Privacy Policy

1Introduction

This Privacy Policy ("Policy") describes how bpxech ("bpxech", "we", "us" or "our") collects, uses, stores, shares and protects personal data relating to users ("you", "your" or "User") of the bpxech online betting and live casino platform accessible at https://bpxech.cam (the "Platform").

This Policy applies to all personal data processed in connection with your use of the Platform, whether provided at registration, during Account operation, through customer support interactions, or collected automatically via your use of the Platform's features. It should be read in conjunction with the Terms & Conditions.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, you must not use the Platform. This Policy is provided in English and governs data practices in English.

2Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

3Data Controller

bpxech is the data controller in respect of personal data collected via the Platform. The operator of this Platform is licensed in the applicable international jurisdiction as communicated separately to users. For data-related inquiries, please contact us using the details in clause 16 of this Policy.

Where bpxech engages third-party service providers to process data on its behalf (for example, KYC verification providers, payment technology providers or analytics services), those providers act as data processors under contractual obligations consistent with this Policy.

4Data We Collect

bpxech collects the following categories of personal data in connection with the operation of the Platform:

4.1 Registration Data

• Full legal name as it appears on government-issued identification
• Date of birth (for age verification purposes)
• Email address (primary contact and account notification channel)
• Username and encrypted password credentials
• Country of residence and, where relevant, city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar)
• Phone number, where provided or required for two-factor authentication

4.2 KYC and Verification Data

• Copies of government-issued photo identification (e.g., Pakistani CNIC, passport)
• Proof of address documentation
• Source-of-funds information, where required by anti-money laundering obligations
• Selfie or liveness verification image, where required by the KYC process

4.3 Financial Data

• Deposit and withdrawal transaction records (amounts in PKR where applicable)
• Payment method references (e.g., account identifiers associated with bank transfers or familiar local references such as Easypaisa or JazzCash — see note below)
• Account balance history

4.4 Betting and Gaming Activity Data

• Bet history, stake amounts, odds accepted and settlement outcomes
• Casino game sessions, wagering activity and game results
• Responsible gambling tool settings (deposit limits, session timers, self-exclusion status)

4.5 Technical and Device Data

• IP address and geolocation data (country/region level)
• Device type, operating system and browser version
• Session timestamps, page-visit duration and navigation paths within the Platform
• Cookie identifiers and similar tracking technologies (see clause 10)

4.6 Support and Communication Data

• Content of live chat, email and any other support communications
• Complaint records and resolution notes

5How We Collect Data

bpxech collects personal data through the following channels:

• Directly from you: Information you provide when registering an Account, completing KYC, making a deposit or withdrawal, placing a bet, contacting support, or updating your Account settings.
• Automatically through the Platform: Technical data collected via cookies, log files and similar technologies as you navigate and use the Platform (see clause 10).
• Third-party verification providers: Identity and document verification data returned by KYC providers engaged by bpxech in connection with account verification obligations.
• Payment processors: Transaction confirmation and status data returned by payment technology providers in connection with deposit and withdrawal processing.
• Fraud and risk tools: Risk signals and behavioural data generated by fraud-detection systems used to protect the integrity of the Platform.

6Purposes & Legal Basis for Processing

bpxech processes personal data for the following purposes, each on a defined legal basis:

7Data Sharing

bpxech does not sell, rent or trade your personal data to third parties for marketing purposes. We may share your data only in the following limited circumstances:

• KYC and identity verification providers: Third-party services engaged to verify your identity documents and confirm your eligibility to use the Platform. These providers act as data processors under appropriate agreements.
• Payment processing technology: Where necessary to process deposit or withdrawal requests, relevant financial data is shared with payment technology infrastructure providers. This does not imply endorsement by any specific financial institution.
• Fraud detection and security services: Risk management and fraud-detection tools used to protect the Platform's integrity may receive relevant session and behavioural data for analysis.
• Game and sports data providers: Aggregated, non-personally identifiable data may be shared with content and odds providers for operational purposes.
• Regulatory and legal disclosures: Where required by the operator's applicable license authority, a court order, or other valid legal obligation, bpxech may disclose personal data to relevant authorities.
• Corporate transactions: In the event of a merger, acquisition or sale of all or part of the operator's business, user data may be transferred as part of that transaction, subject to equivalent privacy protections.

8Data Retention

bpxech retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following table provides general illustrative retention periods:

All retention periods above are illustrative. Actual periods are determined by the applicable legal and regulatory framework of the operator's license jurisdiction. Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.

9Data Security

bpxech implements technical and organisational measures appropriate to the risk level of the data processed, in order to protect personal data against unauthorised access, accidental loss, destruction or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encrypted storage of sensitive personal data including passwords (stored as hashed values) and KYC documents;
• Access controls limiting data access to authorised personnel on a need-to-know basis;
• Two-factor authentication options available to users for Account login;
• Regular security reviews and monitoring of systems for anomalous access patterns.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights or interests, bpxech will notify affected users and, where required, the relevant supervisory authority, in accordance with applicable obligations.

You are responsible for maintaining the security of your own Account credentials. bpxech will never contact you by email, phone or chat to ask for your Account password.

10Cookies & Tracking Technologies

bpxech uses cookies and similar technologies (including pixel tags and session storage) to operate the Platform effectively, maintain your login session, understand how users interact with the Platform, and improve performance. The following categories of cookies are used:

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality and performance of the Platform. Strictly necessary and security cookies cannot be disabled without compromising your account security.

11International Data Transfers

As an international platform, bpxech may transfer personal data across international borders — for example, to servers operated in the jurisdiction where the operator is licensed, or to KYC and payment technology providers whose infrastructure is located outside Pakistan.

Where such transfers occur, bpxech takes steps to ensure that appropriate safeguards are in place, such as contractual data processing agreements with third-party processors. The specific transfer mechanisms depend on the applicable legal framework of the operator's license jurisdiction.

Pakistani users should be aware that data transferred outside Pakistan may be subject to the laws of the receiving country, which may differ from any applicable Pakistani data protection framework. By using the Platform, you acknowledge and accept this position.

12User Rights

Subject to the applicable legal framework of the operator's license jurisdiction and any overriding legal retention obligations, you may have the following rights in respect of your personal data:

To exercise any of the above rights, please contact bpxech using the details provided in clause 16. We will acknowledge your request and respond within a reasonable timeframe consistent with applicable legal requirements. We may need to verify your identity before processing a data rights request.

13Minors

The Platform is strictly intended for adults aged 18 years and above — or the higher minimum age required by the operator's license jurisdiction. bpxech does not knowingly collect personal data from persons under this minimum age.

If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered on the Platform, please contact us immediately at the address in clause 16.

14Third-Party Links

The Platform may contain references to third-party services, payment infrastructure or content providers. This Privacy Policy applies only to data processing carried out by bpxech. Where the Platform links to or integrates with third-party services, those third parties operate under their own privacy policies, which are independent of this Policy.

bpxech is not responsible for the privacy practices of any third-party service, including payment providers referenced as familiar local options for Pakistani users (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah). These names are contextual references only and do not indicate a data-sharing partnership or endorsement of gambling by those institutions.

15Amendments to This Policy

bpxech reserves the right to update or amend this Privacy Policy at any time. Material changes — those that affect how we collect, use or share your personal data — will be communicated to registered users via email or a prominent notice on the Platform prior to the change taking effect.

Minor, non-material changes (such as formatting corrections or clarifications that do not alter the substance of the Policy) may be made without advance notice. The "Last updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. The current version of this Policy is always available at https://bpxech.cam/privacy-policy.

16Contact Us

For any questions, requests or concerns relating to this Privacy Policy or the processing of your personal data by bpxech, please contact our support team. All privacy-related communications are handled in English; Urdu-language assistance is available on request via live chat.