bpaxch Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how bpaxch ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "your", "the User") who register for, access, or use any service offered through the bpaxch online casino and sports betting platform, including via the website at bpaxch.net and any associated mobile applications.

bpaxch is committed to protecting the privacy and personal data of all its users, including the millions of players across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and every other city in Pakistan who trust our platform for their online gaming and sports betting activity. We process personal data responsibly, transparently, and in accordance with our international data protection obligations.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your use of bpaxch services.

2. Who We Are

2.1 bpaxch is an internationally licensed online gaming and sports betting platform operated under a recognised gaming licence. The platform is specifically designed and localised for Pakistani players, supporting PKR transactions, local payment methods including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK, and offering 24/7 customer support in English with a Pakistani-English tone.

2.2 For the purposes of data protection law, bpaxch acts as the data controller in respect of the personal data of registered users. This means bpaxch determines the purposes and means by which your personal data is processed.

2.3 Where third-party service providers process your data on our behalf — for example, KYC identity verification providers or payment gateway operators — those providers act as data processors, operating strictly under bpaxch's instructions and bound by contractual data protection obligations.

3. Data We Collect

3.1 bpaxch collects personal data in the following categories depending on the nature of your interaction with the Platform:

Category	Examples	Collection Method
Identity Data	Full legal name, date of birth, CNIC number, CNIC images (front & back), selfie photograph	Registration & KYC verification
Contact Data	Mobile phone number, email address, city of residence	Registration form
Financial Data	JazzCash / EasyPaisa mobile wallet number, bank account details, transaction history, deposit and withdrawal amounts in PKR	Payment processing
Technical Data	IP address, device type, operating system, browser type, session timestamps	Automatically via platform
Usage Data	Games played, betting history, session duration, feature interactions, bonus usage	Automatically via platform
Communications Data	Live chat transcripts, support emails, complaint records	Customer support interactions
Responsible Gaming Data	Self-exclusion requests, deposit limits set, reality check preferences	Account settings & support

3.2 bpaxch does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health data, except where health or vulnerability information is voluntarily disclosed in the context of a responsible gaming or self-exclusion request, in which case it is processed solely for the purpose of providing appropriate support.

3.3 You are not obligated to provide all requested data, but failure to provide certain mandatory information — particularly identity and payment data — will prevent bpaxch from providing you with the full range of services, including the ability to withdraw funds.

4. How We Use Your Data

4.1 bpaxch uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your bpaxch account, including verifying your identity and age (21+), managing your preferences, and processing login authentication.
• Payment Processing: To process your PKR deposits and withdrawals via JazzCash, EasyPaisa, bank transfers, and other supported Pakistani payment methods.
• KYC & AML Compliance: To perform identity verification and anti-money laundering checks as required under our licensing obligations and applicable financial crime prevention frameworks.
• Service Delivery: To provide access to casino games, live dealer tables, sports betting markets, bonuses, and all other bpaxch features.
• Customer Support: To respond to your queries, complaints, and support requests via live chat and email.
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, money laundering, or other prohibited conduct on the Platform.
• Responsible Gaming: To monitor gambling behaviour patterns, enforce self-exclusion and deposit limits, and provide appropriate responsible gaming interventions where necessary.
• Platform Improvement: To analyse usage data in aggregate to improve the Platform's features, performance, and user experience.
• Legal Compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities, and enforce our Terms & Conditions.
• Marketing: To send you promotional offers, bonus notifications, and game recommendations — but only where you have provided your consent to receive such communications (see Section 14).

4.2 bpaxch will never use your personal data for purposes that are incompatible with those listed above without first providing you with appropriate notice and, where required, obtaining your consent.

5. Legal Basis for Processing

5.1 bpaxch processes your personal data on the following legal bases:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to perform the contract between you and bpaxch (i.e., to operate your account and provide gaming services).
• Legal Obligation: KYC, AML, and age verification processing is required to comply with our licensing conditions and applicable financial regulations.
• Legitimate Interests: Technical and usage data is processed on the basis of bpaxch's legitimate interests in operating a secure, fraud-free, and commercially viable gaming platform — provided those interests are not overridden by your privacy rights.
• Consent: Marketing communications, non-essential cookies, and any other processing not covered by the above bases are conducted only with your explicit, freely given, and withdrawable consent.

6. Data Sharing & Disclosure

6.1 bpaxch does not sell, rent, or trade your personal data to any third party for commercial gain. Data is shared only in the following limited circumstances:

• KYC / Identity Verification Providers: To perform CNIC validation, age verification, and document authentication as required under our licensing obligations.
• Payment Processors: To facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK. These providers receive only the minimum data necessary to process each transaction.
• Fraud & Security Services: Third-party tools used for real-time fraud detection, device fingerprinting, and behavioural analytics to protect the Platform and its users.
• IT Infrastructure Providers: Cloud hosting and data storage providers who process data on our behalf under strict contractual data protection agreements.
• Regulatory & Law Enforcement Authorities: Where bpaxch is legally required to disclose information in response to a court order, regulatory investigation, or anti-money laundering inquiry.
• Professional Advisors: Lawyers, auditors, and compliance consultants, bound by professional confidentiality obligations, where reasonably necessary to obtain advice.

6.2 All third parties who receive or process bpaxch user data are contractually required to implement appropriate technical and organisational measures to protect that data, and to process it solely for the purposes specified by bpaxch.

7. International Data Transfers

7.1 As an internationally licensed platform, bpaxch may process or store your personal data on servers or through service providers located outside Pakistan. Where data is transferred internationally, bpaxch ensures that appropriate safeguards are in place, including contractual data protection clauses that provide equivalent protections to those applicable in the data's country of origin.

7.2 By registering for and using the bpaxch Platform, you acknowledge and consent to the transfer of your personal data outside Pakistan as described in this section, subject always to the protections described in this Policy.

8. Data Retention

8.1 bpaxch retains your personal data for as long as your account remains active and for a period of five (5) years following account closure or your last transaction on the Platform — whichever is later. This retention period is required to comply with anti-money laundering regulations and our licensing obligations.

8.2 The following specific retention periods apply to different categories of data:

• Identity & KYC Documents: 5 years post-account closure.
• Financial Transaction Records: 5 years from the date of each transaction.
• Customer Support Communications: 3 years from the date of each interaction.
• Technical & Usage Data: 13 months on a rolling basis (anonymised after this period).
• Marketing Consent Records: Until consent is withdrawn, plus 1 year as an audit record.

8.3 Upon expiry of the applicable retention period, bpaxch will securely delete or anonymise your personal data in a manner that makes re-identification impossible. Anonymised, aggregated data may be retained indefinitely for platform analytics purposes.

9. Cookies & Tracking Technologies

9.1 bpaxch uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us recognise you on return visits, maintain your session, and understand how you interact with the Platform.

9.2 We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for Platform operation — for example, maintaining your logged-in session and remembering your language preferences. These cannot be disabled.
• Functional Cookies: Remember your game preferences, responsible gaming settings, and display configurations. These are enabled by default but can be disabled without affecting core functionality.
• Analytics Cookies: Collect anonymised data about how users navigate the Platform to help us improve the experience. bpaxch uses privacy-respecting analytics tools and does not share raw analytics data with third parties.
• Marketing Cookies: Used only with your explicit consent to personalise bonus offers and game recommendations. These are disabled by default.

9.3 You can manage your cookie preferences at any time through the bpaxch cookie settings panel. Please note that disabling certain cookies may affect the functionality of some Platform features. For general browser-level cookie management, refer to your browser's help documentation.

10. Your Privacy Rights

10.1 As a bpaxch user, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data bpaxch holds about you, along with information about how it is processed.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected. For basic profile data (name, contact number), you can update this directly from your bpaxch account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that data subject to legal retention obligations (e.g., KYC and financial records) cannot be deleted before the applicable retention period expires.
• Right to Restriction: You may request that bpaxch restricts its processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You may request a copy of the personal data you provided to bpaxch in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Where you object to marketing, bpaxch will cease marketing communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

10.2 To exercise any of the above rights, contact the bpaxch Data Protection team at [email protected] with the subject line "Data Rights Request". bpaxch will acknowledge your request within 48 hours and provide a substantive response within 10 business days.

10.3 bpaxch will not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

11. Children's Privacy

11.1 bpaxch is a strictly 21+ platform. We do not knowingly collect, process, or store personal data from individuals under the age of 21. If bpaxch discovers that personal data has been collected from a person under 21, that account will be immediately suspended, the data will be deleted, and any deposits will be returned to the original payment source.

11.2 If you are a parent or guardian and believe your child has registered on bpaxch, please contact our Support team immediately at [email protected]. We will investigate and act within 24 hours.

11.3 We strongly encourage parents to use device-level parental controls and filtering software to prevent minors from accessing online gaming platforms. bpaxch cooperates with recognised age-verification initiatives and regularly reviews its age-gating procedures.

12. Security Measures

12.1 bpaxch implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your device and bpaxch servers.
• AES-256 encryption for sensitive data stored at rest, including CNIC images, financial records, and identity documents.
• Two-factor authentication (2FA) via OTP for account login, available to all users and strongly recommended.
• Role-based access controls ensuring that bpaxch employees can only access user data relevant to their specific job functions.
• Regular third-party security audits and penetration testing of the Platform infrastructure.
• Automated real-time monitoring for suspicious access patterns and potential data breaches.
• Secure, geographically redundant data storage with strict access logging.

12.2 While bpaxch takes all reasonable precautions to safeguard your data, no online platform can guarantee absolute security. You are responsible for keeping your own account credentials confidential. Never share your bpaxch password or OTP with anyone — including individuals claiming to be bpaxch Support agents.

13. Third-Party Links

13.1 The bpaxch Platform may occasionally contain references to third-party websites or services. bpaxch has no control over the content, privacy practices, or data collection activities of any third-party website, and this Policy does not apply to any third-party platforms. We encourage you to review the privacy policy of any third-party site before providing your personal data to it.

13.2 The inclusion of any reference to a third-party website does not constitute an endorsement by bpaxch of that website, its content, or its privacy practices.

14. Marketing Communications

14.1 bpaxch may send you promotional communications — including bonus offers, free spins, match deposit promotions, PSL betting specials, and seasonal campaigns — via SMS, email, or in-platform notification. We will only send marketing communications where you have given your explicit consent to receive them.

14.2 You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any bpaxch marketing email.
• Updating your notification preferences in your bpaxch account settings.
• Contacting bpaxch Support via live chat or email and requesting removal from marketing lists.

14.3 Opting out of marketing communications does not affect your ability to receive essential service communications from bpaxch, such as account security alerts, KYC requests, withdrawal notifications, or policy update notices. These transactional communications are sent regardless of marketing preferences as they are necessary for the proper operation of your account.

15. Changes to This Privacy Policy

15.1 bpaxch reserves the right to update this Privacy Policy at any time. When material changes are made, we will provide at least 7 days' prior notice via the registered email address on your account and/or through a prominent notice displayed on the Platform upon login.

15.2 The effective date at the top of this Policy indicates when the current version came into force. Your continued use of the bpaxch Platform after the updated Policy takes effect constitutes your acceptance of the revised terms. If you do not accept the changes, you must discontinue use and close your account before the new Policy becomes effective.

15.3 We recommend reviewing this page periodically. The most current version of the bpaxch Privacy Policy is always available at bpaxch.net/privacy-policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bpaxch processes your personal data, please reach out through the following channels:

• Live Chat: Available 24/7 directly from the bpaxch Platform. Average response time under 90 seconds.
• Email: [email protected] — Please use the subject line "Privacy Enquiry" for all data protection related correspondence. Response time: under 2 hours during business hours.

bpaxch will never ask for your account password, full CNIC number, or complete payment credentials via email or chat. If you receive any suspicious communication claiming to be from bpaxch, please report it to our Support team immediately.