At bpexc, your privacy is not an afterthought — it is built into the foundation of how we operate. This Privacy Policy explains exactly what personal data we collect from Pakistani players, how we use it, how we store it, who we share it with, and what rights you have over your own information.
This Privacy Policy ("Policy") applies to bpexc ("we", "us", "our", "bpexc"), the online sports betting and casino platform operated at https://bpexc.bet. It governs how bpexc collects, processes, stores, shares, and protects personal data belonging to users ("you", "Player", "User") who access or use the bpexc platform, including its website, mobile interface, and any associated services.
bpexc is committed to handling your personal information with care and in compliance with applicable data protection obligations. We collect only the information that is genuinely necessary to operate our services, verify player identity, process payments, and meet our regulatory obligations as a licensed gaming operator.
By creating a bpexc account, visiting the platform, or using any of its services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not use the bpexc platform and should contact our support team to request account closure.
Pakistan-Specific Note: bpexc serves players across Pakistan, including Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi. All data handling practices described in this Policy apply equally to all Pakistani players regardless of their city or province of residence.
bpexc collects several categories of personal data depending on your level of interaction with the platform. The following table summarises what we collect and why:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, nationality | Registration & KYC verification |
| Contact Data | Email address, mobile number, residential address | Registration & account updates |
| Financial Data | JazzCash/EasyPaisa account number, HBL/UBL/Meezan Bank details, transaction history in PKR | Deposits & withdrawals |
| Technical Data | IP address, device type, browser type, operating system, session tokens | Every site visit |
| Usage Data | Pages visited, games played, bets placed, time spent, click paths | Every logged-in session |
| Communication Data | Live chat transcripts, support emails, feedback submissions | When you contact support |
| Verification Documents | Scanned CNIC, proof of address, source-of-funds documentation | KYC & AML compliance checks |
| Marketing Preferences | Email/SMS opt-in or opt-out status, preferred language (English/Urdu) | Registration & account settings |
bpexc does not intentionally collect special category data (such as health information, religious beliefs, or political opinions). If you voluntarily disclose such information — for example, when contacting our responsible gaming team — it will be treated with the highest level of confidentiality and used solely for the purpose for which it was shared.
Minimum Necessary Principle: bpexc applies the data minimisation principle. We only collect personal data that is directly necessary for the specific purpose stated. We do not collect information speculatively or in excess of what our operations genuinely require.
bpexc collects personal data through the following channels and mechanisms:
You provide data directly to bpexc when you register an account, complete identity verification, make a deposit or withdrawal, submit a support request, respond to a survey or promotion, or update your account settings. This is the primary source of personal data we hold about you.
When you access the bpexc platform, our systems automatically collect technical and usage data through server logs, cookies, web beacons, and similar tracking technologies. This data is collected passively in the background as you navigate the site and play games.
bpexc may receive data about you from third parties in the following circumstances:
No Social Media Scraping: bpexc does not collect your personal data from social media platforms, does not purchase data lists from third-party data brokers, and does not scrape publicly available information about you from external websites.
bpexc processes your personal data for clearly defined and legitimate purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The primary purposes are:
No Automated Decision-Making: bpexc does not make decisions about your account purely through automated processing without human review. Where automated systems flag an account for fraud or AML reasons, a qualified bpexc compliance team member will review the case before any material action is taken.
bpexc processes your personal data on the following legal bases:
Withdrawing Consent: Withdrawing marketing consent will not affect the lawfulness of processing that occurred before the withdrawal, nor will it affect any processing carried out under contract performance or legal obligation grounds.
bpexc does not sell, rent, or trade your personal data to third parties for their own marketing purposes — full stop. We only share your data in the following specific circumstances:
bpexc engages carefully selected third-party service providers who process data on our behalf under strict data processing agreements. These include KYC/identity verification providers, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK), cloud hosting and infrastructure providers, game software suppliers, fraud detection services, and customer support platform vendors. All such providers are contractually required to process data only for the purposes specified by bpexc and to maintain appropriate security standards.
bpexc may be required to disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where we are legally obliged to do so. This includes disclosures required under AML regulations, gaming licence conditions, or pursuant to a valid court order or government request. bpexc will notify you of such disclosures where legally permitted to do so.
In the event that bpexc undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via your registered email address prior to such a transfer and given the opportunity to close your account if you do not wish your data to be transferred.
bpexc will share your data with any additional third party where you have given your explicit, informed consent to that specific sharing arrangement.
No Data Selling — Ever: bpexc will never sell your personal information to advertising networks, data brokers, social media companies, or any other third party for commercial gain. Your data belongs to you.
bpexc uses cookies and similar tracking technologies on its platform to ensure proper functionality, improve user experience, and support our analytics and security systems.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential Cookies | Required for platform login, session management, and security. Without these, the site cannot function. | No — strictly necessary |
| Functional Cookies | Remember your language preference (English/Urdu), preferred odds format, and last game played. | Yes |
| Analytics Cookies | Track aggregated usage patterns — pages visited, time on site, game popularity — to improve the platform. | Yes |
| Security Cookies | Detect suspicious login attempts, enforce rate limiting, and prevent CSRF attacks. | No — strictly necessary |
You can manage non-essential cookie preferences through your browser settings or through the bpexc cookie preference centre accessible from the platform footer. Disabling functional or analytics cookies will not prevent you from using the core features of bpexc, though some personalisation features may not work as expected.
No Third-Party Ad Tracking: bpexc does not deploy third-party advertising cookies or allow external advertisers to track your behaviour across other websites through our platform.
bpexc retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. The following general retention periods apply:
Once the applicable retention period expires, bpexc will securely delete or irreversibly anonymise your personal data so that it can no longer be linked to you as an individual.
bpexc takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.
bpexc staff who handle personal data receive regular training on data protection obligations. We conduct periodic security audits and data protection impact assessments. All third-party service providers with access to player data are required to maintain security standards equivalent to or exceeding our own.
In the event of a personal data breach that poses a risk to your rights and freedoms, bpexc will notify affected players without undue delay via their registered email address and will take immediate steps to contain and remediate the breach. We will also notify the relevant regulatory authority as required by our gaming licence obligations.
Your Role in Security: No security system is perfect. You play an important role in keeping your account secure. Always use a strong, unique password for your bpexc account, enable 2FA, and never share your login credentials with anyone. If you suspect your account has been compromised, contact support immediately at [email protected].
bpexc respects your rights over your personal data. Depending on applicable law, you have the following rights with respect to your personal information held by bpexc:
To exercise any of the above rights, contact the bpexc Data Protection team at [email protected] with the subject line "Data Rights Request." Please include your full name, registered email address, and a clear description of your request. We may need to verify your identity before processing the request to protect against unauthorised access to your data.
Response Time: bpexc aims to respond to all data rights requests within 30 calendar days. For complex requests, this period may be extended by a further 60 days, in which case we will notify you of the extension within the initial 30-day period.
The bpexc platform may contain links to third-party websites, such as game provider information pages or payment gateway interfaces. bpexc is not responsible for the privacy practices of any third-party website. Each external website operates under its own privacy policy, and we encourage you to review those policies before providing any personal information to third-party sites.
The inclusion of a link to a third-party website on the bpexc platform does not constitute an endorsement of that website or its privacy practices by bpexc.
The bpexc platform is strictly intended for individuals who are 21 years of age or older. bpexc does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the bpexc registration process, and we take active measures to prevent underage access to our platform.
If bpexc becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend that account, delete the associated data, and return any funds to the payment source used. If you believe a minor has registered on the bpexc platform, please contact us immediately at [email protected].
21+ Strictly Enforced: Gambling is for adults only. bpexc implements both automated age-checking at registration and manual document review as part of its KYC process to ensure full compliance with the 21+ age restriction.
bpexc operates under an international gaming licence, and some of our service providers and infrastructure partners are located outside Pakistan. As a result, your personal data may be transferred to, stored in, or processed in countries other than your country of residence.
Whenever bpexc transfers personal data internationally, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. These safeguards may include:
You may request further information about the specific safeguards applied to international transfers of your data by contacting [email protected].
bpexc reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or business operations. Where changes are material — meaning they significantly affect how we collect or use your personal data, or the rights you have — we will provide advance notice via your registered email address or through a prominent notice on the bpexc platform.
The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the bpexc platform following the effective date of any updated Policy constitutes your acknowledgment and acceptance of those changes.
We encourage you to review this Privacy Policy periodically to stay informed about how bpexc protects your personal information. If you have any concerns about proposed changes, you are welcome to contact our support team before the effective date to discuss your options, including account closure if you wish.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bpexc holds about you, please contact our support and data protection team using the details below. We have Urdu and English-speaking agents available 24 hours a day, 7 days a week.
For responsible gaming-related privacy matters — such as requesting that your self-exclusion status not be shared with affiliated platforms — please visit our Responsible Gaming page or contact our dedicated responsible gaming team via the support channels above.
Six concrete commitments bpexc makes to every Pakistani player regarding their personal data
Every piece of data you send to bpexc — from your CNIC scan to your JazzCash deposit confirmation — travels over TLS-encrypted connections. Your personal information is never transmitted in plain text across our network.
bpexc will never sell, rent, or trade your personal data to advertisers, data brokers, or any third party for commercial purposes. Your information is used exclusively to operate your bpexc account and comply with our regulatory obligations.
Pakistani players have the right to access, correct, export, or request deletion of their personal data at any time. Submit a data rights request to [email protected] and we'll respond within 30 days — no questions asked.
Your identity documents — CNIC copies, proof of address — are encrypted at rest and accessible only to authorised compliance staff on a strict need-to-know basis. No customer service agent can browse your documents without an audit trail.
Marketing emails and SMS messages about PSL promotions and casino bon uses are entirely optional. You can withdraw marketing consent at any time from your account settings or by contacting support — no hoops to jump through.
bpexc does not hold your data indefinitely. We apply defined retention periods to every category of data we collect, and once those periods expire, your information is securely deleted or irreversibly anonymised.
bpexc combines world-class data protection with an unbeatable cricket betting and casino experience. JazzCash and EasyPaisa deposits, PSL live markets, and 24/7 Urdu support — all under one roof, all fully secured.