bpcxeh
Privacy Policy

bpcxeh ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of every player who uses bpcxeh.net. This Privacy Policy describes the types of personal information we collect from players in Pakistan and elsewhere, the purposes for which that information is used, the parties with whom it may be shared, and the rights and choices available to you regarding your personal data.

This Policy applies to all data processing activities carried out by bpcxeh in connection with the operation of the bpcxeh.net online casino, sports betting, lottery, and related services. It covers data collected through the website, mobile interfaces, customer support channels, and any other means through which you interact with bpcxeh.

By registering an account or continuing to use bpcxeh, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree, you must discontinue use of the platform and contact us to close your account.

bpcxeh collects the following categories of personal data in connection with the operation of the platform. We do not collect any category of data that is not necessary for the purposes described in this Policy.

bpcxeh does not collect special categories of sensitive personal data such as health information, political opinions, biometric data, or religious beliefs, except where explicitly required by law or provided voluntarily by you in the context of a responsible gaming self-disclosure.

bpcxeh collects personal data through the following channels and mechanisms:

• Direct Registration: When you create a bpcxeh account, you provide identity, contact, and in some cases financial data directly through the registration form.
• KYC Submission: When you submit identity documents for verification, CNIC scans, address proofs, and selfies are provided directly by you.
• Payment Transactions: Financial data is collected when you make a deposit or withdrawal request through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or other supported payment methods.
• Platform Usage: Gaming activity data, session data, and behavioural data are collected automatically as you use the platform through server-side logging and client-side tracking.
• Cookies & Tracking Technologies: Technical data including IP address, device identifiers, and browser information is collected via cookies and similar technologies as described in Section 7 of this Policy.
• Customer Support: When you contact the bpcxeh support team, records of the communication — including any personal information you provide — are retained for account management and dispute resolution purposes.
• Third-Party Sources: In limited cases, bpcxeh may receive data from fraud prevention services, identity verification providers, or payment processors to verify the information you have provided.

bpcxeh processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the contract between you and bpcxeh — including account creation, processing bets, handling deposits and withdrawals, and providing customer support.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and reporting obligations to regulatory authorities.
• Legitimate Interests: Processing carried out in the legitimate interests of bpcxeh, including fraud prevention, security monitoring, platform improvement, and responsible gaming enforcement, where these interests are not overridden by your rights.
• Consent: Processing carried out on the basis of your explicit consent, primarily for marketing communications and optional analytics. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

bpcxeh uses the personal data collected for the following specific purposes. We do not use your data for any purpose incompatible with the purposes listed below without obtaining your prior consent:

• Creating and managing your bpcxeh account, including authentication and security
• Processing deposits and withdrawals via JazzCash, EasyPaisa, and supported Pakistani banking channels
• Verifying your identity and age (21+) in accordance with KYC and AML requirements
• Detecting and preventing fraud, money laundering, collusion, and other prohibited activities
• Monitoring for responsible gaming indicators and enforcing self-exclusion and limit requests
• Resolving betting disputes and responding to customer support enquiries
• Sending transactional communications (deposit confirmations, withdrawal updates, security alerts)
• Sending promotional offers, bonus notifications, and newsletters where you have opted in
• Improving and personalising the platform experience based on usage data
• Complying with audit, reporting, and record-keeping obligations under applicable law

bpcxeh does not sell, rent, or trade your personal data. Data is shared with third parties only to the extent strictly necessary for the purposes described in this Policy, under contractual data protection obligations, and in the following specific circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/MasterCard, and USDT processing partners receive the financial data necessary to execute your deposit and withdrawal transactions.
• KYC & Identity Verification Providers: bpcxeh works with certified identity verification service providers to validate your CNIC and other submitted documents. These providers are contractually bound to use your data solely for verification purposes.
• Fraud & AML Screening Services: Transaction data and identity information may be shared with fraud prevention and AML compliance platforms to screen for suspicious activity as required by international gaming regulations.
• Game Software Providers: Anonymised or pseudonymised game session data may be shared with casino software licensors for game integrity verification and technical support purposes.
• Regulatory Authorities: bpcxeh may be required to disclose personal data to regulators, law enforcement agencies, or courts when legally compelled to do so. bpcxeh will notify you where legally permitted when such a disclosure is required.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets involving bpcxeh, your personal data may be transferred to the successor entity, subject to equivalent data protection standards.

bpcxeh uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and improve the user experience. The following categories of cookies are used on bpcxeh.net:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking the platform.
• Functional Cookies: Remember your preferences such as language, display settings, and last-used payment method to improve your experience on return visits.
• Analytical Cookies: Used to understand how players interact with bpcxeh — including which pages are visited most, how long sessions last, and where errors occur. Data collected is aggregated and pseudonymised.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised login attempts. These are part of bpcxeh's fraud prevention infrastructure.

You can manage cookie preferences through your browser settings. Disabling cookies beyond strictly necessary ones may affect the functionality of certain platform features. bpcxeh does not use third-party advertising or tracking cookies.

bpcxeh retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following retention periods apply as general guidelines:

• Active Account Data: Retained for the duration of your bpcxeh account and for a period of at least five years after account closure, in accordance with AML record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five years from the date of the transaction to satisfy financial regulatory obligations.
• KYC Documents: Identity verification documents are retained for the duration of the account relationship and for five years post-closure. Where a suspicious activity report has been filed, retention may extend to seven years.
• Support Communications: Customer support records are retained for three years from the date of the last communication.
• Marketing Preferences: Retained until you withdraw consent or request deletion, after which a suppression record is maintained to prevent re-contact.
• Technical Logs: Server and access logs are retained for 12 months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you.

bpcxeh implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• All data in transit is encrypted using TLS 1.2 or higher. All data at rest is encrypted using AES-256 encryption on secured servers.
• Two-factor authentication (2FA) is available for all bpcxeh accounts and is strongly recommended for all players.
• Access to personal data within bpcxeh's internal systems is restricted on a need-to-know basis with role-based access controls and full audit logging.
• Regular penetration testing and vulnerability assessments are conducted on the bpcxeh platform infrastructure.
• All third-party service providers who process personal data on behalf of bpcxeh are vetted for security compliance and are bound by contractual data protection obligations.
• bpcxeh maintains an incident response plan for data breaches, with defined procedures for containment, investigation, notification, and remediation.

Subject to applicable law and regulatory obligations, you hold the following rights with respect to the personal data bpcxeh holds about you. To exercise any of these rights, contact bpcxeh at [email protected]. Requests will be acknowledged within 3 business days and resolved within 30 days.

bpcxeh is strictly an adults-only platform. The bpcxeh.net website and all Services are exclusively intended for individuals aged 21 years or older. bpcxeh does not knowingly collect, process, or retain personal data from any individual under the age of 21.

All users are required to verify their age through CNIC submission before any withdrawal can be processed. If bpcxeh discovers that an account has been registered by an individual under 21 years of age, the account will be immediately closed, all funds forfeited, and the matter referred to the appropriate authorities in accordance with child protection regulations.

If you are a parent or guardian and believe that your child has provided personal data to bpcxeh, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

bpcxeh operates as an international online platform and may transfer your personal data to jurisdictions outside of Pakistan for processing and storage purposes, including data centres and service providers located in jurisdictions with robust data protection frameworks.

Where personal data is transferred to a third country or international organisation that does not provide an adequate level of data protection as determined by applicable law, bpcxeh ensures that appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission or other recognised supervisory authorities
• Binding corporate rules for transfers within a group of companies
• Adequacy decisions issued by relevant data protection authorities confirming equivalent protection

You have the right to obtain information about the safeguards in place for any specific international transfer by contacting bpcxeh's Data Protection Officer at the contact details provided in Section 14 below.

bpcxeh reserves the right to update, amend, or replace this Privacy Policy from time to time in response to changes in applicable law, regulatory guidance, business practices, or platform functionality. The "Last Updated" date at the top of this page indicates when the Policy was last revised.

Where material changes are made that significantly affect your rights or how your personal data is processed, bpcxeh will provide notice through one or more of the following methods:

• Email notification to the address registered on your bpcxeh account
• Prominent notice displayed on the bpcxeh.net homepage or within the account dashboard
• In-platform notification or banner displayed upon login

Your continued use of bpcxeh following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of the platform and request account closure.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which bpcxeh processes your personal data, or if you wish to exercise any of your data rights, you may contact bpcxeh using the following methods:

• General Support: [email protected] (24/7 response within 4 hours)
• Data Protection Officer: [email protected] (Privacy-specific enquiries — response within 3 business days)
• Live Chat: Available 24/7 from within your bpcxeh account dashboard for urgent privacy concerns

When contacting bpcxeh regarding a data protection matter, please include your full name, registered email address, and a clear description of your request or concern. For security purposes, bpcxeh may require additional identity verification before processing certain data rights requests.

If you are not satisfied with bpcxeh's response to a privacy complaint, you have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction of residence.