Your Privacy on BPExch XYZ — What You Need to Know

1Introduction

bpexch xyz ("the platform", "we", "us", "our"), accessible at bpexchxyz.net, is committed to protecting the privacy of every person who uses our platform. This Privacy Policy explains in clear, plain language what personal information we collect from players in Pakistan, how that information is used, how it is protected, and what your rights are in relation to it.

This policy applies to all users of bpexch xyz — whether you are browsing the platform as a guest, registering a new account, depositing funds in PKR, placing sports bets, playing casino games, or contacting our support team. It covers data collected through the website at bpexchxyz.net and through the bpexch xyz mobile app available for download on the App page.

This Privacy Policy should be read alongside our Terms and Conditions, which set out the overall rules governing your use of bpexch xyz. Together, both documents form the complete agreement between you and the platform.

2Personal Data We Collect

Information You Give Us Directly

When you register an account, make a deposit or withdrawal, contact support, or claim a bonus on bpexch xyz, you provide us with personal information directly. This includes:

• Identity data: full name, date of birth, gender, and a copy of your CNIC or other identity document when verification is required
• Contact data: email address, mobile number, and — where applicable — a residential address
• Payment data: your JazzCash account number, Easypaisa wallet number, Raast ID, bank account details or card details used for PKR deposits and withdrawals
• Account credentials: your chosen username and encrypted password (we never store passwords in plain text)
• Communication records: any messages exchanged with our support team via live chat or email

Information Collected Automatically

When you use the bpexch xyz platform — whether on a browser or via the mobile app — certain technical data is collected automatically to keep your session secure and to help us improve the platform experience:

• Device data: device type, operating system, browser version, screen resolution
• Network data: IP address, approximate location derived from IP (country/city level only), internet service provider
• Usage data: pages visited, features used, session start and end times, clicks, scroll depth and error logs
• Betting and gaming history: all bets placed, games played, bonus claims, deposit and withdrawal history linked to your account

3How We Use Your Personal Data

bpexch xyz uses the data we collect for specific, legitimate purposes only. We do not use your data for anything beyond what is described here, and we do not sell it to advertisers or data brokers.

• Account management: creating and maintaining your bpexch xyz account, processing logins, and handling account settings changes
• Payment processing: executing PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer and cards; reconciling transaction records; investigating disputed transactions
• Identity and age verification: confirming that you are who you say you are and that you meet the minimum age requirement of 18 years
• Fraud prevention and security: detecting unusual login attempts, suspicious betting patterns, multiple accounts or potential money laundering activity
• Customer support: responding to your queries, resolving complaints and providing assistance with account, payment or gameplay issues
• Platform improvement: analysing how players use bpexch xyz to fix bugs, improve performance and build better features — including the cricket betting and PSL live markets that players use most
• Responsible gaming: monitoring usage patterns to identify players who may be showing signs of problem gaming and offering self-exclusion or limit tools proactively
• Marketing communications: sending you information about bonuses, promotions and new features — only if you have opted in to receive them, and you can opt out at any time

4Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract performance: most data processing — including account management, payment processing and customer support — is necessary to fulfil the services you have contracted us to provide when you register and use bpexch xyz
• Legitimate interests: fraud prevention, security monitoring, platform analytics and responsible gaming tools are carried out on the basis of our legitimate interest in operating a safe and fair platform
• Consent: marketing communications and non-essential cookies are only used where you have given us your explicit consent, which can be withdrawn at any time
• Legal obligation: identity verification and record-keeping obligations are carried out to comply with applicable legal and regulatory requirements

5Cookies and Tracking Technologies

bpexch xyz uses cookies and similar tracking technologies on the website and app. Cookies are small files stored on your device that help the platform remember your session, preferences and settings.

Types of Cookies We Use

• Strictly necessary cookies: required for the platform to function. These include your session login cookie and security tokens. You cannot opt out of these without disabling the platform entirely.
• Performance cookies: help us understand how players navigate bpexch xyz — which pages load slowly, where errors occur, which sports markets are most visited. All data is aggregated and anonymised.
• Functionality cookies: remember your preferences such as language settings, last-visited lobby section and display preferences.
• Marketing cookies: used to understand whether promotional campaigns are reaching the right audience. These are only active if you have opted in to marketing communications.

You can manage your cookie preferences through your browser settings at any time. Disabling performance or functionality cookies may affect the smoothness of the platform experience but will not prevent you from logging in, depositing or placing bets.

6Sharing Your Personal Data

bpexch xyz does not sell, rent or trade your personal data to any third party for their own commercial purposes. Data is shared in the following limited circumstances only:

• Payment processors: your payment details are shared with the relevant payment gateway (JazzCash, Easypaisa, Raast infrastructure providers, card processors) solely to complete the transaction you have initiated
• Identity verification providers: when KYC verification is required, your identity documents may be shared with a third-party verification service provider who is bound by strict data processing agreements
• Game providers: when you play a slot or live casino game provided by a third party (such as Pragmatic Play, Evolution or Habanero), your account identifier and gameplay data are shared with that provider to run the game. These providers operate under their own privacy policies.
• Fraud prevention services: anonymised or pseudonymised device and behavioural data may be shared with fraud detection tools to identify and prevent abuse
• Legal requirements: we may disclose personal data if required to do so by a valid legal process or to protect the rights, property or safety of bpexch xyz, our players or the general public

All third-party service providers who handle data on our behalf are required to process it only for the specific purposes we have authorised, maintain appropriate security standards, and not share it further without our consent.

7Payment Data Security

The security of your PKR payment information is a top priority for bpexch xyz. Every deposit and withdrawal — whether via JazzCash, Easypaisa, Raast or bank transfer — is processed through encrypted channels using TLS (Transport Layer Security) encryption. This means the data travelling between your device and our payment processors cannot be read by a third party intercepting the connection.

We do not store your full card number, CVV, or mobile wallet PIN on our own servers at any point in the transaction flow. Once a transaction is completed, only a masked reference (for example, the last four digits of a card or the first three and last three digits of a mobile number) is retained in your transaction history for your reference.

All staff who have any access to payment-related records are bound by confidentiality obligations and undergo training on data handling best practices. Access to financial records is restricted to authorised personnel on a need-to-know basis only.

8How Long We Keep Your Data

We retain your personal data for as long as your account is active, and for a reasonable period after account closure to meet our legal and operational obligations. Specific retention periods are:

• Account and identity data: retained for the duration of your account plus two years following closure
• Financial transaction records: retained for five years to meet standard financial record-keeping requirements
• Betting and gaming history: retained for the duration of your account plus two years for dispute resolution purposes
• Support communications: retained for 24 months from the date of the last message in each conversation
• Device and session logs: retained on a rolling 12-month basis and then deleted automatically

After the relevant retention period expires, data is either securely deleted or anonymised so that it can no longer be linked back to you as an individual. If you request early deletion of your account data, we will process that request as described in the section below — subject to any legal obligations that require us to retain certain records for a defined period.

9Your Rights Over Your Personal Data

You have meaningful rights over the personal data that bpexch xyz holds about you. These rights can be exercised at any time by contacting our support team via live chat or by emailing us at the address listed in the footer of this page.

• Right to access: you can request a copy of all personal data we hold about you, including your account information, transaction history and communication records
• Right to correction: if any personal data we hold is inaccurate or out of date, you can ask us to correct it. Basic details like your email address and mobile number can be updated directly from within your account settings.
• Right to deletion: you can request that we delete your personal data. We will fulfil this request promptly, except where we are legally required to retain certain records (such as financial transaction data)
• Right to restrict processing: in certain circumstances you can ask us to pause the processing of your data while a dispute or query is being resolved
• Right to data portability: you can request a copy of your data in a structured, machine-readable format
• Right to object: you have the right to object to processing carried out on the basis of our legitimate interests, including direct marketing
• Right to withdraw consent: where processing is based on your consent (such as marketing emails), you can withdraw that consent at any time without penalty

We will respond to all data rights requests within a reasonable timeframe — typically within 30 days. Complex requests may take longer, in which case we will notify you of the expected timeframe.

10Children's Privacy

bpexch xyz is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. During registration, all users are required to confirm their date of birth, and age verification may be requested before withdrawals are processed.

If we discover that an account has been registered by someone under 18, the account will be closed immediately, any balance will be handled in accordance with our Responsible Gaming policy, and all personal data associated with that account will be deleted. If you are aware of a minor who has registered on bpexch xyz, please contact our support team immediately.

11Marketing Communications

bpexch xyz may send you promotional communications about bonuses, new game launches, PSL cricket betting specials, and platform updates — but only if you have opted in to receive them during registration or through your account settings.

You can opt out of all marketing communications at any time by:

• Clicking the unsubscribe link at the bottom of any marketing email we have sent you
• Updating your notification preferences within your bpexch xyz account settings
• Contacting our support team via live chat and requesting removal from our marketing list

Opting out of marketing communications will not affect your ability to use the platform, log in, deposit, place bets or withdraw winnings. You will still receive transactional messages (such as deposit confirmations, withdrawal notifications and security alerts) as these are necessary for the operation of your account and are not classified as marketing.

12Updates to This Privacy Policy

bpexch xyz reviews and updates this Privacy Policy from time to time to reflect changes in how we operate, new features added to the platform, or updates to best practices in data protection. When material changes are made, we will notify registered players via the email address or mobile number on their account.

The updated policy will be published on this page with a revised date shown at the top. Continued use of the platform after an update is published constitutes acceptance of the revised policy. We recommend bookmarking this page and checking it periodically, particularly before making significant transactions or sharing additional personal information with us.

13Contact Us About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or to the personal data bpexch xyz holds about you, please reach out to us. Our support team is available 24/7 via live chat inside the platform and is the fastest way to get a response.

You can also email us at the address shown in the footer of this page. For data rights requests (access, deletion, correction), please include your registered account email or mobile number so we can locate your records efficiently.

For questions about your account in general, or for information about how the platform works, the FAQ page is a good starting point before reaching out to the support team directly.