ban55 Privacy Policy

1 Who We Are

ban55 is an online casino and sports betting platform operated under an international gaming licence. ban55 serves players across Pakistan, including in Karachi, Lahore, Islamabad, Faisalabad, and all other cities and regions. For the purposes of data protection law, ban55 acts as the data controller in respect of personal data collected from players using the ban55 platform.

All data-related queries, access requests, and complaints should be directed to the ban55 Privacy team, contactable at the address provided in Section 13 of this Policy. ban55 is committed to handling all privacy matters with the seriousness and discretion they deserve.

2 Data We Collect

ban55 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from third-party service providers such as payment processors and KYC verification partners. The categories of data we collect are set out below.

2.1 Registration Data

When you create a ban55 account, we collect the following information:

• Full legal name as it appears on your government-issued identity document
• Date of birth (for age verification — ban55 strictly requires players to be 21 years of age or older)
• Residential address, including city, province, and postal code
• Email address and mobile phone number
• Username and encrypted account password
• Nationality and country of residence

2.2 Identity Verification (KYC) Data

To comply with our anti-money laundering (AML) obligations and to verify player eligibility, ban55 collects:

• Copy of government-issued photo identification — for Pakistani players this is typically the Computerised National Identity Card (CNIC) or a valid passport
• Proof of address document (utility bill, bank statement, or official correspondence dated within 90 days)
• Source-of-funds documentation for high-value transactions where required by our AML policy
• Selfie or facial verification image where our KYC provider requires biometric confirmation

2.3 Financial Data

When you make deposits or request withdrawals, we collect transactional information including the payment method used (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank account details), transaction amounts in PKR, timestamps, and transaction reference numbers. ban55 does not store full card numbers or full bank account credentials on its own servers — this data is handled directly by our PCI-DSS compliant payment processors.

2.4 Gameplay and Activity Data

ban55 records all gameplay activity on the platform, including game sessions, bet amounts, game outcomes, win and loss history, bonus usage, and session durations. This data is retained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.

2.5 Technical and Device Data

Automatically collected technical data includes IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited within ban55, session duration, and click-path data. This information is used for security monitoring, fraud detection, and platform optimisation.

2.6 Communications Data

If you contact ban55 support, participate in surveys, respond to promotions, or communicate with us through any channel, we retain records of those communications together with any personal data contained within them.

3 How We Use Your Data

ban55 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected without first obtaining your consent or establishing a separate lawful basis.

4 Legal Basis for Processing

ban55 processes your personal data only where a valid legal basis exists. The four legal bases on which ban55 relies are as follows:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you agreed to upon registration — including account management, gameplay facilitation, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC verification, AML monitoring, age verification, and responsible gaming obligations imposed under ban55's operating licence.
• Legitimate Interests: Processing for purposes that serve a legitimate business interest of ban55, such as fraud prevention, security monitoring, platform analytics, and dispute resolution, provided those interests are not overridden by your rights and interests.
• Consent: Processing for purposes where you have given your express, freely given consent — primarily for promotional and marketing communications. You may withdraw consent at any time without affecting the lawfulness of any prior processing.

5 Data Sharing & Third Parties

ban55 does not sell personal data to any third party. We share personal data only in the following limited and controlled circumstances:

5.1 Service Providers

ban55 engages trusted third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include KYC and identity verification partners, payment processors (covering JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank integrations), fraud detection and security services, customer support technology platforms, and cloud hosting and infrastructure providers. All such providers are required to implement appropriate technical and organisational security measures and may only process your data for the specific purposes for which they were engaged.

5.2 Regulatory and Law Enforcement Authorities

ban55 is required by law to share certain player data with regulatory bodies, financial intelligence units, and law enforcement agencies where mandated by applicable legislation or a valid legal order. This includes filing mandatory reports under AML and counter-terrorism financing frameworks. Where legally permitted, ban55 will attempt to notify the affected player of any such disclosure.

5.3 Game and Software Providers

Some third-party game providers whose titles are hosted on the ban55 platform may receive limited technical session data necessary to operate and audit game outcomes. These providers do not receive personally identifiable information beyond what is required for technical game operation and regulatory auditing.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ban55's business, personal data held by ban55 may be transferred to the relevant successor entity. Players will be notified of any such transfer and of any material changes to data processing arrangements that result from it.

6 Cookies & Tracking Technologies

ban55 uses cookies and similar tracking technologies on its platform to support core functionality, enhance user experience, and gather anonymised analytical data. The categories of cookies used are as follows:

6.1 Strictly Necessary Cookies

These cookies are essential for the ban55 platform to function correctly. They manage your session state, maintain your login status, support security features, and enable core platform functionality such as game loading and payment flow. These cookies cannot be disabled without breaking the platform. No consent is required for strictly necessary cookies.

6.2 Analytical Cookies

ban55 uses anonymised analytics cookies to understand how players navigate the platform — which pages are visited most, how long sessions last, and where users encounter difficulties. This data is used in aggregate form only and does not identify individual players. You may opt out of analytical cookies through your browser settings.

6.3 Preference Cookies

Preference cookies remember your settings and choices on the ban55 platform — such as your preferred language, display preferences, and notification settings — so that you do not need to re-enter them each time you visit.

6.4 Managing Cookies

You can control and manage cookies through your browser's settings. Disabling certain cookies may affect the functionality of the ban55 platform. For detailed guidance on managing cookies in your specific browser, consult the browser's help documentation. Note that clearing cookies will log you out of your ban55 session and may reset your platform preferences.

7 Data Retention

ban55 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our regulatory obligations. The general retention periods applied by ban55 are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where data must be retained beyond the standard period due to an ongoing legal dispute, investigation, or regulatory requirement, it will be placed under restricted access until the matter is resolved.

8 Your Data Rights

As a ban55 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to [email protected] with your registered account details and a clear description of your request. ban55 will respond within 30 calendar days of receipt.

• Right of Access: You may request a copy of all personal data ban55 holds about you, together with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account details such as your address and contact number can also be updated directly through your account dashboard.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where it has been processed unlawfully. Note that ban55 may be required to retain certain data by law even following a deletion request — we will inform you of any such obligations at the time of processing your request.
• Right to Restrict Processing: You may request that ban55 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data where that processing is based on ban55's legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

9 Security Measures

ban55 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption of data in transit using TLS 1.2 or higher across all platform connections
• Encryption of sensitive data at rest, including KYC documents and financial records
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Multi-factor authentication requirements for all internal system access by ban55 personnel
• Regular independent security audits and penetration testing of platform infrastructure
• Automated anomaly detection and real-time fraud monitoring systems
• Formal data breach response procedures with defined notification timelines

Notwithstanding the above measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ban55 will notify affected players without undue delay and in accordance with its legal obligations.

You also play an important role in protecting your account. ban55 strongly recommends using a strong, unique password for your ban55 account, enabling two-factor authentication where available, and never sharing your login credentials with any third party.

10 Children's Privacy

The ban55 platform is strictly intended for adults aged 21 years and over. ban55 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. Age verification is a mandatory step in the account registration process and is enforced before any gameplay or financial transaction can take place.

If ban55 becomes aware that personal data has been collected from an individual who is under 21 years of age, the relevant account will be closed immediately, all funds will be returned to the originating payment method, and all personal data associated with that account will be deleted from our systems without undue delay.

If you believe that a minor may have created a ban55 account, please contact us immediately at [email protected] so that we can take prompt action.

11 International Data Transfers

ban55 operates internationally, and some of the personal data we collect may be processed or stored in countries outside of Pakistan. Where personal data is transferred to countries that do not have data protection laws equivalent to those of the jurisdiction in which ban55 is licensed, ban55 ensures that appropriate safeguards are in place to protect your data. These safeguards may include contractual clauses with data recipients that impose obligations equivalent to those applicable to ban55, or reliance on the data recipient's certification under a recognised international data protection framework.

By creating and using a ban55 account, you acknowledge that your personal data may be transferred to, and processed in, countries outside Pakistan in the manner described above. If you have questions about the safeguards in place for any specific transfer, please contact us at [email protected].

12 Changes to This Policy

ban55 reserves the right to update or amend this Privacy Policy at any time. Where a material change is made to this Policy — for example, a change in the categories of data collected, the purposes for which data is processed, or the third parties with whom data is shared — ban55 will notify registered players via the registered email address or through a prominent notice on the platform at least 14 days before the change takes effect.

The effective date of the current version of this Policy is stated at the top of the page. We encourage you to review this Policy periodically so that you remain informed about how ban55 protects your data. Your continued use of the ban55 platform after any amendment takes effect constitutes your acknowledgement of the updated Policy.

13 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which ban55 handles your personal data, please contact our Privacy team using the details below. We are committed to resolving all privacy-related enquiries promptly and professionally.

If you are not satisfied with ban55's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority or to the alternative dispute resolution body designated under ban55's operating licence. ban55 will cooperate fully with any such authority in the resolution of a complaint.

Players in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan can submit privacy requests in English and can expect a substantive acknowledgement within 72 hours of submission, with a full response to follow within the 30-day statutory timeframe.