Privacy Policy
bn505 Online Casino

bn505 ("the Company", "we", "us", "our") is the operator of the online casino and sports betting platform accessible at bn505.org. For the purposes of this Privacy Policy, bn505 acts as the data controller in respect of all personal data collected from players and visitors who use the bn505 platform.

bn505 serves players throughout Pakistan, including in Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, Multan, Peshawar, and all other cities and regions. Our platform is offered in English and Urdu, and all financial transactions are facilitated in Pakistani Rupees (PKR) via local payment methods including JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK.

bn505 collects personal data across several categories depending on the nature of your interaction with our platform. The following table provides a clear breakdown of the data categories we process:

bn505 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when registering an account, completing identity verification, making a deposit, requesting a withdrawal, contacting support, or participating in a promotion.
• Automated technical collection: Data collected automatically when you access bn505, including IP address, device identifiers, browser fingerprint data, session cookies, and gameplay event logs.
• Payment processor data: Transaction confirmation data passed back to bn505 by payment processors such as JazzCash, EasyPaisa, and affiliated banking partners (HBL, UBL, Meezan Bank) when you initiate a deposit or withdrawal.
• Identity verification providers: Data returned to bn505 by third-party KYC and document verification service providers during the account verification process.
• Fraud and risk monitoring systems: Device reputation data and behavioural risk signals collected by bn505's integrated fraud detection infrastructure to protect players and the platform from fraudulent activity.

bn505 does not purchase personal data lists from third-party brokers, and we do not collect data from social media platforms without your explicit consent.

bn505 uses your personal data exclusively for the following defined purposes. No data is processed for purposes beyond this list without your prior consent or a new legal basis being established:

• Account creation and management: To register your bn505 account, authenticate your identity, and manage your ongoing relationship with the platform.
• Age and identity verification: To confirm that you are at least 21 years of age and that you are who you claim to be, in compliance with our regulatory obligations and responsible gaming commitments.
• Payment processing: To facilitate PKR deposits via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK, and to process withdrawal requests to your registered payment method.
• Providing gaming services: To deliver casino game content, process sportsbook bets (including PSL and international cricket markets), and record gameplay activity accurately.
• Regulatory compliance: To fulfil our obligations under applicable KYC and AML frameworks, including detecting and reporting suspicious financial activity where required by law.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling, enforce player-set limits and self-exclusion restrictions, and intervene where responsible gaming concerns are identified.
• Customer support: To investigate account queries, resolve disputes, and provide assistance in English and Urdu across live chat and email channels.
• Fraud prevention and security: To identify and prevent fraudulent accounts, payment fraud, bonus abuse, and other forms of platform manipulation.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, design, and content of the bn505 platform.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to players who have consented to receive such communications. See Section 13 for full details.

Every instance of personal data processing at bn505 is conducted under one of the following recognised legal bases:

• Contract performance: Processing necessary to deliver the services you have contracted with bn505 to receive — including account management, gameplay, and payment processing.
• Legal obligation: Processing required to comply with KYC, AML, age verification, and other regulatory requirements imposed on bn505 as a licensed gaming operator.
• Legitimate interests: Processing conducted for the legitimate business interests of bn505, including fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.
• Consent: Processing for purposes that go beyond operational necessity — primarily marketing communications — which is conducted only where you have provided clear, freely given, and withdrawable consent.

bn505 does not sell your personal data. We share personal data only in the following defined circumstances, and only to the extent strictly necessary for the specified purpose:

• Payment processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK receive transactional data necessary to process your deposit and withdrawal instructions. These parties operate under their own privacy and security frameworks and are subject to Pakistani financial regulation.
• KYC and identity verification providers: Third-party identity verification services receive your submitted KYC documentation to perform age and identity checks on behalf of bn505. These providers are contractually prohibited from using your data for any purpose other than performing the verification service.
• Fraud detection and security providers: Integrated risk and fraud monitoring tools may process technical and behavioural data to identify suspicious activity. All such providers operate under strict data processing agreements with bn505.
• Regulatory and law enforcement authorities: bn505 will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, a valid legal order, or as part of an AML investigation. bn505 will not voluntarily disclose your data to any government authority beyond what is legally required.
• Auditors and legal advisors: Where professional advisors such as auditors or legal counsel require access to personal data to perform their professional services for bn505, they are bound by strict confidentiality obligations.

bn505 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and improve your user experience. The following categories of cookies are used on the bn505 platform:

You may manage your cookie preferences at any time through the cookie settings panel accessible in the footer of the bn505 platform. Please note that disabling strictly necessary cookies will impair the functionality of the platform and may prevent you from logging in or accessing your account.

bn505 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and legal obligations. The following retention periods apply:

• Active account data: Retained for the full duration of your account relationship with bn505, and for a minimum of five (5) years following account closure to satisfy AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with financial regulatory requirements applicable to licensed gaming operators.
• KYC and identity documents: Retained for five (5) years following account closure or the completion of the relevant verification process, whichever is later.
• Support and communication records: Retained for three (3) years from the date of the last interaction, or longer where the communication relates to an active dispute or legal matter.
• Technical and usage data: Retained in identifiable form for up to twelve (12) months, after which it is aggregated and anonymised for internal analytics purposes.
• Self-exclusion records: Retained indefinitely to ensure that self-excluded players cannot re-register on the bn505 platform in breach of their self-exclusion request.

As a bn505 player, you have the following rights in relation to your personal data. bn505 will respond to all valid data rights requests within thirty (30) days of receipt. Where a request is particularly complex, this period may be extended by a further thirty (30) days, with notice provided to you within the initial thirty-day window.

To exercise any of the rights listed above, contact the bn505 Privacy Team via live chat or at support@bn505.org with the subject line "Data Rights Request". You may be asked to verify your identity before your request is processed, to ensure that personal data is not disclosed to an unauthorised party.

bn505 maintains a comprehensive information security programme designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• Encryption in transit: All data transmitted between your device and the bn505 platform is encrypted using TLS 1.3. The bn505 website operates exclusively over HTTPS.
• Encryption at rest: Sensitive personal data stored on bn505 servers is encrypted using AES-256 encryption. Database access is restricted by role-based access control and monitored continuously.
• Two-factor authentication: bn505 offers two-factor authentication (2FA) to all account holders and strongly recommends its use. Staff with access to player data systems are required to use 2FA as a mandatory security control.
• Intrusion detection and monitoring: bn505's infrastructure is protected by real-time intrusion detection systems. All access to systems containing personal data is logged and subject to regular security review.
• Penetration testing: bn505 commissions regular third-party penetration testing of its platform infrastructure to identify and remediate security vulnerabilities before they can be exploited.
• Staff training: All bn505 staff with access to personal data undergo mandatory data privacy and information security training as part of their onboarding and on an annual basis thereafter.

The bn505 platform is strictly prohibited to individuals under the age of 21 years. bn505 does not knowingly collect, store, or process personal data from any person under the age of 21.

If bn505 discovers or is notified that personal data belonging to a person under 21 has been collected — whether through a misrepresentation during registration or any other means — we will immediately:

• Suspend the associated account pending investigation.
• Delete all personal data associated with the underage account from our systems.
• Permanently block the account from further access to the bn505 platform.
• Refund any deposits made by the underage individual, subject to verification of the refund destination.

bn505 operates under an international gaming licence and, as a result, your personal data may be transferred to and processed in countries outside of Pakistan. This can occur in the following contexts:

• Data stored on cloud infrastructure hosted in data centres located outside Pakistan.
• Data processed by third-party service providers (such as KYC verification platforms or fraud detection tools) whose servers are located internationally.
• Data reviewed by regulatory or audit bodies under bn505's international gaming licence.

Where personal data is transferred internationally, bn505 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that provided under the applicable data protection framework. These safeguards include contractual data transfer agreements with all international processors, and we conduct due diligence on the data protection practices of all international third-party processors before engaging their services.

bn505 may send you promotional communications — including bonus offers, free spin notifications, PSL cricket betting promotions, and platform news — where you have provided your explicit consent to receive such communications during registration or at a later point.

bn505 marketing communications may be delivered via the following channels, subject to your consent preferences:

• Email to your registered address.
• SMS to your registered mobile number.
• On-platform notifications displayed when you are logged into your bn505 account.

You may withdraw your consent to receive marketing communications at any time through the following methods:

• Using the "Unsubscribe" link included in every marketing email sent by bn505.
• Updating your communication preferences within your bn505 account settings.
• Contacting bn505 support via live chat or email and requesting removal from all marketing lists.

bn505 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or the services we offer. The effective date at the top of this Policy will be updated whenever a material change is made.

Where a material change is made to this Privacy Policy — particularly any change that affects how your personal data is used or shared — bn505 will notify registered players by email or via a prominent notice on the bn505 platform at least seven (7) days before the change takes effect.

Your continued use of the bn505 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes made to this Policy, you should close your bn505 account and cease using the platform prior to the change taking effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way bn505 handles your personal data, please contact our Privacy Team using the details below:

bn505 takes all privacy complaints seriously and will investigate every complaint received in good faith. If you submit a complaint, we will:

• Acknowledge receipt of your complaint within 48 hours.
• Assign your complaint to a designated privacy officer for investigation.
• Provide you with a full written response within thirty (30) days, including details of our findings and any action taken.
• Where we are unable to resolve your complaint to your satisfaction, provide you with information about further escalation options available to you under applicable law.

bn505 is committed to resolving all privacy concerns fairly and transparently. We regard player trust as foundational to the bn505 brand, and we treat every data privacy matter with the seriousness it deserves.