BoomBet Privacy Policy — Your Data, Your Rights, Our Responsibilities

1. Introduction

This Privacy Policy describes how BoomBet ("we", "us", "the Platform") collects, uses, stores, and protects the personal information of users ("you", "the Player") who register and interact with boombet.biz. It applies to all Pakistani players and anyone else accessing the platform from any location.

BoomBet takes the privacy of its players seriously. We operate a platform that handles sensitive personal and financial data — your mobile number, payment account details, identity documents — and we understand that you're placing genuine trust in us when you share that information. This policy is written in plain English because we believe you deserve to understand exactly how your data is handled, not just be handed a document that technically satisfies a legal requirement.

By registering an account at BoomBet and accepting our Terms and Conditions, you also acknowledge and accept the data practices described in this Privacy Policy. If you do not agree with how we handle personal data as described here, please do not register an account.

2. What Data BoomBet Collects

BoomBet collects personal data in two broad categories: information you provide directly, and information collected automatically when you use the platform.

Information you provide directly:

• Full legal name (as it appears on your CNIC)
• Date of birth
• Pakistani mobile number
• Email address
• Residential address
• CNIC number and a copy of your CNIC document (required for KYC verification prior to first withdrawal)
• Payment account details: Easypaisa number, JazzCash account, bank account details, or card details depending on your chosen method
• Any communication you send to BoomBet support

Information collected automatically:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session duration and page navigation data
• Game play history, bet amounts, and account transaction logs
• Login timestamps and frequency
• Cookie identifiers (see Section 8)

3. How We Collect Your Information

BoomBet collects your personal data through the following channels:

• Registration Form: When you create your BoomBet account, you provide your name, date of birth, mobile number, and email address directly through the registration form.
• KYC Verification: When you submit your CNIC for identity verification prior to your first withdrawal, BoomBet's compliance team receives and processes that document securely.
• Payment Transactions: When you deposit or withdraw in PKR using Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card payment, the relevant payment details are captured and processed.
• Platform Activity: BoomBet's systems log your game activity, session data, and transaction history automatically as part of normal platform operation.
• Support Interactions: If you contact BoomBet support via live chat or email, the content of that conversation is recorded and stored.
• Cookies and Tracking: BoomBet uses cookies and similar technologies to collect technical data about your device and browsing behaviour on the platform. See Section 8 for full cookie details.

4. How BoomBet Uses Your Data

BoomBet uses your personal data for the following purposes. We process data only where there is a legitimate reason to do so — primarily to fulfil our contract with you as a registered player, to comply with legal obligations, or where we have a genuine legitimate interest that does not override your rights.

• Account Management: To create, maintain, and secure your BoomBet account, including authentication, password resets, and session management.
• Payment Processing: To process PKR deposits and withdrawals through your chosen payment method, reconcile transactions, and investigate payment disputes.
• Identity Verification: To verify that you meet the eligibility criteria (18+, single account, own identity) through our KYC process.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited activities.
• Responsible Gaming Compliance: To monitor gameplay patterns that may indicate a problem gambling situation and to enforce deposit limits, loss limits, and self-exclusion requests.
• Customer Support: To respond to your queries, resolve account issues, and provide assistance via live chat and email.
• Platform Improvement: To analyse how the BoomBet platform is used in aggregate so that we can improve the game library, loading speeds, and user experience.
• Promotional Communications: To send you relevant bonus offers and promotions by email or SMS — only if you have opted in to receive marketing communications.
• Legal Compliance: To fulfil any obligations imposed by applicable law, including anti-money-laundering regulations and data retention requirements.

5. When and With Whom We Share Data

BoomBet does not sell your personal data to any third party. We share data only in the following specific circumstances, and only to the extent necessary for the stated purpose:

• Payment Providers: When you deposit or withdraw in PKR, your relevant payment details are shared with the payment service provider (e.g., Easypaisa, JazzCash, your bank) to process the transaction. These providers operate under their own privacy policies and are bound by their own data protection obligations.
• Game Software Providers: To operate live casino and slot games, BoomBet works with certified game providers such as Evolution Gaming and Pragmatic Play. Your gameplay data may be shared with these providers in anonymised or pseudonymised form for game performance and audit purposes.
• Identity Verification Partners: BoomBet may use third-party KYC verification services to assist in validating identity documents. These partners are contractually bound to process your data solely for verification purposes.
• Legal Authorities: BoomBet will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, court order, or legal process. We will notify you of such disclosure where legally permitted to do so.
• Fraud Prevention Networks: In cases of suspected serious fraud or money laundering, BoomBet may share relevant data with fraud prevention databases or partner platforms to protect the integrity of the gaming ecosystem.

In all cases, data sharing is governed by data processing agreements that require third parties to maintain appropriate security standards and to use the data solely for the stated purpose.

6. How BoomBet Handles Payment Data

Given that BoomBet is a PKR payment platform serving Pakistani players through local wallets and banking channels, we take the security of financial data especially seriously. Here is exactly how payment data is handled:

• Easypaisa and JazzCash: Your mobile wallet number is stored in encrypted format and used only to process your requested transactions. BoomBet does not store your wallet PIN or any authentication credential for these services.
• Bank Transfers (IBFT): Your IBAN and bank account name are stored securely and used exclusively to process withdrawals to your verified account.
• Card Payments: BoomBet does not store full card numbers. Card transactions are processed through PCI-DSS compliant payment gateways. Only a masked version of your card (showing the last four digits) is retained in your account for your reference.
• Transaction Records: All deposit and withdrawal transaction records are maintained for a minimum of 5 years as required by standard financial record-keeping practices.

7. KYC Verification and Identity Documents

BoomBet requires all players to complete a Know Your Customer (KYC) verification before processing their first withdrawal. This is a legal and compliance requirement, not a discretionary policy. The KYC process involves submitting a clear copy of your CNIC (Computerised National Identity Card).

Your CNIC document and associated identity data are handled as follows:

• Documents are transmitted over encrypted channels and stored in a secure, access-controlled environment
• Only authorised members of BoomBet's compliance team have access to identity documents
• Documents are used solely for the purpose of verifying that you are the person named on the account and that you are 18 or older
• BoomBet does not share your CNIC data with any party except where required by law or as part of a fraud investigation
• Once verified, your KYC status is recorded and you will not be asked to resubmit documents for subsequent withdrawals unless your account details change or a compliance review is triggered

If you have concerns about the security of your identity documents, contact support@boombet.biz before submitting. The support team can explain the process and address any specific questions you have about document handling.

8. Cookies and Tracking Technologies

BoomBet uses cookies — small text files stored on your device — and similar tracking technologies when you access the platform. The following table explains the types of cookies BoomBet uses and their purpose:

You can manage cookie preferences through your browser settings. Blocking essential cookies will prevent you from logging in to BoomBet. Disabling analytics and functional cookies will not affect your ability to play but may mean the platform does not remember your preferences between sessions.

9. How Long We Keep Your Data

BoomBet retains your personal data for as long as your account is active and for a period after closure as required by law or legitimate business need. The following retention periods apply:

• Active account data: Retained for the full duration your account remains open and active.
• Financial transaction records: Retained for a minimum of 5 years after the transaction date, in line with standard financial record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years after account closure.
• Support communication records: Retained for 2 years after the final communication in a support thread.
• Gameplay logs: Retained for 3 years after the last activity.
• Marketing opt-in records: Retained for as long as you remain opted in, plus 12 months after opt-out as a record of your preference history.

After the applicable retention period expires and there is no legal reason to keep the data longer, BoomBet will securely delete or anonymise it in accordance with our internal data destruction procedures.

10. Security Measures

BoomBet implements technical and organisational security measures appropriate to the sensitivity of the data we hold. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and BoomBet's servers
• Encrypted storage for passwords — BoomBet stores hashed, salted password values, never plain-text passwords
• Encrypted storage for sensitive personal and financial data at rest
• Role-based access controls that limit data access to authorised personnel only
• Regular security audits and vulnerability assessments by internal and external teams
• Intrusion detection systems and continuous monitoring of platform infrastructure
• Two-factor authentication options available to players for additional account security

Despite these measures, no online platform can guarantee absolute security. If you have reason to believe your BoomBet account has been compromised, change your password immediately and contact support@boombet.biz. BoomBet will initiate an account security review promptly.

11. Your Data Rights

As a BoomBet player, you have the following rights regarding your personal data. To exercise any of these rights, contact support@boombet.biz with the subject line "Data Rights Request". BoomBet will respond within 30 days.

12. Protection of Minors

BoomBet is strictly an adult platform for players aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. Age is verified during the KYC process through CNIC document review.

If BoomBet discovers that a person under 18 has registered an account, the account will be closed immediately, all funds will be returned to the originating payment method, and all associated personal data will be deleted from our systems as quickly as operationally possible.

If you are a parent or guardian and believe your child may have registered a BoomBet account, contact support@boombet.biz immediately with the details and BoomBet will investigate and take action promptly.

13. Updates to This Privacy Policy

BoomBet reviews and updates this Privacy Policy periodically to reflect changes in our practices, legal obligations, or platform services. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page
• Send a notification email to all registered players at least 7 days before the changes take effect
• Display a notice on the BoomBet platform for a minimum of 14 days after the change becomes effective

Your continued use of BoomBet after the effective date of updated Terms constitutes your acceptance of the revised Privacy Policy. If you do not accept the changes, you may request account closure and data deletion by contacting support before the effective date.

14. How to Contact BoomBet About Privacy

For any privacy-related question, data rights request, or concern about how BoomBet handles your personal information, contact us using the details below. We take all privacy communications seriously and will respond promptly.

• Email: support@boombet.biz — use the subject line "Privacy Query" or "Data Rights Request"
• Live Chat: Available 24/7 through the BoomBet platform — ask to be connected to the Data & Privacy team for specific data rights matters

BoomBet aims to acknowledge all privacy-related communications within 24 hours and provide a substantive response within 30 days. If a request is complex or requires extended processing, we will notify you of the timeline extension.