bn550 Privacy
Policy

1. Introduction

bn550 ("we", "us", "our", or "the Platform") is committed to safeguarding the privacy and personal data of every player who registers and participates on our platform. This Privacy Policy (the "Policy") sets out in clear, plain English exactly what personal information bn550 collects from users, the purposes for which that information is processed, the legal grounds on which processing is based, how long we retain data, and the rights available to you as a data subject.

This Policy applies to all personal data collected through the bn550 website at bn550.com, including during account registration, identity verification, deposit and withdrawal transactions, customer support interactions, and any marketing communications you may opt in to. It also covers data collected automatically through your use of the platform, such as device identifiers and session activity logs.

bn550 operates with a primary user base in Pakistan and has designed its data handling practices with Pakistani players in mind, including support for PKR-based payment methods such as JazzCash, EasyPaisa, HBL, and UBL. We also align our data protection practices with internationally recognised frameworks to ensure that your information is handled responsibly regardless of where our systems are hosted.

2. Data Controller

For the purposes of this Privacy Policy, bn550 is the data controller responsible for your personal information. As the data controller, bn550 determines the purposes and means by which your personal data is processed. All queries, access requests, correction requests, and deletion requests relating to your personal data should be directed to the bn550 support team using the contact details provided in Section 14 of this Policy.

Where bn550 engages third-party service providers — such as identity verification agencies, payment processors, or fraud detection services — those providers act as data processors on our behalf and are contractually obligated to process your data only in accordance with our documented instructions and applicable data protection law.

3. Personal Data We Collect

3.1 Registration Data

When you create a bn550 account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify the 21+ age requirement)
• Pakistani National Identity Card (CNIC) number or equivalent government-issued ID number
• Residential address (city, province, Pakistan)
• Valid email address
• Pakistani mobile number (used for account verification and JazzCash/EasyPaisa wallet association where applicable)
• Account username and hashed password (passwords are never stored in plain text)

3.2 Identity Verification (KYC) Data

As required by our gaming licence conditions and applicable AML obligations, bn550 may request the following additional documentation before processing withdrawal requests or as part of our ongoing compliance programme:

• Scanned copy or photograph of a government-issued photo identification document (CNIC, passport, or driving licence)
• Proof of residential address (recent utility bill, bank statement, or official correspondence dated within 90 days)
• Source of funds declaration (for high-value transactions above defined thresholds)
• Selfie or liveness check image (for biometric identity matching)

3.3 Financial Transaction Data

For every deposit and withdrawal you make on bn550, we record the transaction amount (in PKR), the payment method used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Visa/Mastercard), the transaction timestamp, and the unique transaction reference number. We do not store full card numbers; card payment data is tokenised by our PCI-DSS compliant payment processor and is never stored on bn550 servers.

3.4 Gameplay and Betting Activity Data

bn550 maintains a complete record of all bets placed, games played, wager amounts, outcomes, and bonus activity associated with your account. This data is used for account administration, dispute resolution, responsible gaming monitoring, and regulatory reporting purposes.

3.5 Technical and Device Data

When you access bn550.com, our servers automatically log certain technical data, including your IP address, browser type and version, device operating system, screen resolution, referring URL, pages visited, and session duration. This data is used for platform security, fraud prevention, and analytical purposes.

3.6 Customer Support Communications

If you contact the bn550 support team via email, live chat, or any other channel, we retain a record of that communication, including the contents of your messages and any attachments you provide, for the purpose of resolving your query and for staff training and quality assurance purposes.

4. Purposes of Processing

bn550 processes your personal data for the following clearly defined purposes:

Purpose	Data Categories Used
Account registration and management	Registration data, device data
Age and identity verification (KYC)	Registration data, KYC documents
Processing deposits and withdrawals	Financial transaction data, KYC data
Fraud prevention and AML compliance	All categories, including device data
Responsible gaming monitoring	Gameplay data, registration data
Customer support and dispute resolution	Support communications, gameplay data
Regulatory and legal compliance reporting	All categories as required by law
Platform improvement and analytics	Technical data (anonymised where possible)
Marketing communications (opt-in only)	Registration data, gameplay preferences

5. Legal Basis for Processing

bn550 processes your personal data on the following legal grounds, consistent with internationally recognised data protection frameworks:

• Contractual necessity: Processing required to fulfil our obligations under the bn550 Terms and Conditions — including account management, payment processing, and the delivery of gaming services.
• Legal obligation: Processing required to comply with applicable AML regulations, gaming licence conditions, tax reporting requirements, and law enforcement requests.
• Legitimate interests: Processing conducted for the purpose of fraud prevention, platform security, responsible gaming monitoring, and analytical improvement of our services, where those interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have given your explicit prior consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Sharing of Personal Data

bn550 does not sell your personal data. We share your information only in the following circumstances and only to the minimum extent necessary for the stated purpose:

6.1 Identity Verification Providers

To complete the KYC process, bn550 engages regulated third-party identity verification providers. These providers receive the identity documents and biometric data you submit and return a verification decision to bn550. They are contractually prohibited from using your data for any purpose other than identity verification on our behalf.

6.2 Payment Processors

To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard, bn550 shares the minimum transaction data required with each respective payment processor. All payment processors engaged by bn550 are required to maintain PCI-DSS compliance and appropriate data security standards.

6.3 Regulatory and Law Enforcement Bodies

bn550 may be required to disclose your personal data to gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies where such disclosure is required by applicable law, court order, or regulatory mandate. In such cases, bn550 will disclose only the data specifically requested and will notify you of such disclosure where legally permitted to do so.

6.4 Fraud Prevention and AML Networks

bn550 participates in regulated fraud prevention and anti-money laundering data sharing networks as required by our gaming licence obligations. Information shared through these networks may be used by other licensed operators and regulators to prevent financial crime. A record of any such sharing is maintained in our data processing register.

7. International Data Transfers

As an internationally licensed gaming platform serving Pakistani players, bn550's infrastructure and some of its data processors may be located outside Pakistan. Where your personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection as recognised international standards, bn550 implements appropriate contractual safeguards — including standard contractual clauses — to ensure that your data continues to receive adequate protection throughout its lifecycle.

By using the bn550 platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan for the purposes described in this Policy. In all cases, such transfers are conducted in accordance with applicable data protection law and with appropriate security measures in place.

8. Data Retention

bn550 retains your personal data for as long as your account remains active and for a defined period following account closure, in accordance with the following schedule:

• Account and registration data: Retained for a minimum of five (5) years following account closure, as required by AML regulations and gaming licence conditions.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial reporting obligations.
• KYC documentation: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the last communication in a support thread, unless a longer retention period is required in connection with an ongoing dispute or legal proceeding.
• Technical and device data (server logs): Retained for up to twelve (12) months from the date of collection, after which time they are anonymised or deleted.
• Marketing preferences and consent records: Retained for as long as your account remains active or until you withdraw consent, plus one (1) year to maintain an auditable consent record.

9. Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device, remember your preferences, and maintain the security of your session. bn550 uses cookies and similar tracking technologies on bn550.com for the purposes described below.

9.2 Types of Cookies Used by bn550

• Strictly necessary cookies: These are essential for the operation of the bn550 platform and cannot be disabled. They include session authentication cookies, security tokens, and load balancing identifiers. No personal data processed through strictly necessary cookies is used for any purpose other than maintaining platform functionality.
• Analytical cookies: With your consent, bn550 uses analytical cookies to understand how players interact with the platform — including which pages are visited most frequently, how long sessions last, and where navigation bottlenecks occur. This data is used in aggregated, anonymised form to improve the platform experience.
• Preference cookies: These cookies remember your platform settings — such as language preference and display options — so that you do not have to reconfigure them on each visit.

9.3 Managing Cookies

You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the bn550 platform and may prevent you from logging in or placing bets. Disabling analytical or preference cookies will not affect your ability to use the core features of the platform but may result in a less personalised experience.

10. Your Data Rights

As a player whose personal data is processed by bn550, you hold the following rights with respect to that data. To exercise any of these rights, please contact the bn550 support team at the address provided in Section 14:

• Right of Access: You may request a copy of the personal data that bn550 holds about you, along with information about how it is being processed. We will respond to access requests within thirty (30) calendar days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly within your account settings; for changes to KYC-verified fields, please contact our support team.
• Right to Erasure: In certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies — you may request that your personal data be deleted. Please note that this right is subject to our legal data retention obligations; we cannot delete data that we are required by law to retain.
• Right to Restrict Processing: You may request that bn550 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another controller.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing conducted on the basis of our legitimate interests, in which case bn550 will assess whether those interests are overridden by your rights and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11. Minors — Strict 21+ Policy

The bn550 platform is strictly intended for adults aged 21 years and over. bn550 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. If we become aware that personal data has been collected from a person under the age of 21 — whether through a misrepresentation at registration or any other means — we will immediately suspend the relevant account, delete the associated personal data (subject to any legal obligations to retain evidence of the underage registration), and void any bets or transactions conducted under that account.

Parents and guardians who believe that a minor in their care may have accessed or registered on the bn550 platform are encouraged to contact our support team immediately at [email protected] so that the matter can be investigated and resolved without delay.

12. Data Security

bn550 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• Encryption in transit: All data transmitted between your device and bn550's servers is encrypted using TLS 1.2 or higher. Connections using older, insecure protocols are rejected.
• Encryption at rest: Sensitive personal data stored on bn550 servers — including identity documents and financial records — is encrypted using AES-256 encryption.
• Access controls: Access to production systems and personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo background screening and receive regular data protection training.
• Password security: Account passwords are stored as salted cryptographic hashes using a modern, secure hashing algorithm. Plain-text passwords are never stored or transmitted.
• Two-factor authentication (2FA): bn550 supports and encourages the use of two-factor authentication on all player accounts to provide an additional layer of login security.
• Regular security audits: bn550's platform and data handling processes are subject to periodic independent security audits and penetration testing to identify and remediate vulnerabilities.
• Incident response: bn550 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to the rights and freedoms of affected players, we will notify affected users and relevant regulatory authorities within the timeframes required by applicable law.

While bn550 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You can reduce the risk to your account by using a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with any third party.

13. Changes to This Privacy Policy

bn550 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or updates to our platform features. Where changes are material — meaning they affect the nature of the data we collect, the purposes for which it is used, or the rights available to you — we will provide advance notice by email to your registered address and by a prominent notification on the bn550 website, at least fourteen (14) days before the revised Policy takes effect.

For minor, non-material changes — such as clarifications of existing language or corrections of typographical errors — bn550 may update this Policy without prior notice, and the revised version will take effect immediately upon publication. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how bn550 protects your information.

Your continued use of the bn550 platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not accept the revised terms, you must stop using the platform and request account closure in accordance with the bn550 Terms and Conditions.

14. Contact & Data Rights Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how bn550 handles your personal information, please contact our support team using the details below. All data protection queries are handled by a designated member of our compliance team.