bmax88 Privacy Policy — How We Protect Your Personal Data

1 Introduction

This Privacy Policy ("Policy") is issued by bmax88 ("bmax88", "we", "us", "our") and applies to all users ("Player", "User", "You") who access or register on the bmax88 online gaming platform at bmax88.vip. It describes how bmax88 collects, processes, stores, and protects personal data in connection with the provision of our gaming services to players across Pakistan and other jurisdictions where our services are accessed.

This Policy is incorporated by reference into our Terms & Conditions and should be read alongside that document. By registering an account or using any bmax88 service, you acknowledge that you have read this Policy and consent to the data practices described herein.

bmax88 is committed to handling your personal information responsibly, transparently, and in accordance with applicable data protection principles including those reflected in the General Data Protection Regulation (GDPR). While GDPR is a European regulation, bmax88 adopts its core principles as an international best-practice standard for the benefit of all our players, including those in Karachi, Lahore, Islamabad, Faisalabad, and throughout Pakistan.

If you have questions about this Policy or wish to exercise any of your data rights, please refer to Section 15 (Contact & Requests) for our contact details.

2 Personal Data We Collect

bmax88 collects personal data that is necessary and proportionate to the purposes for which it is processed. The categories of personal data we collect are set out in the table below:

We do not collect sensitive personal data beyond what is strictly necessary for identity verification, such as biometric data, religious beliefs, or political opinions. Where CNIC documents contain additional sensitive fields, such fields are not actively processed or retained beyond the identity verification check itself.

3 How We Collect Your Data

bmax88 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a promotional communication.
• Automatically through your use of the platform: Technical and behavioural data is collected passively as you navigate bmax88.vip, including through cookies, session logs, and server-side analytics. See Section 9 for our full Cookie Policy.
• From payment processors: When you initiate a transaction via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, or Debit Card, our payment processing partners share transaction confirmation data with us to credit your account.
• From identity verification services: Where required, bmax88 may use third-party identity verification providers to cross-check CNIC details against national databases for AML compliance purposes.
• From fraud prevention partners: Technical signals such as IP reputation scores and device fingerprints may be cross-referenced with third-party fraud intelligence databases to protect the integrity of our platform.

4 How We Use Your Personal Data

bmax88 uses the personal data we collect for the following purposes:

• Account creation and management: To register your bmax88 account, verify your identity, maintain your account settings, and manage your player profile.
• Payment processing: To facilitate deposits and withdrawals in PKR via your chosen payment method, and to reconcile transaction records.
• KYC and AML compliance: To verify that you meet our eligibility requirements (21+, valid CNIC, single account), and to detect, investigate, and report suspicious financial activity as required by our regulatory obligations.
• Providing gaming services: To deliver the games, sports betting markets, live casino, and other services available on bmax88, and to record your gaming activity for account statement purposes.
• Responsible gaming: To monitor gaming patterns and, where necessary, apply responsible gaming interventions such as deposit limit enforcement, cooling-off periods, and self-exclusion management.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of our communications with you for quality assurance purposes.
• Security and fraud prevention: To detect unauthorised account access, multi-accounting, bonus abuse, and other fraudulent or prohibited activities described in our Terms & Conditions.
• Platform analytics and improvement: To understand how players use bmax88, identify technical issues, and improve the overall product experience.
• Marketing communications: To send you promotional offers and bonus notifications where you have provided consent or where we have a legitimate interest, and where you have not opted out.
• Legal and regulatory obligations: To comply with applicable laws, respond to regulatory inquiries, and cooperate with law enforcement where legally required.

5 Legal Basis for Processing

bmax88 processes your personal data only where a valid legal basis exists. The primary legal bases we rely upon are:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with AML regulations, KYC obligations, financial crime reporting duties, and other applicable legal requirements.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and internal analytics, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where we rely on legitimate interests as our legal basis, we conduct a balancing assessment to ensure our interests do not override your rights. These assessments are documented internally and are available to our regulators upon request.

6 Data Sharing & Third-Party Disclosure

bmax88 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and card processing partners receive transaction data necessary to execute your deposit and withdrawal instructions.
• Identity verification providers: Third-party KYC providers receive identity document data to perform CNIC verification checks in compliance with our AML obligations.
• Game software providers: Our casino and sports betting software suppliers receive pseudonymised session and wager data necessary to deliver their games on the bmax88 platform.
• Fraud and security services: Technical signals such as IP addresses and device identifiers may be shared with fraud prevention platforms to protect the platform and its players.
• Legal and regulatory authorities: bmax88 may disclose personal data to law enforcement agencies, financial regulators, or gaming authorities where required by applicable law or in response to a lawful order.
• Professional advisors: Our legal counsel, auditors, and compliance consultants may access personal data on a strictly need-to-know basis and are bound by confidentiality obligations.

7 International Data Transfers

bmax88 operates internationally, and some of the third-party service providers we work with (including payment processors, identity verification services, and gaming software providers) may process your personal data in jurisdictions outside of Pakistan.

Where personal data is transferred internationally, bmax88 ensures that appropriate safeguards are in place to protect your data to at least the same standard as if it remained in Pakistan. These safeguards may include:

• Data processing agreements incorporating standard contractual clauses recognised by international data protection authorities;
• Processing only with service providers in jurisdictions recognised as having adequate data protection frameworks;
• Technical security measures including encryption of data in transit and at rest.

If you would like further information about the specific safeguards applied to any international transfer of your personal data, please contact us using the details provided in Section 15.

8 Data Retention

bmax88 retains personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable legal and regulatory obligations. Our general retention schedule is as follows:

• Active account data: Retained for the duration of your account and for a minimum of 5 years following account closure, in line with AML and financial record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years following the last transaction on the account, or longer where required by applicable law.
• Transaction records: Retained for a minimum of 5 years following the transaction date for AML and financial audit purposes.
• Support communications: Retained for 3 years following the resolution of the relevant enquiry or dispute.
• Marketing consent records: Retained for the duration of your account or until you withdraw consent, whichever is earlier.
• Technical and session logs: Retained for up to 12 months for security and fraud investigation purposes, then anonymised or deleted.

9 Cookies & Tracking Technologies

bmax88 uses cookies and similar tracking technologies to operate and improve our platform. A cookie is a small text file stored on your device when you visit bmax88.vip. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the platform to function. These enable your login session, maintain your account state, and ensure security tokens are active. You cannot opt out of these cookies without losing access to the platform.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming tool configurations. These improve your experience but are not essential.
• Analytics Cookies: Collect anonymised data about how players navigate bmax88.vip to help us understand usage patterns, identify errors, and improve platform performance. Data collected is aggregated and does not identify individual players.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot traffic, account takeover attempts, and multi-accounting. These are a component of our fraud prevention infrastructure.

bmax88 does not deploy third-party advertising cookies or cross-site tracking technologies. We do not participate in programmatic advertising networks that track your behaviour across other websites.

You can manage your cookie preferences through your browser settings at any time. Note that disabling certain cookie categories may impair the functionality of bmax88.vip. Strictly necessary cookies cannot be disabled through browser settings without preventing access to the platform entirely.

10 Your Data Rights

Subject to applicable law and certain regulatory exceptions, you hold the following rights in respect of the personal data bmax88 holds about you:

To exercise any of the rights listed above, please submit a written request to [email protected] with the subject line "Data Rights Request" and your registered account email address. bmax88 will respond within 30 days of receiving a valid request. In some cases, particularly for complex or numerous requests, the response period may be extended by a further 30 days, in which case we will notify you.

11 Children & Minors

bmax88 employs the following controls to prevent underage access to our platform:

• Mandatory date-of-birth declaration at account registration;
• CNIC-based identity verification, which inherently confirms the player is a legal adult;
• Ongoing age verification checks during enhanced KYC review processes.

If bmax88 discovers or is notified that an account has been registered by or on behalf of a person under the age of 21, we will immediately suspend the account, conduct a full review of associated transactions, and take appropriate action in accordance with our Terms & Conditions and applicable regulations. Any personal data collected in connection with such an account will be securely deleted following the completion of any mandatory investigation and reporting obligations.

If you are the parent or guardian of a minor and believe they may have accessed bmax88 without authorisation, please contact us immediately at [email protected] so we can investigate and take prompt action.

We strongly encourage parents and guardians to make use of internet filtering and parental control software to prevent underage access to online gaming platforms. A number of free tools are available for this purpose.

12 Security Measures

bmax88 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. Our security framework includes:

• Encryption in transit: All communications between your device and bmax88.vip are protected by 256-bit SSL/TLS encryption. The padlock icon in your browser confirms this protection is active.
• Encryption at rest: Sensitive personal data including identity documents and financial records is encrypted at rest in our storage infrastructure using AES-256 encryption.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff access to sensitive data categories (such as KYC documents) is logged, monitored, and subject to periodic audit.
• Two-factor authentication: bmax88 supports and encourages the use of two-factor authentication (2FA) on player accounts to prevent unauthorised access.
• Penetration testing: Our platform undergoes regular security assessments and penetration testing by independent security professionals to identify and remediate vulnerabilities.
• Incident response: bmax88 maintains a documented data breach response plan. In the event of a security incident affecting your personal data, we will notify affected players and relevant authorities within the timeframes required by applicable law.
• Staff training: All bmax88 employees who handle personal data receive regular data protection and information security training.

13 Third-Party Services & Links

bmax88.vip may reference third-party payment services (such as JazzCash, EasyPaisa, HBL, and Meezan Bank) in the context of deposit and withdrawal instructions. These third-party services operate under their own privacy policies, and bmax88 is not responsible for the data practices of any third-party service provider beyond the contractual data processing agreements we maintain with them.

bmax88 does not embed third-party advertising networks, social media widgets, or cross-site tracking pixels on our platform. We do not share your browsing activity on bmax88.vip with any social media company or advertising exchange.

Our game software providers operate within a strictly defined data processing scope. They receive only the pseudonymised session and wager data required to deliver their games and are contractually prohibited from using that data for any purpose other than game delivery and integrity monitoring.

14 Changes to This Privacy Policy

bmax88 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes to this Policy, we will notify active players through one or more of the following methods:

• A prominent notice on the bmax88.vip platform upon your next login;
• An email notification to your registered email address;
• An updated "Last Updated" date at the top of this page.

Your continued use of bmax88 services following the notification of a material change constitutes your acceptance of the updated Policy. If you do not agree with the changes, you should cease using bmax88 services and close your account in accordance with the procedure described in our Terms & Conditions.

Non-material changes — such as corrections of typographical errors, clarifications that do not alter the substantive meaning of any provision, or formatting updates — may be made without prior notice. The version number displayed in the Last Updated bar above will be incremented for all changes, material or otherwise.

Previous versions of this Privacy Policy are archived and available upon request to [email protected]. The current version (Version 3.1, effective 1 January 2026) supersedes all prior versions.

15 Contact & Data Rights Requests

For any questions, concerns, or requests relating to this Privacy Policy or the personal data bmax88 holds about you, please contact our Data Protection team through the following channels:

• Email: [email protected] — please include "Privacy Policy" or "Data Rights Request" in your subject line
• Live Chat: Available 24/7 through the bmax88 platform interface
• Response Time: We aim to acknowledge all data rights requests within 3 business days and provide a full response within 30 days

When submitting a data rights request, please provide your registered email address and, where possible, a description of the specific data or processing activity your request relates to. This will allow us to locate and process your request more efficiently.

If you are not satisfied with our response to a complaint or data rights request, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction, or to our licensing body's player dispute resolution process as described in our Terms & Conditions.

This Privacy Policy was last reviewed and updated on 1 January 2026 (Version 3.1). This document supersedes all previous versions of the bmax88 Privacy Policy.