At bmax88, we take your privacy seriously. This Privacy Policy explains exactly what personal data we collect when you use the bmax88 platform, why we collect it, how we use it, who we share it with, and what rights you have over it. We believe every Pakistani player deserves full transparency about how their information is handled.
These principles summarise how bmax88 approaches your personal data. They do not replace the full legal text below — please read the complete policy for details.
bmax88 collects only the personal data that is strictly necessary to operate your account, verify your identity, process payments in PKR, and comply with our international gaming licence obligations. We do not collect data for its own sake.
Your data is used only for the specific purposes stated in this Privacy Policy at the time of collection. bmax88 will not repurpose your data for new uses without obtaining fresh consent or providing clear notification in advance.
All data transmitted between your device and bmax88 is protected by industry-standard SSL/TLS encryption. Sensitive data including payment information and identity documents is stored in encrypted form and accessible only to authorised personnel.
bmax88 will never sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing companies. Your information stays within the bmax88 ecosystem and its licensed service providers, full stop.
You have the right to access, correct, and request deletion of your personal data held by bmax88. You may also object to certain processing activities. These rights can be exercised by contacting bmax88 support at any time.
bmax88 does not retain your personal data indefinitely. Retention periods are tied to regulatory requirements — typically 5 years after account closure for KYC and transaction records — after which data is securely deleted or anonymised.
This Privacy Policy ("Policy") is issued by bmax88 ("we," "us," "our") and applies to all users ("you," "Player," "Account Holder") of the bmax88 online gaming platform accessible at bmax88.app and all associated sub-pages and services (the "Platform").
This Policy sets out in clear terms the personal data we collect from Pakistani players and other users of the bmax88 Platform, the purposes for which that data is processed, the legal bases on which processing rests, how long we keep your data, and what rights you have in relation to it.
bmax88 is committed to processing personal data in a lawful, fair, and transparent manner consistent with applicable international data protection standards and our obligations under our international gaming licence. We do not take a casual approach to privacy — your trust matters to us.
By registering an account on bmax88, or by continuing to access and use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, please discontinue your use of the Platform and contact our support team to arrange account closure.
2.1 For the purposes of applicable data protection law, bmax88 acts as the Data Controller in respect of all personal data collected directly from Players through the bmax88 Platform. As Data Controller, bmax88 determines the purposes and means of processing your personal data.
2.2 Where bmax88 engages third-party service providers (such as KYC verification providers, payment processors, or fraud detection services) to process personal data on its behalf, those providers act as Data Processors and are contractually bound to process data only in accordance with bmax88's documented instructions and to maintain appropriate security measures.
2.3 For enquiries related to this Privacy Policy or to the processing of your personal data, you may contact bmax88 by emailing [email protected] or by using the 24/7 live chat facility on the Platform. Contact details are provided as plain text only — see Section 16.
3.1 bmax88 collects the following categories of personal data in connection with the operation of the Platform:
| Category | Examples | Why Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC / passport number, nationality | KYC verification, age verification (21+), fraud prevention |
| Contact Data | Email address, mobile number, residential address (city, province) | Account communication, support, regulatory notifications |
| Financial Data | JazzCash / EasyPaisa account number, HBL / UBL / Meezan account details, deposit and withdrawal history in PKR | Payment processing, AML compliance, withdrawal verification |
| Gaming Activity Data | Bet history, game sessions, win/loss records, deposit frequency, wagering patterns | Service delivery, responsible gaming monitoring, fraud detection |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Security, fraud prevention, Platform optimisation |
| Correspondence Data | Live chat transcripts, support emails, complaint records | Service delivery, dispute resolution, quality assurance |
| KYC Documents | Scanned copies of CNIC, utility bills, bank statements, source of funds declarations | Regulatory compliance, identity and address verification |
3.2 We do not intentionally collect special categories of sensitive personal data (such as health information, biometric data, religious beliefs, or political opinions) unless explicitly required by our regulatory or licensing obligations, in which case we will inform you separately at the point of collection.
4.1 Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal via JazzCash, EasyPaisa, or a Pakistani bank, contact support, submit a complaint, or respond to a promotional campaign.
4.2 Automatically through your use of the Platform — via cookies, session tokens, and server logs that record your IP address, device fingerprint, pages visited, game sessions played, and interaction events. Please refer to Section 8 for our full Cookies Policy.
4.3 From third-party service providers — including licensed KYC and identity verification agencies, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), fraud screening services, and regulatory databases, where disclosure is permitted by law or required for compliance purposes.
4.4 From publicly available sources — including sanctions lists, PEP (Politically Exposed Persons) databases, and adverse media sources, where required by our Anti-Money Laundering obligations.
5.1 bmax88 processes your personal data only where a valid legal basis exists. The applicable legal bases are as follows:
5.2 Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact bmax88 support via live chat or email.
6.1 bmax88 uses the personal data it collects for the following purposes:
7.1 bmax88 does not sell, rent, or trade your personal data to any third party. Data is shared only in the following limited circumstances:
7.2 Any third party to whom bmax88 discloses your personal data is required to maintain appropriate technical and organisational security measures and to process your data only in accordance with bmax88's documented instructions.
8.1 bmax88 uses cookies and similar tracking technologies (including session tokens, pixel tags, and local storage) to operate the Platform, maintain your login session, remember your preferences, and gather analytics data about Platform usage.
8.2 The following categories of cookies are used on the bmax88 Platform:
8.3 You may manage your cookie preferences through your browser settings. However, disabling strictly necessary or security cookies will impair your ability to use the bmax88 Platform and may prevent Account login.
8.4 bmax88 does not use third-party advertising cookies or allow advertising networks to place tracking cookies on the Platform.
9.1 bmax88 operates as an internationally licensed gaming platform. As a result, your personal data may be transferred to and processed in countries outside Pakistan where bmax88's infrastructure providers, KYC partners, or licensing authority are located.
9.2 Where personal data is transferred internationally, bmax88 ensures that appropriate safeguards are in place, including standard contractual clauses, data processing agreements with security requirements, and transfers only to jurisdictions that offer an adequate level of data protection.
9.3 By registering an Account on bmax88 and accepting these terms, you acknowledge and consent to your personal data being transferred internationally as described in this Section, subject at all times to the protections described in this Policy.
10.1 bmax88 retains personal data only for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC documents | 5 years after account closure | AML regulatory requirement |
| Financial transaction records | 5 years after transaction date | AML and licensing obligation |
| Gaming activity logs | 3 years after account closure | Responsible gaming and dispute resolution |
| Support correspondence | 3 years after resolution | Dispute resolution and quality assurance |
| Technical / IP logs | 12 months from collection | Security and fraud prevention |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of consent compliance |
| Self-exclusion records | Indefinitely or until exclusion expires + 5 years | Responsible gaming obligation |
10.2 Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.
11.1 Subject to applicable law and certain regulatory limitations (particularly those imposed by our AML obligations, which may restrict deletion requests for transaction records), you have the following rights in relation to your personal data held by bmax88:
11.2 To exercise any of the above rights, please contact bmax88 support via 24/7 live chat or send a written request to [email protected]. We will verify your identity before processing any data rights request and will respond within 30 days. Complex requests may take up to 60 days; we will notify you if an extension is required.
12.1 The bmax88 Platform is strictly restricted to individuals aged 21 years and above. bmax88 does not knowingly collect personal data from any person under the age of 21.
12.2 If bmax88 discovers or has reasonable grounds to suspect that personal data has been collected from an individual under the age of 21, that data will be deleted and the associated Account will be closed immediately, with any deposited funds reversed to the original payment source.
12.3 We strongly encourage all Account holders to secure their devices and bmax88 Account credentials to prevent access by minors in their household. If you have concerns that a minor has accessed the bmax88 Platform using your Account, please contact support immediately.
13.1 bmax88 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
13.2 While bmax88 takes all reasonable precautions to secure your data, no online platform can guarantee absolute security. You also play a role in keeping your Account secure — please use a strong, unique password for your bmax88 Account and do not share your login credentials with any third party.
13.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bmax88 will notify affected Players without undue delay and in accordance with applicable regulatory notification requirements.
14.1 The bmax88 Platform does not contain links to third-party websites, social media platforms, or external online services for commercial or advertising purposes. All links on the Platform point to internal bmax88 pages only.
14.2 Where bmax88 references third-party organisations (such as payment providers JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank) in informational content, bmax88 is not responsible for the privacy practices or content of those organisations. Players are encouraged to review the privacy policies of any third-party service providers they interact with independently of the bmax88 Platform.
15.1 bmax88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform features. The date of the most recent revision is displayed at the top of this page.
15.2 Where updates to this Policy are material — meaning they significantly change how we collect, use, or share your personal data — bmax88 will notify registered Players via email to the address on file or via a prominent notice on the Platform before the changes take effect.
15.3 For non-material updates (such as formatting corrections, clarifications of existing language, or updates to contact details), bmax88 will update the Policy without individual notification. It is your responsibility to review this Policy periodically.
15.4 Continued use of the bmax88 Platform after any Policy update has been communicated constitutes your acknowledgement of the revised Policy.
16.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by bmax88, please contact us through one of the following channels:
16.2 When submitting a data rights request by email, please include your registered Account username, a clear description of your request, and proof of identity so that we can verify your identity before processing the request.
16.3 bmax88 will acknowledge receipt of all written privacy enquiries within 48 hours and provide a substantive response within 30 days. Complex data rights requests (such as large-scale access requests) may take up to 60 days; we will inform you if this is the case.
16.4 If you are not satisfied with bmax88's response to your privacy concern, you may escalate the matter to the relevant supervisory authority under bmax88's licensing jurisdiction. Details of the applicable supervisory authority are available within bmax88's licensing documentation upon request.
Have a question about how we handle your data? Our 24/7 support team is here to help — or explore your Account settings to manage your data preferences directly.