide directly when registering or interacting with the platform, data generated automatically through your use of the Services, and data received from third-party sources where permitted by law.

bnb55 does not knowingly collect sensitive personal data (such as biometric data, health information or racial/ethnic origin data) unless specifically required for regulatory compliance, in which case collection will be limited to the minimum necessary and handled with enhanced safeguards.

Legal Basis for Processing

bnb55 processes your personal data only where a valid legal basis exists. The primary legal bases relied upon are as follows:

• Contractual Necessity: Processing required to fulfil the terms of our agreement with you — including operating your account, processing deposits and withdrawals, and delivering the Services you have requested.
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering (AML) obligations, age verification requirements and any disclosure obligations to competent authorities.
• Legitimate Interests: Processing carried out for bnb55's legitimate operational interests, including fraud prevention, platform security, responsible gambling monitoring and service improvement — provided those interests are not overridden by your privacy rights.
• Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time by contacting support or adjusting your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

How We Use Your Personal Data

bnb55 uses your personal data for the following specific purposes. Each purpose is tied to a lawful basis as described in Section 5:

6.1 Account Management

To create, maintain and administer your account, including authentication, account recovery, balance management and communication of important account notices. Legal basis: Contractual Necessity.

6.2 Identity & Age Verification (KYC)

To verify your identity and confirm that you meet the minimum age requirement (18 years or the higher minimum required by applicable law) before processing withdrawals or when triggered by deposit thresholds. Legal basis: Legal Obligation.

6.3 Financial Transaction Processing

To process deposits, withdrawals and any associated fee calculations. References to familiar Pakistani payment rails (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah) on the platform are contextual only. bnb55 does not imply any endorsement or gambling support from these providers. Legal basis: Contractual Necessity.

6.4 Fraud Prevention & AML Compliance

To detect, investigate and prevent fraudulent activity, money laundering, multi- accounting and other prohibited conduct as defined in the Terms & Conditions. Legal basis: Legal Obligation and Legitimate Interests.

6.5 Responsible Gambling Monitoring

To monitor account activity for indicators of problem gambling behaviour, to enforce self-exclusion agreements and deposit limits, and to deliver responsible gambling interventions where appropriate. Legal basis: Legal Obligation and Legitimate Interests.

6.6 Customer Support

To respond to your queries, resolve disputes and maintain support records. Support is available in English, and Urdu-language assistance may be available on request. Legal basis: Contractual Necessity and Legitimate Interests.

6.7 Platform Improvement & Analytics

To understand how the platform is used, identify technical issues, optimise performance and improve the user experience for players across Pakistan. Legal basis: Legitimate Interests.

6.8 Marketing Communications

Where you have provided explicit consent, to send you information about promotions, new features and offers. You may opt out at any time via your account communication settings or by contacting support. Legal basis: Consent.

Data Sharing & Disclosure

bnb55 does not sell, rent or trade your personal data to third parties for commercial marketing purposes. Data sharing is limited to the following categories of recipient, strictly on a need-to-know basis:

• Payment Service Providers: To process deposits and withdrawals. Data shared is limited to what the payment processor requires for transaction completion and fraud screening.
• Identity Verification Services: Third-party KYC and AML screening providers engaged to verify your identity and meet regulatory obligations.
• Game Content Providers: To deliver licensed casino and sports betting content. These providers may receive session and game-activity data necessary to run games and verify results.
• Analytics and Technology Providers: To support platform performance monitoring, security operations and product improvement. Data shared is aggregated or pseudonymised where practicable.
• Regulatory and Legal Authorities: Where bnb55 is required by applicable law, court order or regulatory direction to disclose personal data to competent authorities. bnb55 will only comply with such requests where they are legally valid and properly documented.
• Business Transfers: In the event of a merger, acquisition or sale of all or part of the Operator's business, personal data may be transferred to the successor entity, subject to equivalent data protection obligations.

Data Retention

bnb55 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal retention obligations. The following general retention principles apply:

• Active Accounts: Personal data is retained for as long as your account remains active and for a reasonable period thereafter to allow for dispute resolution and to meet audit requirements.
• KYC and Financial Records: Identity verification documents and financial transaction records are retained for a minimum period required by AML and financial crime compliance obligations, which typically ranges from five to seven years following account closure.
• Self-Exclusion Records: Records of self-exclusion requests are retained for the duration of the exclusion and for a defined period thereafter to prevent re-registration during an active exclusion period.
• Marketing Data: Data held solely for marketing purposes is deleted promptly upon withdrawal of consent and at least upon account closure where no other retention ground applies.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

Data Security

bnb55 implements appropriate technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction or alteration. These measures include, without limitation:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the platform.
• Encryption of sensitive data fields at rest, including financial identifiers and KYC document contents.
• Role-based access controls limiting staff access to personal data to those with a documented operational need.
• Regular security reviews of infrastructure, application code and access logs.
• Two-factor authentication options for user accounts to reduce the risk of unauthorised access.

While bnb55 takes all reasonable precautions, no system is entirely immune to security risks. In the event of a data breach that poses a risk to your rights and interests, bnb55 will take prompt action to contain the breach and will notify affected users as required by applicable law.

Cookies & Tracking Technologies

bnb55 uses cookies and similar technologies to operate and improve the platform. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They manage session state, maintain your login status and enable core security features. These cookies cannot be disabled without impairing your ability to use the platform.

10.2 Performance & Analytics Cookies

These cookies collect aggregated or pseudonymised information about how users interact with the platform — pages visited, errors encountered, load times — to help us improve performance and the user experience. Data collected by analytics cookies does not personally identify you.

10.3 Functional Cookies

These cookies remember your preferences — such as language selection, odds format and display settings — to provide a personalised experience on return visits.

10.4 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the platform. Most modern browsers (including those commonly used on Android and iOS devices in Pakistan) provide cookie management options in their privacy or settings menus.

International Data Transfers

bnb55 operates internationally, and your personal data may be transferred to and processed in countries outside of Pakistan. Where such transfers occur, bnb55 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable law. These safeguards may include:

• Standard contractual clauses recognised by applicable regulatory frameworks.
• Data processing agreements with third-party providers that impose binding data protection obligations.
• Transfer to countries that maintain an adequate level of data protection as recognised by relevant authorities.

If you wish to obtain further information about the safeguards applied to international data transfers involving your personal data, please contact us using the details in Section 16.

Your Data Protection Rights

Subject to applicable law and any overriding legitimate interests or legal obligations held by bnb55, you hold the following rights in respect of your personal data:

To exercise any of the rights above, please contact the bnb55 support team via live chat or email as described in Section 16. We will acknowledge your request within five business days and aim to resolve it within thirty days, subject to any extensions permitted by applicable law.

Please note that certain rights may be limited where bnb55 has a legal obligation to retain data (for example, AML-mandated KYC records) or a legitimate interest that overrides the exercise of a specific right. We will always explain the basis for any limitation applied to a rights request.

Minors — Data Protection

The bnb55 platform is strictly restricted to individuals aged 18 years or above, or the higher minimum age required by the applicable jurisdiction. bnb55 does not knowingly collect personal data from individuals below the minimum eligible age.

Where bnb55 becomes aware — through KYC verification or any other means — that personal data has been collected from an underage individual, we will promptly take steps to close the associated account, forfeit any winnings accrued, and securely delete the data in question to the extent not precluded by legal retention obligations.

Third-Party Links & Integrations

The bnb55 platform may reference or integrate with third-party services — including game content providers, payment processors and sports data feeds — in the course of delivering the Services. This Policy applies solely to personal data processed by bnb55 in its capacity as Data Controller.

Third-party services operate under their own privacy policies and data protection frameworks, which are beyond bnb55's control. bnb55 is not responsible for the privacy practices of any third-party service. We recommend that you review the privacy policy of any third party whose services you access in connection with the platform.

Policy Amendments

bnb55 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices or the range of Services offered. When material changes are made, we will notify registered users via the email address associated with their account or through a prominent platform notification, where reasonably practicable.

The "Last Reviewed" date displayed at the top of this Policy will be updated whenever changes are made. We encourage you to review this Policy periodically to remain informed about how your personal data is being handled. Continued use of the platform following the posting of an updated Policy constitutes your acceptance of the revised terms.

Contact Us — Data Queries & Requests

If you have any questions about this Privacy Policy, wish to exercise any of the data rights described in Section 12, or wish to raise a complaint about how your personal data has been handled, please use the following contact channels: