bpexnet Privacy Policy

1 Introduction

bpexnet ("we", "us", "our") operates the online gaming and sports betting platform accessible at bpexnet.net. We are committed to protecting the privacy and personal data of every individual who interacts with our platform, whether as a registered player, a prospective user, or a visitor to our website.

This Privacy Policy sets out in full detail how bpexnet collects, uses, stores, shares, and protects personal information in connection with our platform and services. It also explains the rights available to you as a data subject and how you may exercise those rights.

This Privacy Policy applies to all bpexnet services, including our casino games, sports betting markets, cricket betting, wheel games, fishing arcade titles, and all related platform functionality. It applies to all players registered from Pakistan and to any individual who accesses bpexnet.net from within Pakistan.

By registering an account on bpexnet, making a deposit, or otherwise using our services, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Privacy Policy, you must not use the bpexnet platform.

2 Personal Data We Collect

bpexnet collects the following categories of personal data from registered players and platform users:

bpexnet does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where such data is voluntarily disclosed by a player in the context of a responsible gaming or self-exclusion request, in which case it is processed solely for that purpose.

3 How We Collect Your Data

bpexnet collects personal data through the following means:

• Direct submission: Information you provide when creating your account, completing KYC verification, submitting a deposit or withdrawal request, contacting our support team, or participating in a promotion.
• Automated technical collection: Data collected automatically as you interact with the platform, including IP addresses, device identifiers, session logs, and cookies or similar tracking technologies.
• Third-party identity verification providers: Where bpexnet uses licensed KYC verification agencies to validate the identity documents you submit, those agencies may provide us with confirmation results and associated identity data.
• Payment processors: Transaction confirmation data and payment instrument details received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, Visa, Mastercard, and USDT network processors in connection with your deposits and withdrawals.
• Fraud prevention and AML screening providers: Where bpexnet uses third-party services to screen transactions and player accounts for indicators of fraud, money laundering, or match-fixing activity, those services may provide us with risk scoring data.

4 Purpose of Processing

bpexnet processes your personal data for the following defined purposes only:

1. Account management: To create, verify, maintain, and administer your bpexnet player account, including processing your deposits, withdrawals, and bonus eligibility.
2. KYC and age verification: To verify that you meet bpexnet's minimum age requirement of 21 years and to confirm your identity as required under our licensing obligations.
3. Transaction processing: To process deposit and withdrawal requests through your chosen payment method, including liaising with payment processors and resolving payment disputes.
4. Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other financial crime in accordance with our licensing framework and applicable regulatory requirements.
5. Responsible gaming monitoring: To monitor player behaviour for indicators of problem gambling, to enforce deposit limits and self-exclusion orders, and to provide targeted responsible gaming interventions where appropriate.
6. Customer support: To respond to your queries, complaints, and requests submitted through live chat, email, or any other support channel.
7. Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving our platform's functionality, game selection, and user experience.
8. Marketing communications: To send you promotional offers, bonus notifications, and product updates where you have opted in to receive such communications. You may withdraw your consent at any time.
9. Legal and regulatory compliance: To comply with applicable laws, regulations, court orders, and directives from regulatory or law enforcement authorities.

5 Legal Basis for Processing

bpexnet processes your personal data on the following legal bases, depending on the category of data and the purpose of processing:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player, including account management, transaction processing, and KYC verification.
• Legal obligation: Processing required to comply with our obligations under applicable law, our gaming licence conditions, AML regulations, and directives issued by competent authorities.
• Legitimate interests: Processing carried out in furtherance of bpexnet's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for the purpose of marketing communications and optional personalisation features, where you have provided explicit, informed, and freely given consent. Consent may be withdrawn at any time without prejudice to the lawfulness of prior processing.

6 Data Sharing & Third Parties

bpexnet does not sell, rent, or otherwise disclose your personal data to third parties for their own commercial purposes. Personal data may be shared with the following categories of third parties strictly for the purposes described in this Privacy Policy:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, Visa, Mastercard, and USDT network providers receive the minimum financial and identity data required to process your deposit and withdrawal transactions.
• KYC and identity verification providers: Licensed third-party agencies that assist bpexnet in verifying player identity documents and confirming age eligibility in accordance with our licensing obligations.
• Fraud prevention and AML service providers: Third-party screening services used to detect and prevent financial crime, match-fixing, and other prohibited conduct on the platform.
• Game software providers: Licensed game studios whose titles are hosted on the bpexnet platform may receive anonymised session data for the purpose of game performance monitoring and fairness auditing.
• Regulatory authorities and law enforcement: bpexnet will disclose player data to licensing authorities, financial intelligence units, or law enforcement agencies where required by law, court order, or legitimate regulatory direction.
• IT infrastructure and cloud service providers: Providers of data hosting, platform infrastructure, and cybersecurity services that process data on bpexnet's behalf under strict data processing agreements.

7 Cookies & Tracking Technologies

bpexnet uses cookies and similar tracking technologies on our platform to ensure core functionality, improve user experience, and support platform security. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function correctly, including session authentication, account security tokens, and load balancing. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and responsible gaming tool configurations across sessions.
• Analytics cookies: Used to collect anonymised, aggregated data about how players interact with the bpexnet platform — including pages visited, time on page, and game engagement metrics — for the purpose of platform improvement.
• Security cookies: Used to detect and prevent fraudulent login attempts, account takeover activity, and bot traffic.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to log in to your bpexnet account or access certain platform features. bpexnet does not use third-party advertising cookies or behavioural targeting cookies for the purpose of serving advertising on external websites.

8 Data Security

bpexnet implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the bpexnet platform.
• AES-256 encryption for sensitive data stored at rest, including financial information and identity documents.
• Multi-factor authentication requirements for player account access and internal administrative systems.
• Role-based access controls ensuring that bpexnet staff can only access player data to the minimum extent required to perform their specific job functions.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists.
• 24/7 monitoring of platform infrastructure for anomalous activity and potential security incidents.
• Secure data disposal procedures for hardware decommissioning and data deletion, in accordance with our data retention schedule.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, bpexnet will notify affected players and, where required by applicable law, the relevant supervisory authority, within the timeframes prescribed by our licensing obligations.

9 Data Retention

bpexnet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law or our licensing obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account's active status and for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping obligations under our gaming licence.
• KYC documentation: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer support communications: Retained for a period of two (2) years from the date of the last communication, unless the communication forms part of an active dispute or investigation.
• Marketing preference records: Retained for the duration of your account's active status. Opt-out records are retained indefinitely to ensure compliance with your marketing preferences.
• Technical and usage data: Retained in aggregated, anonymised form indefinitely for platform analytics purposes. Identifiable technical logs are retained for a maximum of twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bpexnet's data disposal procedures.

10 Your Privacy Rights

As a registered bpexnet player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at the details provided in Section 15 of this Privacy Policy:

• Right of access: You have the right to request a copy of the personal data bpexnet holds about you, together with information about how that data is being processed.
• Right to rectification: You have the right to request the correction of any personal data that is inaccurate or incomplete. You may also update certain data directly through your Account Dashboard.
• Right to erasure: You have the right to request the deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected. This right is subject to bpexnet's legal obligation to retain certain categories of data for minimum statutory periods.
• Right to restrict processing: You have the right to request that bpexnet restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to a particular processing purpose.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object at any time to the processing of your personal data for marketing purposes. You may also object to processing carried out on the basis of bpexnet's legitimate interests, subject to our ability to demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

bpexnet will respond to all valid data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case you will be notified of the extension and the reasons for it.

11 Children & Minors

bpexnet's platform and all associated services are strictly restricted to individuals aged 21 years and above. bpexnet does not knowingly collect personal data from individuals under the age of 21.

If bpexnet discovers or has reason to believe that personal data has been collected from an individual who is under 21 years of age, the following actions will be taken without delay:

• The account associated with the individual will be immediately suspended pending investigation.
• All personal data collected from the minor will be securely deleted from bpexnet's systems to the fullest extent permitted by our legal obligations.
• Any funds deposited by the minor will be returned to the originating payment source, after deduction of any amounts wagered, in accordance with bpexnet's underage gaming policy.
• Where required by applicable law or our licensing obligations, the incident will be reported to the relevant regulatory authority.

12 Marketing Communications

bpexnet may send registered players promotional communications — including bonus offers, new game announcements, PSL cricket betting promotions, and seasonal campaigns — where you have explicitly opted in to receive such communications during registration or through your Account Dashboard settings.

Marketing communications may be delivered via email or SMS to the contact details registered on your account. bpexnet will not send unsolicited marketing communications to individuals who have not opted in or who have subsequently opted out.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email from bpexnet.
• Updating your communication preferences in your Account Dashboard under the Notifications settings.
• Contacting bpexnet support and requesting to be removed from all marketing communications lists.

Please allow up to 5 business days for opt-out requests to take full effect across all communication channels. Withdrawal of marketing consent does not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, and security alerts, which are sent as a necessary part of account management.

13 International Data Transfers

bpexnet's platform infrastructure and certain third-party service providers may be based in jurisdictions outside Pakistan. Where personal data is transferred to a country or territory that does not provide the same level of data protection as the jurisdiction in which bpexnet holds its gaming licence, bpexnet will ensure that appropriate safeguards are in place to protect your personal data.

Such safeguards may include:

• Contractual clauses between bpexnet and the receiving party that impose data protection obligations equivalent to those applicable to bpexnet under its licensing framework.
• Binding corporate rules where data is transferred within a group of companies.
• Adequacy decisions or equivalent instruments where the receiving jurisdiction has been recognised as providing adequate data protection standards.

Players may request details of the specific safeguards applicable to a particular international data transfer by contacting bpexnet support.

14 Changes to This Privacy Policy

bpexnet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to our platform's functionality, or changes in applicable law or regulatory requirements.

When material changes are made to this Privacy Policy, bpexnet will:

• Update the "Effective Date" and "Last Reviewed" dates displayed at the top of this page.
• Display a prominent notice on the bpexnet platform for a period of not less than seven (7) days following the effective date of the updated policy.
• Send a notification to registered players via the email address associated with their account, where the changes are material and affect how their personal data is processed.

Your continued use of the bpexnet platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Privacy Policy, you must cease using the platform and contact bpexnet support to request account closure.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or bpexnet's data processing practices, please contact our Data Protection team through the following channel:

• Email: [email protected]
• Live Chat: Available 24/7 via the bpexnet platform after logging in to your registered account.
• Subject Line: When contacting us by email, please include "Privacy Policy Request" or "Data Subject Request" in the subject line to ensure your query is directed to the appropriate team member without delay.

bpexnet will acknowledge receipt of all privacy-related enquiries within 48 hours and will endeavour to provide a full response within the statutory timeframes applicable under our licensing obligations. For urgent matters relating to suspected unauthorised access to your account or data breach concerns, we recommend using live chat for the fastest possible response.

bpexnet's licensing authority contact details and registered correspondence address are available to verified registered players upon request through the support channel.