55bn Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") is published by 55bn ("55bn", "we", "us", "our") and applies to all personal data collected from individuals ("you", "your", "Member") who access or use the 55bn website, mobile-optimised platform, or any related services offered under the 55bn brand.

55bn is Pakistan's premier online casino and sports betting platform, serving players across Karachi, Lahore, Islamabad, Faisalabad and beyond. In delivering our services — which include cricket betting, PSL wagering markets, online slots, live dealer casino games, and PKR-denominated payment processing — we necessarily collect and process certain categories of personal information about our Members and prospective Members.

This Policy is designed to give you a clear, honest and complete account of our data practices. It applies in conjunction with the 55bn Terms and Conditions and the Responsible Gaming Policy, both of which are incorporated herein by reference. In the event of any conflict between this Policy and any other document, this Policy shall prevail in respect of privacy and data protection matters.

For the purposes of applicable data protection law, 55bn acts as the data controller in respect of the personal data it collects and processes about Members. This means 55bn determines the purposes for which your personal data is used and the manner in which it is processed.

Where 55bn engages third-party service providers to assist with specific functions — such as payment processing, identity verification, or fraud detection — those providers may act as data processors on 55bn's behalf, processing data only as instructed by 55bn and bound by contractual data protection obligations.

55bn collects only the personal data that is necessary and proportionate to the provision of our services. The categories of personal data we collect are set out in the table below:

55bn does not intentionally collect special categories of sensitive personal data — such as health data, biometric data, or political opinions — as part of its standard service delivery.

55bn collects personal data through the following means:

• Direct provision by you: When you register a 55bn account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion, you directly provide personal data to us.
• Automated collection: When you visit and interact with the 55bn platform, we automatically collect certain technical data such as your IP address, browser fingerprint, and session behaviour via server logs and cookies. See Section 8 for our full Cookie Policy.
• Third-party sources: In connection with our identity verification and fraud prevention obligations, 55bn may receive data about you from authorised third-party KYC verification providers, payment processors, and — where legally required — public databases or law enforcement agencies.
• Referral programmes: If you join 55bn through a referral link, we may receive information about the referral relationship from the referring party, limited to what is necessary to process any applicable referral reward.

55bn uses the personal data it holds about you for the following purposes:

• Account management: Creating, maintaining, verifying and administering your 55bn account, including processing your deposits and withdrawals in PKR.
• Service delivery: Enabling you to access and participate in cricket betting, PSL wagering markets, online slots, live casino games, and all other features of the 55bn platform.
• KYC and age verification: Verifying that you are at least 21 years of age and that the identity you have provided is accurate, in compliance with our operating obligations.
• Fraud prevention and security: Detecting, investigating and preventing fraudulent transactions, account takeovers, money laundering, and other unlawful activity.
• Responsible gaming: Monitoring gaming activity patterns to identify potential problem gambling behaviour and, where appropriate, applying protective measures as described in the Responsible Gaming Policy.
• Legal and regulatory compliance: Fulfilling anti-money laundering (AML) obligations, responding to lawful requests from competent authorities, and maintaining records as required by applicable law.
• Customer support: Investigating and resolving your queries, disputes, and complaints effectively and efficiently.
• Marketing communications: Sending you relevant promotional offers, bonus announcements, PSL season promotions and platform updates — but only where you have explicitly opted in to receive such communications.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the 55bn platform's performance, user experience, and product offering.

55bn processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to fulfil the contract between 55bn and you as a registered Member — including account management, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including AML obligations, KYC verification mandates, and responses to lawful authority requests.
• Legitimate interests: Processing carried out in pursuit of 55bn's legitimate business interests — such as fraud prevention, security monitoring, and platform improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific and informed consent — primarily applicable to the sending of direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

55bn does not sell, rent or trade your personal data to any third party. We share your personal data only in the limited circumstances described below:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and other payment service providers receive the financial data strictly necessary to process your deposits and withdrawals. These providers are bound by their own regulatory obligations and data protection agreements with 55bn.
• KYC and identity verification providers: Authorised third-party providers receive your identity documents and related data to perform verification checks on 55bn's behalf, under strict data processing agreements.
• Fraud prevention and AML services: Specialist fraud detection and anti-money laundering compliance providers may receive transaction and behavioural data where necessary to fulfil 55bn's legal obligations.
• IT and platform infrastructure providers: Cloud hosting, database management, and platform technology providers who process data on 55bn's behalf under contractual data protection obligations.
• Legal and regulatory authorities: Where 55bn is required to disclose personal data by law, court order, or direction from a competent regulatory authority, we will comply with such obligations. Where legally permissible, 55bn will notify you of such a disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of 55bn's assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy implications prior to your data being subject to a different privacy policy.

The 55bn platform uses cookies and similar tracking technologies to enhance your user experience, maintain session security, and collect aggregated analytics data. The categories of cookies used by 55bn are as follows:

• Strictly necessary cookies: Essential for the platform to function correctly. These include session authentication cookies that keep you logged in to your 55bn account during a browsing session. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your platform preferences — such as language settings, preferred game categories, and display options — so that you do not have to re-configure them on each visit.
• Analytics cookies: Collect anonymised data about how Members interact with the 55bn platform — including which pages are visited most frequently and where Members encounter difficulties — to help us improve the platform over time.
• Security cookies: Used to detect and prevent fraudulent activity, including bot activity, account takeover attempts, and suspicious login patterns.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 55bn platform and your ability to access certain features of your account.

55bn retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The general retention periods applied by 55bn are as follows:

• Account and identity data: Retained for the duration of the active account relationship and for a minimum period of five (5) years following account closure, in compliance with AML record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity data: Retained for the duration of the account relationship and for three (3) years following account closure.
• Customer support communications: Retained for three (3) years from the date of the last interaction.
• Marketing preferences and consent records: Retained for the duration of the account relationship and for two (2) years following withdrawal of consent or account closure.

Once the applicable retention period has expired and there is no overriding legal obligation requiring continued retention, 55bn will securely delete or anonymise your personal data.

55bn implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 55bn platform.
• Encryption of sensitive data at rest within 55bn's database infrastructure.
• Role-based access controls ensuring that only authorised 55bn personnel can access personal data, and only to the extent required for their specific job function.
• Multi-factor authentication requirements for internal system access by 55bn staff.
• Regular penetration testing and security audits of the 55bn platform infrastructure.
• Automated anomaly detection systems that flag unusual access patterns for immediate investigation.

While 55bn takes all reasonable precautions to protect your personal data, no system can be guaranteed to be completely immune from attack. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, 55bn will notify you promptly in accordance with applicable notification obligations.

As a 55bn Member, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact 55bn support via live chat or at [email protected]. We will respond to verified requests within thirty (30) calendar days.