BPExchNet Privacy Policy – How We Handle Your Personal Data

This Privacy Policy describes how bpexchnet collects, uses, stores, and protects the personal data of members who access and use the bpexchnet platform at bpexchnet.bet. It applies to all Pakistani members and to anyone else who interacts with bpexchnet in any way – whether that is registering an account, making a deposit, playing a game, placing a bet, or simply browsing the website.

Privacy matters to us not as a legal formality but as a genuine commitment. bpexchnet was built for Pakistani users, and Pakistani users deserve to know exactly how their information is handled by a platform they trust with their money and their personal details. This policy aims to give you that understanding in plain, readable language.

bpexchnet is the operator of the online betting and casino platform accessible at bpexchnet.bet. For the purposes of this Privacy Policy, bpexchnet is the data controller – meaning we are the entity that determines why and how your personal data is processed. When this policy refers to "we," "us," or "our," it refers to bpexchnet.

Our primary point of contact for privacy-related matters is our customer support team, reachable at support@bpexchnet.bet. Any correspondence related to data protection, access requests, or erasure requests should be directed to this address. We aim to acknowledge all privacy-related enquiries within 24 hours and to resolve them within 30 calendar days.

bpexchnet collects the following categories of personal data from members and prospective members:

bpexchnet collects personal data through the following channels:

• Direct input: Data you provide when registering your bpexchnet account, completing your profile, submitting a deposit or withdrawal request, or contacting our support team.
• Automated collection: Technical and usage data collected automatically as you interact with the bpexchnet platform, including IP address, device identifiers, and page interaction logs collected via cookies and similar technologies.
• Payment providers: Transaction confirmation data received from Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors, and Visa/Mastercard acquirers when you make a deposit or receive a withdrawal at bpexchnet.
• Identity verification services: Where bpexchnet uses third-party KYC (Know Your Customer) providers to verify the identity documents you submit, those providers may return verified identity data to us.
• Referral programme: If you join bpexchnet through the Refer a Friend programme, the referring member's account is linked to yours for the purpose of tracking referral rewards. No additional personal data from the referring member is shared with you, and no personal data from you is shared with the referring member beyond confirmation that a referral was successful.

bpexchnet uses your personal data for the following purposes:

• Account management: To create and maintain your bpexchnet account, verify your identity, manage your PKR balance, and process your deposits and withdrawals.
• Platform operation: To deliver the games, betting markets, and features you use on the bpexchnet platform, and to personalise your experience based on your game preferences and betting history.
• Financial processing: To process deposits, withdrawals, bonus credits, and cashback payments accurately and promptly to the correct payment method.
• Legal compliance: To comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any other applicable legal or regulatory obligations.
• Fraud prevention and security: To detect and prevent unauthorised account access, fraudulent transactions, and other forms of abuse on the bpexchnet platform.
• Customer support: To respond to your queries, resolve disputes, and improve the quality of our support interactions.
• Communications: To send you transactional notifications (deposit confirmations, withdrawal confirmations, account security alerts) and, where you have opted in, promotional communications about bpexchnet bonuses and new features.
• Platform improvement: To analyse usage patterns and technical performance across the bpexchnet platform and use those insights to improve the member experience.
• Responsible gaming: To monitor gaming behaviour patterns that may indicate problem gambling and to apply responsible gaming tools where appropriate.

bpexchnet processes your personal data under one or more of the following legal bases depending on the specific purpose:

• Contract performance: Processing that is necessary to provide you with the services you have signed up for at bpexchnet – including account creation, transaction processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML and KYC obligations.
• Legitimate interests: Processing necessary for the legitimate interests of bpexchnet, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, particularly for marketing communications. You can withdraw consent for marketing at any time by updating your communication preferences in your account settings or by contacting support.

bpexchnet does not sell your personal data. We share data only with the categories of third parties listed below, and only to the extent necessary for the specified purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processing partners, and Visa/Mastercard acquirers receive the transaction data necessary to process your deposits and withdrawals. These providers process data under their own privacy policies and are required to maintain appropriate security standards.
• Identity verification providers: Third-party KYC service providers that assist bpexchnet in verifying the identity documents submitted by members. These providers receive only the data necessary to complete the verification and are contractually prohibited from using it for any other purpose.
• Game software providers: The companies that develop and supply the casino games available on bpexchnet may receive anonymised usage data to support game performance and technical troubleshooting. These providers do not receive personally identifiable information unless strictly necessary for a specific technical issue.
• Fraud prevention and security services: Third-party services that assist bpexchnet in detecting and preventing fraudulent activity. These providers receive technical data such as IP addresses and device fingerprints for risk-scoring purposes.
• Legal and regulatory authorities: Government agencies, law enforcement bodies, and regulatory authorities where bpexchnet is legally required to disclose information – for example, in connection with AML investigations or court orders.
• Professional advisers: Lawyers, auditors, and accountants who assist bpexchnet with legal and financial compliance. These parties are bound by professional confidentiality obligations.

bpexchnet retains your personal data for as long as is necessary to fulfil the purposes for which it was collected. The specific retention periods we apply are:

• Account data: Retained for the duration of your bpexchnet membership and for 5 years after account closure, to comply with financial record-keeping obligations.
• Transaction records: Retained for 7 years from the date of the transaction, in line with standard financial compliance requirements.
• Identity verification documents: Retained for 5 years from the date of submission or from account closure, whichever is later, to satisfy AML record-keeping requirements.
• Communications records: Chat logs and email correspondence retained for 2 years from the date of the interaction, unless the content is relevant to an ongoing dispute or legal matter.
• Technical and usage data: Retained for 13 months from collection to allow for year-on-year trend analysis, after which it is aggregated or deleted.
• Marketing consent records: Retained for 3 years from the date of consent or withdrawal of consent, as required for compliance purposes.

When the applicable retention period expires, bpexchnet will securely delete or anonymise the relevant data. Anonymised data – where all identifying information has been permanently removed – may be retained indefinitely for statistical purposes.

bpexchnet takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption on all data transmitted between your device and the bpexchnet platform, ensuring that your personal and financial information cannot be intercepted in transit.
• Encrypted storage of sensitive personal data, including payment details and identity documents, in our secure database infrastructure.
• Access controls that restrict access to personal data on a strict need-to-know basis. bpexchnet staff can only access the minimum data required to perform their specific job function.
• Multi-factor authentication options for member accounts to reduce the risk of unauthorised access through compromised passwords.
• Regular security assessments of our platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Staff training on data protection obligations and security best practices, conducted at onboarding and on a regular ongoing basis.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that affects your personal data, bpexchnet will notify affected members promptly and take all appropriate steps to contain and remediate the breach.

bpexchnet uses cookies and similar tracking technologies to make the platform work correctly, to remember your preferences, and to understand how members interact with the platform so we can continue improving it. The types of cookies we use are:

• Strictly necessary cookies: Essential for the bpexchnet platform to function. These include session management cookies that keep you logged in during your visit. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and game history. These improve your experience but are not essential.
• Analytics cookies: Allow bpexchnet to understand how members navigate the platform – which pages are most visited, where members encounter difficulties, and how long sessions typically last. This data is aggregated and used for platform improvement only.
• Marketing cookies: Used only where you have consented, to track whether you arrived at bpexchnet through a referral link and to measure the effectiveness of any promotions you were shown before registering.

As a bpexchnet member, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@bpexchnet.bet. We will respond within 30 calendar days of receiving a valid request.

Requests to exercise any of these rights are free of charge. If a request is manifestly unfounded or excessive, bpexchnet reserves the right to charge a reasonable administrative fee or decline the request, explaining the reason in writing.

The bpexchnet platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will immediately delete that data and close any associated account.

If you are a parent or guardian and believe that a minor has registered on the bpexchnet platform, please contact us immediately at support@bpexchnet.bet. We will investigate and take appropriate action without delay.

bpexchnet primarily processes and stores member data on servers located in secure data centres. Some of our third-party service providers – particularly game software suppliers and fraud prevention services – may process data in jurisdictions outside Pakistan. Where such transfers occur, bpexchnet ensures that appropriate contractual protections are in place to maintain the same standard of data protection that applies within Pakistan.

We do not transfer your personal data to any country or organisation that does not provide an adequate level of data protection. Where we rely on contractual protections, we use standard contractual clauses that require the recipient to protect your data to the same standard as bpexchnet.

bpexchnet may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. When material changes are made, we will notify active members by email and display a notice on the platform for at least 14 days before the updated policy takes effect.

The "Last Updated" date at the top of this page shows when the most recent changes were made. We encourage you to review this Privacy Policy periodically. Your continued use of the bpexchnet platform after the updated policy takes effect constitutes your acceptance of the changes. If you do not agree with an updated policy, you may close your account and request deletion of your data as described in the Your Rights section above.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bpexchnet handles your personal data, please get in touch using any of the following methods:

• Live chat: Available directly on the bpexchnet platform, 24 hours a day, 7 days a week. Average response time under 3 minutes during peak Pakistan Standard Time hours.
• Email: support@bpexchnet.bet – please include "Privacy Query" in your subject line so your message is directed to our privacy team immediately. We aim to respond within 4 hours during Pakistani business hours.

For formal data subject requests (access, erasure, rectification, portability, objection), please send your request to the email address above with the subject line "Data Subject Request" and include your full name, registered email address, and a description of the specific request. We will acknowledge receipt within 24 hours and complete the request within 30 calendar days.