bh55 Privacy Policy – How We Handle Your Data

1. Data Controller

"bh55", "we", "us", or "our" refers to the operator of the bh55 platform accessible at bh55.app. bh55 is the data controller in respect of all personal data collected through the bh55 platform, bh55 mobile web experience, customer support channels, and promotional communications. Questions about this Privacy Policy or your personal data held by bh55 should be directed to [email protected].

2. Personal Data We Collect

bh55 collects personal data from users through several channels. The categories of data collected are described below.

2.1 Registration Data

When you register a bh55 account, we collect: your full legal name; date of birth; email address; Pakistani mobile number (or international number where applicable); residential address including city (e.g. Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad); and a chosen password (stored in hashed form – bh55 does not have access to your plaintext password).

2.2 Identity Verification (KYC) Data

To satisfy our anti-money laundering and responsible gaming obligations, bh55 may require copies of: a government-issued identity document such as your National Identity Card (CNIC); proof of address such as a recent utility bill or bank statement; and proof of ownership of your payment method (e.g. a screenshot of your JazzCash or Easypaisa account showing your registered mobile number).

2.3 Financial Transaction Data

bh55 records details of all deposits and withdrawals made through your account including: the payment method used; transaction amounts in PKR; transaction reference numbers; and timestamps. bh55 does not store full bank account numbers or full card numbers – only masked identifiers sufficient to link a transaction to a verified payment method.

2.4 Gaming Activity Data

bh55 logs your gaming and betting activity including: game sessions; bet amounts and outcomes; sports betting history; bonus claims and wagering progress; and session duration and frequency data used for responsible gaming monitoring.

2.5 Technical and Device Data

When you access the bh55 platform, our systems automatically collect: IP address; device type and operating system; browser type and version; and session timestamps. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

2.6 Communications Data

If you contact bh55 support via live chat, email, or any other channel, we retain records of those communications including the content of messages, the nature of your query, and the resolution provided.

3. Purpose and Legal Basis for Processing

bh55 processes personal data only for the following specified purposes, each supported by a lawful basis:

• Account provision and management – necessary for the performance of the contract between you and bh55 (the platform Terms & Conditions).
• Identity verification and KYC compliance – necessary to comply with legal obligations applicable to bh55 as an online gaming operator.
• Payment processing – necessary for the performance of the contract; processing PKR deposits and withdrawals via JazzCash, Easypaisa, bank transfers, and other methods requires sharing limited transactional data with those payment service providers.
• Fraud prevention and security – legitimate interest of bh55 in protecting the platform, its users, and the integrity of gaming markets from fraudulent or abusive activity.
• Responsible gaming monitoring – legal obligation and legitimate interest in identifying and assisting players who may be experiencing problem gambling behaviours.
• Customer support – necessary for the performance of the contract and bh55's legitimate interest in providing quality assistance to users.
• Marketing communications – based on your explicit consent at registration or opt-in. You may withdraw consent at any time by contacting [email protected] or using the opt-out link in any marketing message.
• Platform improvement and analytics – legitimate interest in understanding how users interact with the platform to improve performance and user experience. Analytics data is aggregated and not used to make individual decisions about users.

4. Sharing Your Personal Data

bh55 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. bh55 shares personal data only in the following circumstances:

4.1 Payment Processors

To process deposits and withdrawals, bh55 shares the minimum necessary transactional data with payment service providers including JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Skrill, and USDT TRC20 network processors. These processors are contractually bound to use your data only for transaction processing purposes.

4.2 Game Providers

When you play games supplied by third-party providers such as Evolution Gaming, Pragmatic Play, PG Soft, or Habanero, limited session data (a pseudonymous player identifier and bet amounts) is shared with those providers to facilitate gameplay. Game providers do not receive your name, contact details, or financial account data.

4.3 Regulatory and Legal Disclosures

bh55 may disclose personal data to regulatory authorities, law enforcement agencies, or other competent bodies where required to do so by applicable law, court order, or regulatory direction, including in connection with anti-money laundering investigations.

4.4 Professional Advisers

bh55 may share data with legal counsel, auditors, or other professional advisers under obligations of confidentiality, where necessary for the operation of the business.

5. Data Retention

bh55 retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods:

• Account and registration data: retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in line with anti-money laundering record-keeping requirements.
• Financial transaction records: retained for a minimum of five (5) years from the date of the transaction.
• KYC identity documents: retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Gaming activity logs: retained for a minimum of three (3) years for responsible gaming and dispute resolution purposes.
• Support communications: retained for two (2) years unless a longer period is required for dispute resolution.
• Technical and device data logs: retained for up to twelve (12) months for security and fraud prevention purposes.

On expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

6. Security Measures

bh55 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption on all platform pages and API communications;
• Passwords stored as salted hashes – bh55 staff cannot view your plaintext password;
• Two-factor authentication (2FA) available for all account logins;
• Access to personal data within bh55 is restricted to personnel who require it to perform their role, under role-based access controls;
• Regular security assessments and penetration testing of the bh55 platform infrastructure;
• Automatic session timeout after periods of inactivity to protect accounts on shared devices.

While bh55 takes all reasonable steps to protect your data, no internet-based system is entirely immune from security risks. You are responsible for maintaining the security of your own device and bh55 login credentials.

7. Cookies and Tracking Technologies

The bh55 platform uses cookies and similar tracking technologies to enable core platform functionality, maintain authenticated sessions, detect fraud, and collect aggregated analytics. The categories of cookies used by bh55 are:

• Essential cookies: Required for the bh55 platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without preventing you from using the platform.
• Performance/analytics cookies: Used to understand how users interact with bh55 pages, which game categories are most visited, and where users experience errors. Data collected is aggregated and pseudonymised.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats.

You may manage or disable non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of the bh55 platform. bh55 does not serve advertising cookies or share cookie data with advertising networks.

8. Your Rights Regarding Your Personal Data

Subject to applicable law, you have the following rights in relation to your personal data held by bh55:

• Right of access: You may request a copy of the personal data bh55 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to bh55's legal obligations to retain certain records (such as AML and KYC records).
• Right to restriction: You may request that bh55 restrict processing of your data in certain circumstances, for example while an accuracy dispute is resolved.
• Right to data portability: Where processing is based on your consent or a contract, you may request a copy of your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interest grounds, including direct marketing based on legitimate interest.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact bh55 at [email protected]. bh55 will respond to valid requests within 30 days. Identity verification may be required before processing a data rights request.

9. Minors

The bh55 platform is strictly for adults aged 18 and above. bh55 does not knowingly collect personal data from individuals under the age of 18. If bh55 becomes aware that an account has been opened by a minor, the account will be immediately suspended and all associated data reviewed in accordance with our obligations. If you are a parent or guardian and believe a minor in your care has registered with bh55, please contact us immediately at [email protected].

10. International Data Transfers

bh55 operates as an international online gaming platform. Your personal data may be transferred to and processed in countries outside Pakistan in order to provide the services described in this Privacy Policy, including by game providers, payment processors, and cloud infrastructure providers. Where such transfers occur, bh55 takes steps to ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this policy, including through contractual data processing agreements with third-party service providers.

11. Changes to This Privacy Policy

bh55 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Where material changes are made, bh55 will endeavour to notify registered users through in-platform notifications or email to the registered address. The updated policy will be published at bh55.app/privacy-policy with a revised "Last updated" date. Continued use of the bh55 platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms.

12. Contact and Data Queries

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by bh55, please contact our support team:

• Email: [email protected]
• Support hours: 24 hours a day, 7 days a week (Pakistan Standard Time)
• Response time: Data rights requests responded to within 30 days; general privacy queries within 5 business days