h5bj Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how h5bj ("h5bj", "we", "us", "our") collects, uses, stores, and protects personal data provided by or about users ("you", "Player") of the h5bj website at https://h5bj.im and all associated services, mobile interfaces, and gaming products offered thereon.

h5bj is committed to handling your personal data with integrity, transparency, and care. We process personal data only where we have a lawful basis to do so, and we implement industry-standard security measures to keep your information safe. This Policy applies to all h5bj players across Pakistan, including those located in Karachi, Lahore, Islamabad, Faisalabad, and all other regions of the country.

By registering an account or continuing to use the h5bj platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy.

02 Data Controller

h5bj is the data controller responsible for the personal data collected through the h5bj platform. As data controller, h5bj determines the purposes and means of processing your personal data in accordance with applicable data protection laws and the obligations arising from its international gaming license.

All data protection enquiries, rights requests, and complaints should be directed to h5bj's dedicated support team. Contact details are provided in Section 15 of this Policy.

03 Data We Collect

h5bj may collect and process the following categories of personal data:

04 How We Collect Data

h5bj collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technical collection: Data collected automatically when you access the h5bj platform, including IP addresses, device identifiers, browser information, and session activity logs, via cookies and server-side logging.
• Third-party payment providers: Transaction confirmation data received from JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and other payment processors when you make deposits or request withdrawals.
• Identity verification services: Where h5bj uses third-party KYC or AML service providers to verify the identity or address information you have submitted, those providers may return verification results to h5bj.
• Regulatory and law enforcement sources: h5bj may receive data about players from regulatory bodies or law enforcement agencies in connection with its compliance obligations under applicable law.

05 Legal Basis for Processing

h5bj processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the account agreement with you — including account management, processing deposits and withdrawals, and settling bets.
• Legal obligation: Processing necessary to comply with applicable laws, including KYC and AML requirements imposed by h5bj's international gaming license and relevant financial regulations.
• Legitimate interests: Processing carried out in furtherance of h5bj's legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and product analytics — provided these interests are not overridden by your fundamental privacy rights.
• Consent: Processing for marketing and promotional communications, which is carried out only where you have given explicit opt-in consent. You may withdraw this consent at any time.

06 How We Use Your Data

h5bj uses the personal data it collects for the following purposes:

• Creating, managing, and maintaining your h5bj player account.
• Verifying your identity and age (21+) in accordance with our KYC obligations.
• Processing deposits and withdrawals via JazzCash, EasyPaisa, Raast, and bank transfer methods in Pakistani Rupees (PKR).
• Detecting and preventing fraud, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Monitoring player betting patterns for the purpose of responsible gaming interventions, including the identification of potentially problem gambling behaviour.
• Providing customer support through live chat and email at [email protected].
• Sending transactional notifications — such as deposit confirmations, withdrawal updates, and account security alerts — which are non-optional operational communications.
• Sending marketing and promotional communications to players who have opted in, including information about bonuses, new game releases, PSL cricket betting promotions, and slot game offers.
• Improving the h5bj platform through aggregate analytics and usage data.
• Complying with applicable legal and regulatory requirements, including reporting obligations to relevant authorities.

07 Data Sharing & Third Parties

h5bj does not sell, rent, or trade your personal data. We share your data only where strictly necessary with the following categories of third parties, each of whom is bound by appropriate confidentiality and data protection obligations:

• Payment processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and other payment partners, solely for the purpose of executing deposit and withdrawal transactions.
• KYC and AML service providers: Third-party identity verification and document authentication services used to fulfil our regulatory verification obligations.
• Game content providers: Licensed game studios and software providers whose games are offered on the h5bj platform. These providers receive only the minimum data necessary to facilitate game sessions.
• IT infrastructure and hosting providers: Cloud infrastructure and hosting partners who store and process data on h5bj's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: h5bj may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required by applicable law, legal process, or regulatory direction.
• Professional advisers: Lawyers, accountants, auditors, and insurers engaged by h5bj in the ordinary course of its business operations, subject to professional confidentiality obligations.

08 Data Retention

h5bj retains your personal data for as long as your account is active and for a further period as required by our legal and regulatory obligations. Specific retention periods include:

• Account and identity data: Retained for the duration of your account plus a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required under applicable financial regulations.
• KYC documentation: Retained for the duration of the account plus five (5) years following account closure or the last transaction, whichever is later.
• Support communications: Retained for three (3) years from the date of the communication, unless the matter is subject to an ongoing dispute or investigation.
• Marketing preferences and consent records: Retained until you withdraw consent or for three (3) years following the last interaction, whichever comes first.
• Technical and usage logs: Retained for up to twelve (12) months from collection, unless extended for fraud investigation or legal proceedings.

Following the expiry of the applicable retention period, h5bj will securely delete or anonymise your personal data so that it can no longer be attributed to you.

09 Security Measures

h5bj implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key technical and organisational measures include:

• Transport encryption: All data transmitted between your browser or app and the h5bj platform is encrypted using TLS 1.2 or higher.
• Data-at-rest encryption: Sensitive stored data — including identity documents, financial records, and payment details — is encrypted using AES-256.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. All h5bj staff with data access are subject to confidentiality agreements and role-based access control policies.
• Two-factor authentication (2FA): h5bj offers 2FA as an optional but strongly recommended additional layer of account security for all players.
• Fraud detection systems: Automated systems monitor account activity and transactions in real time for patterns indicative of fraud, account takeover, or money laundering.
• Regular security audits: h5bj conducts periodic internal security reviews and engages third-party security specialists to perform penetration testing and vulnerability assessments.

10 Cookies & Tracking Technologies

h5bj uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device that help us operate the platform, remember your preferences, and understand how players use our services.

h5bj uses the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security tokens. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, logged-in state, and region selection to provide a more personalised experience.
• Analytics cookies: Collect aggregate, anonymised data about how players navigate the h5bj platform, which pages are visited most frequently, and where errors occur. This data is used solely to improve the platform and is not linked to individual player identities.

h5bj does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You can manage or disable non-essential cookies through your browser's privacy settings. Please note that disabling strictly necessary cookies will impair your ability to use the h5bj platform.

11 Your Data Rights

Subject to applicable law and regulatory restrictions, you have the following rights in relation to your personal data held by h5bj:

To exercise any of the above rights, contact h5bj via live chat (available 24/7) or email us at [email protected]. We will respond to your request within thirty (30) calendar days. In complex cases, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason.

12 Minors & Age Verification

The h5bj platform is strictly intended for persons aged 21 years and above. h5bj does not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a person below this age threshold, the relevant account will be immediately closed and all associated data deleted, except where retention is required by applicable law for the purpose of investigating the underage access incident.

h5bj employs age verification procedures at the point of registration and as part of KYC processing to ensure compliance with this requirement. Parents and guardians who believe that a minor has registered on the h5bj platform should contact our support team immediately at [email protected].

13 International Data Transfers

h5bj operates under an international gaming license and may utilise infrastructure, game providers, KYC service partners, and payment processing systems located outside Pakistan. As a result, your personal data may be transferred to and processed in jurisdictions other than Pakistan.

Where such transfers occur, h5bj ensures that appropriate safeguards are in place to protect your data, including contractual data processing agreements that impose data protection obligations equivalent to those applied within h5bj's own operations. h5bj does not transfer your data to jurisdictions that do not provide an adequate level of data protection without first implementing such safeguards.

14 Changes to This Policy

h5bj reserves the right to update or revise this Privacy Policy at any time. Where changes are material, h5bj will notify you by posting a prominent notice on the platform, by sending an email notification to your registered address, or through an in-platform notification prior to the changes taking effect.

Your continued use of the h5bj platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. The effective date at the top of this document indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed of how h5bj is protecting your data.

The current version of this Privacy Policy is always accessible at https://h5bj.im/privacy-policy.

15 Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or h5bj's handling of your personal data, please contact our support team:

• Live Chat: Available 24 hours a day, 7 days a week from within your h5bj account dashboard.
• Email: [email protected] — responses within 24 hours on business days.

When submitting a data rights request or privacy complaint, please include your registered h5bj username, the nature of your request, and any supporting details. Formal privacy complaints should be sent to [email protected] with the subject line "Privacy Request — [your username]".

h5bj aims to resolve all privacy-related concerns promptly and fairly. If you are not satisfied with our response, you may have the right to escalate your complaint to the relevant data protection supervisory authority in accordance with the laws of the jurisdiction governing this Policy.