BPEX Privacy Policy – How We Protect Your Data in Pakistan

01

Introduction

This Privacy Policy explains how BPEX — operating at bpex.click — collects, uses, stores, and protects the personal information of users in Pakistan. BPEX is committed to handling your data responsibly and transparently, in line with applicable data protection principles and best practices.

When you register a BPEX account, deposit funds, place a bet, play any BPEX game, or simply browse the platform, you are sharing certain information with us. This Policy tells you what that information is, what we do with it, how long we keep it, and what you can do if you want to access or delete it.

BPEX may update this Policy from time to time. When changes are made, the "Last Updated" date at the top of this page is updated. We encourage you to review this Policy periodically. Continued use of BPEX after any update constitutes your acceptance of the revised Policy.

Plain Language Summary: BPEX collects only the data needed to run your account, process payments, and keep the platform secure. We don't sell it. We encrypt it. We delete it when it's no longer needed. You can ask us what we have and request corrections or deletion at any time by emailing support@bpex.click.

02

Data We Collect

BPEX collects personal data in three ways: information you provide directly, information generated automatically by your use of the platform, and information received from third-party verification services when required.

Information You Provide

Data Type	Examples	When Collected
Identity Data	Full name, date of birth, CNIC number	Registration and KYC verification
Contact Data	Pakistani mobile number, email address	Account registration
Financial Data	Easypaisa / JazzCash account references, bank details (masked)	Deposits and withdrawals
Verification Documents	CNIC copy, passport scan	KYC process when triggered
Account Preferences	Marketing opt-ins, notification settings, responsible gaming limits	Account settings
Support Communications	Live chat transcripts, email correspondence	When you contact BPEX support

Information Collected Automatically

Device and browser data: Device type, operating system, browser version, screen resolution, and language settings collected when you access BPEX.
IP address and location: Your IP address and approximate location (city-level) used for fraud prevention and to confirm you are accessing from Pakistan.
Session data: Login timestamps, session duration, pages visited within BPEX, and navigation patterns.
Betting and gaming history: All bets placed, games played, stakes, outcomes, and transaction history within your BPEX account.
Cookies and tracking data: Described in detail in Section 7 of this Policy.

Data from Third Parties

BPEX may receive identity verification data from third-party KYC service providers when you submit verification documents. BPEX may also receive fraud-prevention signals from payment processors when you make a deposit or withdrawal. This data is used solely for the purposes described in this Policy.

03

How We Use Your Data

BPEX uses the data we collect for specific, legitimate purposes. We do not use your data in any way that exceeds what is described here without first updating this Policy and notifying you.

Core Platform Operations

Creating and managing your BPEX account, including authentication and password recovery.
Processing deposits, settling bets, paying out winnings, and processing withdrawal requests to your nominated Pakistani payment method.
Verifying your identity and age to comply with responsible gaming requirements and applicable regulations.
Providing customer support via live chat, email, and account management tools.

Safety, Security and Compliance

Detecting and preventing fraudulent activity, including account takeover, bonus abuse, collusion, and payment fraud.
Monitoring for suspicious betting patterns that may indicate match manipulation or insider knowledge.
Complying with applicable anti-money laundering requirements, including transaction monitoring and suspicious activity reporting.
Enforcing BPEX's Terms and Conditions and this Privacy Policy.

Platform Improvement

Analysing aggregated, anonymised usage data to improve platform performance, fix bugs, and develop new features.
Understanding which games, sports markets, and features are most used so BPEX can invest in what Pakistani players actually want.

Marketing and Communications (With Your Consent)

With your explicit consent, BPEX may use your contact information to send you promotional offers, bonus notifications, and platform updates. You can withdraw this consent at any time through your account settings or by emailing support@bpex.click. See Section 10 for full details on managing your marketing preferences on BPEX.

04

Legal Basis for Processing

BPEX processes your personal data under the following legal bases:

Contractual necessity: Processing required to deliver the BPEX service to you — account creation, payment processing, bet settlement, customer support. Without this processing, BPEX cannot provide you with the platform.
Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming compliance — where our legitimate interest in maintaining a safe and reliable platform does not override your privacy rights.
Legal obligation: Processing required to comply with applicable regulations — including age verification, identity checks, and financial transaction monitoring.
Consent: Marketing communications and non-essential cookies, where you have given clear, informed consent that you can withdraw at any time.

05

Data Sharing

BPEX does not sell your personal data. We share it only in the limited circumstances below, and only with parties who are bound by appropriate data protection obligations.

Who BPEX May Share Data With

Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive the minimum data needed to process your financial transactions. They process this data under their own privacy policies and applicable financial regulations.
Identity verification providers: Third-party KYC services receive your identity documents when verification is required. They use this data solely for verification purposes.
Cloud and hosting providers: BPEX uses secure cloud infrastructure to host the platform. Hosting providers have access to server-level data but are contractually prohibited from using it for any purpose beyond infrastructure delivery.
Legal and regulatory authorities: BPEX will share data with law enforcement, regulatory bodies, or courts when required to do so by applicable law — for example, in response to a valid legal order related to suspected financial crime.

Never Sold: BPEX will never sell, lease, or trade your personal data to advertising networks, data brokers, marketing companies, or any commercial third party for their own use. This is a hard commitment — not a policy that changes with business circumstances.

06

Data Storage and Security

Where Your Data is Stored

BPEX stores player data on secure servers. Access to data is strictly limited to BPEX staff and contractors who require it to perform their specific role — access is role-based, logged, and audited regularly.

Security Measures

256-bit SSL/TLS encryption for all data in transit between your device and BPEX servers.
Encryption at rest for sensitive data including identity documents and payment references.
Multi-factor authentication required for all BPEX staff accounts with access to player data.
Regular penetration testing and security audits by independent third parties.
Automated monitoring systems that flag unusual access patterns or data exfiltration attempts in real time.

How Long We Keep Your Data

Data Category	Retention Period	Reason
Account and identity data	Duration of account + 5 years after closure	Regulatory compliance
Transaction records	7 years from transaction date	Financial record-keeping requirements
Betting and game history	3 years from account closure	Dispute resolution and integrity checks
Support communications	2 years from last contact	Service quality and complaint handling
Marketing preference data	Until you opt out or close account	Consent management
Security/fraud logs	3 years	Fraud prevention and investigation

Data Breach Response: In the unlikely event of a security incident that affects your personal data, BPEX will notify affected users promptly via their registered contact details, describing what happened, what data was affected, and what steps are being taken to address it.

07

Cookies Policy

BPEX uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help BPEX remember your preferences, keep you logged in, and understand how the platform is being used.

Types of Cookies Used on BPEX

Cookie Type	Purpose	Can be Disabled?
Essential	Keep you logged in, maintain session security, remember your bet slip selections, and enable core platform functionality. Without these, BPEX cannot function.	No — required for the platform to work
Analytics	Anonymised data on how users navigate BPEX — which pages are visited, how long sessions last, where users drop off. Used to improve the platform. No personally identifiable data is included.	Yes — manage in account settings
Preference	Remember your display preferences, language settings, and game lobby filters so BPEX loads your preferred configuration on each visit.	Yes — clearing browser cookies removes these

You can manage cookie preferences in your browser settings. Note that disabling essential cookies will affect your ability to use BPEX. BPEX does not use third-party advertising cookies or retargeting pixels — we do not track your behaviour outside of the BPEX platform.

08

Your Rights

As a BPEX player, you have the following rights with respect to your personal data. To exercise any of these rights, contact BPEX at support@bpex.click with "Data Rights Request" in the subject line. BPEX will respond within 30 days.

Right to Access

Request a copy of all personal data BPEX holds about you. We'll provide a structured summary within 30 days.

Right to Rectification

If any data BPEX holds about you is incorrect or incomplete, you can request a correction through your account settings or by contacting support.

Right to Erasure

Request deletion of your personal data. Note that data we are legally required to retain (e.g. financial records) cannot be deleted before the statutory period expires.

Right to Restrict Processing

Ask BPEX to pause processing your data in certain circumstances — for example, while a data accuracy dispute is being resolved.

Right to Data Portability

Request your data in a structured, machine-readable format so you can transfer it elsewhere if needed.

Right to Object

Object to processing based on BPEX's legitimate interests — particularly for marketing communications and analytics activities.

How to Exercise Your Rights: Email support@bpex.click with "Data Rights Request" in the subject line. Include your registered BPEX mobile number or email address so we can identify your account. BPEX will respond within 30 days. Complex requests may take up to 60 days — we'll notify you if this applies to your request.

09

Children's Privacy

BPEX is strictly for adults aged 18 and over. BPEX does not knowingly collect personal data from anyone under 18. If you believe a minor has registered a BPEX account or provided personal data to BPEX, please notify us immediately at support@bpex.click. BPEX will take immediate action to close the account and delete any data associated with it.

BPEX employs age verification procedures during registration and at the KYC stage specifically to prevent underage access. If at any point we identify that a player is under 18, the account is closed immediately, all funds are withheld or returned to the originating payment method depending on the circumstances, and the account details are flagged to prevent re-registration.

Parental Controls: If you are a parent or guardian and are concerned about a minor's access to online gaming platforms, we strongly recommend enabling parental control software on shared devices. BPEX cannot be accessed responsibly by anyone under 18, and our platform takes underage access very seriously.

10

Marketing Communications

BPEX only sends marketing communications — bonus offers, promotional tournaments, new game alerts — to players who have explicitly opted in. Opt-in consent is captured during registration and can be updated at any time.

Managing Your Marketing Preferences on BPEX

Account Settings: Log into your BPEX account, navigate to Settings > Notifications, and toggle your SMS and email marketing preferences on or off. Changes take effect within 24 hours.
Unsubscribe Link: Every BPEX marketing email contains an unsubscribe link at the bottom. Clicking it immediately removes your email from all marketing lists.
Contact Support: Email support@bpex.click with "Unsubscribe" in the subject line and we'll remove you from all marketing communications within 24 hours.

Note that opting out of marketing communications does not affect transactional communications — BPEX will still send you important account notifications such as deposit confirmations, withdrawal updates, and security alerts regardless of your marketing preferences.

11

Changes to This Privacy Policy

BPEX reviews this Privacy Policy regularly and will update it when our data practices change, when relevant regulations change, or when we receive feedback that clarification is needed. The "Last Updated" date at the top of this page reflects when the current version was published.

For material changes — those that significantly affect how your data is used or your rights as a player — BPEX will notify you via the mobile number or email address registered to your account before the changes take effect. For minor updates such as clarifications or corrections, the revised Policy will simply be published at this URL.

If you disagree with changes to this Privacy Policy, you may request account closure by contacting BPEX support. Continued use of BPEX after any update to this Policy constitutes your acceptance of the revised terms.

12

Contact and Complaints

If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a privacy-related complaint, BPEX is committed to responding promptly and transparently.

How to Reach BPEX on Privacy Matters

Email: support@bpex.click — mark your message "Privacy Enquiry" or "Data Rights Request" for priority routing to the relevant team.
Live Chat: Available 24/7 inside your BPEX account. Live chat handles most account-level queries instantly.
FAQ: Visit our FAQ page for quick answers to common data and account questions.

BPEX aims to acknowledge all privacy-related contacts within 24 hours and resolve them fully within 30 days. For complex data requests involving large volumes of data, we may take up to 60 days — in which case we will notify you of the extended timeline and keep you updated on progress.

Related Policies: This Privacy Policy should be read alongside BPEX's Terms and Conditions and Responsible Gaming Policy. Together, these three documents set out the complete framework governing your relationship with BPEX.

BPEX Privacy Policy – How We Protect Your Data

Privacy at BPEX – Six Core Commitments

End-to-End Encryption

No Data Sold, Ever

Minimal Data Collection

Payment Data Secured Separately

You Control Your Preferences

Clear Data Retention Limits

Contents