🔒 PRIVACY POLICY

BPExchang Privacy Policy – How We Handle Your Data in Pakistan

At BPExchang we believe you have the right to know exactly how your personal information is used. This policy explains what data we collect, why we collect it, how it is stored and what control you have over it — written in plain English that makes sense without a legal background.

Last Updated: January 2025 256-bit SSL Encryption Pakistan Market
🛡️
Your Data is Safe
BPExchang never sells your personal data to third parties for marketing purposes
Zero Data Selling
bpexchang

Privacy at BPExchang – What Matters Most

Six core commitments that define how BPExchang handles your personal information as a Pakistani player.

256-Bit SSL on Every Transaction

Every piece of data you submit to BPExchang — from your registration details to every deposit or withdrawal request — travels over a 256-bit SSL encrypted connection. There is no unencrypted pathway into or out of the platform for any sensitive data.

We Never Sell Your Data

BPExchang does not sell, rent or trade personal data to any third party for advertising, marketing or commercial profiling purposes. Your information is used solely to operate your account, process transactions and comply with applicable regulations.

You Control Your Data

BPExchang gives you meaningful control over your personal data. You can request a full export of the data we hold on you, ask us to correct inaccurate information or request account deletion — all through a straightforward process via our support team.

Secure Data Storage

All BPExchang player data is stored on secure, access-controlled servers. Access to personal data is restricted to authorised personnel who require it to perform their job function. We conduct regular security audits and patch management to keep our infrastructure current.

Minimal Data Collection

BPExchang collects only the data that is genuinely necessary to operate your account, process payments and meet legal obligations. We do not collect unnecessary personal details, we do not track your activity outside of the BPExchang platform and we do not run third-party ad tracking tools.

Breach Notification

In the unlikely event of a data security incident that affects your personal information, BPExchang will notify affected players as quickly as possible and explain what data was involved, what steps were taken and what you should do to protect yourself.

Before You Read On: This Privacy Policy applies to all personal data collected through bpexchang.net and related services. By registering an account or using any BPExchang service you confirm that you have read and understood this policy. If anything here is unclear, contact us at support@bpexchang.net before proceeding.
1. Introduction

BPExchang ("we", "us", "the platform") operates the online betting and gaming platform accessible at bpexchang.net. As part of providing this service to players in Pakistan, we collect and process certain personal information. This Privacy Policy explains exactly what that information is, how we use it, who we share it with, how long we keep it and what choices you have as a player.

We have written this policy to be as clear and direct as possible. The goal is not to bury important information in dense legal language but to give you a genuine understanding of how BPExchang handles data. If you have questions that this document does not answer, our support team is available 24/7 and will respond promptly.

This policy applies to all players who register an account on BPExchang, visit the website without registering, or interact with BPExchang through any channel including email and live chat support. It should be read alongside the BPExchang Terms and Conditions and Responsible Gaming Policy.

2. Data We Collect

BPExchang collects personal data in two ways: information you provide directly and information collected automatically as you use the platform. Here is a breakdown of each category:

Information you provide directly:

  • Name, date of birth and gender (collected during registration for identity verification and age compliance)
  • Email address and mobile number (for account communication and two-factor authentication)
  • Residential address in Pakistan (for KYC verification purposes)
  • Payment method details — Easypaisa or JazzCash mobile number, IBFT bank account details or card details for Visa/Mastercard (for transaction processing only)
  • Identity documents such as CNIC or passport copies, where requested as part of our verification process
  • Communications you send to our support team via live chat or email

Information collected automatically:

  • IP address and approximate location data
  • Device type, operating system and browser information
  • Pages visited on bpexchang.net, time spent on each page and navigation paths
  • Session timestamps, login and logout records
  • Betting history, game activity records and transaction logs
  • Cookie and session data (see Section 8 for full cookie information)
Minimum Necessary Principle: BPExchang collects only the data that is genuinely required for the purpose stated. We do not collect data speculatively or maintain profiles of your activity outside of the BPExchang platform.
3. How We Use Your Data

Every piece of personal data BPExchang collects has a specific, documented purpose. We do not use data for purposes beyond those listed here without informing you first:

Purpose Data Used Basis
Account registration & management Name, email, mobile, DOB Contract
Age & identity verification (KYC) CNIC / passport, DOB, address Legal Obligation
Payment processing Payment method details, transaction amounts Contract
Fraud prevention & security IP, device data, activity logs Legitimate Interest
Customer support Account data, support communications Contract
Responsible gaming monitoring Betting history, session data, deposit patterns Legal Obligation
Service improvement & analytics Anonymised usage data, device logs Legitimate Interest
Marketing communications (opt-in) Email, mobile number Consent
bpexchang
5. Data Sharing

BPExchang does not sell, rent or trade your personal data to any third party. We share data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

  • Payment processors: When you make a deposit or withdrawal, BPExchang shares the necessary transaction data with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, a bank (for IBFT) or Visa/Mastercard's processing network. These parties process data only as required to complete your transaction.
  • Identity verification services: BPExchang uses third-party KYC providers to verify identity documents where required. These providers access only the document and personal details necessary for verification and are contractually bound to handle data securely.
  • Fraud prevention and security: In cases of suspected fraud, money laundering or other criminal activity, BPExchang may share relevant data with law enforcement agencies or regulatory bodies as required by law.
  • Service providers: BPExchang engages technical service providers (such as cloud hosting and email delivery services) who may process data on our behalf. These providers operate under data processing agreements that restrict their use of data to the service they provide to BPExchang.
No Marketing Data Sales: BPExchang has never sold player data to advertisers, data brokers or marketing platforms, and we will not do so. If this policy changes, we will notify all registered players before any such sharing takes place.
6. Data Retention

BPExchang retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to applicable legal minimum retention requirements. Specific retention periods are as follows:

  • Active account data: Retained for the lifetime of your BPExchang account plus a minimum of five years after account closure, as required by anti-money laundering regulations.
  • Transaction records: All deposit, withdrawal and betting transaction records are retained for a minimum of five years from the date of the transaction.
  • KYC documents: Identity documents provided during verification are retained for five years after account closure or after the last transaction, whichever is later.
  • Support communications: Live chat and email records are retained for three years from the date of the conversation.
  • Marketing consent records: Records of marketing consent and withdrawal of consent are retained for the duration of the account plus two years.
  • Website usage logs: Technical logs (IP, device, session data) are retained for 12 months on a rolling basis.

Once data has exceeded its retention period and no legal obligation requires further retention, BPExchang securely deletes or anonymises it.

7. Security Measures

BPExchang takes data security seriously and has implemented multiple layers of protection for player data. The measures currently in place include:

  • 256-bit SSL/TLS encryption on all data transmitted between your browser or device and bpexchang.net
  • At-rest encryption for sensitive stored data including payment details and identity documents
  • Role-based access controls limiting internal access to personal data to authorised personnel only
  • Two-factor authentication available for all player accounts to protect against unauthorised access
  • Continuous automated monitoring for unusual account activity, fraudulent transactions and security anomalies
  • Regular security audits and penetration testing by qualified third-party security professionals
  • Patch management procedures to ensure all platform components are kept up to date

Despite these measures, no online system can guarantee 100% security. BPExchang recommends that players use a strong, unique password for their account and enable two-factor authentication to further protect their account security.

8. Cookies and Tracking

BPExchang uses cookies and similar session technologies on bpexchang.net. A cookie is a small text file placed on your device by a website to enable certain functionality. BPExchang uses the following categories of cookies:

  • Essential cookies: These are necessary for the platform to function — they manage your login session, remember your account state and enable the bet slip and deposit flow. You cannot opt out of essential cookies without losing access to core functionality.
  • Analytics cookies: BPExchang uses anonymised analytics cookies to understand how players navigate the platform — which pages are most used, where drop-offs occur and how the mobile experience compares to desktop. No personally identifiable data is included in these analytics.
  • Preference cookies: These remember your settings such as preferred language, odds format and notification preferences so you do not need to reconfigure them on every visit.

BPExchang does not use third-party advertising or retargeting cookies. No cookie data from BPExchang is shared with ad networks or social media platforms. You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to log in and use the platform.

bpexchang
9. Your Data Rights

As a BPExchang player you have the following rights in relation to your personal data. To exercise any of these rights, contact support@bpexchang.net. We will respond to all data rights requests within 30 days.

Right to Access

Request a copy of all personal data BPExchang holds about you. We will provide this in a readable format within 30 days of your verified request.

Right to Correction

If any personal data we hold is inaccurate or out of date, you have the right to request that we correct it. Some updates can be made directly through your account settings.

Right to Deletion

You can request deletion of your personal data. Where legal retention obligations apply (such as transaction records), we will delete all data that is not legally required to be kept and inform you of what was retained and why.

Right to Portability

You can request your personal data in a structured, machine-readable format for transfer to another platform. This right applies to data you provided to us and data generated through your use of BPExchang.

Right to Object

You can object to specific types of data processing at any time — for example, you can opt out of marketing communications by contacting us or using the unsubscribe option in any marketing email we send.

Right to Restriction

In certain circumstances you can request that we restrict the processing of your data — for example, while a complaint or correction request is being resolved.

10. Payment Data and Security

BPExchang supports six payment methods: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer and Visa/Mastercard. The handling of payment data differs by method and is subject to the privacy practices of the relevant payment provider in addition to this policy.

  • Easypaisa and JazzCash: When you deposit via a mobile wallet, BPExchang receives only the confirmation of a successful payment — not your full wallet credentials or PIN. The authentication step takes place entirely within your wallet app.
  • IBFT bank transfer: BPExchang collects your bank account number for withdrawal processing. This is stored securely and used only to send funds to your registered bank account.
  • Visa/Mastercard: Card transactions are processed by a PCI-DSS compliant payment gateway. BPExchang does not store full card numbers — only the last four digits and card type are retained for reference purposes.
  • All payment data is transmitted over encrypted connections and stored in access-controlled, encrypted databases.
  • BPExchang does not share payment data with any third party except the payment processor required to complete your specific transaction.
11. Minors and Age Verification

BPExchang is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a person under 18 has provided us with personal data, we will take immediate steps to close the account and delete the data, returning any deposited funds to the original payment source.

Age verification is carried out during the registration process. BPExchang may request additional identity documentation to confirm age and identity, particularly prior to processing the first withdrawal from a new account. Players who cannot provide satisfactory age verification will have their accounts suspended until the matter is resolved.

Parents and guardians who believe a minor has registered on BPExchang should contact support@bpexchang.net immediately. We will investigate and act on all such reports as a priority.

12. Changes to This Privacy Policy

BPExchang may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or the services we offer. When material changes are made, we will notify registered players via the email address associated with their account, with at least 14 days' advance notice where possible.

The most current version of this policy is always available at bpexchang.net/privacy-policy. The "Last Updated" date at the top of the page indicates when the most recent revision was made. Your continued use of BPExchang after a policy update is published and notified constitutes your acceptance of the updated Privacy Policy.

If you disagree with a change and do not wish to continue using BPExchang under the updated policy, you may request account closure and withdrawal of your remaining balance before the changes take effect.

13. Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights or want to raise a concern about how BPExchang handles your personal data, please get in touch:

  • Email: support@bpexchang.net — for privacy requests, please include "Privacy Request" in the subject line and describe your request clearly. We aim to respond to all privacy-related emails within 24 hours.
  • Live Chat: Available on bpexchang.net 24 hours a day, 7 days a week. For data rights requests, our support team will direct you to the appropriate process.

BPExchang is committed to handling all privacy matters with seriousness and speed. Pakistani players deserve to have their data rights respected and our team is trained to assist with any concern you raise.

Your Privacy Is Protected at BPExchang

You now know exactly how BPExchang handles your data. Register free, deposit from Rs 500 via Easypaisa or JazzCash and play on a platform that takes your privacy as seriously as it takes your winnings.