Your Data. Your Rights. Our Responsibility.

Bmax Privacy Policy – How We Protect Your Data in Pakistan

At Bmax, your personal information is treated with the same seriousness as your money. This Privacy Policy explains exactly what data we collect when you use bmax.bet, how we use it, who we share it with and what rights you have over it at any time.

Last Updated: January 2025
Applies to all Bmax players in Pakistan
Our Privacy Promise
  • We never sell your data
  • 256-bit SSL encryption
  • You control your data
  • Deletion on request

SECURITY AT A GLANCE

256-bit SSL Encrypted Storage Audit Logs Access Controls
bmax

Overview & Scope of This Policy

This Privacy Policy explains how Bmax, operating the website at bmax.bet, collects, uses, stores and protects personal information from players and visitors. It applies to all data collected through the Bmax website, mobile browser interface, customer support channels and any other service offered under the Bmax brand.

By registering an account at Bmax or by continuing to use the platform after this policy has been updated, you acknowledge that you have read and understood how your personal data is handled. This policy should be read alongside the Bmax Terms and Conditions and Responsible Gaming Policy.

We take privacy seriously — not because we are legally required to, but because the Pakistani players who use Bmax deserve to know exactly what happens to their personal information. Online gaming involves sharing sensitive financial and identity data, and we believe complete transparency about how that data is managed is a basic expectation every platform should meet.

Who This Policy Applies To
  • All registered account holders at Bmax, regardless of their location
  • Visitors to bmax.bet who have not yet registered an account
  • Anyone who contacts Bmax customer support via any channel
  • Players who participate in any Bmax promotion or loyalty programme

What Data We Collect at Bmax

Bmax collects personal data in several ways: directly from you when you register or interact with the platform, automatically through your use of the website, and occasionally from third-party verification services when identity checks are required. The table below summarises the categories of data we collect and the context in which each is gathered.

Data Category Examples When Collected
Identity Data Full name, date of birth, CNIC number, passport number During registration and identity verification
Contact Data Mobile number, email address (if provided) During registration and account updates
Financial Data Easypaisa / JazzCash / NayaPay account numbers, bank IBAN, deposit and withdrawal history When processing deposits and withdrawals
Gaming Activity Data Games played, bets placed, session duration, win/loss records, bonus activity Automatically during platform use
Technical Data IP address, device type, operating system, browser type, connection speed Automatically on each platform visit
Communication Data Support chat transcripts, email correspondence, feedback submitted When you contact Bmax support
Verification Documents CNIC scan, passport photo page, selfie with document When account verification is required before withdrawal

We do not collect data that is not relevant to the operation of the Bmax platform and the services we provide. We do not collect sensitive personal data categories such as health information, religious beliefs or political opinions. If at any point you are unsure why a particular piece of information is being requested, please contact our support team before providing it.

How Bmax Uses Your Personal Data

Every piece of data Bmax collects has a defined purpose. We do not collect information speculatively or retain data beyond what is necessary for the purposes listed below.

  • Account management: Your registration data is used to create and maintain your Bmax player account, authenticate your login and communicate with you about your account status.
  • Payment processing: Financial data including your linked Easypaisa, JazzCash, NayaPay, SadaPay or bank account details are used exclusively for processing deposits and withdrawals in PKR. This data is never used for any other purpose.
  • Identity verification: CNIC or passport data submitted for verification is used to confirm that you meet our age and identity requirements and to comply with anti-money laundering obligations. Verification documents are not retained longer than necessary for this purpose.
  • Fraud and security: Technical data including IP addresses and device information is used to detect unusual activity, prevent account takeovers and identify multiple account violations. This protects you as a player as much as it protects the platform.
  • Responsible gaming monitoring: Gaming activity data is used by the Bmax responsible gaming team to identify patterns that may indicate problematic gambling behaviour, and to ensure that self-exclusion and deposit limit requests are correctly applied.
  • Customer support: Communication data including support chat transcripts is retained so that our support team can provide consistent, informed assistance when you contact us with a query or complaint.
  • Platform improvement: Aggregated, anonymised gaming activity and technical data is used to understand how players interact with the platform and to inform decisions about game selection, interface improvements and feature development.
  • Marketing communications: Where you have opted in, your contact details may be used to send you information about Bmax promotions, bonuses and platform updates. You can opt out of marketing communications at any time through your account settings.
bmax

Legal Basis for Processing Your Data

Bmax processes your personal data on one or more of the following legal bases, depending on the specific type of data and the purpose for which it is used:

Contractual Necessity

Processing your registration data, payment information and gaming activity is necessary to provide the services described in the Bmax Terms and Conditions.

Consent

Where we process data for marketing communications or optional analytics, we do so on the basis of your consent, which you can withdraw at any time.

Legitimate Interests

Fraud detection, security monitoring and platform improvement are conducted on the basis of Bmax's legitimate interests in operating a safe and fair platform.

Legal Obligation

Identity verification, anti-money laundering checks and record-keeping obligations are carried out to comply with applicable legal and regulatory requirements.

Data Sharing & Third-Party Processors

Bmax does not sell, rent or trade your personal data to any third party for commercial purposes. Your information is shared with third parties only in the limited circumstances described below, and only to the minimum extent necessary.

  • Payment processors: When you make a deposit or request a withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay or IBFT, your payment details are shared with the relevant payment provider solely to complete the transaction. Bmax does not store full card numbers or mobile banking credentials.
  • Identity verification services: In cases where automated document verification is used, your identity documents may be processed by a third-party KYC (Know Your Customer) provider. These providers are contractually obligated to process your data only for the purpose of identity verification and to delete it once the process is complete.
  • Cloud infrastructure providers: Bmax uses reputable cloud hosting providers to operate its platform. Your data may be stored on servers maintained by these providers, who process data only on our instruction and under strict data processing agreements.
  • Analytics providers: Aggregated, anonymised usage data may be shared with analytics service providers to help us understand platform performance. Individual player data is never included in these reports.
  • Law enforcement and regulators: Bmax may be required to share specific player data with law enforcement agencies, regulatory authorities or courts when legally compelled to do so. We will only share the minimum information required and, where legally permissible, will notify the affected player.

All third parties with whom Bmax shares personal data are required to maintain appropriate technical and organisational security measures to protect that data and are prohibited from using it for any purpose other than the one for which it was shared.

Cookies & Tracking Technologies

The Bmax website uses cookies and similar tracking technologies to deliver a functional, personalised and secure experience. Cookies are small text files stored on your device when you visit the platform. They allow the website to remember your preferences and session state between pages.

Cookie Type Purpose Can Be Disabled?
Essential Cookies Maintain your login session, remember your language preference, enable secure transactions. Without these, the platform cannot function. No — required for platform operation
Functional Cookies Remember your game preferences, table settings and responsible gaming limit configurations. Yes — disabling may affect experience
Analytics Cookies Collect anonymised data on page visits, session duration and feature usage to help us improve the platform. Yes — opt out via account settings
Security Cookies Detect fraudulent login attempts, identify multiple account violations and flag unusual activity patterns. No — required for account security

You can manage cookie preferences through your browser settings. Note that disabling certain cookies — particularly essential and security cookies — will affect your ability to use the Bmax platform normally. We do not use third-party advertising cookies or track your activity on websites outside of bmax.bet.

bmax

Data Security at Bmax

Protecting the personal and financial data of every Bmax player is a technical and operational priority, not just a policy commitment. The following security measures are in place across the platform at all times:

256-Bit SSL Encryption

All data transmitted between your device and the Bmax servers is encrypted using 256-bit SSL, the same standard used by major banks.

Encrypted Data Storage

Sensitive stored data including identity documents and payment account references is encrypted at rest. Plain-text storage of sensitive data is not permitted on any Bmax system.

Strict Access Controls

Access to player personal data within the Bmax organisation is restricted to staff who require it to perform their specific job function. All access is logged and audited.

Real-Time Monitoring

Bmax systems are monitored around the clock for unusual activity, potential breaches and attempted intrusions. Alerts trigger an immediate response from our security team.

Regular Security Audits

The Bmax platform undergoes periodic third-party security audits to identify vulnerabilities and verify that our security standards are being maintained consistently.

Two-Factor Authentication

Two-factor authentication via OTP to your registered mobile number is available for all Bmax accounts and strongly recommended for all players, particularly those with significant balances.

In the Event of a Data Breach

In the unlikely event that a data breach occurs that is likely to result in risk to affected players, Bmax will notify affected individuals as promptly as possible and will take immediate steps to contain the breach and assess its scope. We will provide clear information about what data was affected and what steps players should take to protect themselves.

Data Retention – How Long We Keep Your Information

Bmax retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

  • Account data: Retained for the duration of your active account relationship with Bmax, plus a minimum of 5 years after account closure to comply with anti-money laundering record-keeping requirements.
  • Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction to comply with financial record-keeping obligations.
  • Identity verification documents: Retained for the minimum period required by applicable KYC/AML obligations, after which they are securely deleted from all Bmax systems.
  • Support communications: Retained for 2 years from the date of the last interaction to enable consistent support and to assist in resolving any disputes that may arise.
  • Gaming activity logs: Retained for the duration of your account and up to 2 years after closure, used for responsible gaming monitoring, dispute resolution and regulatory compliance.
  • Marketing preferences: Retained until you opt out of marketing communications, at which point your contact details are removed from all marketing lists immediately.

When data is no longer required for any of the purposes described above, it is securely deleted or anonymised so that it can no longer be associated with you as an individual. We do not archive data indefinitely.

Your Data Rights as a Bmax Player

As a Bmax player, you have meaningful rights over your personal data. These are not procedural formalities — if you make a request, you will receive a genuine, substantive response. The following rights are available to you:

Right of Access

You can request a copy of all personal data Bmax holds about you. We will provide this within 30 days of receiving your request in a clear, structured format.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you can request that we correct it. Updates to contact details and account information can often be made directly in your account settings.

Right to Erasure

In certain circumstances, you can request that we delete your personal data. This right is subject to our legal obligations — some data must be retained for regulatory compliance even after account closure.

Right to Object

You can object to the processing of your personal data for marketing purposes at any time. Opt-out requests for marketing communications are actioned immediately with no grace period.

Right to Portability

You can request your personal data in a commonly used, machine-readable format so that you can transfer it to another service provider if you choose to do so.

Right to Restrict Processing

In certain circumstances, you can ask us to pause the processing of your data while a dispute or correction request is being resolved.

To exercise any of the rights above, contact the Bmax support team via live chat or email at support@bmax.bet. We will acknowledge your request within 24 hours and provide a full response within 30 days. We do not charge a fee for handling data rights requests.

Children's Privacy

Bmax is strictly an adult platform. No person under the age of 18 is permitted to register an account, access the platform or use any Bmax service. We do not knowingly collect any personal data from individuals under 18 years of age.

If we become aware that personal data has been collected from a person under 18, we will immediately close the account, delete all associated personal data and return any deposited funds to the originating payment account. If you are a parent or guardian and believe your child has registered an account at Bmax, please contact our support team immediately so that we can take appropriate action without delay.

Age Verification

Bmax uses identity verification processes to confirm that registered players meet the minimum age requirement of 18 years. Players may be asked to submit CNIC or other identity documents confirming their date of birth before their first withdrawal is processed.

Updates to This Privacy Policy

Bmax reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements or platform features. The "Last Updated" date at the top of this document indicates when the most recent version was published.

When material changes are made to this policy — meaning changes that significantly affect how your personal data is processed — we will notify registered players via the platform interface or their registered mobile number before the changes take effect. Minor clarifications or formatting updates may be made without individual notification.

Your continued use of the Bmax platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically to stay informed about how your data is being managed.

Contact Us About Your Privacy

If you have questions about this Privacy Policy, want to exercise any of your data rights, or need to report a potential data security concern, please reach out to the Bmax team through any of the channels below. We respond to privacy-related queries in both Urdu and English.

Live Chat

Available 24/7 via the chat icon in the platform. Fastest response for urgent data concerns.

Email

support@bmax.bet — responses within 24 hours for privacy and data rights requests.

FAQ Page

Common privacy and data questions answered in detail at the Bmax FAQ.

Why Your Privacy Is Safe at Bmax

Six specific commitments that back up every claim in this Privacy Policy

We Never Sell Your Data

Your personal information is not a product at Bmax. We do not sell, rent or trade player data to advertisers, data brokers or any other commercial third party. Full stop, no exceptions.

PKR Payments Stay Private

Your Easypaisa, JazzCash and bank details are used only to process your specific transactions. They are never stored in plain text, never shared for commercial purposes and never visible to support staff in full.

Delete on Request

Want your data gone? Submit a deletion request and we will remove everything that is not legally required to be retained. We will confirm what has been deleted and what must be retained, and explain exactly why.

No Advertising Tracking

Bmax does not track your activity outside of bmax.bet. We do not use third-party advertising networks that follow you across the web. Our analytics are limited to on-platform behaviour used solely for improving the player experience.

Support in Urdu & English

Privacy requests, data queries and consent withdrawals can be submitted in Urdu or English. Our support team handles both with equal competence — you do not need to struggle with a foreign language to exercise your rights.

Breach Notification

If a data breach ever occurs that affects your personal information, Bmax will notify you directly and promptly — not bury the disclosure in a general announcement. We believe players deserve to know when their data is at risk.

Your Data Is Safe at Bmax — Ready to Play?

Register in under two minutes. No documentation needed to get started. Your personal information is protected from day one under the commitments in this Privacy Policy. Deposit from Rs 200 via Easypaisa or JazzCash and start playing instantly.