Privacy Policy —
bpexcn Platform

This Privacy Policy ("Policy") describes how bpexcn ("bpexcn", "Platform", "we", "us", "our"), the operator of the online betting and gaming platform accessible at https://bpexcn.cam, collects, processes, stores and protects personal data relating to users ("User", "you", "your") of the Platform.

This Policy applies to all personal data processed in connection with your use of the bpexcn Website and all associated services, including account registration, identity verification (KYC), financial transactions, customer support interactions and use of betting and gaming features.

By accessing the bpexcn Platform and creating an account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy should be read alongside bpexcn's Terms & Conditions, which incorporate this Policy by reference. Pakistani users are advised that this Policy does not constitute legal advice on the applicability of Pakistani data protection law to their specific circumstances.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, national identity number, contact details, financial information, IP address and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, restriction, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, bpexcn is the Data Controller in respect of Personal Data collected from Users of the Platform.
• "Data Processor" means any entity that processes Personal Data on behalf of the Data Controller pursuant to a contractual arrangement.
• "KYC Data" means identity verification documents and associated data submitted by Users during the Know Your Customer verification process, including CNIC, passport images, selfies and proof of address documents.
• "Cookies" means small text files placed on your device by the Platform to enable certain functionality, analytics and session management.
• "PKR" means Pakistani Rupee, the currency in which bpexcn Account balances are denominated.

bpexcn is the Data Controller responsible for the Personal Data of registered Users of the Platform. As Data Controller, bpexcn determines the purposes for which Personal Data is collected and the manner in which it is processed.

Where bpexcn engages third-party service providers — such as payment processors, KYC verification technology providers, live game studios, sports data partners and cloud infrastructure providers — those parties act as Data Processors under contractual obligations that require them to process Personal Data only on bpexcn's instructions and to implement appropriate security measures.

For queries regarding this Policy or bpexcn's data processing activities, please contact us using the details in Section 15 of this Policy.

bpexcn collects the following categories of Personal Data from Users:

bpexcn may also receive data about you from third parties, including payment service providers (for transaction verification), KYC technology providers (for identity verification results) and fraud prevention services.

bpexcn processes your Personal Data for the following purposes:

• Account Management: To create, maintain and administer your bpexcn Account, including authentication and account security;
• Identity & Age Verification (KYC): To verify your identity, confirm your age (18+ or higher minimum required by the operator/license jurisdiction) and comply with anti-money-laundering (AML) and know-your-customer obligations;
• Payment Processing: To process PKR deposits and withdrawal requests, verify payment method ownership and prevent fraudulent transactions. Payment references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are used as contextual transaction channels; none of these providers is a data controller in relation to bpexcn account data;
• Platform Delivery: To provide sports betting, live casino, slots and other gaming services to you through the Platform;
• Customer Support: To respond to your queries, complaints and account-related requests via Live Chat, Help Center and email;
• Fraud Prevention & Security: To detect, investigate and prevent fraudulent activity, money laundering, multi-accounting and other breaches of the Terms & Conditions;
• Responsible Gambling: To support the activation and maintenance of responsible gambling tools on your account, including deposit limits, session controls and self-exclusion;
• Legal Compliance: To comply with applicable legal and regulatory obligations, including AML, record-keeping and reporting requirements;
• Platform Improvement: To analyse usage data and improve the performance, features and user experience of the Platform;
• Marketing Communications: To send you information about promotions, bonuses and Platform updates, where you have consented to receive such communications. You may opt out at any time.

bpexcn processes your Personal Data on the following legal bases, consistent with applicable data protection frameworks in the jurisdiction(s) where bpexcn is licensed:

• Contractual Necessity: Processing required to perform the contract between you and bpexcn (i.e., the Terms & Conditions), including account creation, betting services and payment processing;
• Legal Obligation: Processing required to comply with applicable legal requirements, including KYC, AML obligations and regulatory reporting;
• Legitimate Interests: Processing for purposes such as fraud prevention, platform security, technical improvement and responsible gambling monitoring, where those interests are not overridden by your fundamental rights;
• Consent: Processing for marketing communications, where you have given your explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Pakistani users are advised that data protection law in Pakistan is still developing. bpexcn processes User data in accordance with the legal framework applicable in its licensing jurisdiction and in accordance with this Policy.

bpexcn does not sell your Personal Data. We share your data only where necessary for the purposes described in this Policy, and only with the following categories of recipients:

• KYC & Identity Verification Providers: Specialist technology vendors that process identity documents and liveness checks on bpexcn's behalf under strict contractual data processing agreements;
• Payment Service Providers: Entities that facilitate PKR deposits and withdrawals. Payment method channels referenced by bpexcn (e.g., Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) operate under their own privacy policies and bpexcn is not responsible for their data handling practices;
• Game & Sports Technology Partners: Third-party game studios and sports data providers that deliver content through the Platform, who may receive pseudonymised session data necessary for game function and integrity;
• Cloud & Infrastructure Providers: Cloud hosting and server providers that store Platform data on secured, encrypted infrastructure under contractual obligations;
• Fraud Prevention & AML Services: Third-party services engaged to detect and prevent fraudulent activity and financial crime;
• Legal & Regulatory Authorities: Where required by law, court order, regulatory requirement or to protect the legal rights of bpexcn and its users, we may disclose Personal Data to law enforcement, financial intelligence units or other competent authorities;
• Professional Advisers: Legal, audit and compliance advisers under appropriate confidentiality obligations.

bpexcn retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required to comply with applicable legal, regulatory, tax and accounting obligations.

The following general retention principles apply:

• Account Data: Retained for the duration of your active account relationship with bpexcn, plus any legally required retention period following account closure (typically five to seven years, depending on applicable AML and financial record-keeping requirements);
• KYC Documents: Retained for the period required by AML and identity verification obligations in bpexcn's licensing jurisdiction, typically a minimum of five years following account closure or the conclusion of any related investigation;
• Transaction Records: Retained for a minimum of five years to comply with AML record-keeping requirements;
• Support Communications: Retained for a period sufficient to resolve any related dispute or complaint, typically up to three years;
• Technical & Usage Data: Retained for up to twenty-four months for platform analytics and security monitoring purposes, after which it is aggregated or anonymised.

Following the applicable retention period, Personal Data is securely deleted or permanently anonymised. If you request account deletion, bpexcn will delete your data subject to retention obligations that cannot be overridden by individual request.

bpexcn uses cookies and similar tracking technologies to operate the Platform, manage sessions, maintain security, analyse usage patterns and improve the user experience. Cookies do not contain information that directly identifies you by name; they typically contain a unique identifier linked to your device or session.

The following types of cookies are used on the Platform:

• Essential Cookies: Required for the Platform to function correctly, including session management, authentication, bet confirmation and responsible gambling tool activation. These cannot be disabled without disrupting Platform functionality;
• Functional Cookies: Remember your preferences such as language settings, display preferences and notification choices;
• Analytics Cookies: Collect aggregated, pseudonymous data about how Users navigate the Platform, helping bpexcn identify and fix issues and improve the overall experience;
• Security Cookies: Support fraud detection, bot prevention and account security monitoring.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies may limit certain Platform features. bpexcn does not currently use third-party advertising cookies for retargeting purposes.

bpexcn implements technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, alteration, disclosure or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between Users and bpexcn servers;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Role-based access controls limiting data access to authorised personnel with a demonstrated need;
• Two-factor authentication (2FA) options for User accounts;
• Firewall protection and intrusion detection monitoring;
• Regular security assessments of Platform infrastructure;
• Data processing agreements with all third-party service providers requiring equivalent security standards.

While bpexcn takes data security seriously, no system is entirely immune to risk. In the event of a security breach that materially affects your Personal Data, bpexcn will notify affected Users and relevant authorities in accordance with applicable obligations.

Depending on the data protection framework applicable in your jurisdiction, you may have some or all of the following rights in relation to your Personal Data held by bpexcn:

To exercise any of the above rights, please contact bpexcn via Live Chat or the Help Center within your account. We will respond to verified requests within a reasonable period, and in any event within thirty (30) calendar days. We may need to verify your identity before processing certain requests to protect against fraudulent data access.

bpexcn is strictly an adults-only platform. The Platform is not directed at, and does not knowingly collect Personal Data from, individuals under the age of 18, or the higher minimum age required by the operator's license jurisdiction.

Age verification is conducted as part of the KYC process. If bpexcn discovers that an account has been registered by or on behalf of a minor, the account will be immediately suspended, all associated funds will be frozen pending investigation, and any winnings will be forfeited. The Personal Data collected in connection with such an account will be processed only to the extent necessary to comply with legal obligations and to investigate the incident.

bpexcn operates internationally. Your Personal Data may be processed in countries other than Pakistan, including in the jurisdiction where bpexcn is incorporated and licensed, and in the countries where our service providers operate their infrastructure.

Where Personal Data is transferred outside of your jurisdiction, bpexcn takes reasonable steps to ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to that described in this Policy. Such safeguards may include contractual data processing agreements with service providers containing data protection obligations.

By using bpexcn, you acknowledge and consent to the international transfer of your Personal Data for the purposes described in this Policy. If you have concerns about international data transfers, please contact us using the details in Section 15.

bpexcn reserves the right to update or amend this Privacy Policy at any time. When changes are made, the updated Policy will be published on this page with a revised "Last Updated" date. Where changes are material — for example, changes that affect the legal basis for processing, introduce new data categories, or alter your rights in a significant way — bpexcn will take reasonable steps to notify registered Users, which may include a notice on the Platform login page or communication to your registered email address.

Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how bpexcn handles your data.

Previous versions of this Policy are available on request through the Help Center.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, have a privacy-related complaint, or need to report a potential data security concern, please contact bpexcn through the following channels:

• Live Chat: Available 24/7 via the Help Center within your bpexcn account. This is the fastest channel for urgent privacy or security concerns.
• Help Center: Submit a written support ticket through the Help Center within your account. Recommended for formal data subject rights requests, allowing you to provide a detailed description and any supporting information.
• General Enquiries Email: [email protected] (plain text — not a clickable link; copy and paste into your email client as required).

bpexcn will acknowledge written privacy requests within five (5) business days and will respond substantively within thirty (30) calendar days, or such shorter period as may be required by applicable law. We may request identity verification before processing certain requests to ensure we are dealing with the legitimate account holder.