How bpexch collects, processes, stores, and protects your personal data. This policy applies to all registered users across Pakistan — from Karachi to Islamabad — accessing the bpexch platform.
bpexch ("we", "us", "our", or "the Company") is committed to protecting the privacy and personal data of every individual who accesses or uses the bpexch platform at bpexch.ws (the "Platform"). This Privacy Policy ("Policy") sets out how we collect, use, store, share, and protect your personal information in connection with your use of our online betting exchange, sportsbook, casino, and related services.
This Policy applies to all users of the bpexch Platform, including registered account holders, visitors browsing the site without an account, and individuals who interact with bpexch through any supported communication channel. It covers data collected through the website, mobile-optimised browser sessions, and any communication you initiate with our support team.
By registering an account on bpexch, making a deposit, placing a wager, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.
Important: This Privacy Policy must be read in conjunction with bpexch's Terms & Conditions, which govern your overall use of the Platform. Both documents are legally binding and form part of your agreement with bpexch.
bpexch collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and in certain cases from third-party verification and payment service providers. The categories of personal data we collect include:
When you create a bpexch account, we collect your full legal name as it appears on your Pakistani CNIC or passport, your date of birth, gender, nationality, and a copy of your government-issued identification document for KYC (Know Your Customer) verification purposes. This data is mandatory — without it, we cannot open a real-money account or process any financial transactions on your behalf.
We collect your email address, Pakistani mobile number (required for JazzCash and EasyPaisa wallet linkage and SMS two-factor authentication), and your city or region of residence. We may also collect a mailing address where required for enhanced due diligence or regulatory compliance purposes.
We collect details of all deposits, withdrawals, wagers, and bonus redemptions made through your bpexch account. This includes payment method details (JazzCash wallet ID, EasyPaisa number, bank account name and IBAN, card type and last four digits), transaction amounts in PKR, timestamps, and transaction reference numbers. We do not store full card numbers or CVV codes — card payment data is handled by PCI-DSS compliant payment processors.
We automatically collect certain technical data when you access the Platform, including your IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, session duration, pages visited, and referring URL. This data is used for security monitoring, fraud detection, and improving Platform performance.
We collect data about how you interact with the Platform — including which sports markets, casino games, or slot titles you browse and wager on, your betting history, session frequency, and responsible gaming tool usage (such as deposit limits set or self-exclusion requests). This data helps us tailor the Platform experience and identify responsible gaming concerns at an early stage.
| Data Category | Examples | Mandatory |
|---|---|---|
| Identity | Full name, CNIC, date of birth, nationality | Yes |
| Contact | Email, mobile number, city | Yes |
| Financial | JazzCash ID, bank IBAN, transaction history | Yes |
| Technical | IP address, device type, browser | Auto-collected |
| Behavioural | Betting history, session data, game preferences | Auto-collected |
| Communications | Support tickets, chat transcripts, email enquiries | When initiated |
bpexch uses your personal data strictly for the purposes described below. We do not sell your personal data to any third party for their own commercial marketing purposes — ever.
bpexch processes your personal data on the following legal bases, depending on the specific purpose of processing:
bpexch uses cookies and similar tracking technologies (including web beacons and session tokens) on the Platform. Cookies are small text files stored on your device that help the Platform function correctly and allow us to analyse usage patterns. The cookies we use fall into three categories:
These cookies are essential for the Platform to operate. They manage your login session, maintain your account authentication state, and enable the secure processing of transactions. You cannot opt out of strictly necessary cookies while using the Platform — without them, the site cannot function.
We use first-party analytics cookies to understand how users navigate the Platform — which pages are most visited, where users drop off during the registration or deposit flow, and how different features are used. This data is aggregated and anonymised where possible. You may opt out of analytics cookies via the cookie preference centre accessible from the Platform footer.
These cookies remember your language preferences, display settings, and responsible gaming tool configurations so that you do not have to reconfigure them on every session. They do not track you across other websites and are deleted at the end of your browser session unless you elect to be remembered on login.
Cookie Consent: On your first visit to bpexch.ws, you will be presented with a cookie consent notice. Strictly necessary cookies are activated automatically. Analytics and functional cookies are only activated upon your explicit consent. You may update your cookie preferences at any time.
bpexch does not sell, rent, or trade your personal data. We share your personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:
We share transaction-relevant personal data with our payment processing partners — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment processors — solely to facilitate deposits and withdrawals. All payment partners are contractually bound to process your data only for the purposes of completing your transaction and in compliance with applicable financial regulations.
For KYC and AML compliance, we share your identity documents and personal details with regulated third-party identity verification services. These providers verify the authenticity of your CNIC, passport, or other submitted documents against official databases and are bound by strict data processing agreements.
We may be required to disclose your personal data to gaming license regulatory bodies, financial intelligence units, law enforcement agencies, or courts where we are legally compelled to do so. bpexch will always seek to notify affected users of such disclosures where legally permissible.
We may share your data with affiliated companies within the bpexch group and with carefully selected third-party service providers who assist us in delivering the Platform — such as cloud hosting providers, customer support software vendors, and fraud detection specialists. All such providers operate under binding data processing agreements that restrict their use of your data to the specified service only.
No Cross-Border Data Sales: bpexch does not transfer your personal data to any entity for the purpose of that entity's own commercial marketing, profiling, or data brokerage activities. Any international data transfers to service providers are covered by appropriate contractual safeguards.
bpexch retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory obligations. The following retention periods apply as a general guide:
Following the expiry of applicable retention periods, your personal data is securely deleted or anonymised so that it can no longer be attributed to you as an individual.
bpexch implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:
Security Note: While bpexch takes every reasonable precaution to secure your data, no internet-based system can be guaranteed as completely impenetrable. You play an equally important role in keeping your account secure — use a strong, unique password, enable 2FA, and never share your account credentials with anyone.
As a bpexch user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team — contact details are in the footer of this page:
bpexch will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.
The bpexch Platform may contain references to or integrations with third-party services, including payment gateways (JazzCash, EasyPaisa), identity verification providers, and analytics tools. Once you leave the bpexch Platform or interact with a third-party service, that party's own privacy policy governs the collection and use of your data. bpexch is not responsible for the privacy practices of third-party services and encourages you to review their policies before sharing personal information.
bpexch does not embed third-party social media trackers, advertising pixels, or behavioural profiling scripts on the Platform beyond what is disclosed in our cookie notice. We do not participate in cross-site tracking networks or data broker programmes.
bpexch strictly prohibits the use of the Platform by any individual under the age of 21. The Platform is not directed at, and does not knowingly collect personal data from, persons under 21 years of age. If bpexch becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be permanently closed.
Age Verification: bpexch conducts mandatory age verification as part of the KYC process before any real-money transaction is permitted. If you are aware of a minor attempting to use the Platform, please contact us immediately at the support address shown in the footer of this page.
bpexch reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify registered users via the email address associated with their account and post a notice on the Platform. The updated Policy will display a revised effective date at the top of this page.
Your continued use of the bpexch Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your data.
If you have any questions or concerns regarding this Privacy Policy or the way bpexch handles your personal data, please reach out to our support team. Our contact email address is displayed as plain text in the footer of every page on this site — we aim to respond to all privacy-related enquiries within 2 business days.
As a bpexch user, you hold meaningful rights over how your personal information is processed. Here is what each right means in plain terms.
Request a full copy of all personal data bpexch holds on your account — identity records, transaction history, betting logs, and communication records.
If any detail on your account — name spelling, contact number, or date of birth — is incorrect, you have the right to request that it be corrected promptly.
Ask bpexch to delete your personal data where it is no longer needed, subject to our regulatory retention obligations under AML and gaming license rules.
Request that bpexch pause the processing of your data in specific circumstances — for example, while you contest the accuracy of a record we hold.
Receive a copy of the data you provided to bpexch in a structured, machine-readable format — useful if you wish to move your records to another service.
Withdraw your consent to receive promotional emails, SMS offers, or bonus notifications at any time. Your opt-out will be actioned within 5 business days.
Six core commitments that underpin the bpexch approach to data privacy — built for the trust of Pakistani users from day one.
Every byte of data transmitted between your device and bpexch servers is protected by 256-bit SSL/TLS encryption — the same standard used by leading international banks.
bpexch verifies every account holder's identity before any real-money transaction is processed, ensuring a safe and compliant environment for all Pakistani users.
Deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank are processed through PCI-DSS compliant gateways. Card numbers and CVV codes are never stored on bpexch systems.
bpexch does not sell, rent, or trade your personal data to third parties for commercial marketing purposes — full stop. Your information is used solely to deliver and improve our Platform.
Behavioural data is analysed to detect early signs of problem gambling. bpexch proactively offers deposit limits, cooling-off periods, and self-exclusion tools where patterns raise concern.
In the unlikely event of a security incident affecting your data, bpexch commits to notifying affected users promptly and transparently, with clear guidance on protective steps to take.
Your data is protected. Your transactions are secure. Join thousands of Pakistani players on the platform that puts privacy and trust first — from PSL cricket markets to premium slot games.
Login to bpexch Explore Casino