bu55 Privacy Policy

bu55 ("we," "us," "our") is the data controller responsible for personal data collected through the bu55 platform, accessible at bu55.org. As data controller, bu55 determines the purposes and means by which your personal data is processed. This Privacy Policy applies to all personal data collected through the bu55 website, mobile web interface, customer support channels, and any associated communications.

This policy governs data processing for all registered account holders and visitors to the bu55 platform, including Pakistani users accessing the service from Karachi, Lahore, Islamabad, Faisalabad, and all other regions of Pakistan.

bu55 collects personal data across several categories, depending on how you interact with the platform. The categories of data we may collect include:

bu55 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required for responsible gaming purposes (e.g., self-exclusion records) or legally mandated compliance obligations.

bu55 processes your personal data for specific, documented purposes. We do not use your data for any purpose incompatible with those stated at the time of collection. The primary purposes for which bu55 processes personal data are:

• Account management: Creating, maintaining, and administering your bu55 account, including login authentication and account security;
• Transaction processing: Handling deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, USDT, Visa, and Mastercard, as well as processing withdrawal requests;
• Identity verification: Conducting KYC checks to confirm your identity, age, and the legitimacy of your payment methods in compliance with anti-money laundering obligations;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account abuse, and security breaches;
• Regulatory compliance: Fulfilling obligations under applicable gaming regulations and financial crime prevention requirements;
• Customer support: Responding to your support queries, resolving disputes, and managing complaint handling;
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and administering self-exclusion and limit-setting requests;
• Platform improvement: Analysing aggregated usage data to improve the bu55 platform, personalise your experience, and develop new features;
• Marketing communications: Sending you promotional offers, bonus notifications, and updates about bu55 services — only where you have provided consent or where we have a legitimate interest to do so, and always with a clear option to opt out.

bu55 processes your personal data on the basis of one or more of the following legal grounds:

• Contractual necessity: Processing required to enter into or perform the contract between you and bu55 — for example, creating your account, processing deposits and withdrawals, and delivering gaming services;
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering laws, age verification obligations, and gaming licence conditions;
• Legitimate interests: Processing necessary for bu55's legitimate business interests, such as fraud detection, platform security, responsible gaming monitoring, and platform analytics — provided those interests are not overridden by your rights and freedoms;
• Consent: Processing based on your explicit consent, such as receiving marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where bu55 relies on legitimate interests as the legal basis for processing, a balancing assessment is conducted to ensure your interests and fundamental rights are adequately protected. You have the right to object to processing based on legitimate interests at any time.

bu55 does not sell, rent, or otherwise commercialise your personal data. Data sharing with third parties occurs only in the following limited and documented circumstances:

• Payment processors: Financial data is shared with payment providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency infrastructure partners — solely to process your transactions. These providers are contractually bound to use your data only for this purpose;
• KYC and identity verification providers: Identity documents and related data may be shared with third-party verification services engaged to perform KYC checks on behalf of bu55. These providers operate under strict data processing agreements;
• Regulatory and law enforcement authorities: bu55 will disclose personal data to competent authorities where required by law, court order, or regulatory instruction, including for anti-money laundering investigations and fraud prevention;
• Technology infrastructure providers: Data may be accessible to cloud hosting, security monitoring, and platform infrastructure providers engaged by bu55, all of whom are bound by confidentiality and data processing obligations;
• Professional advisers: Legal counsel, auditors, and compliance consultants may access data on a need-to-know basis and are bound by professional confidentiality obligations.

bu55 uses cookies and similar tracking technologies on the bu55.org website. Cookies are small text files placed on your device that help us deliver a functional and personalised experience. The categories of cookies used by bu55 are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking platform functionality;
• Functional cookies: Remember your preferences such as language settings, display configurations, and recently played games to improve your experience on return visits;
• Analytics cookies: Collect aggregated, anonymised data about how visitors navigate bu55.org to help us improve page structure, loading performance, and content relevance. These do not identify you personally;
• Security cookies: Help detect and prevent fraudulent login attempts, account takeovers, and bot activity by flagging unusual access patterns.

bu55 does not use third-party advertising cookies or any cookies that track your behaviour across other websites for commercial targeting purposes. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair platform functionality, including the ability to log in to your bu55 account.

bu55 retains personal data for no longer than is necessary for the purposes described in this Privacy Policy, subject to any overriding legal or regulatory retention obligations. General retention periods applied by bu55 are:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data must be retained for legal reasons beyond your account closure, it will be held in a restricted access state and used only for the permitted compliance purpose.

bu55 implements technical and organisational security measures appropriate to the risk level associated with the personal data we process. Key security measures include:

• Encryption in transit: All data transmitted between your device and bu55 servers is encrypted using TLS 1.2 or higher, preventing interception by third parties;
• Encryption at rest: Sensitive personal data and financial records stored in bu55 databases are encrypted using AES-256 symmetric encryption;
• Access controls: Access to personal data within bu55 is granted on a strict need-to-know basis. Role-based access controls and multi-factor authentication are enforced for all staff with data access;
• Intrusion detection: bu55 infrastructure is monitored continuously for unauthorised access attempts, anomalous activity, and potential security incidents;
• Vulnerability management: bu55 conducts periodic security assessments and applies security patches to platform infrastructure on a priority basis;
• Incident response: bu55 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, you will be notified as required by applicable law.

As a data subject, you hold the following rights in relation to personal data held by bu55. To exercise any of these rights, contact bu55 at [email protected] with the subject line "Data Rights Request."

bu55 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, bu55 may extend this period by a further 60 days, with notification provided to you within the initial 30-day window. bu55 will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.

The bu55 platform is strictly intended for adults aged 21 years and over. bu55 does not knowingly collect, store, or process personal data relating to individuals under the age of 21. Age verification is performed during account registration and as part of the KYC process.

If bu55 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately and the associated account closed. Any funds held in such an account will be handled in accordance with bu55's Terms and Conditions and applicable regulatory requirements.

bu55 operates with technology infrastructure that may involve the transfer of personal data to servers or service providers located outside of Pakistan. Where such transfers occur, bu55 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards applied to international data transfers by bu55 include:

• Contractual clauses requiring data processors in other jurisdictions to maintain equivalent data protection standards;
• Engagement of infrastructure providers certified under internationally recognised security and privacy frameworks;
• Restriction of cross-border data transfers to those strictly necessary for the provision of bu55 services.

bu55 does not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual or technical safeguards. If you have questions about specific transfer mechanisms, contact bu55 at [email protected].

bu55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. When material changes are made, bu55 will notify registered account holders via their registered email address and will update the "Last Updated" date at the top of this page.

The most current version of this Privacy Policy is always available at bu55.org/privacy-policy. Your continued use of the bu55 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised policy, you must cease using the bu55 platform and may request account closure in accordance with the bu55 Terms and Conditions.

bu55 recommends that you review this Privacy Policy periodically, particularly if you make significant changes to how you use the platform — for example, before submitting KYC documents or making your first large withdrawal.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data bu55 holds about you, please get in touch using the details below. bu55 is committed to responding to all privacy-related enquiries promptly and transparently.

For all formal legal correspondence, dispute notices, or regulatory enquiries relating to data protection, please mark your communication clearly as "Legal Notice — Data Protection" to ensure it is routed to the appropriate team within bu55.

If you are dissatisfied with bu55's response to a privacy complaint, you have the right to escalate the matter to the competent data protection or gaming regulatory authority in the jurisdiction under which bu55 operates. bu55 will cooperate fully with any such regulatory inquiry.