Privacy Policy — How bpexch xyz Handles Your Personal Data

1 Who We Are

bpexch xyz operates the online betting and live casino platform available at bpexchxyz.pro. References to "we", "us", "our" or "the platform" throughout this Privacy Policy refer to bpexch xyz and the team responsible for operating this service.

As the operator of this platform, bpexch xyz is the data controller for all personal information collected from players and visitors to bpexchxyz.pro. This means we are responsible for deciding how and why your data is used, and we are accountable for ensuring it is handled appropriately.

This Privacy Policy applies to all users of the bpexch xyz platform, including registered players, visitors browsing the website and anyone who downloads and uses the bpexch xyz mobile app. It applies regardless of how you access the platform — through a browser on your phone, a desktop computer or the dedicated app.

2 Data We Collect

bpexch xyz collects personal data through several channels — when you register an account, when you use the platform, when you make deposits or withdrawals, and through automatic data collection technologies like cookies. Here is a breakdown of the categories of data we collect:

3 How We Use Your Data

Every piece of personal data collected by bpexch xyz is used for one or more specific, legitimate purposes. We do not use your data for purposes beyond what is described here without first informing you and, where required, obtaining your consent.

• Account creation and management: Your identity and contact data is used to create and maintain your bpexch xyz account, authenticate your login sessions and keep your account secure.
• Payment processing: Your financial data is used to process PKR deposits via JazzCash, Easypaisa, Raast and bank transfer, and to process withdrawal requests to your verified payment method.
• Identity verification (KYC): Verification documents are used to confirm your age and identity in accordance with our platform's Know Your Customer process, which is required before first withdrawal and in certain other situations.
• Fraud prevention and security: Technical and usage data is used to detect and prevent fraudulent activity, multiple account creation, money laundering and other prohibited behaviours outlined in our Terms and Conditions.
• Platform improvement: Aggregated and anonymised usage data is used to understand how players interact with the platform — which sports markets are most popular, which features are used most, where players encounter difficulties — so we can improve the experience.
• Customer support: Communications data is used to respond to your queries, resolve complaints and improve our support quality.
• Responsible gaming: Usage data and account activity is monitored to identify patterns that may indicate problem gaming behaviour, enabling us to offer responsible gaming tools proactively where appropriate.
• Promotional communications: If you have opted in to receiving promotions, we may use your contact information to let you know about relevant offers, bonuses and platform updates. You can opt out at any time.

4 Legal Basis for Processing

bpexch xyz processes your personal data under one or more of the following legal bases, depending on the specific purpose:

• Contractual necessity: Processing your identity, contact and financial data is necessary to perform the contract between you and bpexch xyz — that is, to provide you with the platform, process your transactions and manage your account.
• Legitimate interests: We process technical and usage data on the basis of our legitimate interest in keeping the platform secure, preventing fraud, improving the product and ensuring a fair experience for all players.
• Legal obligation: We may be required to process and retain certain data to comply with applicable laws and regulations, including anti-money laundering obligations and identity verification requirements.
• Consent: Where we send optional promotional communications or use non-essential cookies, we do so only on the basis of your explicit consent, which you can withdraw at any time.

5 Data Sharing

bpexch xyz does not sell your personal data. We share it only with specific third parties where it is necessary to operate the platform, comply with legal requirements or protect the security of our users. The categories of third parties we share data with are:

• Payment processors: JazzCash, Easypaisa, Raast and banking partners receive the minimum data necessary to process your PKR transactions — typically your account reference and transaction amount.
• Identity verification providers: When KYC verification is required, we may share your submitted documents with a third-party identity verification service that specialises in document authentication. These providers are contractually bound to handle your data securely and use it only for the purpose of verification.
• Fraud prevention services: We may share limited technical data — such as device identifiers and IP addresses — with fraud detection partners to identify and prevent account fraud and payment fraud on the platform.
• Technology and hosting providers: Our platform infrastructure relies on third-party cloud hosting and technology providers. These providers operate under strict data processing agreements and are not permitted to use your data for any purpose other than providing their service to bpexch xyz.
• Law enforcement and regulatory bodies: In cases where we are legally required to disclose information — for example, in response to a valid legal process — we will comply with that requirement.

All third parties who handle personal data on behalf of bpexch xyz are required to maintain appropriate security standards and to process data only in accordance with our instructions and for the purposes we specify.

6 Cookies & Tracking Technologies

bpexch xyz uses cookies and similar tracking technologies on the website and mobile app. Cookies are small data files stored on your device that help the platform function properly and give us insight into how the platform is being used.

We use the following categories of cookies:

• Essential cookies: These are necessary for the platform to function. They manage your login session, keep you authenticated as you navigate between pages and enable core platform features like the bet slip and deposit flow. You cannot opt out of essential cookies without opting out of using the platform altogether.
• Analytics cookies: These help us understand how players use the platform — which pages receive the most visits, where users tend to drop off in the registration process, how long sessions last. This data is aggregated and anonymised before analysis. We use this information to improve the platform experience.
• Functional cookies: These remember your preferences — for example, your preferred language setting or your display preferences — so you do not need to set them again each visit.
• Security cookies: These support our fraud prevention measures by helping us detect unusual activity, such as a login attempt from an unrecognised device or location.

You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to use core platform features but may reduce the personalisation of your experience.

7 Data Retention

bpexch xyz retains your personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Below is a general guide to our retention approach:

• Active account data: Personal and financial data associated with an active account is retained for the duration of the account relationship.
• Closed account data: When an account is closed, we retain certain data — including transaction records, identity verification documents and communication logs — for a period of up to five years following closure. This is to satisfy anti-money laundering, fraud investigation and record-keeping obligations.
• Session and technical data: Logs of sessions, device information and IP addresses are typically retained for 12 months and then deleted or anonymised.
• Support communications: Records of support conversations are retained for up to two years after the matter is resolved to support quality assurance and, where relevant, complaint handling.
• Anonymised analytics data: Aggregated, anonymised usage statistics are retained indefinitely as they cannot be linked back to any individual.

When the retention period for any category of data has passed and there is no ongoing legal requirement to retain it, bpexch xyz will securely delete or irreversibly anonymise that data.

8 Data Security

Keeping your personal data secure is a core responsibility that bpexch xyz takes seriously. We have implemented a range of technical and organisational measures to protect your information against unauthorised access, loss, alteration or disclosure.

• All data in transit between your device and bpexch xyz is encrypted using TLS (Transport Layer Security).
• Sensitive stored data — including identity documents and financial records — is encrypted at rest using strong encryption standards.
• Access to personal data within the bpexch xyz team is strictly limited to personnel who require it to perform their specific role. Access controls and authentication requirements are enforced.
• Our platform infrastructure undergoes regular security reviews. Known vulnerabilities are patched promptly.
• Two-factor authentication is available for player accounts and is actively encouraged to reduce the risk of unauthorised account access.
• All third-party service providers who handle personal data on our behalf are required to demonstrate adequate security standards as a condition of working with bpexch xyz.

While we invest significantly in security, no system is completely immune to risk. In the event of a data breach that is likely to affect your rights or interests, we will notify you without undue delay and take all reasonable steps to contain and remediate the incident.

9 Your Rights Over Your Data

As a user of bpexch xyz, you have a number of rights in relation to the personal data we hold about you. These rights are set out below. To exercise any of them, contact our support team through the platform.

We will respond to all data rights requests within a reasonable timeframe. In some cases — particularly for erasure requests — we may need to retain certain data to comply with legal obligations even after processing of it for other purposes has stopped.

10 Children's Privacy

bpexch xyz is strictly an adult platform. You must be at least 18 years old to register, use the platform or engage in any betting or live casino activity. We do not knowingly collect personal data from anyone under the age of 18.

If you are a parent or guardian and believe that a minor may have registered on the platform or submitted personal data without authorisation, please contact our support team immediately. We will investigate and, if confirmed, close the account and delete the associated data promptly.

Age verification is part of our account and KYC process. Where there is any reason to question a user's age, we will request documentary evidence before allowing access to the platform's features.

11 Third-Party Links

The bpexch xyz platform does not include links to external third-party websites. All navigation on the platform stays within bpexchxyz.pro and the bpexch xyz mobile app. This Privacy Policy applies only to data collected directly by bpexch xyz through our own platform and channels.

If you access the platform through a link from a third-party source — such as a search result or an external referral — that third party's own privacy practices apply to any data collected by them before you arrive on our platform. bpexch xyz has no control over and takes no responsibility for the privacy practices of third parties.

12 Policy Updates

bpexch xyz may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable regulations or improvements to our data practices. When we make changes, the updated policy will be published on this page with a revised "Last updated" date at the top.

For significant changes that materially affect how we use your data or your rights over it, we will provide notice through the platform — either through a notice on the website or an in-account notification. We encourage you to review this page periodically to stay informed.

Your continued use of the bpexch xyz platform after an updated Privacy Policy has been published constitutes your acknowledgement of the changes. If you do not agree with an updated policy, please stop using the platform and contact support to close your account.

13 Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how bpexch xyz has handled your personal information, please get in touch with our support team. We are available around the clock through the platform's support channels.

For data-related requests specifically — access requests, correction requests, deletion requests or objections to processing — please contact us through the platform's support section and mark your message as a data privacy request. We aim to acknowledge all such requests within two working days and resolve them within a reasonable timeframe.

You can also reach the team via written correspondence at our support email address: [email protected]