18bmw Privacy Policy —
How We Handle Your Personal Data

1. Introduction

18bmw ("the Platform", "we", "us") takes your privacy seriously. This Privacy Policy describes how we collect, use, store and share personal information when you use the 18bmw website at 18bmw.pro, the 18bmw mobile app, or any related services.

This policy is intended for players in Pakistan and is written in plain English to make it easy to understand. It covers everything from the data collected when you register an account to how your PKR deposit and withdrawal information is handled by the platform and its payment partners.

If you have any questions about how your data is used that are not answered in this document, you can contact the 18bmw support team at any time. Contact details are at the end of this policy.

2. Data We Collect

2.1 Registration Data

When you create an 18bmw account, we collect the following information:

• Full legal name as it appears on your identity document
• Date of birth (to confirm you are aged 18 or above)
• Email address
• Mobile phone number
• Preferred username and password (password stored in encrypted form only)
• Country of residence — Pakistan

2.2 Identity Verification (KYC) Data

Before processing your first withdrawal, or at any point we consider necessary, we may request:

• A copy of a valid government-issued identity document (CNIC, passport or driving licence)
• Proof of payment method ownership (screenshot or statement from JazzCash, Easypaisa, bank account)
• A recent utility bill or bank statement as proof of address where required

KYC documents are used solely for identity verification and fraud prevention. They are not shared with any third party except where legally required.

2.3 Transaction Data

Every PKR deposit, withdrawal and bet placed on the platform generates a transaction record. This includes the amount, timestamp, payment method used and the outcome of the transaction. This data is retained for account management, dispute resolution and financial record-keeping purposes.

2.4 Device and Technical Data

When you access 18bmw, we automatically collect certain technical information including:

• IP address and approximate geographic location
• Browser type and version
• Operating system and device type
• Session timestamps and duration
• Pages visited and features used within the platform

This data is used for security monitoring, fraud detection and improving the overall platform experience for Pakistani players.

2.5 Customer Support Data

If you contact 18bmw support via live chat or email, the content of those communications is recorded. This helps us resolve disputes, maintain service quality and refer back to previous interactions where relevant.

3. How We Use Your Data

The personal data we collect is used for the following specific purposes:

We do not use your personal data for automated decision-making that would have a significant legal or material effect on you without human review. Platform-side risk checks and fraud flags are reviewed by a member of the team before any account action is taken.

4. Sharing Your Data

18bmw does not sell or rent your personal information. Data is shared only in the following limited circumstances:

4.1 Payment Processors

To process your PKR deposits and withdrawals, we share the necessary transaction data with payment partners including JazzCash, Easypaisa, Raast and the relevant banking or card networks. These partners receive only the data required to complete the transaction.

4.2 Identity Verification Providers

Where third-party KYC or document verification tools are used to authenticate your identity, the relevant documents and personal data are shared with those providers under strict data processing agreements.

4.3 Legal and Regulatory Requirements

In circumstances where we are required by law, court order or other legal process to disclose player information, we will comply with those obligations. Where permitted, we will notify the affected player before disclosing their data.

4.4 Platform Infrastructure Providers

Third-party hosting, security and infrastructure providers that support the operation of 18bmw may process data as part of delivering those services. These providers operate under contractual obligations to protect the data they handle on our behalf and are not permitted to use it for their own purposes.

Outside of the categories above, no personal data from 18bmw player accounts is shared with any external organisation.

5. Payment Data

18bmw handles PKR transactions via JazzCash, Easypaisa, Raast, standard bank transfers and card payments. The platform follows these specific practices regarding payment data:

• Full card numbers are never stored on 18bmw systems. Card payments are tokenised and handled by the payment processor directly.
• JazzCash and Easypaisa mobile wallet transaction records are retained for account history and dispute resolution but wallet PINs or authentication credentials are never stored by 18bmw.
• Bank account details provided for Raast or bank transfer withdrawals are stored in encrypted form and used solely for processing the relevant withdrawal.
• Transaction histories are available to you in your account portal at all times.

6. Cookies & Tracking

6.1 What Cookies We Use

18bmw uses cookies and similar technologies to keep your session active, remember your preferences and monitor how the platform is being used. Cookies fall into the following categories on 18bmw:

• Essential cookies: Required for the platform to function. These keep you logged in during your session and maintain your bet slip and account preferences. They cannot be disabled without breaking core platform features.
• Analytics cookies: Used to understand how players navigate the platform — which pages are visited, how long sessions last and where players encounter difficulties. This data is aggregated and anonymised.
• Security cookies: Used to detect and prevent fraudulent logins and suspicious activity patterns.

6.2 Managing Cookies

You can manage cookie preferences through your browser settings. Blocking all cookies will prevent you from staying logged in to your 18bmw account and will affect the platform's ability to remember your settings. Essential cookies required for security and session management cannot be disabled while using the platform.

6.3 No Cross-Site Advertising Tracking

18bmw does not use third-party advertising tracking cookies or share browsing data with advertising networks.

7. Data Security

18bmw applies technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure or destruction. These measures include:

• Encryption of data in transit using TLS protocols across all platform connections
• Encryption of sensitive data at rest including KYC documents and payment details
• Access controls limiting which staff can view player personal data, based on job function
• Regular security monitoring of platform systems to detect anomalous activity
• Two-factor authentication options available for player accounts

No system can guarantee complete security. If a security incident occurs that affects your personal data in a material way, we will notify affected players promptly and take steps to contain the breach.

You also have a role in keeping your account secure. Use a strong, unique password for your 18bmw account, do not share your login credentials, and enable two-factor authentication if available. Contact support immediately if you suspect your account has been accessed without your authorisation.

8. How Long We Keep Your Data

18bmw retains personal data for as long as your account is active and for a defined period after account closure. Specific retention periods are as follows:

• Account registration data: Retained for the duration of your active account plus a minimum of five years after closure, in line with standard financial record-keeping practice.
• KYC documents: Retained for a minimum of five years from the date of verification, or longer if required by applicable legal obligations.
• Transaction records (PKR deposits, withdrawals, bets): Retained for a minimum of five years from the transaction date.
• Customer support communications: Retained for three years from the date of the last communication in a thread.
• Technical and device data: Retained for up to 12 months from collection for security and analytics purposes, then aggregated or deleted.

When data is no longer required and its retention period has expired, it is securely deleted or anonymised so it can no longer be linked to an individual player.

9. Your Rights

As an 18bmw player, you have the following rights in relation to your personal data. To exercise any of these rights, contact support with your request:

• Right of access: You can request a copy of the personal data we hold about you. We will provide this within a reasonable timeframe upon verifying your identity.
• Right to correction: If the personal data we hold is inaccurate or incomplete, you can request that it be corrected. For example, if your name is recorded incorrectly, contact support with a copy of your CNIC as proof.
• Right to deletion: You can request deletion of your account and associated personal data. Note that data we are legally required to retain — such as transaction records — may not be deleted in full even after account closure.
• Right to restrict processing: In certain circumstances, you can ask us to limit how we use your data while a dispute or correction request is being resolved.
• Right to data portability: You can request a copy of your account data in a structured, machine-readable format.

All requests will be acknowledged promptly and handled within a reasonable period. We may need to verify your identity before acting on a request to protect against unauthorised access to another player's data.

10. Minors

18bmw is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Age confirmation is required during the registration process, and accounts may be subject to identity verification to confirm eligibility.

If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe a minor has registered on 18bmw, please contact support immediately so the account can be addressed.

We also encourage adults in Pakistan to make use of the responsible gaming tools available in account settings — including session limits and self-exclusion — to prevent minors in their household from accessing the platform.

11. Policy Updates

18bmw may update this Privacy Policy from time to time. When material changes are made — changes that affect what data we collect, how it is used, or who it is shared with — registered players will be notified by email or through an on-platform notice before the changes take effect.

Minor updates such as clarifications in wording or corrections to reflect existing practices may be made without a formal notification. The "Last Updated" date at the top of this page always reflects the current version.

Continued use of 18bmw after an updated Privacy Policy takes effect constitutes your acceptance of the revised terms. If you do not accept the updated policy, you should stop using the platform and contact support to request account closure.

The current version of this Privacy Policy is always available at 18bmw.pro/privacy-policy.

12. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, you can reach the 18bmw support team through the following channels:

For questions specifically about your account data, please include your registered email address and a description of your request so we can locate your records and respond accurately. Identity verification may be required before we can share or modify account data.

For related policies, see the Terms and Conditions and the Responsible Gaming page.