BOUNZ Privacy Policy

Last Updated 15 September 2026

This Privacy Policy explains how BOUNZ collects and uses personal information when you register for or use the BOUNZ loyalty program, website, mobile application and related services. It also explains the choices and rights available to you. Please read it together with the BOUNZ Terms and Conditions.

1 About BOUNZ and this Policy

The BOUNZ Program is operated by City Points Loyalty Card Services L.L.C in the United Arab Emirates, Momentum Promotion Services Co W.L.L in the Kingdom of Bahrain and City Points Momentum Services in the State of Qatar. In this Privacy Policy, these entities are together referred to as “BOUNZ”, “we”, “us” or “our”.

The BOUNZ entity operating the Program in the country where you use BOUNZ is responsible for the personal information processed for that market. BOUNZ entities may share information with each other where necessary to operate a cross-border loyalty program, provide member support, maintain balances and prevent fraud.

We process personal information in accordance with the data protection and privacy laws applicable to our activities in the UAE, Bahrain and Qatar. Where another data protection law applies to a particular person or processing activity, we will comply with that law to the extent required.

2 Eligibility and mobile number verification

Effective 15 September 2026, new BOUNZ registrations are available only to individuals using a valid mobile number issued by a telecommunications provider in a Gulf Cooperation Council country. The GCC countries are the United Arab Emirates, Kingdom of Saudi Arabia, Kingdom of Bahrain, State of Qatar, State of Kuwait and Sultanate of Oman.

Any account registered on or after 15 September 2026 using a non-GCC mobile number will be treated as ineligible and removed from the Program in accordance with the BOUNZ Terms and Conditions. Accounts registered before that date will be handled in accordance with the Terms and Conditions and any notice issued by BOUNZ.

We process your mobile number, country code, registration date, registration source and verification status to confirm eligibility, create and manage your account, associate eligible transactions with your account, communicate with you and detect inaccurate, duplicate, unauthorized or potentially fraudulent registrations.

A valid GCC mobile number is required to register for the BOUNZ Program and earn BOUNZ. To access your account and redeem BOUNZ, you must complete your registration, verify your mobile number and log in to the BOUNZ app. Information identified as optional is not required to participate in the Program.

3 Personal information we collect

The information we collect depends on how you register for and use BOUNZ.

Identity and profile information

This may include your name, date of birth, gender, nationality, location, profile information and membership ID.

Contact and account information

This may include your mobile number, country code, email address, registration date and source, verification status, account status, communication preferences and account-security information.

Transaction and rewards information

This may include purchases made with participating partners, transaction date and time, store or channel, items or categories purchased where provided by the partner, transaction value, BOUNZ earned, redeemed, reversed or expired, refunds, gift-card or mobile-recharge activity and your current BOUNZ balance.

Payment information

When you make a payment through the BOUNZ app or a participating service, payment information may be collected directly by a payment-service provider under its own terms and privacy policy. BOUNZ may receive limited payment details, such as the payment status, transaction reference, payment method and amount, but does not need to receive or store the complete card number unless clearly stated at the time of payment.

Device and usage information

This may include your IP address, device type, operating system, app version, browser type, language, device and advertising identifiers, mobile carrier, approximate country location, pages or app sections visited, links opened, session dates and times, diagnostic information and interactions with BOUNZ communications.

Communications and support information

We collect information you provide when you contact customer support, respond to surveys, enter competitions, submit feedback or reviews, or communicate with us by email, telephone, WhatsApp, social media, in-app messaging or another channel.

Fitness information

If you choose to use BOUNZ Fitness, we may collect step counts and related activity information made available by your connected device or fitness service, including distance, active minutes, exercise and calculated calories. This information is used to operate the feature and calculate any related BOUNZ accrual.

Preferences and insights

We may create or receive information about your likely interests, shopping preferences, engagement, response to offers and likelihood of purchasing particular products or categories. These insights may be based on your profile, transactions and use of BOUNZ.

4 How we collect personal information

We may collect personal information:

• directly from you when you register, verify your number, update your profile, make a request or communicate with us
• from participating partners when you identify yourself as a BOUNZ member or earn or redeem BOUNZ
• automatically through the app, website, cookies, pixels, software development kits and similar technologies
• from payment, communications, analytics, fraud-prevention, customer-support, fitness and other service providers
• from BOUNZ group companies and, where lawful, other business partners or publicly available sources

We expect third parties that provide personal information to BOUNZ to have collected and shared it lawfully.

5 How we use personal information

We use personal information where necessary to provide the Program, comply with legal obligations, protect our legitimate business interests where recognized by applicable law, or where you have given consent. We may use it to:

• register, verify and administer your membership
• confirm GCC mobile-number eligibility
• record purchases and calculate, credit, redeem, reverse and expire BOUNZ
• process payments, gift cards, mobile recharges, refunds and related requests
• provide customer support and respond to complaints or enquiries
• send account, transaction, security, service and policy communications
• personalize the Program and recommend relevant offers, partners, products or services
• measure campaign and Program performance and understand member behaviour
• develop, test, troubleshoot and improve the app, website, Program and member experience
• detect incorrect mobile numbers, duplicate or ghost accounts, fraud, abuse and security incidents
• enforce the Terms and Conditions, establish or defend legal claims and comply with legal or regulatory requirements
• create aggregated, anonymized or pseudonymized information for analytics, reporting, planning and research

If we intend to use personal information for a materially different purpose, we will provide further information and obtain consent where required by applicable law.

6 Personalised offers profiling and automated processing

We may analyse profile, transaction, engagement and usage information to group members by shared characteristics, identify likely interests, select relevant offers and detect potential fraud or misuse. We may use automated tools to support these activities.

We will not make a decision based solely on automated processing that produces a legal or similarly significant effect on you unless the decision is necessary to provide the Program, authorized by applicable law or based on your consent. Where applicable law grants a right to request human review or challenge such a decision, you may contact us using the details in section 18.

7 Marketing and communications

We may send essential communications concerning your account, transactions, security, Program operations and changes to the Terms or this Privacy Policy. These messages are necessary to operate the Program and may continue even if you opt out of marketing.

Where permitted by applicable law and subject to your communication preferences, we may send offers and promotional communications by email, SMS, WhatsApp, telephone, push notification or in-app message. You may opt out through the app, by using the unsubscribe method included in the communication or by emailing support@bounzrewards.com. We may need a reasonable period to apply your request across our systems.

We may also use or share certain personal information, including in hashed or otherwise protected form, with advertising platforms such as but not limited to Google and Meta to create targeted or personalised audiences, measure campaign performance and show you more relevant advertising, in accordance with applicable law and your marketing preferences.

8 Cookies and similar technologies

We use cookies, pixels, software development kits and similar technologies to operate the website and app, remember preferences, understand usage, measure campaigns, improve performance, prevent fraud and, where permitted, personalize advertising.

These technologies may collect device identifiers, browsing information and usage data. Depending on how the information is used and combined, it may constitute personal information. You can control certain cookies through your browser or device settings. Disabling some technologies may affect how the website or app functions.

9 Fitness and sensitive personal information

BOUNZ does not require you to provide sensitive personal information unless it is specifically required for an optional feature and clearly explained to you. Please do not submit sensitive personal information through emails, support messages or free-text fields unless it is necessary for your request.

If you activate BOUNZ Fitness, we process step and activity information for the purposes explained when you activate the feature. Where required by applicable law, we will obtain your consent. You may stop future collection by disabling the feature or disconnecting the relevant device or service. You may also contact support@bounzrewards.com.

10 When we share personal information

We may share personal information only where reasonably necessary for the purposes described in this Privacy Policy, including with:

• other BOUNZ entities and companies within our corporate group
• participating partners to record transactions, earn or redeem BOUNZ, fulfil rewards, investigate disputes and prevent fraud
• service providers supporting cloud hosting, data management, analytics, communications, customer support, security, fraud prevention, application development and Program administration
• payment providers and gift-card, mobile-recharge or reward-fulfilment providers
• professional advisers, auditors, insurers and financing parties where necessary
• government bodies, regulators, courts, law-enforcement authorities or other parties where disclosure is legally required or necessary to protect rights, safety or security
• a buyer, investor or successor in connection with a merger, acquisition, restructuring or sale of all or part of the business, subject to appropriate confidentiality and legal requirements

We require service providers acting on our instructions to protect personal information and use it only for the agreed services. Participating partners may also process information for their own purposes under their own privacy notices.

BOUNZ does not sell or rent personal information in the normal course of business. We may share aggregated or anonymized information that does not identify an individual.

11 International data transfers

BOUNZ operates across the UAE, Bahrain and Qatar and uses service providers that may process information in other countries. Personal information may therefore be transferred or accessed outside the country in which it was collected. Where required by applicable law, we use appropriate safeguards and contractual or other approved measures for such transfers.

12 Data security

We use reasonable technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, disclosure, access or misuse. Access is limited to people and service providers who need the information for authorized purposes and are subject to appropriate duties of confidentiality.

No system or transmission method is completely secure. You are responsible for protecting your login credentials and devices and should contact us promptly if you believe your account has been accessed without authorization.

If a personal-data breach occurs, we will investigate and respond in accordance with applicable law. Where legally required, we will notify the relevant authority and affected individuals within the applicable timeframes.

13 Data retention and account removal

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to administer the Program, maintain accurate transaction and BOUNZ records, provide support, prevent fraud and comply with legal, accounting, tax, reporting and dispute-resolution requirements.

Retention periods may differ depending on the type of information, the nature of our relationship with you, legal requirements and whether the information is needed to establish or defend a claim. When information is no longer required, we will delete it, anonymize it or securely isolate it until deletion is possible.

If an account is removed, suspended or closed, we may retain the minimum information reasonably required to document the action, prevent duplicate or fraudulent registrations, investigate misuse, resolve disputes and comply with legal or regulatory obligations. Removal of an account from the Program does not necessarily result in the immediate deletion of all associated information.

14 Your choices and legal rights

Depending on the law that applies, you may have the right to request access to personal information, correct inaccurate information, request deletion, object to or restrict certain processing, withdraw consent, request transfer of information in a usable format or complain to the competent data protection authority.

These rights may be subject to legal conditions and exceptions. For example, we may retain information where required by law, needed to complete a transaction, prevent fraud or establish or defend legal claims. Withdrawing consent does not affect processing that occurred before withdrawal and may affect an optional feature that depends on that consent.

To make a request, email support@bounzrewards.com and describe the right you wish to exercise. We may ask for information needed to verify your identity and protect your account. We will respond within the period required by applicable law.

15 Keeping information accurate

Please keep your profile and contact information accurate and current. You can update available fields in the BOUNZ app. For restricted fields, including your registered mobile number, contact support@bounzrewards.com. Any new or replacement mobile number submitted on or after 15 September 2026 must be a valid GCC mobile number.

16 Children

The BOUNZ Program is intended for individuals aged 18 or older. Individuals under 18 must not register for or use the Program. If we reasonably believe an account belongs to a person under 18, we may suspend or remove it and delete or restrict the associated information as appropriate.

17 Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to the Program, our processing activities or applicable law. We will publish the updated version and revise the Last Updated date. Where appropriate or legally required, we will also notify members through the app, website, email, SMS or another reasonable channel. Continued use of BOUNZ after the effective date of an update is subject to the Terms and Conditions and applicable law.

18 Contact us

For questions, concerns or requests relating to this Privacy Policy or the use of your personal information, contact:

Email  support@bounzrewards.com

United Arab Emirates  City Points Loyalty Card Services L.L.C

Kingdom of Bahrain  Momentum Promotion Services Co W.L.L

State of Qatar  City Points Momentum Services