bpexch nat Privacy Policy — How We Handle Your Data in Pakistan

bpexch nat is an online gaming and sports betting platform serving Pakistani players. For all privacy-related matters, bpexch nat acts as the data controller — meaning we are responsible for determining the purposes and methods of processing your personal information.

If you have any questions, concerns or requests relating to this Privacy Policy or the way bpexch nat handles your data, you can contact our dedicated privacy support channel at any time:

• Email: support@bpexchnat.net
• Live Chat: Available through your account dashboard after login, 24/7

bpexch nat collects personal data in three ways: information you provide directly, information generated by your use of the platform, and information received from third parties involved in verifying your identity or processing your payments.

Information You Provide Directly

• Registration data: Full name, date of birth, Pakistani mobile number, email address (optional) and preferred username.
• Identity verification: CNIC number and a copy of your CNIC, B-Form or passport when requested for KYC purposes.
• Payment information: Easypaisa or JazzCash account number, bank account details for IBFT, or partial card details for Visa/Mastercard. Full card numbers are never stored by bpexch nat.
• Responsible gaming preferences: Deposit limits, session limits and self-exclusion status set by you in your account dashboard.
• Support communications: Any information you share when contacting bpexch nat support via live chat or email.

Information Generated by Platform Use

• Betting history — sports markets, bet amounts, odds, results and timestamps.
• Game history — casino game rounds, ludo tournament participation, fishing game sessions.
• Session data — login times, session duration, device type, operating system version, browser type and IP address.
• Navigation data — pages visited within bpexch nat, features accessed and time spent on each section.

Information from Third Parties

• Identity verification responses from CNIC validation services used during KYC checks.
• Payment confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay and bank partners used to confirm successful transactions.
• Fraud screening flags from third-party anti-fraud systems used to protect bpexch nat members.

Every use of your personal data at bpexch nat is tied to a specific, documented purpose. We do not use data for purposes beyond what is listed in this Policy. The primary purposes for which bpexch nat processes your data are:

• Account management: Creating and maintaining your bpexch nat account, authenticating your identity at login and managing your preferences.
• Payment processing: Executing PKR deposits and withdrawals via your chosen Pakistani payment method, reconciling transactions and managing refunds.
• Service delivery: Providing access to cricket betting markets, casino games, ludo tournaments, live scores and all other bpexch nat features.
• Bonus and promotion administration: Verifying eligibility for welcome bonuses, checking wagering compliance and crediting rewards.
• Responsible gaming: Monitoring player behaviour for signs of problematic gambling, enforcing deposit limits and self-exclusion restrictions.
• Fraud prevention and security: Detecting unauthorised account access, identifying bonus abuse, preventing money laundering and maintaining platform integrity.
• Legal and regulatory compliance: Retaining records as required by applicable financial regulations and responding to lawful requests from regulatory authorities.
• Customer support: Resolving queries, processing complaints and improving the quality of support interactions.
• Platform improvement: Analysing aggregated, anonymised usage data to identify bugs, improve features and optimise the bpexch nat experience for Pakistani players.
• Marketing communications: Sending promotional offers, new game announcements and VIP Club updates to members who have opted in to receive them.

bpexch nat processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the bpexch nat member agreement — operating your account, processing payments and delivering games.
• Legal obligation: Retaining transaction records and identity verification data to satisfy applicable financial compliance requirements.
• Legitimate interests: Fraud prevention, security monitoring, platform improvement and anti-money laundering measures, where these do not override your privacy rights.
• Consent: Marketing communications and the use of non-essential cookies, where your opt-in consent has been obtained. Consent can be withdrawn at any time without affecting other processing.

bpexch nat does not sell, rent or share your personal data with any third party for their own commercial purposes. Data is shared only in the following controlled circumstances:

All third-party service providers engaged by bpexch nat are bound by data processing agreements that require them to maintain confidentiality standards equivalent to those applied internally at bpexch nat. They are not permitted to use your data for any purpose beyond the specific service they are providing to bpexch nat.

Financial transactions on bpexch nat involve the processing of sensitive payment data. bpexch nat takes the following specific measures to protect your financial information:

• All payment processing is handled by certified, PCI-DSS compliant payment gateways. bpexch nat never directly handles full card numbers.
• Mobile wallet transactions via Easypaisa and JazzCash are processed through the official APIs of those services. bpexch nat stores only the confirmation reference and masked account identifier, not full account credentials.
• Bank transfer (IBFT) details are used solely for the purpose of executing the specific transfer requested and are not retained beyond the transaction confirmation period.
• Transaction history viewable in your bpexch nat dashboard shows amounts, dates and payment method types only. Full account numbers are never displayed.

bpexch nat uses cookies and similar tracking technologies to operate the platform, maintain your session and improve your experience as a Pakistani player on our site. Cookies are small text files stored on your device when you visit bpexch nat.

Essential Cookies (Always Active)

These are required for bpexch nat to function. They handle session authentication, remember your login state and maintain security settings. You cannot disable these without preventing bpexch nat from working properly.

Functional Cookies (Active by Default)

These remember your preferences — language, interface layout and saved settings — so you do not need to reconfigure them every session on bpexch nat.

Analytics Cookies (Opt-in)

These collect anonymised data about how Pakistani members use bpexch nat — which pages are visited most, where sessions typically end, and which features are used. This data is aggregated and never linked to individual users. You can opt out of analytics cookies through your account privacy settings.

To manage or delete cookies, use your browser settings. Deleting essential cookies will require you to log in to bpexch nat again. For detailed guidance on controlling cookies in Pakistani mobile browsers, contact bpexch nat support.

bpexch nat implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse or disclosure. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and bpexch nat servers.
• AES-256 encryption at rest for sensitive stored data including identity documents and financial records.
• Two-factor authentication (2FA) available on all bpexch nat accounts and required for withdrawals above Rs 10,000.
• IP-based anomaly detection that flags logins from new locations and triggers verification challenges.
• Role-based access controls ensuring bpexch nat staff can only access member data where their role requires it.
• Regular security audits and penetration testing of the bpexch nat platform by independent security professionals.
• Incident response plan covering data breach detection, containment and member notification within 72 hours of confirmed incidents.

bpexch nat retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The key retention periods applied at bpexch nat are:

After retention periods expire, data is securely deleted or anonymised so it can no longer be linked to your identity.

As a bpexch nat member you have the following rights regarding your personal data. To exercise any of these rights, contact bpexch nat support at support@bpexchnat.net with the subject line "Data Rights Request":

bpexch nat is strictly intended for adults aged 18 and above. The platform does not knowingly collect personal data from any person under 18 years of age. Age verification is a required step in the bpexch nat registration process and may be reinforced by documentary KYC checks at any time.

If bpexch nat becomes aware that personal data has been collected from a person under 18, the account will be closed immediately, all data associated with the account will be deleted from active systems, and any funds in the account will be handled in accordance with bpexch nat's responsible gaming and under-age gambling protocols.

bpexch nat sends marketing communications — including bonus offers, new game announcements, VIP Club updates and promotional alerts — only to members who have opted in to receive them during registration or subsequently through their account settings.

You can opt out of marketing communications at any time by:

• Updating your notification preferences in your bpexch nat account dashboard.
• Replying STOP to any SMS communication from bpexch nat.
• Contacting bpexch nat support at support@bpexchnat.net with the subject line "Marketing Opt-Out."

Opt-out requests are processed within 5 business days. Opting out of marketing does not affect transactional communications — bpexch nat will still send you account security alerts, deposit confirmations and withdrawal notifications as these are essential to operating your account.

bpexch nat reviews this Privacy Policy regularly and updates it when changes to the platform, services or applicable law require it. When material changes are made, registered members are notified via their registered Pakistani mobile number or email address at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page reflects the most recent revision. Previous versions of this Policy are available from bpexch nat support on request. Continued use of bpexch nat after the effective date of a revision constitutes acceptance of the updated Policy.

bpexch nat is committed to transparency about data practices. If you have any question, concern or complaint about how your personal data is being handled — or if you want to exercise any of your data rights — please reach out to us directly. We take privacy seriously and will respond to every legitimate enquiry.

• Email: support@bpexchnat.net — Subject line: "Privacy Request" or "Data Rights Request"
• Live Chat: Available 24/7 through your bpexch nat account dashboard after login

We aim to resolve all privacy-related queries within 48 hours and all formal data subject access requests within 30 calendar days of receipt. If you are not satisfied with our response, you have the right to escalate your complaint through relevant regulatory channels in Pakistan.