bpexch Privacy Policy

1. Introduction

bpexch ("bpexch", "we", "our", "us") operates the online betting and casino platform accessible at https://bpexch.lat ("Platform"). This Privacy Policy describes how bpexch handles the personal information of users ("you", "Player") who register, access, or use the Platform.

By creating an account or using any service on bpexch, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein. If you do not agree with this Privacy Policy, you should not use the Platform.

This policy is intended to be read alongside the bpexch Terms and Conditions. Definitions used in the Terms and Conditions apply equally here unless otherwise stated.

2. Data Controller

bpexch acts as the data controller in respect of personal data collected through the Platform. As data controller, bpexch determines the purposes and means of processing your personal information. For all data-related enquiries, requests, or complaints, you may contact bpexch at the address set out in Section 15 of this Policy.

3. Information We Collect

bpexch collects personal information from you directly and automatically through your use of the Platform. The categories of information collected include:

• Registration Data: Your name, date of birth, Pakistani mobile number (e.g., a number registered on JazzCash or Easypaisa), and any username you select at account creation.
• Identity Verification Data: Where bpexch requests identity verification, this may include a copy of your CNIC (Computerised National Identity Card), passport, or other government-issued identity document.
• Financial Data: Transaction records including deposit amounts, withdrawal requests, payment method identifiers, and PKR wallet balances. bpexch does not store full card numbers or full JazzCash/Easypaisa PINs — payment processing is handled by PCI-compliant third-party processors.
• Betting & Gaming Data: Records of all bets placed, casino game sessions, bonus usage, win/loss history, and responsible gaming elections (e.g., deposit limits, self-exclusion requests).
• Device & Technical Data: IP address, device type, operating system, browser type, session timestamps, and referral source, collected automatically when you access the Platform.
• Communications Data: Records of support communications between you and the bpexch team, including emails sent to [email protected].
• Usage Data: Clickstream data, page navigation patterns, feature usage frequency, and search queries within the Platform.

4. How We Use Your Information

bpexch uses your personal information for the following purposes:

• To register and maintain your bpexch account, including identity verification and age verification (18+ only).
• To process deposits and withdrawals in PKR via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other supported payment methods.
• To deliver the betting, casino, and slots services you request, including settling bets, crediting winnings, and applying bonuses.
• To provide customer support via our English and Urdu-speaking team.
• To detect and prevent fraud, money laundering, cheating, and other prohibited conduct.
• To comply with applicable legal and regulatory obligations, including anti-money laundering (AML) and know-your-customer (KYC) requirements.
• To administer responsible gaming tools, including enforcing self-exclusion, deposit limits, and cooling-off periods you have elected.
• To improve the Platform through analysis of usage patterns and Player feedback.
• To send you service communications including account notifications, security alerts, and transaction confirmations.
• To send promotional communications where you have opted in to receive them, such as PSL special offer notifications or bonus announcements.

5. Legal Basis for Processing

bpexch processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations to you under the bpexch Terms and Conditions, including account management, payment processing, and game service delivery.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations and age verification requirements.
• Legitimate Interests: Processing for fraud prevention, Platform security, and business analytics, where our legitimate interests are not overridden by your rights.
• Consent: Where you have provided explicit consent, such as subscribing to promotional communications. Consent may be withdrawn at any time by contacting [email protected].

6. Sharing Your Information

bpexch does not sell your personal information to third parties. We may share your information in the following circumstances:

• Payment Processors: Your financial information is shared with PCI-compliant payment processors who facilitate PKR transactions via JazzCash, Easypaisa, and supported Pakistani banks. These processors are contractually bound to use your data only for payment processing purposes.
• Game Software Providers: Certain game providers may receive session data necessary to operate their games on the bpexch Platform. No personally identifiable information beyond what is technically required is shared.
• Identity Verification Services: Third-party KYC service providers may process your identity documents where verification is required.
• Law Enforcement and Regulators: bpexch may disclose personal information to Pakistani law enforcement agencies, financial intelligence units, or other competent authorities where required by law or where bpexch has a good-faith belief that disclosure is necessary to prevent serious harm or criminal activity.
• Business Transfers: In the event of a merger, acquisition, or transfer of all or substantially all of bpexch's assets, your personal information may be transferred as part of that transaction, subject to equivalent privacy protections.

7. Payment Data

bpexch treats all financial transaction data with the highest level of confidentiality. Deposit and withdrawal records in PKR are retained as required by applicable financial regulations and for the period necessary to resolve disputes, process chargebacks, or satisfy audit obligations. bpexch does not store complete mobile wallet PINs, bank account passwords, or full payment card numbers on its servers. All payment data in transit between your device and bpexch's payment processors is encrypted using TLS protocols.

Pakistani players depositing via JazzCash or Easypaisa should be aware that those respective payment providers operate under their own privacy policies governing their handling of transaction data. bpexch is not responsible for the privacy practices of third-party payment providers.

8. Cookies & Tracking Technologies

bpexch uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used include:

• Essential Cookies: Required for the Platform to function, including session management and security token storage. These cannot be disabled without impairing basic functionality.
• Analytical Cookies: Used to measure how Players use the Platform, which pages are visited most frequently, and where technical issues occur. This data is processed in aggregate and does not identify you individually.
• Preference Cookies: Store your Platform preferences, such as language settings and display preferences.

You may manage non-essential cookies through your browser settings. Disabling certain cookies may affect your experience on the bpexch Platform.

9. Data Retention

bpexch retains your personal information for as long as your account remains active and for a minimum of five (5) years following account closure, as required by applicable financial regulations and AML obligations. Betting and transaction records may be retained for longer periods where required by law or ongoing regulatory proceedings.

Where personal data is no longer required for any lawful purpose, bpexch will securely delete or anonymise it in accordance with applicable data protection standards.

10. Security Measures

bpexch implements appropriate technical and organisational measures to protect your personal information against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• HTTPS encryption across all pages of the Platform, including the bpexch login page and cashier.
• Encrypted storage of passwords using industry-standard hashing algorithms. bpexch never stores passwords in plain text.
• OTP-based two-step verification for login, password resets, and withdrawal requests.
• Anomaly detection and automated alerts for suspicious login patterns, including access from unfamiliar devices or locations.
• Regular internal security reviews and access controls limiting internal access to personal data on a need-to-know basis.

No security system is completely infallible. In the event of a data breach that poses a material risk to your rights, bpexch will notify affected Players and relevant authorities in accordance with applicable obligations.

11. Your Rights

Subject to applicable law, you have the following rights with respect to your personal data held by bpexch:

• Access: You may request a copy of the personal data bpexch holds about you.
• Correction: You may request correction of inaccurate or incomplete personal data.
• Deletion: You may request deletion of your personal data, subject to bpexch's retention obligations under applicable law.
• Restriction: You may request that bpexch restrict processing of your personal data in certain circumstances.
• Objection: You may object to processing of your personal data where bpexch relies on legitimate interests as the legal basis.
• Withdrawal of Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact bpexch at [email protected]. We will respond to all verifiable requests within a reasonable period.

12. Children's Privacy

The bpexch Platform is strictly for persons aged 18 and above. bpexch does not knowingly collect personal information from individuals under the age of 18. If bpexch becomes aware that personal data has been collected from a minor, the relevant account will be closed immediately, all data will be deleted, and any deposits will be returned to the original payment method where practicable. If you believe a minor has registered on bpexch, please notify us immediately at [email protected].

13. Third-Party Services

The bpexch Platform may integrate third-party services including game software providers, payment gateways, and analytical tools. bpexch is not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party service that processes your data in connection with your use of bpexch. Links to third-party sites or services accessed via the bpexch Platform are provided for convenience only; bpexch does not endorse and is not responsible for the content or privacy practices of those sites.

14. Changes to This Policy

bpexch reserves the right to update this Privacy Policy at any time. Where a material change is made, bpexch will use reasonable efforts to notify registered Players via the mobile number or contact details associated with their account. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision. Continued use of the Platform following any update constitutes acceptance of the revised Privacy Policy.

15. Contact Us

For any privacy-related enquiries, data access requests, or complaints regarding bpexch's handling of your personal information, please contact our support team. All privacy requests are handled confidentially by bpexch staff trained in data protection obligations.

Email: [email protected]

Please include your registered mobile number and a brief description of your request. Do not include passwords, OTPs, or full financial account details in any email communication to bpexch.