bpexch Privacy Policy

This Privacy Policy describes how bpexch ("the Platform", "we", "us") collects, processes, stores, and protects personal information when you register, log in, deposit funds, place bets, play casino games, or otherwise interact with the bpexch website or mobile application.

By creating an account or using any part of bpexch, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data as described here. This policy should be read together with the Terms and Conditions, which govern the overall relationship between you and the platform.

If you have questions about this policy or want to exercise any of your data rights, you can contact the support team at [email protected] at any time.

We collect personal data from you in a few different ways — information you give us directly when registering or verifying your account, information that is generated automatically when you use the platform, and in some cases information from third-party services you use to deposit or withdraw funds.

• Full name, date of birth, and contact details (email address, phone number)
• Account credentials — username and password (stored in encrypted form)
• Identification documents submitted for account verification (such as CNIC)
• Payment information — not your full card or account numbers, but transaction references and payment method identifiers used to process PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, or bank transfer
• Any correspondence you send to the support team, including complaints or account queries

• Device information — type of device, operating system, browser version
• IP address and approximate location derived from it
• Session data — pages visited, time spent, clicks, and navigation patterns
• Betting and gaming activity — markets wagered on, stake amounts, game history
• Login timestamps and session durations
• Cookie and tracking data (see Section 5 for full details)

When you use JazzCash, Easypaisa, Raast, or a bank transfer to deposit or withdraw PKR, those payment providers may share transaction confirmation data with us. We use this solely to credit your account or process your withdrawal. We do not receive your full payment account credentials from these providers.

Every piece of data we collect serves a specific purpose. We do not collect data speculatively or hold information we have no use for. The main reasons we process your personal data are:

• Account management: To create, maintain, and secure your bpexch account, including verifying your identity before processing significant withdrawals.
• Providing the service: To allow you to place bets, play live casino games and slots, and access all platform features.
• Processing payments: To handle PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfers, and other supported methods.
• Responsible gaming: To monitor usage patterns that may indicate problematic gambling behaviour, and to apply deposit limits, session reminders, or self-exclusion tools where appropriate or requested.
• Platform security and fraud prevention: To detect and prevent multiple accounts, bonus abuse, unauthorised access, money laundering, and other prohibited conduct as described in the Terms and Conditions.
• Customer support: To respond to your queries, complaints, or account requests efficiently and accurately.
• Platform improvement: To analyse how users interact with different sections of the platform — cricket betting markets, PSL odds, live casino tables, slot games — so we can improve the experience over time.
• Communications: To send you account-related notifications such as deposit confirmations, withdrawal updates, or security alerts. We do not send unsolicited marketing unless you have specifically opted in.

When you make a deposit or request a withdrawal in PKR, your transaction is processed through your chosen payment method — JazzCash, Easypaisa, Raast, a bank transfer, or another supported mobile wallet or debit card. The specific financial data handled in this process includes:

• Transaction reference numbers provided by the payment provider
• PKR amounts deposited or withdrawn
• The type of payment method used (e.g., JazzCash, bank transfer)
• Timestamp of each transaction

bpexch does not store full payment account numbers, IBAN details in full, or mobile wallet PINs. Payment authentication happens directly through the relevant payment provider's own secure systems. We only receive confirmation that a transaction was completed successfully.

Transaction records are retained for as long as required for account management and in line with our data retention policy (see Section 7). These records may also be reviewed in cases of suspected fraud or at the request of our compliance team.

bpexch uses cookies and similar tracking technologies to keep the platform running correctly and to improve the experience for returning users. A cookie is a small text file stored on your device by your browser when you visit a website.

• Essential cookies: Required for the platform to function. These handle session management, login state, and security tokens. Without these, you cannot use the platform.
• Functional cookies: Remember your preferences — such as language settings, preferred sports markets, or display options — so you do not have to reset them every visit.
• Analytics cookies: Collect anonymised data on how users navigate the site. This helps us understand which features are used most and where users encounter issues. No personally identifiable information is included in this data.
• Security cookies: Help detect and prevent fraudulent activity, multiple account creation, and automated bot access.

Most browsers allow you to manage or block cookies through their settings. However, disabling essential cookies will prevent you from logging in or using core platform features. Analytics and functional cookies can generally be disabled without affecting your ability to bet or play.

We do not share your personal data with third parties except in the specific circumstances described below:

• Payment processors: To complete your PKR deposits and withdrawals, we share the minimum necessary transaction data with JazzCash, Easypaisa, Raast, or other payment partners. These providers handle their own data under their own privacy policies.
• Identity verification services: If you are required to submit verification documents, these may be processed by a third-party identity verification provider. We use reputable providers with appropriate security standards.
• Platform infrastructure providers: Cloud hosting, database, and security service providers may have access to data as part of the infrastructure that runs the platform. These providers are bound by confidentiality and data processing agreements.
• Fraud prevention and compliance: We may share data with fraud detection services or compliance tools where necessary to protect the platform and its users from prohibited conduct.
• Legal requirements: If we are required by applicable law or a valid legal process to disclose data, we will do so. We will notify you where we are legally permitted to do so before complying.

We retain your personal data for as long as your account is active and for a reasonable period after closure to allow for the resolution of disputes, compliance with legal obligations, or investigation of reported issues.

• Active accounts: Data is retained for the duration your account remains open.
• Closed accounts: Core account data and transaction records are typically retained for a period of five years after account closure for compliance and dispute resolution purposes.
• Support correspondence: Communication records are retained for up to two years from the date of the last interaction.
• Analytics data: Aggregated and anonymised usage data may be retained indefinitely as it cannot be traced back to individual users.

When data is no longer required and retention periods have lapsed, it is deleted or anonymised securely.

bpexch takes the security of your personal data seriously and applies technical and organisational measures to protect it against unauthorised access, loss, or misuse. These measures include:

• Encrypted storage of passwords and sensitive credentials — we never store passwords in plain text
• HTTPS encryption across the entire platform to protect data in transit between your device and our servers
• Restricted internal access to personal data — only staff with a legitimate need can access user account information
• Session timeout and automatic logout for inactive accounts
• Fraud detection systems that monitor for unusual login patterns or suspicious transaction activity
• Regular security reviews of platform infrastructure

While we take all reasonable precautions, no digital system is completely immune to security risks. You also play a role in keeping your account secure — use a strong, unique password and do not share your login credentials with anyone. If you notice anything unusual on your account, contact support immediately.

As a user of bpexch, you have the following rights in relation to your personal data. To exercise any of these, contact the support team at [email protected]:

bpexch is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation that you are 18 or over. If we discover that a user is under 18, the account will be closed immediately and any associated data will be deleted in line with our retention policy.

If you believe a minor has registered on the platform, please contact us at [email protected] so we can take prompt action.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date shown at the top of this page. Continued use of the platform following a policy update constitutes your acceptance of the revised terms. We recommend checking this page periodically — particularly after extended periods of not logging in.

For significant changes that materially affect how we use your data, we will make reasonable efforts to notify registered users directly via email or an on-site notification.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please get in touch with the bpexch support team:

For account-related requests such as data access, correction, or deletion, please include your registered email address and a brief description of your request when you contact us.