bpexc Privacy Policy

bpexc (" we," "us," "our," or the "Company") operates the online casino and sports betting platform available at bpexc.pro. This Privacy Policy describes the types of personal data bpexc collects from users ("you," "your," or the "User"), the purposes for which that data is processed, the conditions under which it may be shared, and the rights available to you as a data subject.

This Privacy Policy applies to all personal data collected through the bpexc website, mobile platform, live chat support system, email correspondence, and any other channel through which you interact with bpexc. It applies to all registered users, prospective users, and visitors to bpexc.pro regardless of their location, including users based across Pakistan — in cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, and beyond.

By registering an account on bpexc or by continuing to use the bpexc platform after this Privacy Policy has been published or updated, you acknowledge that you have read, understood, and agreed to the practices described herein. If you do not agree with any part of this Privacy Policy, you must discontinue use of the bpexc platform immediately.

bpexc collects personal data through a number of channels during your interaction with the platform. The categories of data collected, together with examples of specific data points within each category, are set out in the table below:

bpexc collects only the minimum data necessary to provide you with a secure, compliant, and functional betting and gaming experience. We do not collect sensitive data categories such as biometric data, health records, or religious/political affiliations, except where specifically required by applicable law or regulatory directive.

bpexc uses the personal data it collects for the following purposes:

• Account Creation & Management: To register your bpexc account, verify your identity, and maintain accurate account records throughout your relationship with us.
• Service Delivery: To process deposits and withdrawals, settle bets, credit bonus funds, and provide all core betting and gaming services available on the bpexc platform.
• KYC & AML Compliance: To conduct identity verification, age verification, and anti-money-laundering checks in accordance with applicable regulatory requirements. bpexc is obligated to verify that all users are aged 21 or above and that funds processed through the platform are not derived from illegal activity.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, bonus abuse, multi-accounting, and any other conduct that violates the bpexc Terms & Conditions or applicable law.
• Customer Support: To respond to your queries, resolve disputes, process complaints, and provide technical assistance via our 24/7 live chat and email support channels.
• Platform Improvement: To analyse usage patterns and platform performance data in order to improve the bpexc product, fix technical issues, and develop new features aligned with user needs.
• Responsible Gaming: To monitor betting behaviour, identify indicators of problem gambling, and administer responsible gaming tools including deposit limits, session limits, and self-exclusion requests.
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant product updates where you have consented to receive such communications. You may withdraw this consent at any time.
• Legal Obligations: To comply with applicable laws, court orders, regulatory directives, and requests from competent authorities.

bpexc processes your personal data on one or more of the following legal grounds, depending on the specific processing activity in question:

• Contractual Necessity: Processing required to perform the contract between you and bpexc — i.e., to operate your account, process transactions, and deliver the services you have signed up to use.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC obligations, AML regulations, and age verification mandates.
• Legitimate Interests: Processing carried out in pursuit of bpexc's legitimate business interests — such as fraud detection, platform security, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for which you have provided specific, informed, and freely given consent — most commonly in the context of marketing communications and non-essential cookies. You retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.

bpexc does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes under any circumstances. However, in order to operate the bpexc platform lawfully and effectively, we share personal data with the following categories of third party where strictly necessary:

• KYC & Identity Verification Providers: Accredited third-party identity verification services that assist bpexc in conducting age verification, document authentication, and AML screening checks on new and existing users.
• Payment Processors: Payment service providers — including operators of JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and crypto payment networks — that facilitate the processing of deposits and withdrawals on your account. Only the minimum data required to complete each transaction is shared.
• Fraud Prevention & Security Services: Third-party providers of device fingerprinting, IP reputation analysis, and fraud detection technology used to protect the bpexc platform and its users from malicious activity.
• IT Infrastructure & Cloud Providers: Hosting, database, and cloud infrastructure providers on whose servers bpexc platform data is stored and processed. All such providers are selected on the basis of their security credentials and are bound by contractual data processing agreements.
• Regulatory & Law Enforcement Authorities: Where bpexc is legally required to disclose user data to a competent regulatory authority, law enforcement agency, or court of competent jurisdiction, we will comply with such obligations. Where legally permissible, bpexc will endeavour to notify affected users of such disclosures.
• Professional Advisers: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations and who assist bpexc in maintaining regulatory compliance and managing legal risks.

bpexc uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather analytical data that helps us understand how users interact with the site. Below is a summary of the cookie types used by bpexc:

• Strictly Necessary Cookies: Essential for the operation of the bpexc platform. These cookies enable core functions such as user authentication, session management, and security features. They cannot be disabled without significantly impairing platform functionality.
• Functional Cookies: Used to remember your preferences — such as your chosen language, display settings, and last-visited game category — to provide a more personalised experience on return visits.
• Analytical Cookies: Used to collect aggregated, anonymised data about how users navigate the bpexc platform, which pages attract the most visits, and where technical errors occur. This data is used exclusively to improve platform performance and usability.
• Session Cookies: Temporary cookies that exist only for the duration of your active browser session. They are automatically deleted when you close your browser and are used primarily to maintain your logged-in state during a gaming or betting session.

bpexc does not use third-party advertising cookies or cross-site tracking technologies. You may manage cookie preferences through your browser settings at any time; however, disabling strictly necessary cookies may prevent you from accessing certain features of the bpexc platform.

bpexc employs a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bpexc servers.
• Encrypted storage of all sensitive personal and financial data at rest using industry-standard encryption protocols.
• Role-based access controls that restrict access to personal data to only those bpexc personnel who require it to perform their specific job functions.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified information security professionals.
• Multi-factor authentication requirements for access to bpexc's internal administrative systems.
• Continuous monitoring of platform infrastructure for suspicious access patterns, intrusion attempts, and data anomalies.

While bpexc takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying bpexc immediately if you suspect unauthorised access to your account. In the event of a data breach that poses a risk to your rights and freedoms, bpexc will notify affected users and relevant authorities in accordance with applicable legal requirements.

bpexc retains personal data only for as long as is necessary to fulfil the purposes for which it was originally collected, unless a longer retention period is required or permitted by applicable law or regulatory obligation. The following general retention principles apply:

• Active Account Data: Personal data associated with an active bpexc account is retained for the duration of the account relationship and for a defined period following account closure, as required by AML regulations and gaming licensing obligations.
• Transaction Records: Financial transaction records — including deposit and withdrawal history — are retained for a minimum period in accordance with applicable anti-money-laundering legislation, which typically requires retention for at least five (5) years from the date of the transaction.
• KYC Documents: Identity verification documents are retained for the legally mandated period following account closure, in compliance with applicable KYC and AML regulatory requirements.
• Support Communications: Records of live chat and email support interactions are retained for a period sufficient to manage any ongoing dispute or regulatory inquiry, after which they are securely deleted or anonymised.
• Inactive Account Data: Accounts that have been inactive for an extended period may be subject to data anonymisation or deletion in accordance with bpexc's data minimisation policy, subject to any legal holds in place.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data — from which individual users can no longer be identified — may be retained indefinitely for statistical and analytical purposes.

As a bpexc user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact bpexc's support team via live chat or email, providing sufficient information to identify your account and the specific right you wish to exercise:

• Right of Access: You have the right to request a copy of all personal data held by bpexc in relation to your account. bpexc will respond to access requests within a reasonable period, typically within thirty (30) days of receipt.
• Right to Rectification: If any personal data held on your account is inaccurate or incomplete, you have the right to request that it be corrected. For data that you can update directly within your account settings, you are encouraged to do so without contacting support.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bpexc's legal and regulatory retention obligations. Deletion requests cannot override mandatory data retention requirements under AML or gaming regulations.
• Right to Restrict Processing: You may request that bpexc restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified following a rectification request.
• Right to Data Portability: Where technically feasible and legally applicable, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though bpexc may be able to demonstrate compelling grounds to continue such processing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted before the withdrawal.

The bpexc platform is strictly intended for individuals aged 21 years and above. bpexc does not knowingly collect personal data from individuals under the age of 21. If bpexc becomes aware that personal data has been collected from a minor — whether through misrepresentation during registration or any other means — all data associated with that individual will be permanently deleted and the associated account will be closed immediately.

Parents and guardians who have reason to believe that a minor has registered an account on bpexc or has provided personal data to bpexc should contact our support team immediately. bpexc will investigate and take appropriate action without undue delay.

bpexc employs age verification controls at the point of registration and reserves the right to request documentary proof of age at any stage of the account lifecycle. Any winnings accumulated by a user subsequently confirmed to be under 21 will be void and forfeited.

bpexc operates infrastructure across multiple jurisdictions and, as a result, your personal data may be transferred to, stored on, or processed by systems located outside of Pakistan. Where such international transfers occur, bpexc ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards used for international data transfers may include contractual data processing agreements incorporating standard data protection clauses, transfer to jurisdictions that provide adequate data protection under applicable frameworks, or other legally recognised transfer mechanisms.

By using the bpexc platform, you acknowledge and consent to your personal data being transferred to and processed in jurisdictions outside Pakistan where bpexc's infrastructure providers and third-party processors are located. In all cases, bpexc remains responsible for ensuring your data is handled consistently with the commitments made in this Privacy Policy.

bpexc reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The most current version of this Privacy Policy will always be published at bpexc.pro/privacy-policy, with the effective date clearly indicated at the top of the document.

Where changes to this Privacy Policy are material — meaning they significantly affect the way in which we collect or use your personal data — bpexc will provide reasonable advance notice via the platform or to your registered contact details before the changes take effect. Your continued use of the bpexc platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how bpexc protects your personal data and what rights are available to you.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about the way in which bpexc has handled your personal data, please contact our support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within your bpexc account dashboard. This is the fastest way to raise a data-related query.
• Email: [email protected] — for formal written data rights requests and privacy complaints. bpexc will acknowledge written requests within 72 hours and aim to provide a full response within thirty (30) days.
• Coverage: Our support team serves all bpexc users across Pakistan, including those based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar, and all other locations.

bpexc takes all privacy complaints seriously. If you submit a formal complaint and are not satisfied with the response provided, you may have the right to escalate the matter to the relevant data protection or gaming regulatory authority in the jurisdiction applicable to your complaint.