Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how BN77 ("BN77", "we", "us", "our") collects, processes, stores and protects the personal data of individuals ("you", "your", "Player", "User") who access or use the BN77 online entertainment platform, including any associated websites, mobile interfaces and related services.

BN77 takes the privacy and security of your personal data seriously. We process personal data only for the purposes described in this Policy, in accordance with applicable data protection legislation in the jurisdiction in which BN77 holds its operating licence, and in line with internationally recognised data protection principles including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality.

By registering an Account on BN77 or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

02 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly, including but not limited to a name, identification number, location data, online identifier or factors specific to the physical, economic or social identity of that individual.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction, whether by automated or manual means.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, BN77 is the Data Controller of personal data collected through the platform.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller, under documented instructions and subject to appropriate data processing agreements.
• "KYC Data" means identity and address verification documents and information collected as part of the Know Your Customer process, including government-issued identification, proof of address and proof of payment method ownership.
• "Cookies" means small text files placed on your device by the BN77 platform to facilitate session management, analytics, personalisation and security functions.
• "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.

03 Data We Collect

BN77 collects Personal Data through a number of means, including data you provide directly, data generated through your use of the platform, and data received from third parties. The categories of data we collect include:

04 Data Processing

BN77 processes your Personal Data for the following purposes:

• Account Management: To create, maintain and administer your BN77 Account, including authentication, account settings and communication preferences.
• Service Delivery: To enable you to place bets, access live casino and slot games, process deposits and withdrawals, and receive customer support.
• Identity Verification (KYC): To verify your identity and age in compliance with applicable anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under the laws of BN77's licence jurisdiction.
• Fraud Prevention & Security: To detect, investigate and prevent fraudulent activity, unauthorised account access, prohibited conduct and platform abuse.
• Responsible Gambling: To monitor player behaviour and apply responsible gambling tools including deposit limits, loss limits, session reminders and self-exclusion where applicable, and to meet any regulatory obligations relating to player protection.
• Legal Compliance: To comply with applicable laws, regulations, court orders or lawful requests from competent authorities, including financial regulators and law enforcement.
• Marketing Communications: To send you promotional offers, bonus notifications and platform updates, where you have provided consent or where a legitimate interest applies. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the functionality, content and performance of the BN77 platform.

05 Legal Basis for Processing

BN77 processes Personal Data only where a valid legal basis exists. The applicable legal bases are:

• Contractual Necessity: Processing required to perform the contract between you and BN77 — including account creation, service delivery, payment processing and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML/CTF obligations, age verification requirements and regulatory reporting.
• Legitimate Interests: Processing necessary for BN77's legitimate business interests, including fraud detection, platform security, responsible gambling monitoring, and internal analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given consent, including marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing

BN77 does not sell your Personal Data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Game Providers & Technology Partners: Third-party game studios and platform technology providers who supply games and infrastructure to BN77. These partners process data as Data Processors under binding agreements.
• Payment Processors: Payment technology providers who facilitate deposit and withdrawal transactions. Data shared is limited to what is necessary to complete the transaction. Payment provider names referenced on BN77 — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are familiar Pakistani payment references provided for context only; they do not imply any data-sharing arrangement with those providers.
• Identity Verification Services: KYC and AML compliance providers who assist in verifying the identity and age of players.
• Analytics Providers: Service providers who help BN77 understand platform usage and improve user experience. Data shared is anonymised or aggregated wherever possible.
• Regulatory Authorities: Competent regulators, law enforcement agencies or courts where disclosure is required by applicable law, court order or binding regulatory direction.
• Responsible Gambling Bodies: Recognised responsible gambling organisations or self-exclusion registers where required under BN77's licence obligations or at a player's request.
• Successor Entities: In the event of a merger, acquisition or sale of all or part of BN77's business, Personal Data may be transferred to the successor entity, subject to equivalent privacy protections.

07 Cookies & Tracking Technologies

BN77 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security and analyse how the platform is used. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the platform to function. These cookies enable core features such as session management, login authentication and security checks. They cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Collect information about how players use BN77 — for example, which pages are visited most frequently and whether error messages are received. This data is used in aggregate form to improve the platform.
• Functional Cookies: Allow the platform to remember your preferences, such as language settings, preferred sports markets, and display options, to provide a more personalised experience.
• Marketing Cookies: Used to deliver relevant promotional content and track the effectiveness of BN77 marketing campaigns. These cookies are only set with your consent.

08 Data Retention

BN77 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account & Registration Data: Retained for the duration of your active Account, plus a minimum period after Account closure as required by applicable AML, tax and regulatory record-keeping obligations.
• KYC & Identity Data: Retained for a minimum of five (5) years from Account closure, or such longer period as required by applicable AML/CTF legislation in BN77's licence jurisdiction.
• Financial & Transaction Data: Retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable financial record-keeping requirements.
• Gaming & Betting History: Retained for a minimum of three (3) years from the date of the relevant gaming session or bet, or longer where required for dispute resolution or regulatory purposes.
• Support Communications: Retained for up to three (3) years from the date of the last communication, unless a longer period is required for dispute resolution.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of consent.

When Personal Data is no longer required for any lawful purpose, BN77 will securely delete or anonymise it in accordance with our internal data disposal procedures.

09 Data Security

BN77 implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and BN77 servers.
• Encryption of sensitive data at rest, including payment-related information and KYC documents.
• Role-based access controls limiting staff access to Personal Data to those with a demonstrated business need.
• Regular security assessments, penetration testing and vulnerability management procedures.
• Secure data centres with physical access controls, redundancy and disaster recovery capabilities.
• Staff training on data protection obligations and information security best practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, BN77 will notify the relevant supervisory authority and, where required, affected players, in accordance with applicable breach notification obligations.

10 Your Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to your Personal Data held by BN77:

• Right of Access: You may request a copy of the Personal Data BN77 holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. Where possible, you may update standard Account information directly from your Account settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to BN77's legal retention obligations.
• Right to Restriction: You may request that BN77 restrict processing of your Personal Data in certain circumstances — for example, while a dispute regarding accuracy is being resolved.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request your Personal Data in a structured, commonly used and machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Marketing opt-outs take effect immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11 International Transfers

BN77 operates internationally and may transfer your Personal Data to countries outside your country of residence, including countries where BN77's servers, Data Processors or technology partners are located. Where such transfers occur, BN77 ensures that appropriate safeguards are in place to protect your Personal Data, including:

• Transfers to countries recognised as providing an adequate level of data protection by the relevant supervisory authority in BN77's licence jurisdiction.
• Standard contractual clauses or other approved transfer mechanisms where an adequacy decision is not available.
• Binding corporate rules or equivalent instruments where transfers occur within a corporate group.

You may request further information about the specific safeguards applicable to international transfers of your Personal Data by contacting BN77 support.

12 Minors

BN77 is strictly an adults-only platform. We do not knowingly collect, process or retain Personal Data from any individual under the age of 18, or under the higher minimum age required by the operator or applicable licence jurisdiction.

If BN77 becomes aware that Personal Data has been collected from a minor, we will take immediate steps to delete that data and close the associated Account. If you are a parent or guardian and believe that a minor has registered an Account on BN77, please contact us immediately at [email protected].

13 Third-Party Links

The BN77 platform may contain references to third-party services, payment method names or other external content. BN77 does not control third-party websites or services and is not responsible for their privacy practices. This Privacy Policy applies solely to Personal Data collected and processed by BN77 through the BN77 platform.

Payment provider names referenced on BN77 — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are familiar Pakistani payment references provided for contextual familiarity only. Any data processing by those providers in connection with payment transactions is governed by their own privacy policies and terms, not this Policy.

14 Policy Amendments

BN77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made, BN77 will provide notice through a prominent announcement on the platform and, where practicable, by email to the address registered on your Account.

The "Last updated" date at the top of this page indicates when the most recent revision was made. Continued use of the BN77 platform following notification of an amended Privacy Policy constitutes acceptance of the revised terms. We encourage you to review this Policy periodically.

If you do not agree to a revised Privacy Policy, you must cease using the platform and request Account closure in accordance with the Terms & Conditions.

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the BN77 Data Protection team:

For general Account support, responsible gambling tool requests, or Terms & Conditions enquiries, please also refer to the relevant pages linked in the navigation above.

You also have the right to lodge a complaint with the relevant data protection supervisory authority in BN77's licence jurisdiction if you believe that your Personal Data has been processed in a manner inconsistent with applicable law.