bn5 Privacy Policy —
Your Data, Our Responsibility

1 Introduction & Scope

This Policy applies to all personal data collected from you in connection with your use of the bn5 platform, including but not limited to: account registration, KYC verification, deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, casino and sportsbook gameplay, bonus participation, customer support interactions, and any other activity conducted through your bn5 account or via bn5.biz.

This Policy does not apply to third-party websites, applications, or services that may be linked to or integrated with the bn5 platform. bn5 is not responsible for the privacy practices of any such third parties, and we encourage you to review the privacy policies of any external services you access in connection with your bn5 experience.

2 Data Controller

For the purposes of this Policy, bn5 acts as the data controller in respect of all personal data collected directly from users of the platform. As data controller, bn5 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All enquiries regarding data protection — including requests to exercise your rights — should be directed to the bn5 data protection contact point. Contact details are provided in Section 14 of this Policy. bn5 is committed to responding to all legitimate data-related enquiries within a reasonable timeframe and, in any event, within 30 calendar days of receipt.

3 Data We Collect

3.1 Data You Provide Directly

When you register for a bn5 account or interact with the platform, you provide us with personal data including:

• Full legal name as it appears on official Pakistani identification documents (CNIC, passport)
• Date of birth (for age verification — bn5 requires all players to be 21+ years of age)
• Pakistani mobile number (used for account authentication and optional 2-step verification)
• Email address
• Residential address (city, province, postal code)
• Payment method details (mobile wallet identifiers for JazzCash and EasyPaisa; bank account or IBAN details for HBL, UBL, Meezan Bank — stored only to the extent required for transaction processing)
• KYC verification documents including copies of CNIC or passport, and proof of address
• Self-reported responsible gaming preferences such as deposit limits, session limits, and cooling-off elections

3.2 Data Collected Automatically

When you access and use the bn5 platform, certain data is collected automatically through technical means, including:

• IP address and approximate geographic location derived therefrom
• Device type, operating system, and browser version
• Session timestamps, page navigation paths, and time spent on individual pages or game sessions
• Gameplay data including game type, stake amounts, bet history, win/loss outcomes, and bonus usage
• Deposit and withdrawal transaction logs including timestamps, amounts in PKR, and payment method identifiers
• Customer support interaction records including chat logs and email correspondence
• Cookies and similar tracking technologies (see Section 7)

3.3 Data From Third Parties

bn5 may receive data about you from third-party sources including:

• Identity verification and KYC service providers engaged to validate document authenticity
• Payment processing partners including JazzCash and EasyPaisa for transaction confirmation and fraud screening
• Fraud detection and anti-money laundering (AML) screening databases
• Responsible gaming databases where you have previously registered for self-exclusion with another operator

4 How We Use Your Data

bn5 processes your personal data for the following specific purposes:

5 Legal Basis for Processing

bn5 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract with you (i.e., providing the bn5 platform services in accordance with the Terms & Conditions you accepted at registration).
• Legal Obligation: Processing required to comply with our legal and regulatory obligations, including KYC, AML, responsible gaming, and licensing requirements.
• Legitimate Interests: Processing pursued for purposes of fraud prevention, network security, customer support quality, and platform improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications, optional analytics cookies, and any other purpose for which we have explicitly requested and received your consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

6 Data Sharing & Disclosure

bn5 does not sell your personal data to third parties. We may share your personal data with the following categories of recipient, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, to process your deposits and withdrawals in PKR.
• KYC & Identity Verification Providers: Specialist third-party services used to verify your identity documents and confirm your age and address.
• Fraud Prevention & AML Services: Screening databases used to detect fraudulent activity and comply with anti-money laundering obligations.
• Game Technology Providers: Licensed software suppliers providing casino games, live dealer streaming, and sportsbook services — who may receive anonymised or pseudonymised gameplay data for analytical and integrity purposes.
• Customer Support Tools: Third-party customer support platforms used to manage live chat and email interactions — operating under strict data processing agreements with bn5.
• Regulatory & Law Enforcement Authorities: Where required by law, lawful court order, or the legitimate request of a competent regulatory authority.

7 Cookies & Tracking Technologies

7.1 Types of Cookies Used

bn5 uses the following categories of cookies and similar tracking technologies on the platform:

• Strictly Necessary Cookies: Essential for the operation of the platform, including maintaining your logged-in session, remembering your security preferences, and enabling core platform functionality. These cannot be disabled without impacting your ability to use bn5.
• Functional Cookies: Used to remember your preferences such as language settings, responsible gaming configurations, and display preferences. These improve your experience but are not strictly essential.
• Analytics Cookies: Collect anonymised data about how users navigate the platform, which pages are visited most frequently, and how users interact with game categories. This data is used in aggregate to improve platform performance and user experience.
• Session Authentication Tokens: Secure tokens stored in your browser that maintain your authenticated session after bn5 Login, with automatic expiry for security.

7.2 Managing Cookies

You may control non-essential cookies through the cookie preference centre available on the bn5 platform. You may also configure your browser to block or delete cookies, though doing so may affect the functionality of certain platform features. Strictly necessary cookies cannot be disabled as they are required for the platform to function.

8 Data Retention

bn5 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and licensing obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account being active on the platform.
• Transaction Records: Retained for a minimum of five (5) years following the date of the transaction, in compliance with standard AML record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years following account closure or the conclusion of the customer relationship, whichever is later.
• Customer Support Interactions: Retained for a minimum of three (3) years following the interaction date for quality assurance and dispute resolution purposes.
• Marketing Preferences: Retained until you withdraw consent or exercise your right to erasure, subject to any overriding legal obligation to retain the record.
• Self-Exclusion Records: Retained for a minimum of seven (7) years from the date of self-exclusion to prevent re-registration and enforce the exclusion period.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be associated with any identifiable individual.

9 Security Measures

bn5 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bn5 platform is encrypted using 256-bit SSL/TLS — the same standard used by Pakistan's major commercial banks including HBL and Meezan Bank.
• Encrypted Data Storage: Sensitive data including payment information and KYC documentation is stored in encrypted form with access restricted to authorised personnel only.
• Access Controls: Internal access to personal data is governed by role-based access controls, ensuring that only staff with a legitimate need to access specific data categories are able to do so.
• Intrusion Detection Systems: Automated systems monitor network activity for anomalous patterns that may indicate attempted unauthorised access or data exfiltration.
• Regular Security Audits: The platform and its underlying infrastructure undergo periodic security assessments and penetration testing by qualified independent security professionals.
• Incident Response Plan: bn5 maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, bn5 will notify affected users and relevant authorities as required under applicable obligations.

While bn5 implements robust security measures, no system is completely immune to risk. You also play an important role in keeping your bn5 account secure — please use a strong, unique password, enable two-step verification, and never share your login credentials with anyone.

10 Your Rights

Subject to applicable law and bn5's overriding legal obligations, you hold the following rights in relation to your personal data held by bn5. You may exercise any of these rights by contacting us through the channels described in Section 14.

bn5 will respond to all valid data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, with notice provided to you. bn5 will not charge a fee for responding to data rights requests unless a request is manifestly unfounded or excessive.

11 Children & Minors

The bn5 platform is strictly prohibited to persons under the age of 21 years. bn5 does not knowingly collect or process the personal data of any person under this minimum age. If bn5 becomes aware that personal data has been collected from a person who does not meet the 21+ age requirement, that account will be immediately suspended, all associated data will be deleted as promptly as possible consistent with our legal obligations, and any funds held in the account will be handled in accordance with applicable regulatory requirements.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account with bn5, please contact us immediately at the address provided in Section 14. Parental control software is available through a number of Pakistani internet service providers and can assist in restricting access to gambling websites.

12 Cross-Border Data Transfers

bn5 operates globally and your personal data may be transferred to, stored in, and processed in countries other than Pakistan. Where such transfers occur, bn5 takes all reasonable steps to ensure that your personal data receives an adequate level of protection consistent with this Policy and applicable data protection standards. Transfers to third-party processors outside Pakistan are governed by contractual data protection clauses that impose obligations equivalent to those applicable to bn5 as data controller.

By using the bn5 platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan where such transfers are necessary for the provision of the services described in this Policy.

13 Policy Amendments

bn5 reserves the right to update or amend this Privacy Policy at any time. The "Last Updated" date displayed at the top of this Policy will be revised with each amendment. Where a material change is made to the Policy, bn5 will notify registered users via email or in-platform notification prior to the change taking effect. The current version of this Policy is always the version published at bn5.biz/privacy-policy. Your continued use of the platform following notification of a policy amendment constitutes your acceptance of the revised Policy. If you do not accept an amended Privacy Policy, you should cease use of the platform and request account closure via the support channels described in Section 14.

14 Contact & Complaints

For all privacy-related enquiries, data rights requests, or complaints regarding the handling of your personal data by bn5, please contact our support team through the following channels. Our Pakistani-fluent team is available 24/7 in both English and Urdu.

• Email: [email protected]  (plain text only — not a clickable link)
• Live Chat: Available inside your bn5 account dashboard — average response time 3–5 minutes
• Subject Line for Data Requests: Please use the subject line "Data Privacy Request — [Your Registered Email]" to ensure prompt routing to the correct team

If you are not satisfied with the way bn5 has handled your personal data or responded to your data rights request, you have the right to escalate your complaint to the data protection supervisory authority or the relevant licensing authority overseeing bn5's operations. Details of the relevant supervisory body are available on request.