Privacy Policy —
bba556 Data Protection

1. Introduction

bba556 (the "Operator", "Platform", "we", "us" or "our") is committed to protecting the personal data of all users who access and interact with the website located at bba556.cam. This Privacy Policy (the "Policy") describes the categories of personal data we collect, the purposes for which we process it, the lawful basis on which we rely, how we keep it secure, how long we retain it, with whom we share it and what rights you hold in relation to it.

This Policy applies to all individuals who visit, register on or transact through bba556.cam, including users who access the platform from Pakistan and other locations. It should be read alongside our Terms & Conditions and Responsible Gambling Policy, each of which forms part of your agreement with us.

By registering an account or continuing to use the platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of it, you should refrain from using bba556.

2. Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifiers or factors specific to the physical, economic, cultural or social identity of that person.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, bba556.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a contractual arrangement.
• "KYC" means Know Your Customer — the identity and age verification process required for compliance purposes.
• "Sensitive Personal Data" includes identity documents, financial records and other information whose disclosure could cause particular harm to the data subject.
• "Cookies" means small text files stored on a user's device by a web browser, used to remember preferences, session states and interaction history.

3. Data We Collect

bba556 collects personal data through the following channels and in the following categories:

3.1 Registration Data

When you create an account, we collect your full legal name, date of birth, email address, residential address, username and chosen password (stored in hashed form). Pakistani users may also provide their city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar) as part of address fields.

3.2 Identity & Verification Documents (KYC)

To comply with age verification and anti-money laundering (AML) requirements, we may collect scanned copies or photographs of:

• Government-issued photo ID — for Pakistani users, this is typically a Computerized National Identity Card (CNIC) or valid passport.
• Proof of address documentation, such as a recent bank statement from HBL, UBL, Meezan Bank or Bank Alfalah, or a utility bill dated within three months.
• Selfie or liveness verification images as required by our verification workflow.
• Payment method ownership evidence where required.

3.3 Financial Transaction Data

We record details of all deposits and withdrawals including amounts, dates, payment method identifiers (masked where required) and transaction status. We do not store full payment card numbers on our systems. Where users transact via bank transfer, Easypaisa, JazzCash, Raast or similar channels — referenced here as familiar Pakistani payment rails — we record the transaction reference necessary for reconciliation. These providers are not affiliated with or endorsing bba556.

3.4 Usage & Technical Data

We automatically collect device identifiers, IP addresses, browser type and version, operating system, referring URLs, pages visited, session duration and click-stream data. This data is used for security, fraud prevention, platform optimisation and responsible-gambling monitoring.

3.5 Communications Data

When you contact our support team via Live Chat, email or the Help Centre, we retain records of those communications — including the content of your messages — for quality assurance, dispute resolution and compliance purposes.

3.6 Voluntary Data

Where you provide optional information — such as preferred language (English or Urdu), marketing preferences or responsible-gambling self-assessment responses — we store that data in association with your account.

4. Lawful Basis for Processing

bba556 processes personal data under one or more of the following lawful bases:

• Contractual necessity: Processing required to perform the contract with you — including account management, deposits, withdrawals and game access.
• Legal obligation: Processing required to comply with AML regulations, KYC requirements, age verification mandates and any applicable data protection laws.
• Legitimate interests: Processing for fraud prevention, platform security, responsible-gambling monitoring, dispute resolution and internal analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional activities such as marketing communications, where we have obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. How We Use Your Data

bba556 uses your personal data for the following purposes:

• Creating, maintaining and managing your account, including credential verification at login.
• Processing deposits and withdrawals, including verifying payment method ownership.
• Conducting identity and age verification (KYC) and ongoing AML monitoring.
• Enforcing responsible-gambling controls, including applying deposit limits, monitoring for problem-gambling indicators and actioning self-exclusion requests.
• Preventing, detecting and investigating fraudulent activity, collusion, bonus abuse and other policy violations.
• Responding to support queries, resolving disputes and providing account assistance.
• Sending transactional communications — account confirmations, withdrawal notifications, security alerts — that are necessary for the operation of your account.
• Sending promotional communications where you have opted in, including information about bonuses, new game categories and platform features.
• Improving platform performance, game experience and user interface based on aggregated, anonymised analytics.
• Complying with applicable legal, regulatory and audit requirements.

6. Data Sharing & Disclosure

bba556 does not sell, rent or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• KYC & identity verification providers: Third-party services contracted to perform document verification, liveness checks and age confirmation. These processors are bound by contractual data-protection obligations.
• Payment processors: Financial technology intermediaries that facilitate deposit and withdrawal transactions. Only the data strictly necessary to process each transaction is shared.
• Fraud prevention and AML services: Providers of risk-scoring, transaction monitoring and fraud detection systems used to protect the integrity of our platform.
• Customer support platforms: Third-party helpdesk software providers used to manage Live Chat and email support communications.
• Regulatory and law enforcement authorities: Where we are legally required to disclose data — for example, pursuant to a court order, regulatory investigation or anti-money laundering reporting obligation — we will comply with the relevant legal requirement.
• Business successors: In the event of a merger, acquisition, restructuring or sale of all or part of the Operator's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

7. International Data Transfers

bba556 operates internationally and your personal data may be transferred to, stored or processed in countries outside of Pakistan. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place — including contractual clauses requiring the recipient to protect personal data to a standard at least equivalent to that applied by the Operator.

Pakistani users should be aware that data protection laws in the destination country may differ from those in Pakistan. By using bba556, you acknowledge that your data may be transferred internationally under the safeguards described in this Policy.

8. Data Retention

bba556 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, comply with legal and regulatory obligations and resolve disputes. The following general retention principles apply:

• Active account data — retained for the duration of the account relationship and for a period thereafter as required by AML and audit regulations.
• KYC documents — retained for a minimum period in accordance with applicable anti-money laundering regulations, typically five years from the date of collection or from the end of the customer relationship, whichever is later.
• Transaction records — retained for a minimum of five years for financial compliance and dispute-resolution purposes.
• Support communications — retained for up to three years unless a longer period is required for an unresolved dispute or legal proceeding.
• Marketing data — retained until you withdraw consent or for as long as you remain an active subscriber, whichever is shorter.

When personal data is no longer required for any of the above purposes and no legal retention obligation applies, it will be securely deleted or anonymised.

9. Data Security

bba556 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration or destruction. These measures include:

• End-to-end HTTPS/TLS encryption for all data transmitted between your browser or device and our servers.
• Encrypted storage of password credentials using industry-standard hashing algorithms.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• A dedicated secure HTTPS portal for the submission of KYC documents — users must not send identity documents through unencrypted email, social messaging apps or any channel outside this portal.
• Regular security assessments and penetration testing of platform infrastructure.
• Session timeout controls and optional two-factor authentication to protect account access.

10. Cookies & Tracking Technologies

bba556 uses cookies and similar tracking technologies to operate the platform, remember your preferences and analyse usage patterns. The following categories of cookies may be used:

• Strictly necessary cookies: Required for the platform to function — session authentication, security tokens, load balancing. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and session continuation. Disabling these may impair certain platform features.
• Analytics cookies: Used to collect aggregated, anonymised data about how users interact with the platform — including pages visited, time on site and device type — to help us improve the user experience.
• Responsible-gambling session tracking: Session duration and activity data used to power time-on-site alerts and responsible-gambling monitoring features.

You can manage and disable non-essential cookies through your browser's privacy or settings menu. Note that disabling cookies may affect the functionality of certain platform features, including remembered session preferences.

11. Your Rights

Subject to applicable law and certain legal exemptions, you may have the following rights in relation to your personal data held by bba556:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data in certain circumstances — for example, where it is no longer necessary for the purposes for which it was collected and no legal retention obligation applies.
• Right to Restriction: You may request that we temporarily restrict processing of your data — for example, while the accuracy of data you have disputed is verified.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that your data be provided in a structured, commonly used format.
• Right to Object: You may object to processing based on legitimate interests, including profiling, or processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us using the details in Section 15. We will respond to verifiable requests within a reasonable timeframe in accordance with applicable law. We may need to verify your identity before processing a rights request.

12. Minors & Age Restriction

bba556 is strictly intended for adults aged 18 and above — or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect or process personal data from individuals below the minimum age threshold.

Age verification is conducted as part of the KYC process for all accounts. If we become aware — or have reasonable grounds to suspect — that personal data has been provided by a person below the minimum age, we will suspend the account, freeze any balance pending investigation, and delete or securely anonymise the data collected, subject to any applicable legal retention obligations.

If you believe that a minor has registered on bba556, please contact us immediately at the details in Section 15.

13. Pakistan-Specific Context

bba556 is an English-language platform designed for Pakistani users. In operating this service, we handle personal data associated with Pakistani nationals and residents, including CNIC numbers, Pakistani residential addresses and transaction records involving PKR-denominated figures or references to familiar local payment channels.

We reference payment channels familiar to Pakistani users — Easypaisa, JazzCash, Raast, and bank transfers via institutions such as HBL, UBL, Meezan Bank and Bank Alfalah — in the context of transaction processing. The personal and financial data associated with such transactions is handled in accordance with this Policy. These payment providers are not affiliated with bba556 and do not endorse gambling services.

bba556 does not hold a Pakistani data protection registration or gambling licence issued by Pakistani authorities. Pakistani users access the platform under the operator's international licensing framework. bba556 processes data from Pakistani users in accordance with the principles of this Policy and applicable international data protection standards.

This section is provided for transparency. It does not constitute legal advice on the applicability of Pakistani law to your individual circumstances. Users are encouraged to seek independent legal advice if they have concerns.

14. Amendments to This Policy

bba556 reserves the right to update or modify this Privacy Policy at any time. Material changes will be notified by updating the "Last reviewed" date at the top of this page. Where a change significantly affects how we process your personal data, we will provide more prominent notice — for example, an in-platform notification or email to registered users.

Your continued use of the platform following the publication of any revised Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically.

15. Contact & Complaints

For any questions, requests or complaints relating to this Privacy Policy or bba556's handling of your personal data, please contact our support team through the following channels:

We aim to respond to all data-related queries and rights requests within a reasonable timeframe. If you are unsatisfied with our response, you may have the right to lodge a complaint with the applicable data protection supervisory authority in your jurisdiction. Pakistani users may wish to seek guidance from the Federal Investigation Agency (FIA) or consult an independent legal adviser regarding applicable remedies under Pakistani law.