bw55 Privacy Policy

This Privacy Policy explains how bw55 collects, uses, stores, protects, and in certain circumstances shares, the personal data of individuals who visit and use the bw55 Platform at bw55.org. It applies to all players registered with bw55, including those based in Karachi, Lahore, Islamabad, Faisalabad, and all other cities across Pakistan.

This Policy should be read alongside the bw55 Terms & Conditions, which together form the complete legal framework governing your relationship with bw55. By registering an Account or continuing to use the Platform after this Policy has been updated, you acknowledge that you have read, understood, and accepted its contents.

Where this Policy refers to "personal data", it means any information that identifies you or could reasonably be used to identify you as an individual — including your name, date of birth, CNIC number, mobile number, email address, payment account details, IP address, and device identifiers.

bw55 is the data controller responsible for the personal data collected through the Platform. As data controller, bw55 determines the purposes for which personal data is processed and the means by which that processing takes place.

bw55 operates under an internationally recognised gaming licence. The licensing authority under which bw55 operates imposes data protection requirements as a condition of the licence, including obligations relating to KYC data retention, anti-money laundering record-keeping, and responsible gaming data management.

Where bw55 engages third-party service providers to process personal data on its behalf — for example, KYC verification providers, payment processors, or cloud infrastructure operators — those providers act as data processors under written agreements that bind them to process data solely on bw55's documented instructions and to maintain appropriate security standards.

bw55 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and in some cases from third-party verification providers. The categories of data we collect are set out below.

bw55 does not collect sensitive personal data such as biometric data (beyond identity document photos required for KYC), racial or ethnic origin, political opinions, religious beliefs, or health data, unless specifically required by a regulatory obligation and only with appropriate safeguards in place.

bw55 processes your personal data for the following defined purposes. Each purpose is matched to a legal basis in Section 5 below.

• Account registration and management: To create, verify, and maintain your bw55 Account, including processing your application, verifying your age and identity, and managing your Account settings and preferences.
• KYC and age verification: To comply with our licensing obligation to verify that all players are aged 21 or above and that their identity and address information is accurate and genuine before processing withdrawals.
• Payment processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and GrabPay, and to maintain accurate financial records of all transactions.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multiple account operation, and any other conduct that is prohibited under our Terms & Conditions or applicable law.
• Regulatory compliance: To comply with anti-money laundering (AML) regulations, our gaming licence conditions, and any lawful requests from regulatory authorities or law enforcement agencies.
• Customer support: To respond to your queries, complaints, and support requests via live chat and email, and to maintain records of those interactions to ensure consistency and quality of service.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to administer self-exclusion and deposit limit requests, and to comply with responsible gaming obligations under our licence.
• Marketing communications: To send you promotional offers, bonus notifications, and news about bw55 — but only where you have expressly opted in to receive such communications. You may withdraw consent at any time.
• Platform improvement: To analyse aggregated usage data in order to improve the performance, reliability, and user experience of the bw55 Platform.

bw55 processes personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contract performance: Processing that is necessary to provide the services you have requested — including account creation, payment processing, game access, and customer support — is carried out on the basis that it is necessary for the performance of our contract with you.
• Legal obligation: Processing required to comply with our gaming licence conditions, anti-money laundering regulations, KYC requirements, and responses to lawful regulatory or law enforcement requests is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and aggregated analytics is carried out on the basis of bw55's legitimate interests, balanced against your rights and freedoms. bw55 has conducted legitimate interest assessments for all processing in this category.
• Consent: Processing for marketing communications and non-essential cookies is carried out on the basis of your freely given, specific, informed, and unambiguous consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

bw55 does not sell your personal data. We share personal data with third parties only in the following limited circumstances, and only to the extent strictly necessary for each purpose:

• KYC and identity verification providers: bw55 uses regulated third-party KYC service providers to verify the identity, age, and address of players. These providers receive identity document images and personal details solely for verification purposes and are contractually prohibited from using that data for any other purpose.
• Payment processors: Transaction data is shared with licensed payment processors — including JazzCash, EasyPaisa, and partner banks — to the extent necessary to process deposits and withdrawals. These processors operate under their own regulated privacy frameworks.
• Cloud infrastructure and hosting providers: bw55's Platform and data infrastructure is operated on secure, professionally managed cloud servers. Infrastructure providers are bound by data processing agreements and do not have access to player data outside of their infrastructure role.
• Regulatory and law enforcement authorities: bw55 will disclose personal data to its licensing authority, financial intelligence units, or law enforcement agencies where required to do so by a binding legal obligation or valid legal order.
• Anti-fraud and AML screening services: bw55 may run certain player data points through approved AML and fraud screening databases as required by its licence obligations. These checks are conducted on a need-to-know basis with certified compliance partners.

All third-party processors engaged by bw55 are required to maintain data security standards consistent with bw55's own obligations, and are subject to regular due diligence reviews. bw55 does not transfer personal data to unregulated third parties or jurisdictions without adequate data protection frameworks.

bw55 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that allow the Platform to function correctly, remember your preferences, and — where you have consented — help us understand how you use the site.

The categories of cookies bw55 uses are:

• Strictly necessary cookies: These are essential for the Platform to function and cannot be disabled. They include session management cookies, authentication tokens, and security cookies. No consent is required for these cookies.
• Functional cookies: These remember your preferences such as language settings, remembered login details (where you opt in), and display options. They require your consent.
• Analytics cookies: These help bw55 understand aggregated usage patterns — such as which games are most popular and where players experience technical issues — so we can improve the Platform. Analytics data is processed in aggregated, anonymised form where possible. Consent is required.
• Marketing cookies: Where you have consented to marketing communications, bw55 may use cookies to track which promotions you have engaged with in order to avoid sending duplicate offers. These cookies are only active for players who have opted in to marketing.

You can manage your cookie preferences at any time through the bw55 cookie preference centre, accessible via the Platform footer. Note that disabling strictly necessary cookies will affect the functionality of the Platform.

bw55 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by our gaming licence and applicable regulations. The key retention periods that apply are:

• KYC and identity documents: Retained for a minimum of five (5) years from the date of account closure, as required by standard AML and gaming licence obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in line with standard financial record-keeping requirements.
• Responsible gaming records: Self-exclusion records, deposit limit history, and related responsible gaming data are retained for the duration of the exclusion period plus five (5) years, to prevent re-registration during an active exclusion.
• Customer support records: Live chat transcripts and support email correspondence are retained for two (2) years from the date of the interaction, unless they form part of an ongoing complaint or regulatory investigation.
• Marketing data: Where you have consented to marketing, your marketing preferences are retained until you withdraw consent, at which point marketing processing ceases promptly and preference records are updated accordingly.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. bw55 conducts periodic data audits to ensure that data no longer required is disposed of in accordance with this Policy.

bw55 respects your rights over your own personal data. The following rights are available to all bw55 players. To exercise any of these rights, contact our privacy team using the details in Section 13.

bw55 will respond to all valid privacy rights requests within 30 days of receipt. Where a request is complex or bw55 receives a high volume of requests, this period may be extended by a further 60 days, with notice to you. There is no charge for submitting a request. If bw55 is unable to fulfil a request — for example, because a regulatory retention obligation prevents deletion — we will explain the specific reason in writing.

bw55 implements a layered security architecture designed to protect player personal data against unauthorised access, disclosure, alteration, and destruction. Key technical and organisational measures include:

• Encryption in transit: All data transmitted between your device and the bw55 Platform is encrypted using TLS 1.3 with 256-bit AES cipher suites. Mixed-content connections are blocked.
• Encryption at rest: Stored personal data — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256.
• Password security: Account passwords are never stored in plain text. bw55 uses bcrypt hashing with unique per-user salts. Players are encouraged to use strong, unique passwords and to enable two-factor authentication (2FA).
• Access controls: Access to personal data within bw55's internal systems is governed by role-based access controls on a strict need-to-know basis. Access logs are maintained and reviewed regularly.
• Penetration testing: bw55's Platform and infrastructure undergoes regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists.
• Incident response: bw55 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to player rights, bw55 will notify affected players and the relevant regulatory authority within the timeframes required by applicable obligations.

The bw55 Platform is strictly restricted to individuals aged 21 years and above. bw55 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the registration and KYC process, and bw55 employs active controls to detect and prevent under-age access.

If bw55 becomes aware that personal data has been collected from a person under 21 — whether through a fraudulent age declaration or any other means — that data will be immediately deleted, the associated Account will be permanently closed, and any balance will be forfeited in accordance with our Terms & Conditions and licence obligations.

If you believe that a minor may have registered an Account on bw55, please contact our support team immediately at the details provided in Section 13 so that we can investigate and take appropriate action without delay.

bw55 reserves the right to update this Privacy Policy at any time. When changes are made, the revised Policy will be published on this page with an updated effective date. For material changes — particularly those that affect how your data is used, who it is shared with, or your privacy rights — bw55 will provide advance notice via the Platform or by email to your registered address.

Your continued use of the bw55 Platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and request account closure before the effective date of the changes.

We encourage you to review this page periodically, particularly after receiving any privacy-related communications from bw55. The version number and effective date at the top of this Policy will always indicate whether you are viewing the current version.

For all privacy-related enquiries, data subject rights requests, or concerns about how bw55 handles your personal data, please contact our dedicated privacy team through the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line along with your registered username and a description of your request.
• Live Chat: Available 24/7 directly on the bw55 Platform. Our support agents handle privacy queries in both English and Urdu and can escalate formal requests to the privacy team on your behalf.

When submitting a data subject rights request, please provide sufficient information to allow bw55 to verify your identity before processing the request. This is a security measure to ensure that personal data is not disclosed to any person who is not entitled to receive it.

bw55 aims to acknowledge all privacy requests within 72 hours and to respond substantively within 30 days. For complex requests, this period may be extended as described in Section 9.

This Privacy Policy was last updated in January 2026 and is effective immediately upon publication. bw55 — Version 3.0.