Privacy Policy — BPExch App Pakistan Betting Platform

1Overview

bpexch app takes the privacy of its users seriously. This Privacy Policy applies to all users of the bpexch app platform — whether you access it through the website at bpexchapp.win or through the mobile application available for download. It explains what personal data we collect from you, the reasons we collect it, how we protect it and how long we keep it.

By creating an account or continuing to use bpexch app, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of the broader agreement between you and bpexch app and should be read alongside the Terms and Conditions.

We do not sell personal data. We do not share personal information with advertisers in a way that identifies you as an individual. Our approach to data is straightforward: we collect what we genuinely need to operate the platform, we protect it properly and we give you clear choices over how it is used.

2Personal Data We Collect

We collect two broad categories of data: information you provide directly to us, and information generated automatically as you use the platform.

Information you provide directly:

• Registration details: Full name, date of birth, email address, mobile number and a username chosen by you. This information is required to create and maintain your bpexch app account.
• Identity verification documents: When required for age or identity verification — such as a copy of your CNIC, passport or other government-issued ID. These documents are handled with additional care and are used solely for verification purposes.
• Payment information: Details related to your JazzCash, Easypaisa, Raast, bank account or card used for PKR deposits and withdrawals. We do not store full card numbers on our servers; payment processing is handled through secure third-party payment gateways.
• Communications: Any messages you send to our support team, feedback you submit or correspondence you initiate with bpexch app by any channel.

Information collected automatically:

• IP address and approximate geographic location at the time of login or account activity.
• Device type, operating system version, browser type and screen resolution.
• Session duration, pages and features accessed, bet history, game lobby activity and in-app navigation patterns.
• Cookie identifiers and similar tracking technologies as described in Section 7.

3How We Collect Your Data

Most of your personal data comes directly from you — during registration, when you make a deposit or withdrawal, when you contact support, or when you update your account settings. However, some data is collected passively as a natural byproduct of your use of the platform.

• Registration and account setup: You provide your name, contact details and date of birth when you create an account. This is the primary way we collect your core identity data.
• Financial transactions: When you deposit PKR via JazzCash, Easypaisa, Raast or bank transfer, transaction data is shared between the payment provider and bpexch app to confirm and record the transaction.
• Platform usage: Our servers automatically log requests made to the platform — including pages visited, bets placed, games played and the timing of those activities. This happens every time you use the app or website.
• Cookies and device identifiers: As described in Section 7, cookies and similar technologies record certain preferences and session information automatically.
• Verification providers: Where we use third-party services to verify your identity or age, those providers may share confirmation data back to us. We do not receive raw biometric data from these services.

4Why We Use Your Personal Data

bpexch app only uses personal data for purposes that are genuinely necessary to operate the platform and provide a safe, functional experience. Below are the specific reasons we use the data we collect.

• Account management: To create, maintain and secure your bpexch app account, including login authentication and password recovery.
• Age and identity verification: To confirm that users meet the minimum age requirement of 18 years and to comply with our identity verification procedures.
• Processing PKR transactions: To handle deposits and withdrawals accurately and efficiently through your chosen payment method — JazzCash, Easypaisa, Raast, bank transfer or card.
• Providing betting and gaming services: To display your account balance, process bets on cricket, PSL, T20 and other sports markets, record your game lobby and bingo activity, and settle markets correctly.
• Customer support: To respond to your queries, resolve disputes and investigate complaints. Support staff can access relevant account and transaction data to assist you.
• Platform improvement: To analyse usage patterns, identify technical issues and improve the overall experience on bpexch app — including app performance on Pakistani mobile networks.
• Security and fraud prevention: To detect unusual account activity, prevent unauthorised access and investigate suspected violations of our Terms and Conditions.
• Responsible gaming: To monitor betting patterns that may indicate a user is experiencing difficulty managing their gambling behaviour, and to apply deposit limits or self-exclusion requests when submitted.
• Communications: To send you account-related notifications such as deposit confirmations, withdrawal updates and important changes to platform terms. We do not send unsolicited marketing messages without your explicit opt-in.

5Payment Data & PKR Transactions

All financial transactions on bpexch app are processed in Pakistani Rupees (PKR). Payment processing for JazzCash, Easypaisa, Raast, bank transfers and card payments is handled through secure third-party payment gateways. bpexch app does not store full card numbers, CVV codes or complete bank account details on our own servers.

What we do retain is transaction metadata — the amount, date, time, payment method type and transaction reference number associated with each deposit or withdrawal. This information is necessary for account reconciliation, withdrawal processing and resolving any payment disputes.

• Payment data is encrypted in transit using industry-standard TLS protocols.
• Access to financial transaction records is restricted to authorised personnel only.
• Transaction history is available to you at all times within your account dashboard.
• If a withdrawal is requested, we may require you to verify ownership of the payment method before funds are released. This is a standard security measure, not an unusual request.

6Sharing Your Personal Data

bpexch app does not sell your personal data to any third party. We share data only where it is strictly necessary to deliver the services you use, comply with legal obligations or protect the security of the platform. The categories of third parties with whom we may share data are set out below.

• Payment processors: JazzCash, Easypaisa, Raast, banking partners and card payment gateways receive the minimum data necessary to complete each PKR transaction you initiate. These providers have their own privacy policies governing how they handle your data.
• Identity verification providers: Where we use third-party verification services to confirm your age or identity, the relevant document data is shared with the verification provider for that specific purpose only.
• Technology and hosting partners: Our platform is hosted on server infrastructure provided by third-party cloud providers. These providers process data on our behalf under strict data processing agreements and are not permitted to use your data for their own purposes.
• Fraud prevention and security services: We may share limited technical data — such as IP addresses and device fingerprints — with security service providers to detect and prevent fraudulent activity.
• Legal and regulatory requirements: If we receive a valid legal request — such as a court order or mandatory disclosure obligation — we may be required to share specific account data. We will only comply with requests that are legally valid and will share the minimum data necessary.

All third parties who process data on behalf of bpexch app are required to handle that data securely and only for the purpose for which it was shared. We do not authorise our service providers to use your data for marketing or any unrelated purpose.

7Cookies & Tracking Technologies

bpexch app uses cookies and similar technologies to make the platform work properly and to understand how users interact with it. A cookie is a small text file stored on your device when you visit a website or use an app. It helps the platform remember your preferences and maintain your session.

Types of cookies we use:

• Essential cookies: These are required for the platform to function. They manage your login session, keep your account secure across page loads and remember your language and display preferences. Without these cookies, bpexch app cannot operate correctly.
• Functional cookies: These remember choices you make — such as your preferred sport or the last market you viewed — so you do not have to set them again each time you return.
• Analytics cookies: We use anonymised analytics data to understand which parts of the platform are used most, how long users spend on different pages and where technical issues occur most frequently. This data does not identify you personally.
• Security cookies: These help us detect unusual login patterns, prevent session hijacking and protect your account from unauthorised access.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to log in and use the platform normally. Analytics and functional cookies can generally be disabled without affecting core functionality.

8Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy. The specific retention periods depend on the type of data and the reason it was collected.

• Active account data: Your registration details, account preferences and communication history are retained for the full duration your account remains active on bpexch app.
• Transaction records: PKR deposit and withdrawal records, bet history and game activity logs are retained for a minimum period after the transaction date. This is necessary for account reconciliation, dispute resolution and financial record-keeping.
• Identity verification documents: Copies of identity documents submitted for verification are retained only for as long as necessary to complete the verification process and meet any ongoing compliance requirements. After that period, documents are securely deleted.
• Support communications: Correspondence with our support team is retained to provide continuity of service and for quality assurance purposes. Records related to formal complaints are retained for longer to ensure we can demonstrate how the complaint was handled.
• Closed or suspended accounts: When an account is closed voluntarily, we retain a minimal record of the account for a defined period to prevent fraud, handle any residual withdrawal requests and respond to legal requests if they arise. After that period, personal data is deleted or anonymised.

When data is no longer required, it is either permanently deleted or rendered anonymous so it can no longer be linked to you as an individual.

9Data Security

Protecting your personal data and PKR account information is a core responsibility we take seriously. bpexch app employs a range of technical and organisational measures to safeguard your data against unauthorised access, loss or misuse.

• Encryption in transit: All data transmitted between your device and bpexch app — including login credentials, payment details and personal information — is encrypted using TLS (Transport Layer Security).
• Encrypted storage: Sensitive data fields, including passwords and payment identifiers, are stored in encrypted or hashed form. Plain-text passwords are never stored.
• Access controls: Access to user personal data is restricted on a need-to-know basis. Support staff see only the data relevant to the query they are handling. Administrative access to core systems requires multi-factor authentication.
• Session security: Login sessions are protected against common attack vectors including session fixation and cross-site request forgery. Sessions expire after a period of inactivity to reduce risk from unattended devices.
• Ongoing monitoring: Our systems are monitored for unusual activity patterns that may indicate a security incident. In the event of a suspected data breach affecting user accounts, we will notify affected users and take prompt remediation steps.

While we implement strong security measures, no platform can guarantee absolute security. You play an important role in keeping your account safe — use a strong, unique password for bpexch app, do not share your login credentials with anyone, and contact us immediately at [email protected] if you suspect unauthorised access to your account.

10Your Rights Over Your Personal Data

You have meaningful rights over the personal data bpexch app holds about you. We are committed to honouring these rights promptly and transparently. The following rights apply to all registered users.

• Right of access: You can request a copy of the personal data we hold about you. We will provide this in a clear, readable format within a reasonable timeframe of receiving your request.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you can ask us to correct it. For core account details, many fields can be updated directly within your account settings. For verified fields such as name or date of birth, a formal request with supporting documentation is required.
• Right to erasure: You can request that we delete your personal data. We will comply with deletion requests where we are not required to retain the data for legal, financial or security purposes. Where full deletion is not immediately possible, we will inform you of the reason and the expected timeline.
• Right to restrict processing: In certain circumstances — for example while a dispute is being investigated — you can ask us to pause processing of your data without deleting it.
• Right to data portability: You can request your personal data in a structured, machine-readable format so you can transfer it to another service if you choose.
• Right to object: You can object to certain types of processing, including any direct marketing communications. Opting out of marketing emails can also be done directly through the unsubscribe link in any marketing message we send.

To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and include your registered username. We aim to acknowledge all requests within 5 business days and provide a substantive response within 30 days.

11Children's Privacy

bpexch app is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. During the registration process, all users are required to confirm they meet the minimum age requirement, and we reserve the right to request age verification at any point.

If we become aware that personal data has been collected from a user who is under 18, we will take immediate steps to close the account and delete the associated data. If you believe a minor has accessed or created an account on bpexch app, please contact us at [email protected] so we can investigate and act promptly.

Parents and guardians concerned about underage access to betting platforms are encouraged to use device-level parental controls and to discuss responsible use of online platforms with their children.

12Updates to This Privacy Policy

bpexch app may update this Privacy Policy from time to time to reflect changes in how we operate, changes in data handling practices or updates to applicable standards. When we make material changes, we will update the "Last Updated" date at the top of this page.

For significant changes that meaningfully affect how your data is used or your rights as a user, we will make reasonable efforts to notify registered users — either through a notification within the app or via the email address registered to your account.

We encourage you to review this Privacy Policy periodically. Continued use of bpexch app following any update constitutes your acknowledgement of the revised Policy. If you have concerns about any change, please contact our support team before continuing to use the platform.

13Contact Us

If you have questions about this Privacy Policy, want to understand how your specific data is being used, or wish to exercise any of the rights described in Section 10, please reach out to us directly.

Email: [email protected]

When contacting us about a data matter, please include your registered username and a clear description of your request so we can handle it efficiently. For data rights requests, use the subject line "Data Rights Request". For privacy concerns or complaints, use "Privacy Concern".

We aim to acknowledge all privacy-related enquiries within 5 business days. Complex requests — such as full data access exports or deletion requests requiring manual review — may take up to 30 days to complete. We will keep you informed of progress throughout.