At bpexch, your privacy is treated with the same rigour as your account security. This Privacy Policy explains exactly what personal data bpexch collects from Pakistani players, why we collect it, how we use and protect it, how long we retain it, and what rights you hold over your own information. We have written it plainly so you can actually understand it.
These six commitments summarise bpexch's approach to your personal data. The complete legally binding privacy terms are set out in the full policy below.
bpexch collects only the personal data that is strictly necessary to operate your account, comply with our licensing obligations, and provide the gaming services you have requested. We do not collect data speculatively or for undisclosed purposes.
All personal data transmitted between your device and bpexch's servers is encrypted using 256-bit SSL/TLS — the same encryption standard deployed by Pakistan's major commercial banks. Your data never travels in plain text across any network.
bpexch does not sell, rent, or trade your personal data to marketing companies, data brokers, or any third party for commercial purposes. Your name, mobile number, email address, and financial history are never monetised without your explicit consent.
bpexch processes personal data in accordance with our international gaming licence conditions, applicable AML and KYC regulatory requirements, and internationally recognised data protection principles. Regulatory data requests are handled through verified official channels only.
bpexch retains personal data for defined, purpose-linked periods — not indefinitely. Account data is retained for the duration of your account plus five years after closure to satisfy regulatory obligations. Marketing preferences are updated immediately on request.
Pakistani bpexch players have the right to access, correct, restrict, and — in defined circumstances — request deletion of their personal data. bpexch responds to all verified data rights requests within thirty (30) days of receipt, at no charge to the account holder.
1.1 Data Controller. For the purposes of this Privacy Policy, "bpexch," "we," "us," or "the Company" refers to the legal entity that owns and operates the bpexch online gaming platform accessible at bpexch.vu. bpexch is the data controller in respect of all personal data collected through your use of the Platform, your bpexch Account, or any direct communications you have with bpexch.
1.2 Scope. This Privacy Policy applies to all personal data collected by bpexch in connection with: (a) your registration for and use of a bpexch Account; (b) your use of any products on the bpexch Platform, including cricket betting, casino games, slots, and video poker; (c) deposits, withdrawals, and all PKR financial transactions processed through bpexch; (d) your communications with bpexch customer support; and (e) your browsing of the bpexch website, including data collected through cookies and tracking technologies.
1.3 Third-Party Services. This Privacy Policy does not govern the data practices of third-party services that are independent of bpexch — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, or any game software providers whose products are accessible through the bpexch Platform. Players are advised to review the privacy policies of any third-party service they use in connection with their bpexch account.
By creating a bpexch Account, making a deposit, or continuing to use the bpexch Platform after the effective date of this Privacy Policy, you acknowledge that you have read and understood this Policy and consent to the collection, processing, and use of your personal data as described herein.
2.1 Categories of Personal Data. bpexch collects and processes the following categories of personal data from Players:
| Data Category | Specific Data Points | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, photograph (KYC) | Registration & KYC verification |
| Contact Data | Pakistani mobile number, email address, residential address | Registration & account updates |
| Financial Data | JazzCash / EasyPaisa wallet numbers, bank account references, deposit & withdrawal history, PKR transaction amounts | Deposits, withdrawals, KYC payment verification |
| Gaming Data | Bet history, casino game play records, session durations, game preferences, bonus usage, win/loss records | Platform usage |
| Technical Data | IP address, device identifier, browser type, operating system, screen resolution | Platform access (automatic) |
| Behavioural Data | Pages visited, navigation patterns, features accessed, session start and end times | Cookies & analytics (automatic) |
| Communication Data | Support chat transcripts, email correspondence content, support ticket records | Customer support interactions |
| Responsible Gaming Data | Self-imposed deposit limits, loss limits, self-exclusion periods, responsible gaming tool usage history | Responsible gaming feature usage |
2.2 Sensitive Data. bpexch does not intentionally collect sensitive personal data categories (such as racial or ethnic origin, political opinions, health data, or biometric data) unless specifically required under our KYC obligations, in which case such data is handled with additional security measures and processed only for the purpose for which it was explicitly provided.
bpexch collects personal data through the following primary channels:
bpexch processes your personal data on one or more of the following legal bases, depending on the category of data and the specific processing activity:
bpexch uses your personal data for the following specific purposes:
No Automated Decision-Making with Legal Effect: bpexch does not use fully automated decision-making processes to make decisions about your Account that produce significant legal effects — such as account closure decisions or fraud sanctions — without human review of the relevant evidence.
6.1 Categories of Recipients. bpexch shares your personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:
6.2 No Commercial Data Sales. bpexch does not sell, rent, license, or trade your personal data to advertising networks, data brokers, or any commercial third party for that party's own marketing or profiling purposes.
Data Processing Agreements: All third parties that process personal data on bpexch's behalf are required to do so under a written data processing agreement that obligates them to process your data only for the purposes specified by bpexch, to maintain equivalent security standards, and to return or delete the data upon termination of the service relationship.
7.1 Types of Cookies Used. The bpexch Platform uses the following categories of cookies and similar tracking technologies:
7.2 Managing Cookies. You may configure your browser to reject, limit, or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your bpexch Account and using the Platform's core features. Disabling analytics cookies will not affect your ability to use bpexch.
7.3 No Third-Party Advertising Cookies. bpexch does not deploy third-party advertising or behavioural targeting cookies on the bpexch Platform that track your behaviour across third-party websites for advertising purposes.
8.1 Technical Measures. bpexch implements the following technical security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:
8.2 Organisational Measures. Access to player personal data within bpexch's organisation is restricted on a strict need-to-know basis. All personnel with access to player data are subject to confidentiality obligations and undergo data protection training appropriate to their role.
8.3 Breach Notification. In the event of a personal data breach that is likely to result in a risk to your rights or interests, bpexch will notify affected Players without undue delay and will take all reasonable steps to contain and remediate the breach. Notification will include a description of the nature of the breach, the categories of data affected, and the remedial steps bpexch has taken or intends to take.
If you suspect that your bpexch Account has been compromised or that your personal data has been accessed without your authorisation, please contact bpexch support immediately at [email protected]. Our security team will respond to account security incidents as a priority.
9.1 Retention Periods. bpexch retains personal data for the periods set out below, or for such longer periods as may be required by our licensing obligations or applicable law:
9.2 Deletion. Upon expiry of the applicable retention period, bpexch will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with your identity. In cases where deletion would breach a regulatory obligation, data will instead be archived with access controls that prevent any further use until the obligation expires.
Pakistani bpexch Players hold the following rights in relation to their personal data. To exercise any of these rights, please submit a written request to [email protected] with "Privacy Rights Request" in the subject line. bpexch will respond to all verified requests within thirty (30) calendar days.
Identity Verification for Rights Requests: To protect your privacy, bpexch will verify your identity before processing any data rights request. You may be asked to confirm account details or provide a copy of your registered identity document before the request is actioned.
11.1 Minimum Age. The bpexch Platform is strictly for adults aged 21 years and above. bpexch does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the KYC process required before withdrawal processing, and all bpexch Accounts are subject to age verification requirements under our international gaming licence.
11.2 Discovery of Minor Account Use. If bpexch discovers or has reasonable grounds to believe that personal data belonging to a person under 21 years of age has been collected through the Platform — whether through underage registration or through a minor accessing an adult's Account — bpexch will: (a) immediately suspend the Account; (b) initiate deletion of any personal data associated with the minor; (c) refund any deposits attributable to the minor's use to the registered payment method; and (d) where required by our licensing conditions, report the incident to the relevant regulatory authority.
11.3 Parental Controls. If you are a parent or guardian who believes that a person under 21 in your care has accessed or registered on bpexch, please contact us immediately at [email protected]. bpexch will treat such communications as urgent and will respond within twenty-four (24) hours.
12.1 Cross-Border Processing. Some of the third-party service providers engaged by bpexch — including KYC verification partners, game software providers, and fraud detection services — may process your personal data on servers located outside Pakistan. Where such international transfers occur, bpexch ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Pakistan.
12.2 Safeguards. Safeguards for international data transfers employed by bpexch include: contractual data processing clauses that impose equivalent data protection obligations on the recipient; transfers to jurisdictions that maintain adequate data protection frameworks; and technical measures including encryption in transit and at rest that protect data regardless of processing location.
12.3 PKR Payment Data. Financial data relating to PKR transactions processed through JazzCash, EasyPaisa, and Pakistani banks (HBL, UBL, Meezan Bank) is processed primarily within Pakistan's domestic financial infrastructure and is not routinely transferred to overseas servers by bpexch's payment partners.
13.1 Right to Update. bpexch reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, our gaming licence obligations, applicable law, or our product and service offerings. All material updates will be notified to registered Players via the bpexch Platform and/or by email to the address associated with your Account.
13.2 Effective Date. Updated versions of this Privacy Policy will display the revised effective date at the top of the document. Your continued use of the bpexch Platform after the effective date of any update constitutes your acknowledgement of the revised Policy. If you do not accept material changes to this Policy, you should close your bpexch Account before the effective date of the relevant update.
13.3 Archived Versions. Prior versions of this Privacy Policy are available upon request from bpexch support. This current version was last reviewed and updated on 1 January 2026.
For all privacy-related enquiries, data rights requests, or concerns about how bpexch processes your personal data, please contact the bpexch Data Protection team using the following details. Please include "Privacy" or "Data Rights Request" in your subject line to ensure prompt routing to the correct team:
This Privacy Policy was last reviewed on 1 January 2026 and is effective from that date. Pakistani bpexch players are encouraged to review this Policy periodically. For a full description of your rights when using the bpexch Platform, please also read our Terms & Conditions.
bpexch applies bank-grade security to your personal data and PKR balance. Cricket betting, live dealer casino, and 500+ slots — all behind a secure, privacy-respecting login. 21+ only.