Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how brt55 ("brt55", "we", "us", "our") collects, uses, stores, discloses and protects personal data obtained through the brt55 platform available at brt55.cam, including all subdomains, mobile interfaces and associated digital services (collectively, the "Platform").

By accessing or registering on the Platform, you ("User", "you", "your") acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue your use of the Platform immediately.

brt55 operates as an English-language online betting and casino information guide targeting Pakistani users. We do not operate as a licensed gambling operator and do not directly process financial gambling transactions. This Policy governs only the data practices of brt55 itself. For data practices of any third-party Operator whose services are described on the Platform, please refer to that Operator's own privacy documentation.

              
              Our Core Commitment: brt55 collects only the minimum personal data required to operate the Platform effectively. We do not sell personal data to third parties. We do not share user data with advertisers without explicit consent. Pakistani users retain full rights over their data as described in Section 10 of this Policy.
            

2 Definitions

The following definitions apply throughout this Policy:

"Personal Data" means any information that identifies or could reasonably identify a natural person, including name, email address, IP address, device identifiers and location data.
"Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure or destruction.
"Data Controller" means brt55, which determines the purposes and means of processing Personal Data collected through the Platform.
"Data Processor" means any third-party service provider that processes Personal Data on behalf of brt55 under a contractual arrangement.
"Consent" means a freely given, specific, informed and unambiguous indication of a User's agreement to the processing of their Personal Data for a stated purpose.
"Cookie" means a small data file stored on a User's device by a web browser, used to retain session information, preferences and analytics data.
"KYC" means Know Your Customer — identity verification procedures that may be required by the Platform or a referenced Operator.
"Platform" means the brt55 website, mobile site and all associated digital services operated under the brt55.cam domain.

3 Data We Collect

3.1 Data Provided Directly by Users

When you register an Account or interact with the Platform, you may provide the following categories of Personal Data:

Data Category	Examples	Purpose
Identity Data	Full name, date of birth, CNIC or passport number	Account registration, KYC verification
Contact Data	Email address, phone number, city of residence	Account communication, support
Credential Data	Username, encrypted password	Account security and access
Communication Data	Support messages, feedback submissions	Customer service and dispute resolution
Preference Data	Cookie preferences, marketing consent, notification settings	Personalisation and consent management

3.2 Data Collected Automatically

When you access the Platform, certain technical data is collected automatically through standard web technologies:

Device Data: Device type, operating system, browser version and screen resolution.
Usage Data: Pages visited, time spent on page, click patterns, navigation paths and search queries submitted on the Platform.
Network Data: IP address, approximate geolocation derived from IP, internet service provider.
Session Data: Login timestamps, session duration and session identifiers stored in cookies or local storage.

3.3 Data We Do Not Collect

brt55 does not directly collect payment card numbers, bank account details, Easypaisa wallet credentials, JazzCash PINs or any other sensitive financial authentication data. All financial transactions are processed exclusively on the Operator's platform under the Operator's own data protection framework.

              
              If you contact brt55 support and voluntarily include financial reference numbers (such as a Raast transaction ID or HBL transfer reference) in your message for support purposes, that reference may be retained as part of your support record. We will never ask you to provide complete account numbers, PINs or passwords through any support channel.
            

4 Data Processing

brt55 processes Personal Data for the following specific purposes:

Account Administration: To create, maintain and secure your brt55 Account, verify your identity and manage account preferences.
Platform Operation: To deliver Platform content, personalise your experience, remember your preferences and ensure technical functionality.
Customer Support: To respond to enquiries, resolve complaints and maintain records of support interactions for quality assurance purposes.
Security and Fraud Prevention: To detect, investigate and prevent unauthorised access, fraudulent activity and breaches of our Terms & Conditions.
Analytics and Improvement: To understand how users interact with the Platform, identify technical issues and improve content quality and navigation.
Legal Compliance: To comply with applicable legal obligations, including record-keeping requirements and responses to lawful regulatory requests.
Communications: To send service-related notifications, policy updates and, where you have provided explicit consent, promotional communications about Platform features.

brt55 does not use Personal Data to make fully automated decisions that produce legal or similarly significant effects on Users without human review. Where profiling is used for analytics purposes, it is conducted at an aggregate level and does not produce individual-level decisions.

5 Legal Basis for Processing

brt55 processes Personal Data on the following legal bases, depending on the nature of the processing activity:

Processing Activity	Legal Basis
Account registration and management	Performance of a contract (Terms & Conditions)
Identity verification (KYC)	Legal obligation and legitimate interests
Platform analytics and performance monitoring	Legitimate interests of brt55
Marketing communications and personalisation	Explicit user consent
Security monitoring and fraud prevention	Legitimate interests and legal obligation
Customer support record retention	Legitimate interests and legal obligation
Cookie-based tracking (non-essential)	Explicit user consent via cookie banner

Where brt55 relies on legitimate interests as the legal basis for processing, we have conducted a balancing assessment to confirm that our interests do not override the fundamental rights and freedoms of Users. You may request details of any such assessment by contacting us as described in Section 15.

6 Data Sharing & Disclosure

6.1 Service Providers (Data Processors)

brt55 engages a limited number of trusted third-party service providers who process Personal Data on our behalf as Data Processors. These providers are contractually bound to process data only on brt55's documented instructions and to maintain appropriate security standards. Categories of Data Processor include hosting and infrastructure providers, analytics platforms and email delivery services.

6.2 Legal and Regulatory Disclosure

brt55 may disclose Personal Data to law enforcement agencies, regulatory authorities or courts where required by applicable law, a valid court order or where disclosure is necessary to protect the vital interests of a User or third party. We will notify affected Users of any such disclosure request to the extent permitted by law.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale or restructuring of brt55, Personal Data held by brt55 may be transferred to a successor entity as part of that transaction. Where such a transfer occurs, the receiving entity will be contractually bound to honour the commitments set out in this Policy, and affected Users will be notified prior to their data becoming subject to a materially different privacy policy.

6.4 No Sale of Personal Data

brt55 does not sell, rent or trade Personal Data to any third party for their own commercial purposes. This prohibition applies regardless of the jurisdiction of the recipient and regardless of whether the data is provided in identified, pseudonymised or aggregated form.

              
              Third-Party Operators: If you follow a link from brt55 to a third-party Operator's platform and register an account there, the Operator becomes an independent Data Controller for all data you provide to them. brt55 has no visibility into, or control over, how Operators process your personal data. Always review the Operator's own privacy policy before registering.
            

7 Data Retention

brt55 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention principles apply:

Active Account Data: Retained for the duration of your active Account relationship with brt55, plus a reasonable period thereafter to facilitate account reactivation or dispute resolution.
KYC Documentation: Retained for a minimum period as required by applicable anti-money laundering and identity verification obligations, typically a minimum of five years from the date of verification or account closure, whichever is later.
Support Records: Retained for a period of three years from the date of the final support interaction, or longer where required for ongoing dispute resolution.
Analytics Data: Aggregated analytics data is retained indefinitely. Individually identified session data is anonymised or deleted within 26 months of collection.
Marketing Consent Records: Retained for the duration of your consent and for a further three years after withdrawal, to evidence compliance with consent obligations.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction of the original information. You may request early deletion of your data subject to the conditions described in Section 10.

8 Cookies & Tracking Technologies

8.1 What Cookies We Use

brt55 uses the following categories of cookies and similar tracking technologies on the Platform:

Cookie Type	Purpose	Consent Required
Strictly Necessary	Session management, security tokens, login state preservation	No — essential to Platform operation
Functional	Language preferences, layout settings, cookie banner state	No — enhances core functionality
Analytics	Page view tracking, user flow analysis, error reporting	Yes — requires explicit consent
Marketing / Targeting	Interest-based content personalisation, referral tracking	Yes — requires explicit consent

8.2 Managing Cookie Preferences

You may manage your cookie preferences at any time through the cookie preference panel accessible via the Platform. You may also configure your browser to block or delete cookies. Note that disabling strictly necessary cookies may impair the functionality of the Platform.

8.3 Do Not Track

brt55 respects browser-level Do Not Track (DNT) signals where technically feasible. Where a DNT signal is detected, non-essential tracking technologies will not be activated during that session.

9 Data Security

brt55 implements appropriate technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. Measures in place include:

Encryption of Personal Data in transit using TLS 1.2 or higher across all Platform connections.
Encryption of sensitive Personal Data at rest using industry-standard encryption algorithms.
Access controls limiting Personal Data access to authorised personnel on a need-to-know basis.
Regular security assessments and vulnerability testing of Platform infrastructure.
Incident response procedures to detect, contain and notify affected parties of data breaches within applicable regulatory timeframes.
Staff training on data protection obligations and secure data handling practices.

Notwithstanding the above measures, no method of electronic transmission or storage is completely secure. brt55 cannot guarantee the absolute security of Personal Data and Users transmit data to the Platform at their own risk. You are responsible for maintaining the security of your own account credentials.

If you suspect that your brt55 account has been compromised or that your Personal Data has been accessed without authorisation, please contact our support team immediately at [email protected].

10 User Rights

Subject to applicable law and certain conditions, you have the following rights in relation to your Personal Data held by brt55. To exercise any of these rights, please contact us as described in Section 15. We will respond to all verified requests within 30 days.

Right of Access

You have the right to obtain confirmation of whether brt55 holds Personal Data about you, and to receive a copy of that data together with information about how it is processed.

Right to Rectification

You have the right to request correction of inaccurate Personal Data or completion of incomplete data held about you without undue delay.

Right to Erasure

You have the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.

Right to Restriction

You have the right to request that brt55 restricts the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used machine-readable format.

Right to Object

You have the right to object at any time to processing of your Personal Data based on legitimate interests, including profiling. brt55 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

11 Children's Privacy

The brt55 Platform is strictly intended for adults. We do not knowingly collect Personal Data from individuals under the age of 18, or under the higher minimum age required by the applicable Operator's license jurisdiction — whichever is greater. Our Platform, content and services are not directed at minors.

If brt55 becomes aware that Personal Data has been collected from a person below the minimum eligible age, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has provided Personal Data through the Platform, please contact us immediately at the details provided in Section 15.

              
              Parental Guidance: We encourage parents and guardians in Karachi, Lahore, Islamabad, Rawalpindi and across Pakistan to use available parental control tools to prevent minors from accessing online gambling platforms. brt55 supports the use of filtering software to restrict access by underage individuals.
            

12 Pakistan-Specific Context

12.1 Applicable Law

brt55 is an English-language platform targeting Pakistani users. This Policy has been drafted with awareness of Pakistan's data protection landscape. The Prevention of Electronic Crimes Act, 2016 (PECA) and related regulations govern certain aspects of digital data handling in Pakistan. brt55 commits to handling Personal Data of Pakistani users in a manner consistent with applicable Pakistani legal obligations to the extent they apply to the Platform's operations.

12.2 Cross-Border Data Transfers

brt55's infrastructure may involve the storage or processing of Personal Data in jurisdictions outside Pakistan. Where Personal Data is transferred internationally, brt55 ensures that appropriate safeguards are in place, such as contractual data transfer agreements with Data Processors, to maintain a level of protection consistent with this Policy.

12.3 Payment Context

References to Pakistani payment methods — including Easypaisa, JazzCash, Raast and accounts with HBL, UBL, Meezan Bank and Bank Alfalah — appear on the Platform for informational purposes only. brt55 does not process payments through these systems and does not hold or share user payment credentials with these providers. Any data exchange between a User and a payment provider occurs entirely outside the brt55 Platform.

13 Third-Party Links & Platforms

The brt55 Platform may contain references to, or contextual descriptions of, third-party Operators and platforms. This Policy applies solely to data collected and processed by brt55 through the brt55.cam Platform. It does not extend to any third-party website, application or service that you may access via the Platform.

brt55 is not responsible for the privacy practices, data security measures or terms of service of any third-party platform. We strongly encourage Users to review the privacy documentation of any Operator or service provider before registering an account or providing Personal Data to them.

14 Policy Amendments

brt55 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or operational requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and, where feasible, provide notice to registered Users via email or an in-Platform notification.

Your continued use of the Platform after the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must discontinue use of the Platform and may request deletion of your Personal Data in accordance with Section 10.

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy, or if you wish to exercise any of the User Rights described in Section 10, please contact the brt55 data protection team. We aim to respond to all substantive privacy enquiries within 30 days of receipt.

For identity verification purposes, we may request reasonable evidence of your identity before processing access, erasure or portability requests. This is to ensure that Personal Data is not disclosed to, or deleted at the request of, an unauthorised third party.

Privacy Enquiries: [email protected]
Please include "Privacy Request" in your subject line and provide your registered username or email address so we can locate your account record efficiently. Support is available in English; Urdu-language assistance may be available on request.