NB55 Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy applies to nb55, operated at nb55.biz, and covers all personal data collected from players who register, deposit, play, or otherwise interact with the nb55 platform. It applies equally to use of the nb55 website on desktop and mobile browsers.

When we say "personal data" we mean any information that can identify you — either directly, like your full name or CNIC number, or indirectly, like your device's IP address or browsing behaviour on the nb55 platform.

This policy is written specifically with Pakistani players in mind. nb55 is designed for the Pakistan market and this document reflects how we operate in that context — including which local payment methods we use, how CNIC data is handled during identity verification, and how we interact with Pakistani regulatory and fraud-prevention requirements.

nb55 collects personal data in three main ways: information you provide directly when you register and use the platform, data generated automatically by your use of the platform, and — in limited cases — data received from third-party verification and payment processors.

Information you provide directly:

• Full name as it appears on your CNIC
• CNIC number (used for identity verification)
• Date of birth
• Mobile phone number
• Email address
• Easypaisa / JazzCash / NayaPay / SadaPay account numbers or bank account details (for payment processing)
• Correspondence with nb55 customer support, including chat transcripts and emails

Data generated automatically by your use of nb55:

• IP address and approximate geographic location
• Device type, operating system and browser version
• Session timestamps, pages visited and features used within the nb55 platform
• Betting history — games played, stakes, winnings and outcomes
• Login history and account activity logs
• Cookie data (see Section 8)

Data received from third parties:

• Identity verification results from CNIC verification providers
• Payment status confirmations from Easypaisa, JazzCash and banking partners
• Fraud risk scores from third-party anti-fraud services

nb55 collects only the data that is necessary for the following specific purposes. We do not collect data speculatively or for purposes we have not identified.

• Account registration and management: Your name, CNIC, date of birth and contact details allow nb55 to create and maintain your account, verify your identity and ensure you meet the 18+ eligibility requirement.
• Payment processing: Your Easypaisa, JazzCash or bank details are used solely to process your deposits and withdrawals in PKR. nb55 does not store full payment credentials — these are handled by our certified payment processors.
• Fraud prevention and security: Device data, IP addresses and behavioural patterns are monitored to detect and prevent account takeover, bonus abuse, money laundering and other fraud at nb55.
• Platform improvement and personalisation: Usage data helps nb55 understand which games and features Pakistani players use most, allowing us to improve the platform experience continuously.
• Customer support: Support chat and email records are retained so that nb55 can resolve disputes, track complaint history and provide consistent service to each player.
• Responsible gaming: Betting history and session data help nb55 identify players who may benefit from responsible gaming tools and allow the player welfare team to reach out proactively where warranted.
• Legal and regulatory compliance: nb55 retains certain data to fulfil anti-money-laundering (AML) obligations and respond to lawful requests from relevant authorities.

nb55 processes your personal data under the following legal bases:

• Contract performance: Processing your name, payment details and account data is necessary to fulfil our agreement with you as a registered nb55 player and to provide the gaming service you have signed up for.
• Legal obligation: Certain data processing — particularly identity verification and transaction record-keeping — is required by anti-money-laundering laws and financial regulations that apply to nb55's operations.
• Legitimate interests: Security monitoring, fraud prevention and platform analytics are processed on the basis of nb55's legitimate interest in operating a safe, fair and functional platform for all Pakistani players.
• Consent: Non-essential cookies and marketing communications are processed only with your explicit consent, which you may withdraw at any time.

nb55 does not sell personal data to any third party under any circumstances. We share data with third parties only where strictly necessary and only as described below:

• Payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, banking partners): Transaction-relevant data is shared to process your deposit or withdrawal. These processors are bound by their own data protection obligations and may not use your data for any other purpose.
• Identity verification providers: Your CNIC number and document images are shared with verified KYC (Know Your Customer) providers solely for identity verification purposes. Verified results are returned to nb55; raw document data is not retained by nb55 beyond the verification process.
• Anti-fraud and security services: IP addresses and behavioural signals may be shared with anti-fraud tools to assess risk scores. These services are contractually prohibited from using your data for their own marketing or commercial purposes.
• Game providers (e.g., Pragmatic Play, Evolution): When you play a game, the provider's server processes the game outcome. Providers receive session data necessary to run the game but do not receive your full personal profile.
• Law enforcement and regulatory authorities: nb55 will disclose personal data to competent authorities where required to do so by law, court order or valid regulatory request. Where legally permitted, nb55 will notify affected players of such disclosures.

Payment security is especially important at nb55 because all transactions involve real money in Pakistani Rupees. Here is exactly how nb55 handles your financial data:

Easypaisa and JazzCash transactions: When you initiate a deposit or withdrawal via Easypaisa or JazzCash, you are redirected to or interact directly with the respective payment provider's interface. nb55 receives a transaction confirmation and reference number but does not handle or store your mobile wallet PIN or OTP at any point.

Bank card transactions: Card payments at nb55 are processed through a PCI DSS-compliant payment gateway. nb55 does not store your card number, CVV or expiry date on its own servers. This data is tokenised at the point of entry and handled entirely by the certified payment gateway.

IBFT bank transfers: Your bank account number and IBAN are used solely to process the specific transaction and to verify that the account belongs to you. This data is not used for any other purpose.

Transaction history: Records of your deposit and withdrawal history at nb55 are stored securely and are visible to you at any time within your account dashboard. These records are retained as part of nb55's AML compliance obligations.

nb55 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations.

• Account data (name, CNIC, contact details): retained for the lifetime of your active nb55 account plus a minimum of 5 years after account closure, to comply with AML record-keeping requirements.
• Transaction records: retained for a minimum of 5 years from the date of the transaction.
• Betting history: retained for 3 years from the date of play, or longer if required for dispute resolution or regulatory purposes.
• Customer support records: retained for 3 years from the last interaction.
• Security and fraud logs: retained for 2 years from the logged event.
• Cookie and analytics data: session cookies expire when you close your browser; persistent analytics cookies expire after 13 months.

After the applicable retention period, nb55 securely deletes or anonymises your personal data. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and platform improvement purposes.

nb55 uses cookies and similar technologies to make the platform work, remember your preferences and understand how Pakistani players use the site. Below is a plain-language breakdown of the cookie types in use.

nb55 applies multiple layers of technical and operational security controls to protect your personal data from unauthorised access, alteration, disclosure or destruction.

• Transport encryption: All data transmitted between your browser and nb55 servers is encrypted using TLS 1.3 — the same protocol used by major Pakistani banks and financial institutions.
• Data at rest: Personal and financial data stored on nb55 servers is encrypted using AES-256 symmetric encryption.
• Password security: nb55 stores passwords using a one-way bcrypt hash. No nb55 staff member can see your password in plain text. nb55 will never ask you for your password via chat, email or phone.
• Access controls: Internal access to player data at nb55 is restricted on a need-to-know basis. Staff with access to sensitive data are subject to background checks and confidentiality obligations.
• Security audits: nb55 systems undergo regular penetration testing and security audits conducted by independent third-party specialists.
• Incident response: nb55 maintains a documented data breach response plan. In the event of a breach affecting your personal data, nb55 will notify affected players promptly and take all reasonable remedial steps.

nb55 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification using CNIC data is a mandatory step in the nb55 registration and withdrawal verification process specifically to enforce this rule.

If nb55 discovers that personal data has been collected from a person under 18, that data will be deleted immediately, the associated account will be permanently closed and any funds in the account will be handled in accordance with our underage gaming policy as set out in the nb55 Terms and Conditions.

As a registered player at nb55, you have the following rights regarding your personal data. These rights can be exercised by contacting nb55 support at any time.

nb55 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements in our data handling practices. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Send an email notification to all registered nb55 players at least 7 days before the changes take effect.
• Display a notice on the nb55 website during the notification period.

Your continued use of nb55 after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with the updated policy, you should close your account before the effective date.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy-related complaint, please contact the nb55 privacy team through the following official channels:

• Email: [email protected] (subject line: Privacy Request)
• Live Chat: Available 24/7 from your nb55 account dashboard — select "Privacy & Data" from the support menu.

nb55 will acknowledge all privacy-related requests within 48 hours and provide a full response within 30 days. For complex requests, the 30-day period may be extended by a further 60 days, in which case nb55 will notify you of the extension and the reason for it.

If you are not satisfied with how nb55 has handled your privacy request or complaint, you have the right to escalate the matter to the appropriate data protection authority in your jurisdiction.