How bpexc collects, uses, stores, and protects the personal data of Pakistani players — including KYC data, payment information, and account activity records.
bpexc ("bpexc", "we", "us", "our") operates the online casino and sports betting platform accessible at bpexc.app (the "Platform"). This Privacy Policy describes how bpexc collects, processes, stores, shares, and protects the personal information of users ("you", "User", "Player") who access or use the Platform.
By registering an account on bpexc, making a deposit, placing a bet, or otherwise using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside the bpexc Terms & Conditions.
bpexc is committed to handling your personal data responsibly and in a manner consistent with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.
bpexc collects personal data that is necessary for the provision of its services, the fulfilment of legal and regulatory obligations, and the improvement of the Platform. The categories of data collected include:
| Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, passport number, nationality |
| Contact Data | Email address, mobile phone number, city of residence (e.g., Karachi, Lahore, Islamabad) |
| Account Data | Username, account ID, account registration date, login history, session data |
| Financial Data | PKR deposit and withdrawal amounts, payment method identifiers (JazzCash, Easypaisa, HBL, UBL, etc.), transaction history |
| KYC Documentation | Copies of CNIC, passport, proof of address, and any other identity documents submitted for verification |
| Gaming Activity Data | Game history, bet records, wager amounts, sports betting markets accessed, bonus usage |
| Technical Data | IP address, device type, operating system, browser type, screen resolution, referring URL |
| Behavioural Data | Platform navigation patterns, session duration, feature usage frequency |
| Communications Data | Content of support chat conversations and email correspondence with bpexc |
bpexc collects personal data through the following mechanisms:
bpexc processes your personal data for the following purposes:
bpexc processes your personal data on one or more of the following legal bases:
bpexc does not sell your personal data to third parties. We share your data only in the following circumstances and only to the extent necessary:
All third-party processors engaged by bpexc are required to maintain appropriate technical and organisational security measures and to process personal data only in accordance with bpexc's documented instructions.
bpexc retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following principles:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible.
bpexc uses cookies and similar tracking technologies on the Platform. These technologies serve the following purposes:
Non-essential cookies are placed only with your consent, which may be managed via your browser settings at any time. Disabling non-essential cookies will not prevent you from accessing core Platform features but may affect personalisation functionality.
Subject to applicable law, you have the following rights with respect to your personal data held by bpexc:
To exercise any of these rights, contact bpexc support via the email address listed in the footer of this page. bpexc will respond to verified requests within a reasonable timeframe. Identity verification may be required before a request is actioned.
bpexc implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include HTTPS encryption across all Platform pages, password hashing, access controls restricting internal data access on a need-to-know basis, and regular security reviews of Platform infrastructure.
Notwithstanding these measures, no online system can guarantee absolute security. Users are encouraged to take responsibility for their own account security by using strong, unique passwords, enabling two-factor authentication where available, and logging out of bpexc after each session — particularly when accessing the Platform from shared devices in cities like Karachi, Lahore, or anywhere across Pakistan.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, bpexc will notify affected users without undue delay in accordance with applicable obligations.
The bpexc Platform is strictly for users aged 18 years and above. bpexc does not knowingly collect or process personal data from individuals under the age of 18. If bpexc becomes aware that personal data has been collected from an underage user, that data will be deleted and the associated account closed immediately. Parents and guardians who believe a minor has created a bpexc account should contact support immediately using the contact information in the footer of this page.
bpexc may update this Privacy Policy from time to time to reflect changes in data processing practices, legal requirements, or Platform features. Material changes will be communicated via a notice on the Platform or to your registered email address prior to the changes taking effect. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of bpexc following any update constitutes acceptance of the revised Policy.
For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bpexc, please contact the support team via the email address listed in the footer of this page or via live chat from within your logged-in bpexc account. Support operates in English. For privacy-specific requests, please mark your message clearly as a data privacy enquiry to ensure it is directed appropriately.
Six key principles behind the bpexc approach to personal data and player privacy.
Every page of the bpexc Platform — including the login screen, Cashier, and account settings — is served over HTTPS. Your credentials, payment details, and personal data are encrypted in transit at all times.
Identity documents submitted for KYC verification — CNIC, passport, proof of address — are stored securely with access restricted to authorised personnel. KYC data is retained only as long as required under applicable compliance standards.
bpexc does not sell your personal data to third parties. Data is shared only with service providers who are contractually bound to process it solely for the purposes of delivering bpexc services to you.
You can request access to, correction of, or deletion of your personal data at any time by contacting bpexc support. Marketing communications can be unsubscribed at any time via your account settings.
Gaming behaviour data is used by bpexc to support responsible gaming obligations — including enforcing self-exclusion orders and deposit limits. This data is never used for third-party marketing purposes.
bpexc does not knowingly collect data from users under 18. Age verification is integral to the KYC process. Any account identified as belonging to an underage user is closed and all associated data deleted immediately.
Your data is protected. Your account is encrypted. Cricket betting, live casino, and slots — all in PKR. 18+ only.
18+ only. Please review the full Privacy Policy above before using the bpexc platform.