bpxech Privacy Policy

bpxech is Pakistan's trusted online casino and sports betting platform, accessible at bpxech.app. In the context of this Privacy Policy, "bpxech", "we", "us", and "our" refer to the operating entity responsible for the bpxech platform and all associated services offered through the bpxech.app domain.

bpxech acts as the data controller in respect of the personal information collected from users who access, register, or transact on our platform. As data controller, we determine the purposes for which your personal data is processed and the means by which such processing takes place.

If you have questions about how your personal data is handled by bpxech, or if you wish to exercise any of your data rights, please contact our Data Protection contact via the details provided in Section 15 of this document.

bpxech collects personal data across several categories depending on your level of engagement with the platform. The following table summarises the categories of personal data we collect and the typical data points within each category:

bpxech does not collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond CNIC-based identity verification), or health data — unless you voluntarily provide health-related context in connection with a responsible gaming or self-exclusion request.

bpxech collects personal data through the following methods:

• Direct Collection: Data you provide voluntarily when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a responsible gaming questionnaire.
• Automated Collection: Technical and behavioural data collected automatically through cookies, server logs, and analytics tools each time you visit or interact with bpxech.app. This includes your IP address, browser fingerprint, and navigation patterns within the platform.
• Payment Processor Data: When you transact via JazzCash, EasyPaisa, Raast, or a Pakistani bank (HBL, UBL, Meezan, 1LINK), the relevant payment processor shares transaction confirmation data with bpxech to enable crediting of your account balance. bpxech does not store full payment credentials — only transaction reference identifiers and amounts.
• Identity Verification Services: During KYC, bpxech may use a third-party identity verification service to cross-reference the CNIC details you submit against authoritative identity databases. This is a one-time check conducted at account verification stage.
• Risk and Fraud Detection Systems: bpxech's automated risk management systems passively monitor account activity to detect patterns associated with fraud, money laundering, bonus abuse, and underage gambling. This monitoring is a core security function and is conducted on all active accounts.

bpxech processes personal data on one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to establish and operate your bpxech account, process deposits and withdrawals, and deliver the gambling services you have requested. Without this processing, bpxech cannot provide its services to you.
• Legal Obligation: bpxech is subject to legal obligations in respect of anti-money laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) requirements under applicable law. Processing your identity documents and transaction data is mandatory under these obligations and cannot be waived.
• Legitimate Interests: bpxech processes technical and behavioural data on the basis of legitimate interests in operating a secure, fraud-free, and well-functioning platform. This includes fraud detection, platform performance monitoring, and responsible gaming oversight. We have assessed that these legitimate interests are not overridden by your rights and interests.
• Consent: Where bpxech processes your data for marketing communications, optional analytics, or non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time by contacting support or adjusting your account preferences.

bpxech uses the personal data it collects for the following specific purposes:

• Account Creation and Management: To register your bpxech account, maintain your profile, authenticate your login, and manage your account preferences and settings.
• Identity Verification (KYC): To verify your identity in compliance with AML obligations before processing withdrawals. This includes cross-referencing your CNIC details and reviewing submitted identity documents.
• Payment Processing: To credit deposits to your bpxech balance, process withdrawal requests to your registered JazzCash wallet, EasyPaisa account, or bank account, and maintain transaction records in PKR.
• Platform Services Delivery: To enable you to place bets on cricket, PSL matches, and other sporting events; access live casino games; play slot titles; and use all other gambling products offered on bpxech.
• Customer Support: To respond to your enquiries, resolve complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Responsible Gaming: To apply deposit limits, self-exclusion periods, and session time restrictions that you have activated, and to monitor for behavioural patterns that may indicate problem gambling, in line with our responsible gaming obligations.
• Fraud Prevention and Security: To detect and prevent unauthorised account access, multi-accounting, bonus abuse, money laundering, and other fraudulent or prohibited activity.
• Platform Improvement: To analyse aggregate usage patterns, identify technical issues, test new features, and improve the overall bpxech user experience.
• Marketing Communications: Where you have consented, to send you information about bpxech promotions, new game launches, and special offers via SMS or email. You can opt out at any time.
• Regulatory Compliance: To fulfil bpxech's reporting and record-keeping obligations under applicable gaming, financial, and data protection regulations.

bpxech does not use your personal data for automated decision-making that produces legal effects concerning you, except in fraud detection scenarios where an automated flag may temporarily restrict account access pending human review.

bpxech does not sell your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to handle it securely and in accordance with applicable data protection standards:

• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK receive the transaction data necessary to process your deposits and withdrawals. These processors operate under their own privacy policies and are independently regulated Pakistani financial service providers.
• Identity Verification Providers: A contracted third-party KYC service provider may receive your CNIC details and document scans solely for the purpose of identity verification. This provider is bound by strict confidentiality and data processing agreements with bpxech.
• Game Content Providers: Third-party game studios whose titles are hosted on the bpxech platform may receive pseudonymised session identifiers to enable game functionality. They do not receive your full name, CNIC, or financial data.
• Regulatory and Law Enforcement Authorities: bpxech may be required to disclose personal data to relevant regulatory bodies, law enforcement agencies, or financial intelligence units where required by law, court order, or regulatory directive. Such disclosures are made only to the extent required and are not discretionary.
• Professional Advisors: In the course of seeking legal, accounting, or auditing advice, bpxech's professional advisors may have access to personal data under strict confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of bpxech's assets, personal data held by bpxech may be transferred to the acquiring entity. Users will be notified of any such transfer and of any material changes to data handling practices that may result from it.

bpxech uses cookies and similar web tracking technologies to operate the platform, maintain your session, remember your preferences, and analyse how users navigate and interact with bpxech.app. The following categories of cookies are in use:

• Strictly Necessary Cookies: These are essential for the bpxech platform to function. They enable your login session to persist, maintain your account state during betting activity, and preserve your language and display preferences. These cookies cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how users interact with bpxech.app — including pages visited, time on page, and navigation paths. This data helps us identify and fix technical issues and improve platform usability. These cookies do not identify you personally.
• Functional Cookies: These remember your platform preferences — such as your last-visited game category or notification settings — to provide a more personalised experience on return visits.
• Security Cookies: Used by bpxech's fraud detection systems to recognise known devices and flag access from unrecognised devices or locations. These are a core security feature and are always active on authenticated sessions.

bpxech does not use third-party advertising cookies or cross-site tracking pixels. You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the availability or performance of some platform features.

bpxech implements a layered approach to data security that reflects the sensitivity of the financial and identity data we hold. Our technical and organisational security measures include:

• AES-256 Encryption: All data at rest — including stored personal data, KYC documents, and transaction records — is encrypted using AES-256, the same standard used by major international financial institutions.
• TLS in Transit: All data in transit between your device and bpxech servers is protected using Transport Layer Security (TLS 1.2 or above). The bpxech.app domain enforces HTTPS across all pages.
• Access Controls: Access to personal data held by bpxech is restricted on a strict need-to-know basis. Staff with access to user data are subject to background checks, confidentiality obligations, and role-based access limitations.
• Two-Factor Authentication (2FA): All internal bpxech staff accounts with access to user data are protected with mandatory two-factor authentication. We also encourage all bpxech users to enable 2FA on their accounts for additional security.
• Penetration Testing: bpxech commissions regular third-party penetration tests and security audits of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: bpxech maintains a documented data breach incident response procedure. In the event of a breach affecting your personal data, we will notify affected users and relevant authorities within the timeframes required by applicable law.

bpxech retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by our legal, regulatory, and AML compliance obligations. The following retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked back to an individual. Data subject to an ongoing legal investigation or dispute may be retained beyond the standard retention period until the matter is fully resolved.

As a bpxech user, you hold the following rights in respect of your personal data. You may exercise any of these rights by contacting our support team through the channels listed in Section 15. bpxech will respond to all valid data rights requests within 15 business days.

• Right of Access: You have the right to request a copy of all personal data that bpxech holds about you. We will provide this in a structured, commonly used format.
• Right to Rectification: If any personal data bpxech holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Note that certain data (such as your CNIC-verified name) can only be updated through re-submission of identity documents.
• Right to Erasure: In certain circumstances, you may request that bpxech delete your personal data. This right is subject to limitations where data must be retained for legal or regulatory compliance reasons — for example, AML-required KYC and transaction records cannot be deleted on request.
• Right to Restrict Processing: You may request that bpxech restrict the processing of your personal data in specific circumstances, for example while the accuracy of data is being contested or while a complaint is being investigated.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to request its transfer to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where bpxech relies on legitimate interests as the legal basis. bpxech will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

bpxech is strictly an adult platform. Our services are available exclusively to individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.

During registration, all users are required to confirm they meet the minimum age requirement and to submit a valid CNIC for identity verification. Pakistan's National Identity Card (CNIC) is issued to citizens aged 18 and above; bpxech's KYC process applies an additional age-verification check to enforce our 21+ policy.

If bpxech becomes aware that personal data has been collected from a person under the age of 21 — whether through a misrepresentation made at registration or through a subsequent KYC review — the relevant account will be immediately suspended, all personal data associated with that account will be deleted, and any funds held in the account will be returned to the registered payment method following identity confirmation with a parent or legal guardian where appropriate.

bpxech's primary infrastructure is operated with a focus on serving Pakistani users. However, certain service providers and technology partners engaged by bpxech may process data in jurisdictions outside Pakistan. Where personal data is transferred internationally, bpxech ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections applicable in Pakistan.

Safeguards that bpxech relies upon for international transfers include:

• Contractual Clauses: Data processing agreements with international third-party providers that impose contractually binding data protection obligations equivalent to the standards applied within bpxech's operating jurisdiction.
• Adequacy Assessment: Where transfers are made to jurisdictions recognised as providing an adequate level of data protection, bpxech relies on that adequacy finding as the transfer mechanism.
• Technical Controls: Regardless of where data is processed, bpxech requires all international processors to apply the same AES-256 encryption and access control standards mandated for data processed within Pakistan.

bpxech does not transfer personal data to jurisdictions that lack adequate data protection frameworks without first ensuring contractual safeguards are in place. If you would like further information about the specific international transfer mechanisms applicable to your personal data, please contact our support team.

The bpxech platform integrates with a number of third-party services to deliver its full range of features. While bpxech carefully vets all third-party providers and requires them to meet our data protection standards, please be aware that this Privacy Policy does not cover the independent data handling practices of these third parties.

Key third-party integrations on the bpxech platform include:

• Payment Gateways: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK process payments on behalf of bpxech. Each of these providers operates under its own privacy policy and is independently regulated by the State Bank of Pakistan. bpxech recommends reviewing the privacy practices of your chosen payment provider.
• Game Content Providers: Live casino, slot, and sports betting content is powered by third-party game studios. These studios receive only the pseudonymised session data required to run game functionality; they do not receive your full identity or financial data.
• KYC and Identity Verification: bpxech's identity verification process may involve a contracted third-party provider. This provider accesses only the specific identity documents and data fields required for verification and is contractually prohibited from using that data for any other purpose.
• Analytics Providers: bpxech may use privacy-compliant analytics tools to measure platform performance. Any analytics integration used by bpxech processes data in anonymised or pseudonymised form and does not identify individual users to the analytics provider.

bpxech reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered users via their registered email address or through a prominent notice displayed on the bpxech.app platform at login.

The updated Privacy Policy will always be accessible on this page, identified by the "Last Updated" date shown at the top of the document. We encourage you to review this page periodically. Your continued use of bpxech following any update constitutes your acceptance of the revised Privacy Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a potential data protection concern, please contact bpxech through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the bpxech platform. Our Pakistani support team can assist with data queries in real time.
• Email: [email protected] — for formal data rights requests, privacy complaints, or documentation-based enquiries. We aim to respond to all privacy-related emails within 5 business days.

When submitting a data rights request, please include your registered email address or mobile number so that our team can locate your account and verify your identity before processing the request. For security reasons, bpxech cannot action data rights requests from unverified individuals.