bpex Privacy Policy

This Privacy Policy applies to all services offered by bpex, including the bpex website at bpex.club, the mobile-optimised platform, casino games, sports betting markets, live dealer tables, slot games, and all related products and features offered under the bpex brand.

bpex is committed to protecting the privacy of every player who registers on our platform, whether they are based in Karachi, Lahore, Faisalabad, Islamabad, or anywhere else. This Privacy Policy explains in plain terms what personal data we collect, why we collect it, how we use it, how long we keep it, and what rights you have over it.

This Privacy Policy should be read alongside the bpex Terms & Conditions, which together govern your use of the bpex platform. In the event of any conflict between these documents, the Terms & Conditions shall prevail with respect to gameplay and account rules, while this Privacy Policy governs all matters of personal data handling.

bpex collects several categories of personal data from players. The type of data collected depends on how you interact with the platform and at what stage of your account lifecycle you are at. The following table summarises the main categories:

bpex collects personal data through the following channels:

• Direct Registration: When you create a bpex account, you voluntarily provide your name, contact details, date of birth, and chosen payment method.
• KYC Verification: When you submit identity documents for account verification or withdrawal approval, bpex collects the data contained within those documents.
• Platform Usage: As you use bpex — playing casino games, placing cricket or PSL bets, using live chat, or navigating the platform — usage and technical data is automatically recorded.
• Payment Transactions: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Raast, transaction metadata is recorded by bpex and the respective payment provider.
• Device & Browser: Standard technical data including IP address, device model, operating system, and browser type is collected automatically when you access bpex.
• Customer Support: Any information you provide when contacting bpex support via live chat or email is retained as part of your account record.
• Cookies: bpex uses cookies and similar tracking technologies to collect session and preference data. See Section 07 for full details.

bpex processes your personal data for specific, lawful purposes only. The following table maps each use case to its legal basis:

bpex will never process your personal data for purposes incompatible with those listed above without first obtaining your explicit consent or establishing a new lawful basis for processing.

bpex does not sell, rent, lease, or trade your personal data to any third party. bpex may share your data only in the following limited circumstances:

• Payment Processors: Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast solely for the purpose of processing your deposits and withdrawals. Each processor operates under its own privacy policy and data protection obligations.
• Identity Verification Providers: bpex uses certified third-party KYC services to verify player identity documents. These providers process verification data under strict confidentiality agreements and are not permitted to use your data for any other purpose.
• Fraud Prevention & Security: Aggregated or anonymised data may be shared with fraud prevention networks to protect the bpex platform and its players from criminal activity.
• Regulatory Authorities: bpex is obligated to report certain account activity — including suspected money laundering or financial crime — to the relevant regulatory or law enforcement authorities. Such disclosures are made strictly as required by law.
• Legal Proceedings: In the event of a legal dispute, bpex may be required to disclose account data in response to a valid court order, subpoena, or equivalent legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of bpex assets, player data may be transferred to the acquiring entity, provided that the receiving entity agrees to maintain the same level of data protection described in this Privacy Policy. Affected players will be notified in advance.

bpex takes the security of financial data with the utmost seriousness. When you make a deposit or withdrawal via JazzCash, EasyPaisa, or any supported Pakistani bank, the following data handling practices apply:

• bpex does not store full payment credentials such as bank account PINs, JazzCash wallet passwords, or EasyPaisa security codes on its servers. These are handled entirely within the respective payment provider's secure environment.
• bpex retains transaction records — including amounts, timestamps, payment method type, and transaction reference numbers — as required for financial reporting, regulatory compliance, and dispute resolution.
• All payment data transmitted between the bpex platform and payment processors is encrypted using TLS 1.2 or higher.
• Withdrawal requests are processed only to payment methods previously used for deposits on your account. This is a fraud-prevention measure to ensure funds are returned to their verified source.

bpex uses cookies and similar technologies (including local storage and session tokens) to improve your experience on the platform. A cookie is a small data file placed on your device when you visit bpex. Cookies allow the platform to remember your preferences, keep you logged in securely, and analyse how the platform is used so we can continue improving it.

bpex uses the following types of cookies:

• Essential Cookies: Required for the bpex platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without preventing the platform from working correctly.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming limits you have set. These improve your experience but are not strictly necessary for platform operation.
• Analytics Cookies: Collect anonymised data about how players navigate and use the bpex platform — which games are most popular, where players encounter difficulties, and how performance can be improved. This data is aggregated and does not identify individual users.
• Security Cookies: Used for fraud detection and security monitoring, including detection of unusual login patterns or suspicious activity on your account.

You can manage or delete cookies through your browser settings at any time. Note that disabling essential cookies will affect your ability to use the bpex platform. For most players, keeping cookies enabled provides the best and most secure platform experience.

bpex retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

When personal data is no longer required and no legal retention obligation applies, bpex securely deletes or anonymises it in accordance with our internal data disposal procedures.

bpex implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security infrastructure includes:

• 256-Bit SSL/TLS Encryption: All data in transit between your device and bpex servers is encrypted. This applies to login, registration, payment processing, and all in-platform activity.
• Encrypted Data Storage: Sensitive fields within bpex databases — including identity document data and financial records — are stored in encrypted form using AES-256 or equivalent standards.
• Access Controls: Access to player data is restricted on a strict need-to-know basis. Staff access is role-based, logged, and subject to regular review. Elevated privileges require multi-factor authentication.
• Two-Factor Authentication (2FA): bpex offers 2FA for player accounts. Players who enable 2FA provide a significantly stronger layer of protection against unauthorised account access.
• Penetration Testing: bpex's platform infrastructure is subject to regular security assessments and penetration testing by independent security specialists.
• Incident Response: bpex maintains a documented data breach response procedure. In the event of a confirmed data breach affecting player data, affected players will be notified within 72 hours of bpex becoming aware of the breach.

bpex respects your rights over your personal data. As a registered bpex player, you have the following rights with respect to your personal data held by bpex:

To exercise any of these rights, contact bpex at [email protected] with your registered account email address and the specific right you wish to exercise. We will verify your identity before processing your request. Most requests are fulfilled within 30 days; complex requests may require up to 60 days, and we will inform you if this is the case.

The bpex platform is strictly intended for users who are 21 years of age or older. bpex does not knowingly collect personal data from individuals under the age of 21, and registration by persons under 21 is a material breach of the bpex Terms & Conditions.

bpex employs the following measures to prevent underage access:

• Date of birth is collected at registration and verified during the KYC process.
• Identity documents confirming age are required before any withdrawal can be processed.
• Accounts that cannot confirm the player is 21 or older will be suspended pending verification.
• bpex supports parental control software and encourages parents and guardians to use filtering tools to prevent minors from accessing gambling platforms.

If you believe a minor has registered on bpex, please contact us immediately at [email protected] so we can investigate and take appropriate action.

bpex may send you promotional communications — including bonus offers, tournament announcements, and platform updates — only where you have provided explicit consent to receive such communications at the time of registration or through your account settings.

• Opt-In Basis: Marketing communications from bpex are strictly opt-in. You will not receive promotional emails or SMS messages unless you have actively chosen to receive them.
• Transactional Notifications: Account notifications such as deposit confirmations, withdrawal updates, security alerts, and KYC status messages are sent regardless of marketing preferences, as these are necessary for the operation of your bpex account.
• Unsubscribe: You may withdraw your consent to marketing communications at any time by clicking the unsubscribe link in any marketing email, adjusting your notification preferences in your bpex account settings, or contacting support at [email protected].
• No Third-Party Marketing: bpex will never share your contact details with third-party marketers. All marketing communications you receive will come exclusively from bpex.

bpex reserves the right to update or modify this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing practices, new product features, or improved transparency.

When material changes are made to this Privacy Policy, bpex will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to your registered email address summarising the key changes.
• Display a prominent notice on the bpex platform for a period of at least 14 days following the update.

Your continued use of the bpex platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should close your account before the new policy takes effect. To close your bpex account, contact [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bpex handles your personal data, our dedicated privacy support team is available to assist you 24 hours a day, 7 days a week.

You can reach us at:

• Email: [email protected]
• Platform: Live chat available on all pages of bpex.club
• Response Time: Privacy-related requests are acknowledged within 24 hours and resolved within 30 days.

Please include your registered email address and a clear description of your request when contacting us. For data access, rectification, or erasure requests, we will need to verify your identity before processing the request to protect your account security.