bpexh Privacy Policy – How We Handle Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how bpexh ("the Platform," "we," "us," "our") collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("you," "your," "the Player") who access or use the bpexh website, mobile platform, gaming and sports betting services, and associated PKR payment facilities (collectively, the "Services").

bpexh is committed to protecting the privacy of its players and to processing personal data in a lawful, fair, and transparent manner. By registering an account, accessing, or otherwise using the bpexh Services, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the bpexh Services.

This Policy should be read together with the bpexh Terms and Conditions and Responsible Gaming Policy, both of which are available on the bpexh website.

2. Data Controller

bpexh operates as the data controller in respect of the personal data it processes about registered players and website visitors. As data controller, bpexh determines the purposes and means of processing your personal data. Queries or requests regarding the exercise of your data rights should be directed to the bpexh customer support team at the contact address provided in Section 14 of this Policy.

3. Personal Data We Collect

bpexh collects personal data from you directly, automatically through your use of the Services, and from third-party sources where applicable. The categories of personal data we collect include:

3.1 Registration Data. When you create a bpexh account, we collect your full legal name, date of birth, gender, residential address, valid Pakistani mobile number (typically your +92 number used for JazzCash or Easypaisa), email address, and username.

3.2 Identity Verification (KYC) Data. To comply with age verification and anti-money laundering (AML) requirements, we collect copies of government-issued identity documents (such as your Pakistani CNIC or passport), proof of address, and, where required, source of funds documentation.

3.3 Financial and Transaction Data. We collect details of all deposits and withdrawals made through your bpexh account, including the payment method used (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, debit card, USDT TRC20, Skrill, or Neteller), transaction amounts in PKR, transaction timestamps, and payment reference numbers.

3.4 Gaming Activity Data. We record details of your gameplay on bpexh, including bets placed, games played, wagering amounts, winnings, losses, session durations, and bonus usage.

3.5 Technical and Device Data. We automatically collect your IP address, device type and identifiers, operating system, browser type and version, time zone setting, and geolocation data (at a country or city level) each time you access bpexh.

3.6 Communications Data. If you contact bpexh customer support — whether by email, live chat, or any other channel — we retain records of those communications, including the content of your messages and our responses.

3.7 Cookies and Usage Data. We collect data about how you navigate and interact with the bpexh platform through cookies and similar tracking technologies. See Section 10 for further detail.

4. How We Use Your Personal Data

bpexh processes your personal data for the following purposes:

• Account management: to create, maintain, verify, and administer your bpexh account and to authenticate your identity at login;
• Service delivery: to provide access to cricket betting, live casino, slots, and the PKR cashier; to process deposits and withdrawals via JazzCash, Easypaisa, and other supported payment methods; and to credit winnings and process bonus claims;
• Age and identity verification (KYC): to verify that you meet the minimum age requirement of 18 years and to comply with anti-money laundering regulations;
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, account takeovers, and other prohibited activities on the bpexh platform;
• Responsible gaming: to monitor gameplay patterns for indicators of problem gambling behaviour and to administer deposit limits, self-exclusion requests, and other responsible gaming tools;
• Legal compliance: to comply with applicable legal and regulatory obligations, including the retention of records required by anti-money laundering legislation;
• Customer support: to respond to your queries, resolve disputes, and process complaints;
• Marketing communications: to send you promotional offers, bonus notifications, and news about bpexh products and features, where you have consented to receive such communications or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.

5. Legal Basis for Processing

bpexh processes your personal data on the following legal bases:

• Contractual necessity: processing necessary for the performance of the contract between you and bpexh (i.e., providing the Services you have requested);
• Legal obligation: processing required to comply with applicable laws, including KYC, AML, and data retention requirements;
• Legitimate interests: processing necessary for the legitimate interests of bpexh, including fraud prevention, platform security, responsible gaming monitoring, and business analytics, where such interests are not overridden by your privacy rights;
• Consent: processing based on your explicit consent, including for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

bpexh does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: JazzCash, Easypaisa, and other payment service providers used to process PKR deposits and withdrawals from your bpexh account;
• Identity verification providers: third-party KYC and AML service providers engaged to assist with identity and age verification;
• Game software providers: casino game studios and RNG auditors whose software powers the bpexh game library;
• Technology and infrastructure providers: cloud hosting, cybersecurity, and analytics providers engaged to support the operation of the bpexh platform;
• Regulatory and law enforcement authorities: where we are required by law, court order, or regulatory direction to disclose information, including for the investigation of suspected fraud, money laundering, or other criminal activity;
• Professional advisers: lawyers, auditors, and insurers engaged in the normal course of operating the bpexh business.

All third-party processors engaged by bpexh are contractually required to process personal data only in accordance with our instructions and to implement appropriate technical and organisational security measures.

7. International Data Transfers

Some of the third-party service providers engaged by bpexh may be located outside Pakistan. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in the recipient's home jurisdiction, bpexh will ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent data transfer mechanisms, before making such transfers.

8. Data Retention

bpexh retains your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. In practice, this means:

• Account and transaction data is retained for a minimum of five (5) years following account closure, as required by applicable anti-money laundering regulations;
• KYC documentation is retained for the period required by the applicable licensing authority, typically five (5) years from the date of verification;
• Customer support communications are retained for three (3) years from the date of the interaction;
• Marketing preference data is retained until you withdraw your consent or close your account.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with bpexh's data disposal procedures.

9. Your Rights Regarding Your Personal Data

Subject to applicable law, you have the following rights in respect of your personal data held by bpexh:

• Right of access: you may request a copy of the personal data we hold about you;
• Right to rectification: you may request correction of inaccurate or incomplete personal data;
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations;
• Right to restriction: you may request that we restrict processing of your personal data in certain circumstances;
• Right to object: you may object to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes;
• Right to data portability: where technically feasible, you may request that we provide your personal data in a structured, commonly used, machine-readable format.

To exercise any of these rights, please contact bpexh customer support using the contact details in Section 14. We will respond to all verified requests within 30 days. We may require you to verify your identity before processing your request.

10. Cookies and Tracking Technologies

bpexh uses cookies and similar tracking technologies to improve your experience on the platform, to analyse usage patterns, and to support fraud prevention. The types of cookies we use include:

• Strictly necessary cookies: essential to the operation of the bpexh platform, including session management and login authentication. These cookies cannot be disabled.
• Functional cookies: used to remember your preferences (such as language settings) to personalise your experience.
• Analytics cookies: used to collect aggregated data about how visitors interact with the bpexh platform, helping us improve functionality and content.
• Security cookies: used to detect and prevent fraudulent activity, including account takeover attempts.

You may configure your browser settings to refuse non-essential cookies, though doing so may affect the functionality of certain features on the bpexh platform.

11. Security Measures

bpexh implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include 256-bit SSL/TLS encryption for all data transmitted between your device and the bpexh platform, encrypted storage of sensitive data at rest, access controls limiting data access to authorised personnel only, regular security audits and penetration testing, and two-factor authentication for account access. Notwithstanding these measures, no online platform can guarantee absolute security, and bpexh cannot accept liability for security breaches that arise from circumstances outside its reasonable control.

12. Children's Privacy

The bpexh Services are strictly intended for users who are 18 years of age or older. bpexh does not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from an underage individual, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor has registered on the bpexh platform, please contact us immediately using the details in Section 14.

13. Amendments to This Policy

bpexh reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the Services we offer. Material amendments will be communicated to registered players via their registered email address or through a notice on the bpexh website. Continued use of the Services following the effective date of any amendment constitutes acceptance of the revised Policy.

14. Contact Us

For any queries, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bpexh, please contact our customer support team. Our support email address is: [email protected] (plain text — not a clickable link). We aim to respond to all privacy-related queries within 5 business days.