Privacy Policy – bpexch xyz Pakistan Betting Platform

This Privacy Policy describes how bpexch xyz — the operator of the online betting and gaming platform accessible at bpexchxyz.bet — collects, processes, stores, and protects the personal data of its members and visitors. It applies to all data collected through the bpexch xyz website, mobile-optimised interfaces, and any other channel through which bpexch xyz services are delivered.

bpexch xyz is built for users in Pakistan, and this policy is written with Pakistani members in mind. When we refer to "personal data," we mean any information that identifies or could reasonably identify you as an individual — including your name, CNIC number, mobile number, email address, payment details, and betting activity.

By registering a bpexch xyz account, you acknowledge that you have read this Privacy Policy and that you consent to the collection and processing of your personal data as described here. If you do not agree with any part of this policy, please do not register or continue to use your bpexch xyz account. You can withdraw consent at any time — see Section 10 for details of your rights.

This policy should be read alongside the bpexch xyz Terms and Conditions, which govern the overall relationship between you and bpexch xyz. Where the Terms and Conditions address a data-related matter specifically, this Privacy Policy provides additional detail.

bpexch xyz collects personal data in the following categories, depending on how you interact with the platform:

bpexch xyz does not collect sensitive personal data beyond what is strictly necessary for identity verification and legal compliance. We do not collect biometric data for general identification purposes, and we do not collect financial data beyond what is needed to process your specific deposit or withdrawal transaction.

Every piece of personal data collected by bpexch xyz is used for a specific, identifiable purpose. We do not collect data speculatively and we do not retain data beyond the period required for its stated purpose. The main ways we use your personal data are:

• Account setup and management: Your registration data is used to create your account, verify your identity, and maintain your account across sessions. Without this data, we cannot operate your account.
• Processing deposits and withdrawals: Your payment details are used solely to process the specific transaction you have requested. bpexch xyz does not store card numbers or full payment credentials on our own servers — see Section 6 for full details.
• Bet settlement and game operation: Your betting and gaming activity data is used to settle bets, calculate bonuses, and maintain accurate account records.
• Responsible gaming monitoring: bpexch xyz uses your betting activity, deposit patterns, and session data to monitor for signs of harmful gambling behaviour. Where our systems flag a concern, trained staff may review your account and, where appropriate, proactively apply protective measures.
• Fraud prevention and security: Device data, IP addresses, and transaction patterns are analysed to detect and prevent fraudulent activity, account takeovers, money laundering, and other prohibited conduct as described in the Terms and Conditions.
• Legal and regulatory compliance: bpexch xyz is required to maintain certain records and to carry out identity and source-of-funds checks to comply with applicable financial regulations. Personal data processed for this purpose may include your CNIC and payment history.
• Customer support: When you contact bpexch xyz support, the details you provide and the records of your interaction are used to resolve your query and, where relevant, to improve service quality.
• Platform improvement: Aggregated, anonymised technical data — such as which pages load slowly or which features are most used — is used to improve platform performance. This data cannot be traced back to individual users.
• Marketing communications: If you have opted into marketing communications during registration, we may send you information about promotions, bonuses, and new features on bpexch xyz. You can opt out of marketing communications at any time from your account settings or by contacting support.

bpexch xyz processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contract performance: Processing your registration data, payment details, and betting activity is necessary to perform the contract between you and bpexch xyz — that is, to operate your account and provide the services you have signed up for.
• Legal obligation: Identity verification, record-keeping, and anti-money laundering checks are carried out because bpexch xyz is legally required to do so under applicable regulations.
• Legitimate interests: Fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring are carried out on the basis of bpexch xyz's legitimate interest in maintaining a safe and secure platform for all members.
• Consent: Marketing communications are sent only where you have given explicit consent during registration or subsequently. You may withdraw this consent at any time without affecting your ability to use the platform.

bpexch xyz does not sell your personal data to any third party under any circumstances. We share personal data only in the following limited situations, and only to the extent necessary for the stated purpose:

• Payment processors: Your payment details are shared with the payment gateway or mobile wallet provider (Easypaisa, JazzCash, NayaPay, SadaPay, or card payment processor) to complete your requested transaction. These providers operate under their own privacy policies and are subject to strict data security requirements.
• Identity verification providers: Where KYC (Know Your Customer) verification is carried out, your identity documents may be shared with a certified third-party verification service. This provider is contractually prohibited from using your data for any purpose other than identity verification.
• Responsible gaming services: If you self-exclude from bpexch xyz, your details may be shared with cross-platform responsible gambling systems where applicable, to help prevent you from registering at partner platforms during your exclusion period.
• Legal and regulatory authorities: bpexch xyz will disclose personal data to law enforcement, regulatory authorities, or courts where required to do so by applicable law, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the rights of bpexch xyz or other users, or respond to a lawful legal process.
• Platform service providers: Certain technical functions — such as hosting, analytics on anonymised aggregate data, and cybersecurity services — are provided by third-party contractors who access only the minimum data necessary to perform their function and are bound by strict data processing agreements.

Given that all bpexch xyz transactions are in PKR and involve Pakistani payment methods, payment data security is a specific priority for the platform. Here is exactly how your payment information is handled:

• Card payments (Visa / Mastercard): Card numbers, CVV codes, and expiry dates are never stored on bpexch xyz servers. All card data is entered directly into the payment gateway's secure interface and is processed under PCI DSS certification by the gateway provider. bpexch xyz retains only a masked card reference (e.g., last four digits and card type) for account record purposes.
• Mobile wallet payments (Easypaisa / JazzCash / NayaPay / SadaPay): Your registered mobile wallet number is stored in your bpexch xyz account to enable recurring deposits and to direct withdrawals to your verified wallet. This number is encrypted at rest and is not shared with parties outside of the payment processing chain.
• IBFT bank transfers: Bank account details provided for IBFT withdrawals are stored in encrypted form and are used solely for processing your withdrawal request. Details are verified against your registered identity to prevent misdirected transfers.
• Transaction history: Records of all deposits and withdrawals — amounts, dates, payment method references — are retained in your account history for at least five years for regulatory compliance purposes. You can view your full transaction history from your account dashboard at any time.

bpexch xyz uses cookies and similar tracking technologies to enable core platform functionality, maintain your login session, and understand how the platform is being used at an aggregate level. The following types of cookies are used:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that help protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences, such as your preferred language and display settings. These improve your experience but are not essential to the core betting functions.
• Analytics cookies: bpexch xyz uses anonymised analytics to understand which parts of the platform are most used and where technical problems are occurring. This data is aggregated and cannot identify individual users. Analytics cookies can be disabled through your browser settings without affecting your ability to use the platform.

bpexch xyz does not use third-party advertising cookies or tracking pixels that follow you across other websites. You will not be retargeted with bpexch xyz advertisements on other platforms based on your visit to this site.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies — instructions for doing this are available in your browser's help documentation. Note that blocking essential cookies will prevent you from logging in to your bpexch xyz account.

bpexch xyz retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

At the end of the applicable retention period, data is securely deleted or anonymised so that it can no longer be associated with any individual. Where you request deletion of your data and no legal retention obligation prevents deletion, we will process your request within 30 days.

bpexch xyz invests in security infrastructure commensurate with the sensitivity of the data we hold. The following measures are in place to protect your personal data:

• Encryption in transit: All data transmitted between your device and bpexch xyz is encrypted using TLS 1.2 or higher. This applies to every page of the platform, including login, account management, and payment pages.
• Encryption at rest: Personal data stored in bpexch xyz databases is encrypted using AES-256 encryption. This ensures that even in the unlikely event of unauthorised database access, individual records cannot be read without the encryption keys.
• Access controls: Access to personal data within bpexch xyz is restricted to staff members who require it for their specific function. All internal access is logged and subject to regular review. Privileged access to production systems requires multi-factor authentication.
• Payment data isolation: Card data is never processed or stored on bpexch xyz infrastructure — it flows directly through certified payment gateways. Mobile wallet references are stored in encrypted form with access restricted to payment processing functions.
• Security monitoring: bpexch xyz operates continuous monitoring for unusual access patterns, login anomalies, and potential data breach indicators. Our security team responds to flagged events in real time.
• Data breach response: In the event of a data breach affecting your personal data, bpexch xyz will notify affected members as quickly as reasonably possible and will take immediate action to contain the breach and prevent further exposure.

As a bpexch xyz member, you have the following rights regarding your personal data. You can exercise any of these rights by contacting support at support@bpexchxyz.bet or through the live chat in your account dashboard.