PRIVACY & DATA PROTECTION

BPEX Privacy Policy — How We Handle Your Personal Data

Your privacy matters to BPEX. This policy explains exactly what data we collect when you use our platform, why we collect it, how it is stored, and the controls you have over it. Please read it carefully — it is written in plain language, not legal jargon.

Last updated: January 2025 Applies to: bpex.im Pakistan (en-PK)
bpex

BPEX Privacy at a Glance

Six core commitments BPEX makes to every Pakistani player whose data we hold.

We Only Collect What We Need

BPEX collects personal data that is directly necessary for account management, payment processing, identity verification and regulatory compliance. We do not collect data for its own sake or to build advertising profiles.

We Never Sell Your Data

BPEX does not sell, rent or trade your personal data to third-party marketers. Your information is used solely to operate your account and fulfil our legal obligations — nothing else.

Encryption & Secure Storage

All data transmitted between your device and BPEX is encrypted using TLS. Stored data is protected by industry-standard security controls. Access to personal data within BPEX is restricted on a need-to-know basis.

You Control Your Data

You have the right to access, correct, restrict or request deletion of your personal data. BPEX will respond to valid data rights requests within 30 days. See Section 9 for full details of your rights.

Clear Retention Periods

BPEX keeps your data only as long as required for the purpose it was collected, or as required by applicable law. Once the retention period ends, data is securely deleted or anonymised.

Marketing on Your Terms

BPEX will only send promotional communications to members who have opted in. You can unsubscribe from marketing messages at any time from your account settings or by contacting support.

Plain-Language Summary BPEX collects your name, contact details, payment information and betting activity to run your account, process your transactions and comply with regulations. We protect this data with encryption, access controls and defined retention periods. We do not sell it. You can access, correct or request deletion of your data at any time by contacting us at support@bpex.im. The full details are below.

1Who We Are

This Privacy Policy applies to BPEX ("we", "us", "our", "the Platform"), which operates the online betting and casino website located at bpex.im. BPEX is the data controller responsible for the personal information of registered members and visitors to the platform.

BPEX is designed specifically for Pakistani players. Our services include sports betting, PSL betting, live casino games, card games, fishing games, and all associated promotional and loyalty programmes. This Privacy Policy governs data collected and processed across all of these services.

If you have any questions about this policy or about how BPEX handles your data, please contact us at support@bpex.im. We commit to responding to privacy-related enquiries within five business days.

2Data We Collect

2.1 Information You Provide Directly

When you register an account, use BPEX services or contact our support team, you may provide the following categories of personal data:

  • Identity data: Full legal name, date of birth, national identity card (CNIC) number or passport number.
  • Contact data: Pakistani mobile number, email address, city and province of residence.
  • Financial data: Payment method details used for deposits and withdrawals — including Easypaisa account numbers, JazzCash registered numbers, IBFT bank account details, and masked Visa/Mastercard numbers. Full card numbers are processed by our payment partners and are never stored on BPEX servers.
  • Verification documents: Copies of government-issued ID, proof of address or payment method ownership submitted during KYC verification.
  • Communications: Records of live chat conversations, emails and any other communications you send to BPEX support.

2.2 Data Collected Automatically

When you visit bpex.im or use the BPEX platform, certain technical data is collected automatically:

  • Device and browser data: Device type, operating system, browser type and version, screen resolution and device identifier.
  • Network data: IP address, approximate location derived from IP address, and internet service provider.
  • Usage data: Pages visited, time spent on each page, features used, games played, bet amounts placed, session start and end times, and navigation paths through the platform.
  • Cookie data: Data collected via cookies and similar tracking technologies as described in Section 6 of this policy.

2.3 Data from Third Parties

BPEX may receive supplementary personal data from third-party identity verification providers used to complete KYC checks, from payment processors confirming transaction status, and from fraud prevention services that flag potentially suspicious activity. This data is used solely in connection with account management and compliance obligations.

Data Category Examples Source
IdentityName, DOB, CNICYou / KYC provider
ContactMobile, email, cityYou
FinancialEasypaisa/JazzCash number, bank detailsYou / payment processor
TransactionDeposit/withdrawal history, bet recordsPlatform systems
TechnicalIP address, device ID, browserAutomatic collection
CommunicationsSupport chat, emailsYou
Verification docsID scan, proof of addressYou / KYC provider
bpex

3How We Use Your Data

BPEX uses the personal data it collects for the following purposes. Each purpose is tied to a legitimate reason for processing as described in Section 4.

  • Account creation and management: To create and maintain your BPEX account, verify your identity and keep your registration information accurate and current.
  • Payment processing: To execute deposits to your BPEX balance and process withdrawal requests to your nominated PKR payment method, including Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card.
  • KYC and fraud prevention: To verify your age and identity as required by our licensing obligations, and to identify and prevent fraudulent activity, money laundering, multi-accounting and other prohibited conduct.
  • Service delivery: To make the BPEX betting and casino lobby available to you, settle bets and game outcomes, apply bonuses and calculate rebates accurately.
  • Customer support: To respond to your queries, resolve disputes, investigate complaints and provide assistance via live chat and email.
  • Responsible gaming: To monitor play patterns for indicators of problem gambling, to apply and enforce the limits and exclusions you set in your account, and to contact you if our systems flag concern-level activity.
  • Legal compliance: To comply with applicable laws and regulations, respond to lawful requests from regulatory authorities, and maintain records required by our operating licence.
  • Platform improvement: To analyse how members use BPEX, identify areas for improvement and test new features. This analysis uses aggregated and anonymised data wherever possible.
  • Marketing communications: To send promotional offers, bonus notifications and platform updates to members who have opted in to receive them. You can opt out at any time — see Section 11.

4Legal Basis for Processing

BPEX processes your personal data under the following legal bases:

  • Contract performance: The majority of our processing is necessary to perform the contract between you and BPEX — i.e. to operate your betting and casino account as you expect it to function.
  • Legal obligation: Some processing — particularly identity verification, transaction record keeping and the reporting obligations under our gaming licence — is required by law. We have no discretion to avoid it.
  • Legitimate interests: BPEX processes certain data in its legitimate interests, including fraud prevention, security monitoring and platform analytics. In each case we balance our interests against your privacy rights.
  • Consent: Where we send you marketing communications, we do so only on the basis of your consent. You can withdraw this consent at any time.

5Sharing Your Data

BPEX does not sell, rent or share your personal data for third-party marketing purposes. We may share your data with the following categories of recipient in the following circumstances:

  • Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, and Visa/Mastercard card payment processors receive the minimum financial data required to complete your transactions.
  • Identity verification providers: Third-party KYC services receive identity documents to perform age and identity verification as required by our licensing conditions.
  • Game providers: Certified third-party game studios (such as Evolution Gaming, Pragmatic Play and others) receive your account identifier and stake information necessary to deliver their games through the BPEX platform.
  • Fraud and security services: Specialist fraud detection providers may receive technical data (IP address, device identifiers, transaction patterns) to assess risk and flag suspicious activity.
  • Regulatory authorities: BPEX will disclose personal data to gaming regulators, financial intelligence units or law enforcement when required by a lawful legal order, regulatory demand or our licence conditions.
  • IT and platform providers: Providers of hosting, data storage, email delivery, customer support software and related infrastructure may have access to personal data in the course of providing their services to BPEX, strictly under data processing agreements that bind them to our privacy standards.

All third parties with whom BPEX shares personal data are contractually required to protect it in accordance with applicable privacy standards and to use it only for the specific purpose for which it was shared. BPEX does not permit any third party to use your data for their own marketing or commercial purposes.

6Cookies and Tracking Technologies

BPEX uses cookies and similar technologies on bpex.im. A cookie is a small text file stored on your device when you visit a website. The cookies BPEX uses fall into the following categories:

Cookie TypePurposeCan Be Disabled?
EssentialKeep you logged in, maintain session state, protect against CSRF attacksNo — platform cannot function without these
FunctionalRemember your language preferences, game settings and lobby filtersYes — some features may not work correctly
AnalyticsUnderstand how members navigate the platform so we can improve itYes — opt out via account settings
MarketingDeliver relevant promotional messages to opted-in membersYes — opt out via account settings or by contacting support

You can manage cookie preferences through your BPEX account settings or through your browser's cookie controls. Note that disabling essential cookies will prevent you from accessing your account. BPEX does not use third-party advertising networks or social media trackers.

bpex

7Data Retention

BPEX retains personal data for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law or our gaming licence. The following general retention periods apply:

Data TypeRetention PeriodReason
Account registration data5 years after account closureRegulatory / licence requirement
Transaction records7 yearsFinancial regulation / AML
KYC documents5 years after account closureRegulatory / licence requirement
Betting & game history5 yearsDispute resolution / regulation
Support communications3 yearsDispute resolution
Marketing consent recordsUntil withdrawal + 1 yearCompliance evidence
Technical / log data12 monthsSecurity monitoring

Once a retention period expires, BPEX will either securely delete the data or anonymise it so it can no longer be linked back to you. In the case of anonymised data, the resulting dataset may be retained for statistical and analytics purposes without any retention limit.

8Security Measures

BPEX applies technical and organisational security measures proportionate to the risk involved in processing your personal data. These include:

  • TLS encryption for all data in transit between your device and BPEX servers.
  • Encryption at rest for stored personal data and financial records.
  • Role-based access controls — BPEX staff can only access the personal data their role requires, and all access is logged.
  • Regular security assessments and penetration testing of the platform infrastructure.
  • Two-factor authentication options for member accounts.
  • Automated fraud monitoring systems that flag unusual account or payment behaviour for manual review.
  • Incident response procedures for detecting and responding to data security incidents.

No online system can guarantee complete security. While BPEX takes all reasonable steps to protect your data, you play an important role in keeping your account secure. Use a strong, unique password for your BPEX account and do not share your credentials with anyone.

In the event of a data security incident that affects your personal data in a way that could cause you harm, BPEX will notify you as soon as reasonably practicable and will take prompt steps to contain and investigate the incident.

9Your Data Rights

As a BPEX member, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting us at support@bpex.im. We will respond within 30 days.

You have the right to request a copy of the personal data BPEX holds about you, together with information about how it is used and who it is shared with. We will provide this in a clear, readable format within 30 days of receiving a valid request.
If any personal data BPEX holds about you is inaccurate or out of date, you have the right to ask us to correct it. Many account details can be updated directly in your BPEX account settings without needing to contact support.
You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. Note that BPEX may need to retain certain data beyond a deletion request to comply with legal or regulatory obligations — we will explain any such limitation when responding to your request.
You can ask BPEX to restrict how we use your data — for example, while a correction request is being processed, or while you dispute the legitimacy of our processing. During a restriction, we will not use the data for any purpose beyond storage, unless you agree otherwise.
Where BPEX processes your data based on your consent or to perform a contract with you, and the processing is carried out by automated means, you have the right to receive your data in a structured, commonly used and machine-readable format, and to transfer it to another controller where technically feasible.
You have the right to object to BPEX processing your data based on our legitimate interests. If you object, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests. You have an absolute right to object to processing for direct marketing purposes — this takes effect immediately upon request.

To exercise any of the above rights, contact us at support@bpex.im with the subject line "Data Rights Request". Please include your registered mobile number or email address so we can verify your identity before processing the request. We will not charge a fee for standard requests.

10Children's Privacy

BPEX is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18 years of age. If you believe that a minor has created a BPEX account, please contact us immediately at support@bpex.im. Upon confirmation, the account will be closed, all bets voided and any deposited funds returned to the payment source. BPEX employs age verification measures during the registration process and as part of ongoing KYC review to enforce this requirement.

11Marketing Communications

BPEX will only send you marketing communications — including promotional offers, bonus notifications, PSL betting alerts and platform updates — if you have opted in to receive them during registration or at a later point in your account settings.

You can withdraw your marketing consent at any time by:

  • Updating your communication preferences in your BPEX account settings.
  • Clicking the unsubscribe link in any marketing email from BPEX.
  • Contacting BPEX support at support@bpex.im and requesting removal from the marketing list.

Once you withdraw consent, BPEX will stop sending marketing communications within 3 business days. Withdrawing marketing consent does not affect transactional communications — you will continue to receive messages about deposits, withdrawals, account verification, security alerts and other operational matters that are necessary for your account.

Members who have activated self-exclusion will be removed from all marketing communications automatically and immediately, with no further action required on their part.

12Third-Party Links

The BPEX platform does not contain links to external websites or third-party platforms beyond the internal navigation structure and the payment gateways used to process your transactions. BPEX is not responsible for the privacy practices of any third-party services and recommends that you review the privacy policies of any external service you choose to use.

13Changes to This Policy

BPEX may update this Privacy Policy from time to time to reflect changes in our data practices, new services, or evolving legal requirements. When material changes are made, we will update the "Last updated" date at the top of this page. For significant changes, we will also notify registered members via email or an in-platform notification prior to the change taking effect.

Your continued use of the BPEX platform after a revised Privacy Policy has been published constitutes your acknowledgment of the updated policy. If you do not agree with material changes to the policy, you should contact BPEX support to discuss your options, including account closure.

The current version of this Privacy Policy is always accessible at bpex.im/privacy-policy and supersedes all previous versions.

14Contact Us

For any questions, concerns or requests related to this Privacy Policy or the way BPEX handles your personal data, please contact us through the following channels:

  • Live Chat: Available 24/7 when you are logged in to your BPEX account. This is the fastest route for most privacy-related questions.
  • Email: support@bpex.im — please use the subject line "Privacy Query" or "Data Rights Request" as appropriate.
  • FAQ: The BPEX FAQ page addresses common questions about account data and privacy settings.

BPEX aims to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 days. Complex requests may take longer — in such cases we will keep you informed of progress.

This Privacy Policy was last reviewed and updated in January 2025. BPEX recommends that members revisit this page periodically, particularly after any notification of updates, to remain informed of how their data is being handled.

BPEX Data Protection at a Glance

Key metrics that reflect how seriously BPEX takes your privacy.

TLS All data in transit encrypted
0 Data sold to third-party marketers
30d Maximum response time for data requests
24/7 Support available for privacy queries

Play at BPEX With Confidence

Your data is protected. Your transactions are in PKR. Your winnings are real. Join over 500,000 Pakistani players on the platform built for you.

Easypaisa JazzCash NayaPay IBFT Visa/MC
Play Responsibly at BPEX

Online betting carries financial risk. Set a budget, stick to it, and never chase losses. BPEX provides deposit limits, session timers and self-exclusion tools directly in your account settings. If you need guidance or support, visit our Responsible Gaming page. BPEX is for adults aged 18 and above only.