01 Who We Are and How to Reach Us
BmaxGold is the operator of the online betting and gaming platform available at bmaxgold.com. For the purposes of this Privacy Policy, BmaxGold is the data controller responsible for the personal information collected through the platform and all associated services.
If you have any question about this Privacy Policy, want to exercise any of your data rights or need to report a privacy concern, you can reach the BmaxGold data team at:
- Email: support@bmaxgold.com (mark the subject line "Privacy Request")
- Live chat: Available 24/7 from any page when you are logged into your BmaxGold account
BmaxGold is committed to responding to all privacy-related requests within five working days of receipt.
02 What Data We Collect
BmaxGold collects personal data in three ways: information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and information received from third parties such as payment processors and identity verification services.
Information You Provide
| Data Type | Examples | When Collected |
|---|---|---|
| Identity data | Full name, date of birth, CNIC number, copy of CNIC or passport | Registration and KYC verification |
| Contact data | Email address, mobile phone number | Registration |
| Payment data | Easypaisa account number, JazzCash number, IBAN, card last four digits | First deposit and withdrawal requests |
| Account credentials | Username, hashed password (never stored in plain text) | Registration |
| Communication data | Support chat transcripts, email correspondence with BmaxGold | Any support interaction |
| Responsible gaming data | Deposit limits set, cool-off periods activated, self-exclusion requests | When tools are used |
Automatically Collected Data
When you access and use the BmaxGold platform, certain technical data is collected automatically to ensure the platform functions correctly and to protect against fraud and security threats.
- Device data: device type, operating system version, browser type and version, screen resolution.
- Network data: IP address, approximate geographic location derived from IP, internet service provider.
- Usage data: pages visited, games played, bets placed, session duration, clicks and navigation patterns within the platform.
- Transaction data: full history of all deposits, withdrawals, bets, wins, losses and bonus credits associated with your account.
- Cookie data: as described in Section 8 of this policy.
Data from Third Parties
BmaxGold may receive limited personal data from third-party service providers in the course of operating the platform. This includes confirmation of payment success or failure from Easypaisa, JazzCash, NayaPay, SadaPay and banking partners; identity verification results from our KYC service provider; and fraud risk scores from fraud prevention systems. BmaxGold does not purchase marketing lists or receive personal data from data brokers.
03 Why We Collect Your Data
BmaxGold collects personal data only for specific, legitimate purposes. Below is a clear account of each purpose.
- Account operation: To create and maintain your BmaxGold account, process your bets, credit winnings and cashback, manage your VIP Club tier and respond to your support requests.
- Identity and age verification: To confirm that you are who you say you are and that you are at least 18 years old. This is both a legal requirement and a platform rule. BmaxGold will not process a first withdrawal until identity verification is complete.
- Payment processing: To process deposits and withdrawals in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and Visa/Mastercard. Payment data is shared with payment processors only to the extent necessary to execute transactions.
- Fraud prevention and security: To detect and prevent fraudulent account activity, multi-accounting, money laundering, bot usage and collusion. BmaxGold uses automated systems and manual review processes for this purpose.
- Regulatory compliance: To comply with applicable anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, which require BmaxGold to retain certain records for prescribed periods and to report suspicious activity where required.
- Responsible gaming: To monitor account activity for signs of problem gambling behaviour and to administer the responsible gaming tools you have activated on your account.
- Platform improvement: To understand how players use BmaxGold so that the platform can be improved. Usage data is analysed in aggregate for this purpose and is not used to build individual behavioural profiles for sale to third parties.
- Marketing communications: To send you relevant promotional offers and VIP Club updates, but only if you have not opted out. See Section 10 for full details on managing your marketing preferences.
04 Legal Basis for Processing
BmaxGold processes your personal data on the following legal bases depending on the purpose:
- Contractual necessity: Processing your identity, payment and account data is necessary to fulfil the contract formed when you register a BmaxGold account and accept the Terms and Conditions.
- Legal obligation: Identity verification, transaction record-keeping and suspicious activity reporting are required by applicable financial crime prevention obligations.
- Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring and aggregate usage analysis are conducted on the basis of BmaxGold's legitimate interests, balanced against your privacy interests.
- Consent: Marketing communications are sent on the basis of your consent, which you can withdraw at any time. Cookie preferences beyond strictly necessary cookies are also consent-based.
05 Who We Share Your Data With
BmaxGold does not sell your personal data to any third party under any circumstances. Personal data is shared with third parties only where it is necessary to deliver the platform's services, meet legal requirements or protect the security of the platform.
Categories of Third Parties
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners and card processing networks receive the payment data necessary to execute your transactions. These providers are contractually obligated to process data only as instructed by BmaxGold.
- Identity verification providers: BmaxGold uses a third-party KYC service to verify CNIC documents and confirm identity. Verification results are returned to BmaxGold; the document images are retained by the KYC provider per its own regulated retention policy.
- Fraud prevention services: IP addresses, device fingerprints and transaction patterns may be shared with fraud detection systems to identify suspicious activity. These systems operate under strict data processing agreements with BmaxGold.
- Technology infrastructure: BmaxGold uses cloud infrastructure and software providers to host and operate the platform. These providers act as data processors under contractual agreements and do not use your data for their own purposes.
- Regulatory and law enforcement authorities: BmaxGold will disclose personal data to regulatory bodies, law enforcement agencies or courts where required to do so by law or valid legal process. BmaxGold will notify you of such disclosures where legally permitted to do so.
06 How Long We Keep Your Data
BmaxGold retains personal data for as long as is necessary for the purposes described in this policy, and in line with applicable legal requirements. The table below summarises the key retention periods.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 7 years after closure | AML/CTF legal obligation |
| Transaction records | 7 years from each transaction | Financial record-keeping requirements |
| Identity verification documents | 5 years after account closure | KYC regulatory requirements |
| Support communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Marketing preferences | Until updated or account closed | Consent management |
| Technical / device logs | 90 days from generation | Security monitoring |
When data is no longer required and no legal obligation compels its retention, BmaxGold securely deletes or anonymises it. Anonymised data – which cannot be linked back to an individual – may be retained indefinitely for statistical and analytical purposes.
07 How We Keep Your Data Secure
BmaxGold takes the security of your personal data seriously and operates multiple layers of technical and organisational safeguards.
- Encryption in transit: All data transmitted between your device and the BmaxGold platform is encrypted using TLS (Transport Layer Security). You will see the padlock icon in your browser confirming this at all times.
- Encryption at rest: Sensitive data stored in BmaxGold's systems, including payment account numbers and identity document references, is encrypted at rest using AES-256 encryption.
- Password security: Passwords are never stored in plain text. BmaxGold uses a one-way hashing algorithm with salting so that even BmaxGold staff cannot read your password. If you forget your password, it must be reset rather than retrieved.
- Access controls: Access to personal data within BmaxGold's systems is restricted to staff who genuinely need it to perform their role. Access is logged and audited regularly.
- Two-factor authentication: BmaxGold supports two-factor authentication on accounts. Enabling it is strongly recommended for all players and required for withdrawal requests above Rs 50,000.
- Security monitoring: BmaxGold operates continuous security monitoring of its infrastructure for intrusion attempts, unusual access patterns and other threats.
No system is completely immune to security incidents. In the unlikely event of a data breach that poses a material risk to your rights, BmaxGold will notify affected players within 72 hours of becoming aware of the incident, and will provide information on what happened, what data was involved and what steps are being taken.
08 Cookies and Tracking Technologies
BmaxGold uses cookies and similar technologies on the platform. A cookie is a small text file placed on your device when you visit a website. Cookies help the platform remember your preferences, keep you logged in between sessions and provide usage data for improving the platform experience.
BmaxGold uses the following categories of cookies:
You can manage optional cookie preferences via your account settings or your browser settings. Disabling optional cookies will not affect your ability to access your account, place bets or process withdrawals.
09 Your Privacy Rights
As a BmaxGold account holder, you have specific rights over your personal data. BmaxGold is committed to honouring these rights promptly and without creating unnecessary obstacles. To exercise any right listed below, contact support@bmaxgold.com with the subject line "Privacy Request" or use live chat.