BPExch Privacy Policy – How We Collect, Use and Protect Your Personal Data

This Privacy Policy applies to BPExch ("bpexch", "the Platform", "we", "us", "our") and covers all services available at bpexch-bangla.com, including sports betting, live casino, esports betting, poker, baccarat and the VIP Club programme. It applies to all registered users and visitors from Pakistan and any other jurisdiction where the platform is accessible.

When you register on bpexch, make a deposit, place a bet or contact our support team, you are entrusting us with personal information. This policy explains exactly what we do with that information and why. We have tried to write it in a way that is straightforward and readable rather than deliberately complex, because we believe Pakistani players deserve to understand clearly what happens with their data.

This policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which are incorporated into your agreement with bpexch.

BPExch collects personal data in three main ways: information you provide directly when registering and using the platform, information generated automatically by your use of bpexch, and information we receive from third parties (such as payment processors) in connection with your account.

Information You Provide Directly

• Registration details: Full name, date of birth, email address, mobile phone number and the password you choose.
• Identity verification (KYC): Copy of your CNIC (Computerised National Identity Card) or other accepted identity document, and proof of address where required.
• Payment information: Your Easypaisa or JazzCash mobile number, NayaPay or SadaPay account details, bank account details for IBFT transfers, or debit card details for Visa/Mastercard payments. Note: full card numbers are never stored on bpexch servers – see Section 5.
• Communications: Content of any messages you send to bpexch support via email, live chat or other channels.
• Responsible gaming preferences: Any deposit limits, cooling-off periods or self-exclusion settings you configure in your account.

Information Collected Automatically

• IP address and approximate geographic location derived from it.
• Device type, operating system and browser information.
• Betting and gaming activity – markets viewed, bets placed, amounts, outcomes and session duration.
• Login timestamps and session activity logs.
• Cookie and tracking data as described in Section 7.

The personal data we collect is used for the following purposes. We only use data for purposes that are consistent with why it was collected or for a compatible purpose that you would reasonably expect.

BPExch does not use your personal data for automated decision-making that has significant legal effects on you, other than in clearly defined cases such as automated fraud detection triggers that are reviewed by human staff before any account action is taken.

BPExch processes personal data only where we have a valid legal basis to do so. The main legal bases we rely on are:

• Contract performance: Processing is necessary to fulfil the contract we have with you – operating your account, processing bets and payments, and providing the services you registered for.
• Legal obligation: We are required to collect and retain certain data to comply with anti-money laundering regulations, age verification requirements and financial record-keeping obligations.
• Legitimate interests: We process certain data (such as activity logs and security monitoring data) based on our legitimate interest in protecting the platform, detecting fraud and operating a responsible gaming environment. We balance this against your privacy rights and only process what is proportionate.
• Consent: Where we send you promotional communications, we do so on the basis of your consent, which you can withdraw at any time by updating your communication preferences in your bpexch account settings or by contacting support.

All financial transactions on bpexch are processed in Pakistani Rupees (PKR) through secure, encrypted payment channels. When you make a deposit or request a withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or Visa/Mastercard, your payment details are handled according to the following security principles:

• Card data: Full debit card numbers are never stored on bpexch servers. Card payments are processed via PCI-DSS compliant payment processors. BPExch stores only a tokenised reference that allows us to process future transactions with the same card without retaining the card number itself.
• Mobile wallet accounts: Easypaisa and JazzCash account numbers associated with your bpexch account are stored in encrypted form and are used only to credit withdrawals to the correct account.
• Bank details: IBFT bank account information provided for withdrawal purposes is stored securely and is accessible only to authorised payment processing staff at bpexch.
• Transaction records: A complete record of all deposits and withdrawals is maintained on bpexch and is accessible in your account history. These records are retained for the period required under applicable financial regulations.

BPExch does not sell your personal data. We share personal data only in the following limited circumstances:

Payment Processors

When you make a deposit or withdrawal, your relevant payment details are shared with the payment processor handling that transaction (for example, Easypaisa's payment gateway or your bank for IBFT). These processors act under contractual data processing agreements with bpexch and are prohibited from using your data for any purpose other than processing the transaction.

Identity Verification Services

BPExch may use regulated third-party identity verification services to confirm the validity of identity documents submitted during KYC. These services are bound by strict confidentiality and data protection obligations.

Legal and Regulatory Requirements

We may be required to disclose personal data to government authorities, law enforcement agencies or regulators where we are legally obliged to do so. BPExch will only comply with valid legal requests and, where legally permitted, will inform you that such a request has been made.

Business Operations

BPExch uses a small number of trusted technology service providers (cloud hosting, customer support software, analytics) who may process data on our behalf. All such providers operate under data processing agreements that prohibit independent use of your data and require them to maintain security standards equivalent to those maintained by bpexch.

BPExch uses cookies and similar tracking technologies to operate the platform, remember your preferences and understand how the platform is being used. Here is a straightforward breakdown of what we use and why:

• Strictly necessary cookies: These are required for the platform to function – they maintain your login session, remember your account preferences and ensure that bets are attributed to the correct account. You cannot opt out of these without stopping use of the platform.
• Performance cookies: These collect anonymised data about how pages are used and which features are popular. This helps bpexch improve the platform experience. No personally identifiable information is collected through performance cookies.
• Functional cookies: These remember choices you have made – such as language preferences or betting market filters – so you do not have to set them again each session.
• Security cookies: Used to detect and prevent fraudulent activity, including suspicious login attempts and automated bot traffic.

You can manage your cookie preferences through your browser settings. Disabling cookies that are not strictly necessary will not prevent you from using bpexch but may affect the convenience of certain features. Most modern mobile browsers on Android and iOS allow granular cookie control in their settings menu.

Protecting the personal data of Pakistani players is something bpexch takes seriously at a technical and organisational level. The following measures are in place:

• Transport Layer Security (TLS): All data transmitted between your device and bpexch is encrypted in transit. You will see the padlock icon in your browser confirming the secure connection.
• Encryption at rest: Sensitive data stored in bpexch databases – including identity documents, payment details and contact information – is encrypted using AES-256.
• Access controls: Access to personal data within bpexch is restricted on a strict need-to-know basis. Staff who do not need access to personal data to perform their job function do not have it. All access to sensitive data is logged and audited.
• Two-factor authentication: BPExch supports two-factor authentication for player accounts. We strongly recommend enabling this in your account security settings.
• Penetration testing: The bpexch platform undergoes regular security testing by qualified third parties to identify and address vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that affects your personal data, bpexch has procedures in place to contain the incident, assess the impact and notify affected players as required.

As a bpexch user, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team at support@bpexch-bangla.com with your full name, registered mobile number and a description of your request. We will respond within 30 days.

BPExch retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. The following general retention periods apply:

• Active account data: Retained for the lifetime of your active account plus a period of up to 5 years after account closure, to comply with financial record-keeping obligations and to handle any disputes that may arise.
• Transaction records: Deposit and withdrawal records are retained for a minimum of 5 years in line with standard financial regulation requirements applicable to online payment processing.
• Identity verification documents: CNIC copies and other KYC documents are retained for the period required by our AML compliance obligations, typically 5 years from the date of your last transaction or account closure, whichever is later.
• Support communications: Chat logs and email correspondence are retained for a period of 2 years after the conversation is closed, for quality assurance and dispute resolution purposes.
• Marketing data: If you have opted in to marketing communications, your contact details for marketing purposes are retained until you withdraw consent or request deletion.

When the applicable retention period expires, your data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

BPExch is strictly an adults-only platform. No one under the age of 18 is permitted to register an account or use any service offered by bpexch. If we discover or have reason to believe that personal data has been collected from a person under 18, we will delete that data immediately and close the associated account.

We do not knowingly collect or process personal data relating to minors. If you are a parent or guardian and believe that a minor in your care has registered on bpexch or provided personal information to the platform, please contact us immediately at support@bpexch-bangla.com so that we can investigate and take appropriate action.

The bpexch platform does not contain links to third-party websites beyond those directly required to operate the service (such as payment processor pages). This Privacy Policy applies only to data processed by bpexch. If you navigate to any external site, that site's own privacy policy governs the collection and use of your data there, and bpexch has no responsibility for how third-party sites handle your information.

Live game content in the bpexch live casino is provided by licensed game providers who stream content to the platform. While bpexch does not share your personal data with these providers beyond what is technically necessary for game delivery, those providers operate under their own data processing agreements. Game play session data associated with your bpexch account remains under bpexch's data management.

BPExch reviews this Privacy Policy regularly and may update it to reflect changes in how we operate, changes in applicable law, or feedback from users. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to your registered email address or mobile number describing the key changes before they take effect.
• Display a prominent notice on the bpexch platform for a reasonable period after the changes go live.

Minor corrections – such as fixing a typographical error or clarifying existing language without changing its substance – may be made without advance notice. If you disagree with any updated version of this policy, you should stop using bpexch and contact support to close your account. Continued use of the platform after a notified change constitutes your acceptance of the revised policy.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how bpexch has handled your personal information, please get in touch using the following channels:

• Email: support@bpexch-bangla.com – use the subject line "Privacy Request" for data rights enquiries. We respond within 30 days.
• Live Chat: Available 24/7 in your bpexch account for general privacy questions. For formal data rights requests we recommend email for documentation purposes.

We take all privacy concerns seriously and will investigate and respond to any complaint about our data handling practices. If you are not satisfied with our response to a complaint, you may have the right to escalate to a relevant regulatory body depending on your jurisdiction.

Related policies you may also want to review:

• Terms and Conditions – the full contractual rules for using bpexch.
• Responsible Gaming – tools and resources for managing your betting activity safely.
• FAQ – answers to common account, payment and platform questions.