Privacy Policy
— bmax88 Platform

This Privacy Policy ("Policy") is published by bmax88 ("bmax88", "we", "us" or "our"), the operator of the online betting and casino platform accessible at https://bmax88.cam and any associated mobile interfaces or applications (collectively, "the Platform"). This Policy describes how bmax88 collects, processes, stores, shares and protects the personal data of users ("you", "your") who access or use the Platform.

bmax88 is designed primarily for users in the Pakistan market and is operated in the English language. Where this Policy references familiar Pakistani payment methods — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — this is for informational context only. bmax88 does not imply that any of these payment providers endorse, support or are affiliated with gambling services.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy. By registering an account or using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

The following terms have the meanings ascribed to them in this Policy:

bmax88 collects the following categories of personal data from users of the Platform. Collection only occurs where it is necessary for a stated purpose described in this Policy:

bmax88 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data or biometric data unless specifically required for identity verification purposes and with appropriate safeguards in place.

bmax88 collects personal data through the following means:

• Account Registration: When you complete the registration form on the Platform, you directly provide us with identity, contact and, where applicable, date-of-birth data;
• KYC Submission: When you submit identity documents to complete the verification process, we collect and store the information contained in those documents;
• Deposits and Withdrawals: When you initiate a financial transaction through the cashier, transaction metadata is recorded. Payment method references (such as a JazzCash wallet reference or bank account number) are stored for verification and fraud prevention purposes only;
• Platform Use: As you navigate and use the Platform, technical and usage data is automatically collected through server logs, cookies and similar tracking technologies;
• Customer Support Interactions: When you contact bmax88 via Live Chat, email or the Help Center, the content of those communications is recorded;
• Third-Party Sources: In certain circumstances we may receive data from third parties, including identity verification service providers, fraud prevention agencies and, where applicable, publicly available sources for due diligence purposes.

bmax88 processes personal data only where a valid lawful basis exists. The primary lawful bases on which bmax88 relies are as follows:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you have accepted, including operating your account, processing transactions and delivering the services you have requested;
• Legal Obligation: Processing necessary for compliance with applicable legal and regulatory requirements, including Know Your Customer (KYC), Anti-Money Laundering (AML) procedures, age verification and mandatory record-keeping;
• Legitimate Interests: Processing carried out on the basis of our legitimate business interests — including fraud detection, Platform security, product improvement and responsible gambling monitoring — provided those interests are not overridden by your fundamental rights;
• Consent: Processing based on your freely given, specific and informed consent — primarily in the context of direct marketing communications. You may withdraw consent at any time by updating your marketing preferences in your account settings or by contacting support.

bmax88 uses the personal data we collect for the following specific purposes. We will not use your data for a purpose that is incompatible with the purposes listed here without providing you with prior notice:

• Account Management: To create, maintain, verify and manage your registered account, including processing your login credentials and managing your preferences;
• Service Delivery: To enable you to place bets, play casino games, access promotions and use all features of the Platform;
• Identity Verification (KYC): To verify your identity, age and address in accordance with our operating requirements and to comply with applicable anti-money laundering regulations;
• Payment Processing: To process deposits and withdrawals, reconcile transactions and detect payment fraud;
• Responsible Gambling: To monitor your betting activity for indicators of problem gambling behaviour and to apply account restrictions, limits or exclusions that you have requested or that we are required to apply;
• Fraud Prevention and Security: To detect, investigate and prevent fraudulent, abusive or illegal activity on the Platform, including multi-accounting and bonus abuse;
• Customer Support: To respond to your queries, resolve disputes and maintain records of our communications;
• Marketing Communications: Where you have provided consent, to send you promotional offers, news and updates about bmax88 services. You can opt out at any time;
• Product Improvement: To analyse usage patterns, identify technical issues and develop improvements to the Platform's features and user experience;
• Legal and Regulatory Compliance: To comply with applicable laws, court orders, regulatory requirements and lawful requests from competent authorities.

bmax88 does not sell, rent or trade your personal data. We share personal data only in the specific circumstances described below, and only to the extent necessary for the stated purpose:

• Service Providers and Data Processors: We engage third-party companies to provide services on our behalf, including payment processing, identity verification, fraud detection, customer support technology, cloud hosting and analytics. These processors act only on our documented instructions and are bound by confidentiality and data protection obligations;
• Payment Service Providers: Transaction data is shared with the relevant payment processor to facilitate deposits and withdrawals. References to providers such as Easypaisa, JazzCash, Raast and banking institutions including HBL, UBL, Meezan Bank and Bank Alfalah are for context only — data sharing with any specific provider occurs only in connection with a transaction you have initiated and is subject to that provider's own terms;
• Game and Software Providers: Where your gameplay involves a third-party game provider, technical session data necessary to deliver and settle that game may be shared with the provider. Game providers are contractually prohibited from using this data for independent marketing;
• Regulatory and Law Enforcement Authorities: We may disclose personal data to competent authorities where required by applicable law, court order or regulatory instruction. In such cases, we will disclose only the minimum data necessary;
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of bmax88's business, personal data held by bmax88 may be transferred to the acquiring entity, subject to equivalent data protection obligations being maintained;
• With Your Consent: We may share data with third parties for purposes not described in this Policy where you have provided your explicit, informed consent to do so.

Given the global nature of digital platforms, your personal data may be transferred to, stored in and processed in countries outside of Pakistan. This may occur, for example, when we use cloud infrastructure, third-party software providers or game content providers based in other jurisdictions.

Where personal data is transferred internationally, bmax88 takes appropriate steps to ensure that an adequate level of protection is maintained, including by entering into contractual arrangements that impose data protection standards comparable to those described in this Policy. If you have questions about the specific safeguards applied to any particular international transfer, please contact us at the details provided in Section 15.

bmax88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account's active status on the Platform;
• KYC and Identity Documents: Retained for a minimum period following account closure as required by applicable anti-money laundering regulations — typically five (5) years, or longer if required by a specific legal obligation or ongoing investigation;
• Transaction Records: Financial transaction data is retained in accordance with applicable legal accounting and AML record-keeping requirements, typically for a minimum of five (5) years from the date of the transaction;
• Customer Support Communications: Retained for a period of up to three (3) years from the date of the interaction, unless a longer period is required for dispute resolution;
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which it will be deleted or anonymised within a reasonable timeframe;
• Technical and Usage Logs: Retained for up to twelve (12) months from the date of collection, subject to security and fraud investigation requirements.

Following the expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

bmax88 uses cookies and similar tracking technologies (including pixel tags and local storage) to support the operation of the Platform, remember your preferences and analyse how users interact with our services. The main categories of cookies used are described below:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies maintain your login session, remember your language and currency preferences, and support security features. They cannot be disabled without materially impairing your use of the Platform;
• Functional Cookies: Used to remember choices you make — such as interface preferences and bet slip settings — to provide a more personalised experience;
• Analytics Cookies: Used to collect aggregated, anonymised data about how users navigate the Platform, which pages are visited most frequently and where technical errors occur. This data is used solely to improve Platform performance;
• Marketing Cookies: Where you have provided consent, these cookies help us to identify your interests and ensure that any promotional communications you receive are relevant to your activity.

Subject to applicable law and certain conditions, you hold the following rights in relation to the personal data that bmax88 holds about you. To exercise any of these rights, please contact our support team using the details in Section 15.

bmax88 will respond to all verified data rights requests within a reasonable period. In some cases, we may need to verify your identity before fulfilling a request. Where we are unable to comply with a request — for example, because doing so would conflict with a legal obligation — we will explain the reason in writing.

The bmax88 Platform is strictly intended for adults aged 18 years and above — or the higher minimum age required by the applicable operator or license jurisdiction. bmax88 does not knowingly collect personal data from individuals under the applicable minimum age.

Where bmax88 has reason to believe that personal data has been submitted by a person who does not meet the minimum age requirement, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor has registered on the Platform, please contact us immediately using the details in Section 15.

bmax88 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using industry-standard SSL/TLS protocols;
• Access Controls: Access to personal data within bmax88's systems is restricted to authorised personnel on a need-to-know basis. All internal access is subject to role-based permissions and audit logging;
• Two-Factor Authentication: Account holders are offered two-factor authentication options to protect against unauthorised login attempts;
• Security Monitoring: Platform systems are monitored for anomalous activity, intrusion attempts and potential data breaches on a continuous basis;
• Data Minimisation: We collect and retain only the personal data that is necessary for the stated processing purposes, reducing exposure in the event of a security incident;
• Staff Training: bmax88 personnel who handle personal data receive appropriate training on data protection obligations and security best practices.

While bmax88 takes these measures seriously, no digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bmax88 will notify affected users in accordance with applicable legal requirements and take immediate steps to mitigate the impact.

bmax88 reserves the right to amend this Privacy Policy at any time. Reasons for amendment may include changes to applicable law or regulation, changes to the services or technologies we use, or refinements to our internal data handling procedures.

Where amendments are material — meaning they affect the nature, scope or lawful basis of processing in a way that could significantly impact your rights — bmax88 will endeavour to provide reasonable advance notice via the Platform or by email to your registered address. The "Last Reviewed" date displayed at the top of this page will be updated to reflect the date of any revision.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the Platform and contact support to arrange account closure.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bmax88 handles your personal data, please contact our support team through one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the Platform. This is the fastest channel for urgent privacy matters such as suspected unauthorised access to your account;
• Email: [email protected] — this is a plain-text address and is not a clickable link. Please include your registered username, the nature of your request and, where relevant, the specific section of this Policy your query relates to;
• Help Center: Visit our FAQ page for answers to common questions about account management, data access and privacy settings.

bmax88 aims to acknowledge privacy-related requests promptly and to resolve them within a reasonable timeframe. Identity verification may be required before we can fulfil certain data rights requests to protect against fraudulent or unauthorised submissions.

Support is available in both English and Urdu. If you prefer to communicate in Urdu, please indicate this at the beginning of your Live Chat session or in the subject line of your email.