bpex Privacy Policy
— Your Data, Handled Honestly

1. Introduction

This Privacy Policy applies to bpex, the online sports betting and gaming platform available at bpex.win, including the bpex mobile app for Android and iOS. When we refer to "bpex", "we", "us", or "our" in this document, we mean the operator of the bpex platform.

This policy explains the types of personal information we collect from players in Pakistan and other users of the platform, what we do with that information, how we keep it secure, and what rights you have in relation to it. It should be read alongside our Terms and Conditions and our Responsible Gaming guide.

We try to write this in plain, straightforward English — not the sort of dense legal language that most people skip past. If something is not clear, the right thing to do is contact our support team and ask, rather than assume.

2. What Personal Information We Collect

We collect personal information in a few different ways — information you give us directly, information generated by your activity on the platform, and in some cases information from third parties involved in processing your transactions or verifying your identity.

Information you provide directly:

• Your full name, date of birth, and gender (required at registration to confirm you are an adult aged 18 or over).
• Your mobile number and email address, used for account access, notifications, and support.
• Your preferred payment method and the account details needed to process PKR deposits and withdrawals — for example, your JazzCash or Easypaisa registered number, or bank account details for Raast and bank transfers.
• Identity documents such as a CNIC scan or other government-issued ID, when requested as part of account verification or withdrawal processing.
• Any information you provide when contacting support, including the content of your messages.

Information generated by your use of bpex:

• Login times, session durations, and the device and browser used to access the platform.
• Your IP address and general location derived from it (we do not use GPS-level location tracking).
• Your betting and gaming activity — bets placed, games played, amounts wagered, wins and losses.
• Your transaction history, including all PKR deposits and withdrawals.
• Interactions with promotions and bonuses — which offers were viewed, accepted, or used.

Information from third parties:

• Confirmation of payment from JazzCash, Easypaisa, Raast, and other payment processors following a deposit or withdrawal.
• Identity verification results where a third-party verification service is used to confirm the authenticity of documents you submit.

3. How We Use Your Personal Information

We use the information we collect for specific, clearly defined purposes. We do not use your data for anything other than what is described here without informing you first.

We do not use your personal data to build profiles for sale to advertisers, and we do not share your betting or gaming activity with any party outside of what is described in this policy.

4. Legal Basis for Processing

Every time we use your personal data, there is a specific legal reason for doing so. The main bases on which bpex processes personal data are:

• Contract performance: Processing your account registration, deposits, withdrawals, and bet settlements is necessary to fulfil the agreement between you and bpex under our Terms and Conditions.
• Legitimate interests: Fraud detection, platform security, responsible gaming monitoring, and improving the platform are activities we carry out based on our legitimate interest in running a safe, fair service.
• Legal obligation: Identity verification and transaction monitoring may be required to meet anti-money laundering and financial crime prevention obligations.
• Consent: Sending you marketing communications by email or SMS is done only where you have opted in. You can withdraw that consent at any time through your account notification settings.

5. Who We Share Your Data With

We do not sell your personal data to anyone. We share it only with the following categories of third parties, and only to the extent needed for the specific purpose:

• Payment processors: JazzCash, Easypaisa, Raast, bank partners, and card processors receive the transaction data needed to complete your PKR deposits and withdrawals. Each of these providers has its own privacy policy governing how they handle data on their end.
• Identity verification providers: Where we use a third-party service to verify identity documents, the necessary data (such as a CNIC image and your name) is shared with that provider. Results are returned to bpex and the raw document data is not retained by us beyond the verification process.
• Game providers: When you play slots, bingo, or other third-party games on the platform, a session identifier is passed to the game provider so the game can function. Your full account details are not shared with game providers.
• Technology and hosting providers: The infrastructure that runs bpex is hosted on cloud servers. Our hosting provider stores data on our behalf under strict data processing agreements.
• Legal and regulatory requests: Where we receive a valid legal request — such as a court order or official investigation — we may be required to disclose data. We will not disclose more than the minimum required by such a request.

All third parties that receive personal data from bpex are required to handle that data securely and use it only for the purpose for which it was shared.

6. Payments and Identity Verification

All transactions on bpex are conducted in Pakistani Rupees (PKR). When you make a deposit using JazzCash, Easypaisa, Raast, a bank transfer, or a card, your payment details are processed by the payment provider directly. bpex receives a confirmation of the transaction but does not store full card numbers, wallet PINs, or banking credentials on its own servers.

For withdrawals above certain thresholds, or where our fraud detection systems flag a transaction for review, we may ask you to submit identity verification documents such as a CNIC copy. This is a standard practice to prevent financial crime and protect all players on the platform. Submitting accurate documents speeds up the process — providing false or altered documents is a serious breach of our Terms and Conditions and will result in account closure.

7. Cookies and Tracking Technologies

Like virtually every website, bpex uses cookies — small text files stored on your device — to make the platform work properly and to understand how it is being used. Here is what we use them for:

• Essential cookies: These are necessary for the platform to function. They keep you logged in, maintain your session state, and remember settings like your preferred language. You cannot opt out of essential cookies without breaking the platform.
• Analytics cookies: We use anonymised analytics data to understand how players navigate the platform, which pages are popular, and where technical issues occur. This helps us improve the experience over time.
• Preference cookies: These remember your preferences — such as which sports or game categories you have previously browsed — to make your next session feel a bit more personalised.

You can manage or clear cookies through your browser settings. Note that disabling essential cookies will prevent you from logging in or using key platform features. The bpex mobile app uses equivalent local storage technologies on your device for the same purposes.

8. How Long We Keep Your Data

We keep your personal data for as long as your account is active and for a period after closure to meet legal, financial, and dispute resolution obligations. In practice this means:

• Account data and transaction records are retained for a minimum of five years following account closure to meet financial record-keeping requirements.
• Identity verification documents are retained for as long as required to support the transaction they were submitted for, plus any legally required retention period.
• Support communications are retained for up to two years, which gives us the history needed to resolve disputes or recurring issues properly.
• Analytics and session log data is retained in aggregated or anonymised form and may be kept indefinitely as it no longer identifies individuals.

When your data is no longer needed and the retention period has expired, it is deleted or irreversibly anonymised.

9. Your Rights Over Your Personal Data

You have the following rights in relation to the personal data bpex holds about you. To exercise any of these rights, contact our support team through the Help section of the platform.

We will respond to all rights requests within 30 days. In some cases — for example, where a request is complex or we have received multiple requests at the same time — we may take up to 60 days, and we will let you know if that is the case. We will not charge a fee for requests made in good faith.

Please note that some rights are not absolute. For example, we may be unable to delete data that we are legally required to retain for financial or fraud prevention purposes. In such cases, we will explain what we can and cannot do.

10. Data Security

bpex takes the security of your personal data seriously. The platform uses industry-standard security measures including:

• Encryption of data in transit using TLS (HTTPS) across all pages and API connections.
• Encryption of sensitive data at rest, including payment-related information and identity documents.
• Access controls that ensure only authorised personnel with a specific need can view account data, and all such access is logged.
• Regular security reviews and monitoring of the platform for unusual activity.

No system is completely immune to security incidents. In the unlikely event of a data breach that affects your personal data in a meaningful way, we will notify affected users promptly and take immediate steps to contain and investigate the incident.

You also have a role to play in keeping your account secure. Use a strong, unique password, do not share your login credentials with anyone, and contact bpex support immediately if you notice any unusual activity on your account.

11. Minors and Age Restrictions

bpex is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is part of the registration process, and we may request documentary proof of age at any point.

If we discover that an account has been created by or on behalf of a minor, the account will be closed immediately and any balance refunded to the payment source, following investigation. If you believe a minor has registered on bpex using false information, please contact our support team so we can investigate and act.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the platform, the services we offer, or applicable legal requirements. When we make meaningful changes, we will update the date shown at the top of this page and make reasonable efforts to notify registered users through the platform or by email.

We encourage you to check this page periodically. Your continued use of bpex after a revised policy is published means you accept the updated terms. If you have concerns about a change, please contact support before continuing to use the platform.

13. Contact and Data Queries

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your personal information has been handled, please reach out through the Help section of the bpex platform. Our support team aims to respond to all privacy-related queries within two business days.

For data access or deletion requests, please include your registered email address and a brief description of your request so we can locate your account and respond accurately.