BPExch Pro Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy applies to BPExch Pro ("the Platform," "we," "us," "our"), the online casino and sports betting platform accessible at bpexchpro.app. BPExch Pro is the data controller responsible for the personal information collected through this website and all associated services.

BPExch Pro is built for and primarily serves players based in Pakistan. All financial transactions on the platform are conducted in Pakistani Rupees (PKR) through local Pakistani payment channels including Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and Visa/Mastercard.

If you have any questions or concerns about this Privacy Policy or about how your personal data is handled at BPExch Pro, you can contact us at any time at support@bpexchpro.app. Our support team is available 24 hours a day, 7 days a week.

BPExch Pro collects personal information that falls into the following categories. We collect only what is genuinely necessary for the purposes described in Section 4.

BPExch Pro collects personal information through the following channels:

Information you provide to us directly when you register an account, complete identity verification, make a deposit or withdrawal, place a bet, play a game, contact our support team, or respond to a survey or promotion. This is the primary source of personal data we hold about you.

When you access and use the BPExch Pro platform, our systems automatically record technical information including your IP address, device identifiers, browser type, pages viewed, and the time and duration of your sessions. This data is collected through server logs and cookies (see Section 8 for full cookie details).

When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or card payment, the payment processor provides BPExch Pro with a transaction reference and confirmation that the payment has been made. We do not receive your full payment credentials from these processors — only the information needed to credit or debit your BPExch Pro account.

In some cases, BPExch Pro may use third-party identity verification services to confirm the authenticity of identity documents submitted during KYC. These services process the document data on our behalf and are bound by data processing agreements.

BPExch Pro uses your personal data for specific, legitimate purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent.

• Account operation: To create and manage your BPExch Pro account, verify your identity, process your deposits and withdrawals in PKR, and provide access to games and betting services.
• Legal compliance: To comply with our obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and other regulatory obligations. This is a legal requirement, not optional.
• Security and fraud prevention: To detect and prevent fraudulent activity, unauthorised account access, bonus abuse, money laundering, and other misuse of the BPExch Pro platform. We use automated systems as well as manual review for this purpose.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behaviour, to apply responsible gaming limits you have set, and to comply with our duty of care obligations toward players.
• Customer support: To respond to your queries, resolve disputes, process complaints, and maintain a record of communications for quality assurance purposes.
• Platform improvement: To analyse aggregate usage patterns and technical performance data so we can improve the BPExch Pro platform, fix issues, and develop new features.
• Marketing communications: To send you promotional offers and news about BPExch Pro — but only if you have opted in to receive these. You can opt out at any time.

BPExch Pro does not sell your personal data. We do not share your information with marketing companies, data brokers, or any third parties for their own commercial use. We share data only in the following limited circumstances, and only with parties who are bound by appropriate data protection obligations:

When you make a deposit or withdrawal, the minimum necessary transaction information is shared with the relevant Pakistani payment service provider (Easypaisa, JazzCash, NayaPay, SadaPay, bank, or card network) to process the payment. These processors operate under their own privacy policies and regulatory obligations.

Your identity documents may be processed by a third-party KYC verification service acting as our data processor. This service processes your data solely on BPExch Pro's instructions and is prohibited from using it for any other purpose.

Some games on BPExch Pro are provided by third-party game studios. When you play these games, the game provider may receive a player identifier and game activity data necessary to run the game. They do not receive your full personal profile or payment details.

BPExch Pro may be required by law to disclose certain player information to law enforcement, financial intelligence units, or regulatory bodies in the course of investigating fraud, money laundering, or other illegal activity. We comply with valid legal requests and will disclose only what is legally required.

Lawyers, accountants, and auditors who assist BPExch Pro may have access to limited personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

BPExch Pro takes the security of your personal data seriously and has implemented technical and organisational measures appropriate to the risks involved.

• 256-bit SSL/TLS Encryption: All data transmitted between your device and BPExch Pro is encrypted in transit using industry-standard TLS encryption. Look for the padlock icon in your browser's address bar — that is your SSL certificate in action.
• Encryption at rest: Sensitive data stored in BPExch Pro's databases — including identity documents and financial transaction records — is encrypted at rest.
• Access controls: Personal data is accessible only to authorised BPExch Pro staff who need it to perform their job functions. Access is logged and audited.
• Intrusion detection: Our systems are monitored continuously for unusual access patterns, potential breaches, and suspicious activity.
• Secure password storage: Account passwords are hashed using bcrypt — we do not store passwords in plain text. Even BPExch Pro staff cannot retrieve your password, only reset it.
• Two-factor authentication: We encourage all players to enable two-factor authentication (2FA) on their BPExch Pro accounts for an additional layer of protection.

BPExch Pro keeps your personal data for only as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the duration that your account is active on BPExch Pro plus a minimum of 5 years after account closure, to meet our AML and regulatory record-keeping obligations.
• Transaction records: Financial transaction data including all deposits and withdrawals in PKR are retained for a minimum of 7 years from the date of the transaction, consistent with financial record-keeping requirements.
• KYC documents: Identity documents such as CNIC copies are retained for the duration of your account plus 5 years. They are stored in encrypted form and access is restricted to authorised staff only.
• Gaming activity logs: Bet history, game play logs, and session data are retained for 3 years after account closure, or longer if required for dispute resolution or legal proceedings.
• Support communications: Customer support transcripts and correspondence are retained for 3 years from the date of the communication.
• Marketing consent records: Records of your marketing opt-in or opt-out are retained for the duration of your account plus 2 years.

When personal data is no longer needed and the applicable retention period has expired, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.

BPExch Pro uses cookies and similar technologies on its website. A cookie is a small text file stored on your device when you visit a website. We use cookies to make the platform work correctly, remember your preferences, and understand how players use our site so we can improve it.

You can manage cookie settings through your browser's privacy settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies will affect the functionality of BPExch Pro and you may not be able to log in or use the platform normally.

BPExch Pro does not use third-party advertising cookies or retargeting pixels. We do not track your activity across other websites.

As a BPExch Pro player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at support@bpexchpro.app with the subject line "Privacy Rights Request."

BPExch Pro is strictly an 18+ platform. We do not knowingly collect personal data from any individual under the age of 18. If you are under 18 years old, you must not register an account or use BPExch Pro under any circumstances.

During registration, players are required to confirm that they are 18 or older. BPExch Pro also conducts age verification as part of our KYC process before the first withdrawal is processed. If we discover or have reason to believe that an account belongs to a person under 18, we will immediately suspend the account, return any real-money balance (minus any bonuses), and delete the personal data associated with that account.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. If you believe a minor has registered on BPExch Pro using false information, please contact us immediately at support@bpexchpro.app so we can investigate and take appropriate action.

BPExch Pro reviews this Privacy Policy regularly and updates it when our data practices change, when we introduce new services, or when applicable laws or regulations require an update. The "Last Updated" date at the top of this page always reflects the date of the most recent revision.

When we make material changes — meaning changes that significantly affect how your data is collected or used — we will notify you by email to your registered address and/or by a prominent notice on the BPExch Pro platform. We will give you at least 7 days' notice before material changes take effect. Minor clarifications or corrections may take effect immediately.

Continuing to use BPExch Pro after a Privacy Policy update has been communicated constitutes your acceptance of the revised policy. If you do not agree with any update, you have the right to close your account by contacting our support team.

For any questions, concerns, or requests related to this Privacy Policy or to your personal data held by BPExch Pro, please contact us using the details below. Our support team responds 24 hours a day, 7 days a week.

• Email: support@bpexchpro.app
• Live Chat: Available on the BPExch Pro website at all times — typically responding within minutes.
• Subject line for data requests: Please use "Privacy Rights Request" or "Data Query" so your message is directed to the right team member immediately.