At bpexcn, your privacy is treated as a fundamental obligation, not a legal formality. This Privacy Policy explains exactly what personal data bpexcn collects from Pakistani members, how it is used, who it may be shared with, how long it is retained, and what rights you have over your own information. We encourage you to read it in full.
Before getting into the full legal text, here are the six core data protection commitments that every bpexcn member can rely on. These principles guide every data handling decision the platform makes.
bpexcn collects only the personal data that is genuinely necessary for account operation, KYC compliance, payment processing, and regulatory obligations. We do not collect data speculatively or for purposes beyond those stated in this policy.
All personal data transmitted between your device and the bpexcn platform is encrypted using 256-bit SSL/TLS protocols. Data stored in bpexcn systems is encrypted at rest. CNIC images and financial documents submitted for KYC are held in isolated, access-controlled storage environments.
bpexcn treats your data rights as real entitlements, not theoretical ones. Access requests, correction requests, deletion requests, and objections to processing are all handled by a dedicated compliance team with defined response timeframes — not ignored or delayed indefinitely.
bpexcn does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks. Your data is shared only with the categories of third party explicitly described in this policy, and only to the extent necessary for the stated purpose.
bpexcn retains personal data only for as long as it is needed for the purpose for which it was collected, or as required by our licensing obligations and applicable law. Retention schedules are documented internally and data is securely deleted at the end of each retention period.
In the event of a personal data breach that poses a risk to affected members, bpexcn will notify the relevant licensing authority without undue delay and will communicate directly with affected members as required by our licensing obligations and applicable data protection standards.
bpexcn is the data controller responsible for your personal data. This means bpexcn determines the purposes and means by which your personal information is processed in connection with your use of the Platform. bpexcn operates under an international gaming licence that imposes specific obligations on how member data must be handled, retained, and protected.
For all privacy-related queries, requests, or complaints, members may contact the bpexcn Data Protection team at [email protected], clearly marking the subject line "Data Privacy Request". All requests are handled by a designated compliance officer.
bpexcn collects the following categories of personal data from members and prospective members:
| Category | Data Types | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, CNIC or passport number, CNIC/passport scan images | Registration & KYC verification |
| Contact Data | Pakistani mobile number, email address, residential address in Pakistan | Registration |
| Financial Data | JazzCash/EasyPaisa mobile wallet number, bank account details (HBL/UBL/Meezan), USDT wallet address, transaction history, deposit and withdrawal amounts in PKR | Deposits, withdrawals, KYC |
| Gaming Activity Data | Game play logs, betting history, session durations, game preferences, responsible gaming tool usage, bonus claim history | Ongoing platform use |
| Technical Data | IP address, device type and model, operating system, browser type, screen resolution, login timestamps, session tokens | Automatic — each visit |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | When you contact bpexcn support |
| Preference Data | Language preference, marketing opt-in/opt-out status, responsible gaming limit settings | Account settings |
bpexcn does not intentionally collect special category data (such as health information, political opinions, or biometric data) unless specifically required by our licensing authority in connection with a responsible gaming or compliance investigation, in which case collection will be disclosed at the point of collection and conducted only with appropriate legal basis.
bpexcn collects personal data through the following channels:
bpexcn processes your personal data on the following legal bases:
| Legal Basis | Processing Activities Covered |
|---|---|
| Performance of Contract | Processing necessary to operate your bpexcn account, process deposits and withdrawals in PKR, record game play, apply bonuses, and provide customer support. Without this processing, bpexcn cannot provide its services to you. |
| Legal Obligation | KYC identity and age verification (21+ requirement), anti-money-laundering transaction monitoring, record-keeping obligations required by bpexcn's gaming licence, and responding to lawful requests from regulatory authorities. |
| Legitimate Interests | Fraud prevention and detection, platform security monitoring, abuse and bot detection, improving platform performance, and internal analytics that help bpexcn improve the member experience. bpexcn balances these interests against member privacy and does not pursue legitimate interests that override members' fundamental rights. |
| Consent | Marketing communications via email or SMS — where you have explicitly opted in to receive such communications. Consent may be withdrawn at any time via your account settings or by contacting support. |
bpexcn uses the personal data it collects for the following purposes:
bpexcn does not sell or rent your personal data. We share personal data with third parties only in the following limited circumstances:
bpexcn's platform infrastructure, including its hosting servers and some service providers, may be located outside Pakistan. When personal data is transferred outside Pakistan in connection with the provision of bpexcn's services, bpexcn takes appropriate safeguards to ensure that your data receives a level of protection consistent with this policy.
Such safeguards may include contractual clauses in agreements with the receiving entities that require them to protect personal data to standards consistent with bpexcn's licensing obligations, or transfers to jurisdictions that provide adequate data protection standards under applicable international frameworks.
Where your KYC documents and financial data are involved in international transfers, bpexcn applies additional restrictions including data minimisation (transferring only what is strictly necessary) and encrypted transmission.
bpexcn retains personal data for the periods set out below, after which data is securely deleted or anonymised:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Licensing obligation and AML compliance |
| KYC Documents (CNIC/Passport) | Duration of account + 5 years after closure | Regulatory requirement under gaming licence |
| Financial & Transaction Data | 7 years from transaction date | Anti-money-laundering regulatory obligation |
| Gaming Activity Logs | 3 years from activity date | Dispute resolution and licence compliance |
| Support Communications | 2 years from last interaction | Quality assurance and dispute resolution |
| Marketing Preferences | Until opt-out or account closure | Consent management |
| Technical / Log Data | 12 months from collection | Security monitoring and fraud prevention |
Where bpexcn is required to retain data beyond the standard period due to an ongoing investigation, dispute, regulatory inquiry, or litigation, the data will be retained until the matter is resolved and the standard retention period from that point has elapsed.
bpexcn recognises the following rights in respect of your personal data. To exercise any of these rights, contact bpexcn at [email protected] with the subject line "Data Rights Request". bpexcn will respond within 30 days of receiving a valid request.
bpexcn uses cookies and similar tracking technologies to operate the Platform, maintain your session when you use the bpexcn login, remember your preferences, and analyse how members interact with the site. The following categories of cookies are used:
You may manage cookie preferences through your browser settings. Please note that disabling required cookies will affect your ability to use the bpexcn Platform, including completing the bpexcn login process.
bpexcn sends marketing communications — including promotional emails and SMS notifications about bonuses, new games, PSL betting markets, and platform features — only to members who have explicitly opted in to receive such communications at the point of registration or via their account settings.
Marketing communications from bpexcn will always:
Transactional communications — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — are not marketing communications and will be sent regardless of your marketing opt-in status, as they are necessary for the operation of your bpexcn account.
bpexcn's services are strictly intended for individuals aged 21 years and above. bpexcn does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. The mandatory KYC verification process is specifically designed to prevent underage access to the Platform.
If bpexcn becomes aware that personal data has been collected from an individual under 21 — whether through a falsified registration or any other means — that data will be deleted promptly, the associated account will be closed, and any deposited funds will be returned to the originating payment method. The matter may be escalated to the relevant regulatory authority where required by bpexcn's licensing obligations.
Parents and guardians who believe a minor may have registered on the bpexcn Platform are encouraged to contact bpexcn immediately at [email protected]. bpexcn treats such reports with the highest priority and will investigate and act within 24 hours of receiving a substantiated concern.
bpexcn implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, and alteration. These measures include:
Despite these measures, no internet-based platform can guarantee absolute security. bpexcn encourages all members to use a strong, unique password for their bpexcn account, enable two-factor authentication, and notify bpexcn support immediately if they suspect any unauthorised access to their account.
bpexcn reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, platform features, legal obligations, or guidance from our licensing authority. The version number and effective date at the top of this policy indicate the current version.
Where an update to this Privacy Policy materially changes how bpexcn processes your personal data — particularly in ways that may affect your rights or expectations — bpexcn will provide advance notice via the email address registered to your account, or via a prominent notification on the Platform, at least 7 days before the change takes effect.
Non-material changes, such as corrections of typographical errors, clarifications of existing practices, or formatting updates, will be made without advance notice but will be reflected in the updated version date. Your continued use of the bpexcn Platform after the effective date of any update constitutes acknowledgment of the revised policy. If you do not accept a material change, you may request account closure and return of any withdrawable balance before the change takes effect.
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by bpexcn, please contact us using the details below:
If you are not satisfied with bpexcn's response to a privacy concern, you may escalate the matter to the data protection function of the gaming licensing authority under which bpexcn operates. Details of the relevant authority are available on the bpexcn About Us page.
bpexcn is built on transparency, security, and fair play. Thousands of members across Karachi, Lahore, Islamabad, and Faisalabad trust bpexcn with their gaming — and their data. Log in to manage your privacy settings, update your preferences, or explore the platform.
21+ only | Please gamble responsibly | Licensed Operator