bh55 Privacy Policy

This Privacy Policy ("Policy") is published by bh55 ("bh55", "we", "us", "our") and applies to all personal data collected from individuals ("Players", "Users", "you") who register an account on, access, or interact with the bh55 online gaming and sports betting platform accessible at bh55.org ("the Platform").

bh55 operates under an international gaming license that imposes binding obligations relating to the collection, processing, storage, and security of player personal data. This Policy reflects those obligations alongside bh55's own commitment to transparent, fair, and proportionate data practices. This Policy should be read alongside the bh55 Terms & Conditions, which together constitute the complete agreement governing your relationship with bh55.

This Policy is written in plain English and is directed primarily at Pakistani players. While bh55's player base operates across multiple jurisdictions, Pakistani players represent our primary market and specific references to Pakistani payment methods, mobile network operators, and local banking partners are included where contextually relevant to data processing practices.

The data controller responsible for your personal data is bh55 Operations, the entity operating the bh55 platform under its international gaming license. As data controller, bh55 Operations determines the purposes for which, and the means by which, your personal data is processed.

bh55 does not appoint a separate Data Protection Officer for all jurisdictions, but maintains an internal privacy compliance function responsible for oversight of data protection obligations. For all privacy-related enquiries, complaints, and data rights requests, contact the bh55 privacy team through the support contact details provided in Section 15 of this Policy.

bh55 collects personal data from Players through multiple touchpoints across the platform lifecycle. The categories of data collected, the source of that data, and the basis for collection are set out in the table below:

bh55 processes personal data only where a valid legal basis exists. The primary legal bases upon which bh55 relies are:

• Contractual necessity: Processing required to perform our contract with you — including account creation, transaction processing, game provision, and customer support.
• Legal obligation: Processing required to comply with our obligations under our international gaming license, including KYC, AML, age verification, and regulatory reporting requirements.
• Legitimate interests: Processing for bh55's legitimate business interests where these are not overridden by your privacy rights — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics to improve the platform.
• Consent: Where bh55 relies on consent as a legal basis (principally for direct marketing communications), consent will be obtained clearly and separately. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bh55 uses the personal data it collects for the following specific purposes, each of which is tied to a valid legal basis as described in Section 4:

• Account creation and management: To establish and administer your bh55 account, including registration, mobile verification via Pakistani network OTP, and account settings management.
• Identity and age verification: To confirm that you meet bh55's 21+ age eligibility requirement and to verify your identity in line with KYC obligations under our gaming license.
• Transaction processing: To process your PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Raast, and to process your withdrawal requests back to your registered payment accounts.
• Game delivery and platform operation: To deliver the gaming and betting services available on bh55, including maintaining your bet history, game results, and VIP loyalty programme status.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, bonus abuse, and other security threats to the bh55 platform and its Players.
• Responsible gaming monitoring: To identify potential indicators of problem gambling behaviour and to enforce player-set account restrictions including deposit limits, loss limits, session limits, and self-exclusion.
• Customer support: To respond to your queries, process your complaints, and maintain a record of support interactions for quality assurance and dispute resolution purposes.
• Regulatory compliance and reporting: To fulfil reporting obligations to bh55's licensing authority and to maintain records required by AML and gaming regulations.
• Platform improvement and analytics: To understand how Players use the bh55 platform and to improve features, performance, and game selection based on aggregated behavioral data.
• Marketing communications: Where you have consented or where legitimate interest applies, to send you promotions, bonus offers, and news relevant to your bh55 activity — with opt-out always available.

bh55 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your personal data may be disclosed to the following categories of recipients in connection with bh55's legitimate operations and legal obligations:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast, to facilitate PKR deposits and withdrawals. These providers receive only the minimum data necessary to process your transaction and operate under their own regulatory data protection obligations.
• Identity verification providers: Third-party KYC and AML screening services that verify your identity documents and screen against sanctions and politically exposed person (PEP) databases as required by our gaming license.
• Game technology providers: The certified gaming software suppliers whose games are delivered through the bh55 platform may receive anonymised gameplay data for technical operation and RNG certification purposes.
• IT and infrastructure providers: Cloud hosting, database, and cybersecurity service providers who support the technical operation of the bh55 platform, operating under binding data processing agreements that restrict their use of data to defined service purposes.
• Regulatory and licensing authorities: bh55's international gaming licensing authority may require access to player data for regulatory inspection, audit, or investigation purposes. bh55 is legally obligated to comply with such requests.
• Law enforcement and legal process: bh55 may disclose personal data to government agencies, law enforcement bodies, or courts where required by applicable law, valid legal process, or to protect bh55's legal rights.
• Professional advisors: Lawyers, auditors, and accountants who provide professional services to bh55 are subject to strict confidentiality obligations and receive only data necessary for the specific service engagement.

bh55 operates as an international gaming platform and some of the service providers involved in delivering the platform's operations are located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to, stored in, or processed in countries other than Pakistan.

Where such transfers occur, bh55 ensures that appropriate safeguards are in place to protect your data in transit and at destination. These safeguards may include:

• Standard contractual clauses incorporated into agreements with third-party data processors in third countries.
• Transfer to jurisdictions that maintain adequate data protection standards as assessed under bh55's licensing authority's requirements.
• Application of technical and organisational security measures equivalent to those applied to data processed within bh55's primary operational jurisdiction.

bh55 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention principles apply:

• Active account data: Retained for the full duration of your bh55 account's active period plus a minimum of five (5) years following account closure. This retention is required to fulfil AML obligations, gaming license audit requirements, and dispute resolution needs.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in line with standard anti-money laundering record-keeping requirements applicable under our gaming license.
• KYC documentation: Retained for five (5) years following account closure or the date of the most recent transaction, whichever is later. KYC documents are stored in encrypted form and access is restricted to authorised compliance personnel only.
• Support and communications records: Retained for three (3) years following the closure of each support interaction, to support future dispute resolution and quality assurance processes.
• Marketing consent records: Retained for three (3) years following the most recent consent action (grant or withdrawal), to demonstrate compliance with consent-based marketing obligations.
• Self-exclusion records: Permanently retained to prevent re-registration by permanently self-excluded Players, even after the account is closed. This is a responsible gaming obligation and not negotiable.
• Technical and log data: System logs and technical data retained for up to 12 months for security monitoring and fraud detection purposes, then anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to technical constraints, it will be restricted from active processing until deletion is completed.

bh55 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the bh55 platform is encrypted in transit using industry-standard 256-bit SSL/TLS encryption — the same standard applied by major Pakistani commercial banks.
• Data encryption at rest: Sensitive personal data — including KYC documents, CNIC records, and financial account identifiers — is encrypted at rest using AES-256 encryption within bh55's secure storage infrastructure.
• Access controls: Strict role-based access controls ensure that bh55 personnel can only access the player data categories necessary for their specific operational role. Access to KYC documentation is restricted to compliance personnel only.
• Two-factor authentication: bh55 offers and recommends two-factor authentication (2FA) for all player accounts, adding a layer of protection against unauthorised login attempts using stolen or guessed passwords.
• Penetration testing and vulnerability scanning: The bh55 platform undergoes regular security testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: bh55 maintains a documented data breach response procedure. In the event of a data security incident affecting your personal data, bh55 will notify affected Players and the relevant regulatory authority in accordance with applicable notification obligations.

bh55 uses cookies and similar tracking technologies — including local storage, session tokens, and device fingerprinting — to operate the platform effectively, maintain session continuity, detect fraud, and (with your consent) deliver personalised content and analyse platform usage. The categories of cookies bh55 uses are:

You may manage your cookie preferences at any time through your bh55 account settings or through your browser's cookie management functionality. Note that disabling essential cookies will prevent access to the bh55 platform.

The bh55 platform is strictly restricted to individuals aged 21 years or older. bh55 does not knowingly collect personal data from individuals under 21 years of age. The 21+ age requirement is enforced through:

• Age confirmation declaration at the point of account registration.
• KYC identity verification requiring CNIC (which displays date of birth) before withdrawal processing.
• Automated and manual account review processes designed to identify potentially underage account holders.

bh55 may send marketing communications to Players — including information about promotions, new games, deposit bonuses, PSL-season offers, and VIP tier upgrades — through the following channels:

• SMS to registered Pakistani mobile number: bh55 may send promotional SMS messages to your registered +92 mobile number where you have opted in to SMS marketing.
• Email: Where you have provided an email address and consented to email marketing, bh55 may send promotional email communications.
• In-platform notifications: All logged-in bh55 account holders may receive in-platform promotional notifications regardless of marketing consent status, as these are considered part of the platform's operational communications.

You may opt out of external marketing communications (SMS, email) at any time by:

• Updating your communication preferences in your bh55 account settings dashboard.
• Replying STOP to any promotional SMS received from bh55.
• Contacting bh55 support in writing at [email protected] (not a clickable link).

Opting out of marketing communications does not affect your access to the bh55 platform, your ability to claim promotions manually through the platform, or the delivery of transactional communications such as deposit confirmations, withdrawal processing notices, and security alerts.

The bh55 platform integrates third-party game content from licensed game providers and payment gateways from regulated financial service providers. These third parties may operate their own privacy practices and policies. bh55 is not responsible for the privacy practices of third-party game providers or payment processors once you interact directly with their systems.

In particular, transactions processed through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Raast involve data handling by those providers under their own privacy policies and applicable Pakistani financial regulation. By using these payment methods on bh55, you consent to your transaction data being handled by the relevant provider in accordance with their own terms.

bh55 reserves the right to update or amend this Privacy Policy at any time. Changes may be required to reflect updates to our operational practices, new regulatory requirements applicable to our gaming license, changes in the third-party services we use, or enhancements to our data protection standards.

Material changes to this Privacy Policy — i.e., changes that materially affect your privacy rights or bh55's data practices — will be communicated to registered Players via SMS to their registered Pakistani mobile number and/or via a notification within the bh55 platform, with a minimum of seven (7) days' notice before the revised Policy takes effect.

The effective date and version number displayed at the top of this Policy will be updated to reflect each revision. The most current version of this Privacy Policy is always available at bh55.org/privacy-policy. Continued use of the bh55 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

For all privacy-related queries, data rights requests, or complaints regarding bh55's handling of your personal data, please contact the bh55 privacy team through the following channels:

• Privacy support email: [email protected] — displayed as plain text only. This is not a clickable link. Please copy the address manually to your email client. Use the subject line "Privacy Request — [Your Account Username]" for faster routing.
• In-platform live chat: Available 24/7 to all logged-in bh55 account holders. For privacy requests, please state "Data Protection Request" at the start of your chat session to ensure routing to the appropriate team.
• Postal address: Where required by your jurisdiction, written privacy requests may also be submitted by postal mail. Contact bh55 support via the channels above to obtain the relevant mailing address for formal correspondence.

bh55 will acknowledge all privacy requests within 5 business days and will provide a substantive response within 30 calendar days. Where a request is particularly complex or voluminous, bh55 may extend this period by a further 30 days, notifying you of the extension and the reason within the initial 30-day window.