Privacy Policy — How bpexh Handles Your Data

This Privacy Policy ("Policy") describes how bpexh ("bpexh", "we", "us", "our"), the operator of https://bpexh.cam/ (the "Platform"), collects, uses, discloses, stores and protects the personal data of users ("User", "you", "your") who access or use the Platform and its associated services.

By creating an account, continuing to use the Platform or submitting any personal data to bpexh, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform as a whole.

Throughout this Policy, the following defined terms apply:

• "Personal Data" — any information that identifies, or could reasonably identify, a natural person, either directly or indirectly.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, restriction, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. bpexh acts as Data Controller in respect of the Personal Data of its registered Users.
• "Data Processor" — a third party that processes Personal Data on behalf of bpexh under written instructions and data-protection agreements.
• "Cookies" — small text files placed on your device by the Platform to facilitate session management, personalisation and analytics.
• "KYC" — Know Your Customer identity and age-verification procedures.
• "Sensitive Data" — a sub-category of Personal Data including financial account details, government-issued identification numbers and other data subject to heightened protection requirements.

3.1  Data You Provide Directly. We collect the following categories of Personal Data when you register, complete KYC, contact support or use the Platform's features:

3.2  Data Collected Automatically. When you access the Platform, we automatically collect certain technical and usage data:

• IP address, device type, operating system and browser type;
• Pages visited, features used, time spent and clickstream data;
• Cookie identifiers and session tokens;
• Approximate geographic location derived from IP address (city level only).

3.3  Data from Third Parties. We may receive limited personal data from third-party identity verification providers, payment processors and fraud-screening services as part of the KYC and transaction-processing workflows. Such data is received under appropriate data-sharing agreements.

bpexh processes your Personal Data under one or more of the following legal bases:

We use the Personal Data we collect for the following purposes:

• Account Management: creating and maintaining your account, processing registrations and authenticating your identity on each login;
• Service Delivery: processing bets, managing game sessions, handling deposits and withdrawals in PKR and other supported currencies;
• KYC and Compliance: verifying your age and identity as required by operator licensing conditions and AML obligations;
• Responsible Gambling: monitoring account activity to identify signs of problem gambling, enforcing self-exclusion and deposit limits, and providing relevant support information;
• Customer Support: responding to your queries, complaints and technical issues, primarily in English with Urdu support available;
• Fraud and Security: detecting, investigating and preventing fraudulent activity, multi-accounting, money laundering and other prohibited conduct;
• Analytics and Improvement: analysing aggregate usage patterns to improve Platform performance, user experience and content relevance for Pakistani users;
• Legal Compliance: fulfilling legal obligations, responding to regulatory enquiries and enforcing our contractual rights.

6.1  We do not sell your Personal Data. bpexh does not sell, rent, trade or otherwise commercially transfer your Personal Data to any third party for their independent commercial purposes.

6.2  Data Processors. We engage trusted third-party service providers ("Data Processors") who process Personal Data on our behalf, strictly under written contracts that prohibit them from using your data for any purpose beyond what bpexh instructs. These include:

• Identity verification and KYC service providers;
• Payment processing infrastructure providers (note: payment provider names referenced on the Platform are not implied to be current data-sharing partners);
• Cloud hosting and data storage providers;
• Customer support platform providers;
• Fraud detection and cybersecurity services;
• Analytics and performance monitoring tools.

6.3  Legal Disclosure. We may disclose Personal Data to regulatory authorities, law enforcement agencies or courts where required to do so by applicable law, court order or regulatory requirement. We will, where legally permissible, notify you of such requests.

6.4  Business Transfers. In the event of a merger, acquisition, restructuring or sale of all or part of bpexh's business, Personal Data may be transferred to the acquiring entity, subject to that entity's commitment to honour the terms of this Policy or provide equivalent protection.

7.1 bpexh uses cookies and similar technologies (including local storage and session identifiers) to support Platform functionality, maintain session security and collect analytics data.

7.2 The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session authentication and security tokens. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Remember your preferences, such as language settings, to personalise your experience.
• Analytics Cookies: Collect aggregate data about how users navigate the Platform to help us identify performance issues and content gaps. Data is anonymised where practicable.
• Marketing / Preference Cookies: Used, where consent has been obtained, to provide relevant promotional content. You may opt out of these via your browser settings.

7.3 You can manage or disable non-essential cookies through your browser's privacy settings. Note that disabling certain cookies may affect Platform functionality. Instructions for managing cookies in common browsers are available in their respective help sections.

8.1 We retain Personal Data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. Our standard retention periods are:

• Account and transaction records: retained for a minimum of five (5) years following account closure, primarily to satisfy AML and financial-record obligations;
• KYC documentation: retained in accordance with applicable regulatory requirements, typically five (5) years from the date of submission or account closure, whichever is later;
• Support communications: retained for three (3) years from the date of the relevant interaction;
• Analytics data: retained in anonymised or aggregated form indefinitely; identifiable analytics data is retained for up to twenty-four (24) months;
• Self-exclusion records: retained for the duration of the self-exclusion period plus an additional five (5) years.

8.2 At the end of the applicable retention period, Personal Data is securely deleted or anonymised. You may request early deletion subject to the provisions in Section 9.

Subject to applicable law, you have the following rights in respect of your Personal Data processed by bpexh:

To exercise any of these rights, please contact us using the details in Section 15. We will respond to verified requests within 30 days. We may require additional identity verification before processing your request.

10.1 bpexh implements appropriate technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. Measures include:

• Encryption of data in transit using TLS (Transport Layer Security);
• Encryption of Sensitive Data at rest using industry-standard algorithms;
• Role-based access controls limiting staff access to Personal Data on a need-to-know basis;
• Regular internal security reviews and vulnerability assessments;
• Multi-factor authentication for administrative access to systems storing Personal Data.

10.2 While we maintain robust security practices, no method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security of your Personal Data. In the event of a data breach affecting your rights and freedoms, we will notify you and any relevant regulatory authority as required by applicable law.

10.3 You are responsible for maintaining the confidentiality of your account password and for all activity that occurs under your account. Please use a strong, unique password and enable two-factor authentication where available.

11.1 bpexh operates as an international platform and may process or store your Personal Data on servers located outside Pakistan. Where Personal Data is transferred to countries that may not provide a level of data protection equivalent to internationally recognised standards, we implement appropriate safeguards, such as contractual data-protection clauses with the recipient entities.

11.2 By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside your country of residence. We take reasonable steps to ensure that any such transfers are carried out lawfully and that appropriate protections are in place.

12.1 The Platform is strictly for adults aged 18 years and over, or the higher minimum age required by the operator or by the laws of your jurisdiction. bpexh does not knowingly collect Personal Data from individuals under the applicable minimum age.

12.2 If we become aware that we have inadvertently collected Personal Data from a minor, we will take immediate steps to delete that data and close the associated account. All winnings accrued during any period where a User is found to be underage will be forfeited.

12.3 If you are a parent or guardian and believe a minor has provided Personal Data to bpexh, please contact us immediately using the details in Section 15.

13.1 The Platform may contain references to, or display content relating to, third-party services such as payment providers (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) and sports organisations (e.g., PCB, PSL, ICC). These references are made for informational and local-context purposes only. bpexh does not control the privacy practices of any third-party entity and is not responsible for their data collection or use.

13.2 This Policy applies exclusively to Personal Data processed by bpexh in connection with the Platform. We encourage you to review the privacy policies of any third-party services before providing them with your personal data.

14.1 bpexh reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or Platform functionality. When material changes are made, we will update the "Last Reviewed" date at the top of this page.

14.2 Where changes are significant, we will use reasonable endeavours to notify registered Users via email or in-Platform notification prior to the changes taking effect. Your continued use of the Platform following the publication of any revised Policy constitutes your acceptance of the updated terms.

14.3 We recommend that you review this Policy periodically. A history of material changes is available upon written request to our support team.

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your Personal Data, please contact our support team. We handle data-related requests in both English and Urdu.

For queries about your account terms, bonuses or betting rules, please refer to our Terms & Conditions. For information about responsible gambling tools and support resources, please visit our Responsible Gambling page.