bpexcm Privacy Policy

1.1  This Privacy Policy ("Policy") describes how bpexcm ("we", "us", "the Platform") collects, processes, stores, and protects personal data provided by or generated about users ("you", "the Player") of the bpexcm online gaming platform at bpexcm.net and any associated mobile or web-based interfaces.

1.2  This Policy forms part of the bpexcm Terms & Conditions. By registering a bpexcm account or using any platform feature, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

1.3  bpexcm is committed to processing personal data lawfully, fairly, and transparently. We collect only the data necessary to deliver the bpexcm service and fulfil our obligations under the international gaming license under which bpexcm operates — which includes Anti-Money Laundering (AML) compliance and Know Your Customer (KYC) verification requirements.

2.1  The data controller responsible for personal data processed in connection with the bpexcm platform is the entity holding the international gaming license under which bpexcm operates. The platform is accessible globally, including to players across Pakistan — Karachi, Lahore, Islamabad, Faisalabad, and all other cities and regions.

2.2  For all privacy-related enquiries, requests, or complaints, players may contact the bpexcm Data Protection team via live chat support or in writing at [email protected] with the subject line "Privacy Request." We aim to respond to all data-related requests within 30 calendar days.

bpexcm collects the following categories of personal data in the course of providing its service:

3.1  bpexcm does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming self-exclusion request — in which case it is processed solely to support that request.

bpexcm collects personal data through the following mechanisms:

• Direct provision: Information you actively submit during account registration, KYC document upload, cashier transactions, support conversations, and account settings updates.
• Automated collection: Technical data collected automatically when you access the bpexcm platform, including IP address, device identifiers, and session logs, via server logs, cookies, and similar tracking technologies.
• Third-party payment processors: Transactional data from EasyPaisa, JazzCash, HBL, UBL, Meezan Bank, and USDT network providers in connection with deposits and withdrawals processed through those channels.
• Identity verification providers: Results of identity and document verification checks conducted by third-party KYC service providers engaged by bpexcm.
• Fraud and AML screening: Data received from third-party fraud prevention and anti-money laundering screening services used to assess transaction risk.

bpexcm uses your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your bpexcm account, including login authentication, account security, and communication of account-related notifications.
• Service delivery: Processing deposits and withdrawals, crediting winnings, applying bonus offers, and maintaining accurate financial records for your account.
• Regulatory compliance: Conducting KYC identity verification, meeting AML obligations, maintaining mandatory transaction records, and responding to lawful requests from regulatory or law enforcement authorities.
• Responsible gaming: Monitoring gaming behaviour for indicators of problem gambling, administering deposit limits and self-exclusion requests, and ensuring compliance with the 21+ age restriction.
• Fraud prevention and security: Detecting and preventing fraudulent activity, duplicate account creation, money laundering, and unauthorised account access.
• Platform improvement: Analysing aggregated, anonymised usage patterns to improve the bpexcm platform, optimise game performance, and enhance the player experience.
• Marketing communications (where consented): Sending promotional offers, bonus notifications, and platform updates to players who have opted in to marketing communications. You may withdraw this consent at any time through your account settings.
• Customer support: Responding to queries, resolving disputes, and maintaining records of support interactions for quality and training purposes.

bpexcm processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the bpexcm Terms & Conditions to which you are a party — including account creation, payment processing, game delivery, and bonus administration.
• Legal obligation: Processing required for bpexcm to comply with its obligations under the international gaming license, including KYC, AML record-keeping, and regulatory reporting duties.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregated analytics where these interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit prior consent has been obtained. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7.1  bpexcm does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data sharing is limited to the following categories of recipient, strictly on a need-to-know basis:

• Payment processors: EasyPaisa, JazzCash, HBL, UBL, Meezan Bank, and blockchain network operators — solely to process your deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party services engaged to verify the identity documents you submit during the KYC process. These providers act as data processors under binding contractual terms.
• Game software providers: Casino game studios (including but not limited to Evolution Gaming, Pragmatic Play, and Ezugi) may receive technical session data necessary to deliver their live and RNG game content through the bpexcm platform.
• Fraud prevention and AML services: Third-party screening services used to detect and prevent fraudulent activity and money laundering. These services process transactional and identity data under contractual data processing agreements.
• Regulatory and law enforcement authorities: Where bpexcm is required by law, court order, or gaming regulatory authority to disclose player data, we will comply with that lawful obligation and will, where permitted, notify the affected player.

7.2  All third parties with whom bpexcm shares personal data are required to implement appropriate technical and organisational security measures to protect that data and are contractually prohibited from using it for any purpose other than the specific service they provide to bpexcm.

8.1  bpexcm uses cookies and similar technologies (local storage, session tokens, device fingerprinting) to operate the platform, maintain your login session, detect fraud, and — where consented — analyse usage patterns and deliver relevant promotional content.

8.2  You may manage your cookie preferences through your browser settings. Disabling essential cookies will prevent the bpexcm platform from functioning correctly. Disabling optional or marketing cookies will not affect your ability to access games, deposit, or withdraw.

9.1  bpexcm retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable regulatory and legal obligations.

• Active accounts: All personal data is retained for the lifetime of the active bpexcm account plus a mandatory post-closure retention period.
• Financial and transaction records: Retained for a minimum of five (5) years following the last transaction, in compliance with AML regulatory requirements applicable to the gaming license jurisdiction.
• KYC documents: Retained for a minimum of five (5) years following account closure, as required by the gaming license regulatory framework.
• Support communications: Retained for two (2) years following the relevant interaction, for quality assurance and dispute resolution purposes.
• Marketing preferences: Retained until you withdraw consent, at which point marketing data is deleted within 30 days.

9.2  Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

10.1  bpexcm implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bpexcm platform.
• Encryption at rest for sensitive personal data stored on bpexcm servers, including KYC documents and financial data.
• Two-factor authentication (2FA) available for all player accounts — strongly recommended for all registered bpexcm players.
• Role-based access controls that restrict internal access to personal data to bpexcm personnel with a documented business need.
• Regular security assessments and penetration testing of the bpexcm platform infrastructure.
• Incident response procedures for detecting, containing, and notifying affected parties in the event of a personal data breach.

10.2  In the event of a personal data breach that poses a risk to your rights, bpexcm will notify affected players without undue delay and in accordance with the notification requirements of the applicable regulatory framework.

As a bpexcm player, you hold the following rights in respect of your personal data. You may exercise any of these rights by contacting bpexcm via live chat or at [email protected] with the subject line "Privacy Request." We will respond within 30 calendar days.

12.1  Parents or guardians who believe that a minor may have created a bpexcm account are urged to contact the bpexcm support team immediately at [email protected] so that the account can be investigated and closed without delay.

13.1  bpexcm may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or platform functionality. Where updates are material — meaning they significantly affect how your personal data is processed — bpexcm will provide advance notice via a platform notification or email to your registered address before the changes take effect.

13.2  The current version of this Privacy Policy, including the effective date shown at the top of this page, is always accessible at bpexcm.net/privacy-policy. We recommend reviewing this Policy periodically to stay informed of how your data is being used.

13.3  Your continued use of the bpexcm platform following the effective date of any policy update constitutes your acknowledgement of the revised terms. If you do not agree to a material change, you may close your account in accordance with the account closure provisions in the bpexcm Terms & Conditions.

For any questions, concerns, or formal requests relating to this Privacy Policy or your personal data held by bpexcm, please reach out through the following channels:

• Live Chat: Available 24/7 on the bpexcm platform. This is the fastest channel for urgent privacy or account security concerns. Ask for the Data Protection team.
• Email: [email protected] — use the subject line "Privacy Request" for data rights requests or "Privacy Complaint" for formal complaints. Responses within 30 calendar days.
• Service Coverage: bpexcm serves players across all of Pakistan including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and beyond. Support is available in English.