This Privacy Policy explains how bpexch collects, uses, stores, shares and protects your personal data. We are committed to handling your information responsibly and transparently. Please read this document carefully before registering an account or using the Platform.
Effective Date: 1 January 2026 | Version 1.0Privacy at a Glance — Key Points
We collect only what's necessary
Data is encrypted in transit and at rest
We do not sell your data
You control your data rights
Contact us any time with queries
This Privacy Policy ("Policy") is issued by bpexch (hereinafter referred to as "bpexch", "we", "us" or "the Platform") and governs the collection, use, storage, disclosure and protection of personal data relating to individuals ("Users", "you") who access or use the bpexch website at https://bpexch.cam and any associated services, features or tools.
bpexch is an English-language online betting and gaming platform designed primarily for users in Pakistan. We are committed to protecting the privacy and security of every user's personal information. This Policy explains precisely what data we collect, why we collect it, how we use it and what rights you have in relation to your data.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, all of which form part of the overall agreement between you and bpexch.
Your consent: By registering an account or continuing to use the bpexch Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform and close your Account.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, email address, date of birth, device identifiers and financial data. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure and deletion. |
| "Data Controller" | bpexch, as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | A third-party entity that processes personal data on behalf of bpexch in accordance with our instructions. |
| "KYC Data" | Identity and age verification documents submitted by Users as part of the Know Your Customer process. |
| "Cookies" | Small text files placed on a User's device to store information about their browsing session and preferences. |
| "Platform" | The bpexch website, mobile site and all associated digital services accessible at https://bpexch.cam. |
bpexch collects only the personal data that is necessary to operate the Platform, verify user identity, process transactions and comply with applicable legal and regulatory obligations. The categories of personal data we collect are set out in the table below.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, username | Account registration and KYC verification |
| Contact Data | Email address, country of residence, city | Account management and communications |
| Verification Documents | Government-issued ID, proof of address | KYC compliance and age verification |
| Financial Data | Deposit/withdrawal history, transaction amounts in PKR | Payment processing and fraud prevention |
| Technical Data | IP address, device type, browser type, OS, time zone | Platform security, fraud detection and analytics |
| Usage Data | Pages visited, games played, bets placed, session duration | Platform improvement and responsible gambling monitoring |
| Communications Data | Support ticket content, live chat transcripts | Customer support and dispute resolution |
| Marketing Preferences | Opted-in or opted-out marketing channels | Communications consent management |
Data Minimisation: bpexch applies the principle of data minimisation. We do not collect personal data beyond what is reasonably necessary for the stated purposes. Sensitive data such as government ID documents are collected only as required for KYC and are stored securely with restricted access.
bpexch collects personal data through the following means:
Payment method names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are referenced as familiar local payment contexts. Their inclusion does not imply that any of those providers endorse gambling or have a data-sharing relationship with bpexch beyond standard payment processing.
bpexch processes personal data only where a lawful basis for doing so exists. The primary bases on which we rely are:
bpexch uses personal data for the following purposes:
Marketing opt-out: You may opt out of marketing communications at any time by updating your account notification settings or by contacting our support team. Opting out of marketing will not affect transactional communications necessary for account management.
bpexch does not sell, rent or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients only where strictly necessary:
All third-party data processors engaged by bpexch are contractually required to process personal data only on our instructions, maintain appropriate security standards and not use personal data for their own purposes.
bpexch operates internationally, and personal data may be stored or processed in jurisdictions outside Pakistan. Where personal data is transferred internationally, we take appropriate steps to ensure that the data receives an equivalent level of protection to that required under applicable data protection standards.
Users in Pakistan acknowledge that Pakistan's data protection framework, including the Personal Data Protection Act (where applicable), may differ from protections available in other jurisdictions. bpexch will endeavour to apply data protection standards consistent with its operational obligations and applicable law.
Where personal data is transferred to countries that may not provide an equivalent level of data protection, we implement appropriate safeguards such as contractual data protection clauses with receiving parties.
bpexch retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable legal and regulatory obligations. The general retention principles we apply are:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual.
bpexch uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, personalise your experience and analyse aggregate usage patterns. The main categories of cookies we use are:
You may adjust cookie preferences through your browser settings at any time. Disabling certain cookies may affect the functionality of the Platform. Please note that cookie controls in your browser settings operate independently of our Platform's consent management tools.
Subject to applicable law, you have the following rights in relation to the personal data bpexch holds about you. These rights may be exercised by contacting our support team at [email protected].
You may request a copy of the personal data we hold about you, including the categories of data held and the purposes for which it is processed.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
In certain circumstances, you may request the deletion of your personal data — for example, where it is no longer necessary for the original purpose, subject to retention obligations.
You may request that we limit how we use your data in certain circumstances — for instance, while a data accuracy dispute is being resolved.
Where technically feasible, you may request a structured, machine-readable copy of personal data you have provided to us for transfer to another service.
You may object to processing based on our legitimate interests — including direct marketing. We will cease that processing unless we can demonstrate compelling grounds.
Response timeframe: bpexch will respond to data rights requests within a reasonable timeframe and in any event within 30 days of receipt, unless the complexity or volume of requests requires an extension, in which case you will be notified. We may request proof of identity before processing a data rights request.
The bpexch Platform is strictly for adults aged 18 or over, or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect, process or store personal data belonging to children under 18 years of age.
If bpexch becomes aware that personal data has been collected from a person under the applicable minimum age without appropriate verification, that data will be deleted immediately and the relevant Account closed. If you are a parent or guardian and believe that a minor has registered an Account or provided personal data to bpexch, please contact us immediately at [email protected] so that we can investigate and take corrective action.
bpexch implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or alteration. Our security practices include, but are not limited to:
While bpexch takes all reasonable steps to protect your personal data, no transmission over the internet or electronic storage system is entirely secure. You also play a role in protecting your data by maintaining a strong, unique password and not sharing your Account credentials with others.
Data breach notification: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bpexch will notify affected users without undue delay and in accordance with applicable legal obligations.
The bpexch Platform does not contain links to third-party websites in its main navigation or content areas. Where third-party service providers are engaged (as described in Section 7), those providers operate under their own privacy policies and bpexch is not responsible for the privacy practices of third-party entities beyond our contractual data processing agreements with them.
References to payment method names — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are included as familiar local context for Pakistani users only. They do not represent a data-sharing arrangement, partnership or endorsement between bpexch and any of those providers beyond standard payment processing where applicable. Users should review the privacy policies of any payment provider they use independently.
bpexch reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements or operational circumstances. Where changes are material, we will notify registered users via email to the address on record or through a prominent notice on the Platform prior to the change taking effect.
The effective date of the current version of this Policy is displayed at the top of the page. We encourage users to review this Policy periodically. Your continued use of the Platform following any update constitutes acceptance of the revised Policy.
If you have questions, concerns or requests regarding this Privacy Policy or the processing of your personal data, please contact our support team through the following channels:
For data access requests, rectification requests or erasure requests, please include sufficient information to identify your Account and specify clearly the nature of your request. We may require proof of identity before processing your request.
For responsible gambling concerns or self-exclusion requests, please also refer to our dedicated Responsible Gambling page.
Our commitment: bpexch is committed to resolving privacy queries promptly and transparently. We treat every data rights request seriously and aim to acknowledge receipt within two business days, with full resolution within 30 days wherever possible.
Six concrete ways bpexch protects your personal data and respects your privacy as a registered user of the Platform.
All data transmitted between your device and bpexch servers is protected using SSL/TLS encryption. Your login credentials, payment details and KYC documents are never transmitted in plain text.
bpexch does not sell, rent or trade your personal data to third parties for commercial purposes — under any circumstances. Your data is used solely to operate your account and improve your experience.
You can access, correct, export or request deletion of your personal data at any time. Marketing preferences are adjustable in your account settings. Your rights are real and enforceable.
We collect only the data necessary for account management, identity verification and regulatory compliance. We do not collect data speculatively or for purposes beyond those stated in this Policy.
We do not hold your data indefinitely. Clear retention schedules are applied to every data category. Data is securely deleted or anonymised once the retention period expires.
Our 24/7 English-language support team handles data rights requests directly. Urdu assistance is available on request. We acknowledge requests promptly and resolve them within stated timelines.
Now that you understand how bpexch handles your personal data, explore everything the Platform has to offer — cricket betting, PSL markets, live casino, slots and more. All in English, all in PKR. Adults 18+ only. Please play responsibly.
🔒 SSL Secured | 🔞 18+ Only | 🇵🇰 Pakistan English