bpexch10 Privacy Policy —
Your Data, Your Rights, Our Responsibilities

1. About This Privacy Policy

This Privacy Policy explains how bpexch10 collects, uses, stores, and protects the personal information of players who register and use the bpexch10 platform. It also explains your rights in relation to that data and how you can exercise them.

bpexch10 is committed to handling your personal information with transparency and care. We understand that Pakistani players entrust us with sensitive financial and personal data when they create an account, deposit PKR, and use our betting and gaming services. That trust is something we do not take lightly, and this policy is our plain-language commitment to honouring it.

This policy should be read alongside the bpexch10 Terms and Conditions and Responsible Gaming Policy, both of which form part of the agreement between you and bpexch10.

2. Who We Are

bpexch10 operates the online betting and live casino platform accessible at bpexch10.bet. For the purposes of this Privacy Policy, bpexch10 is the data controller responsible for the personal information of players who use our platform.

If you have any question about how bpexch10 handles your data, or wish to exercise any data right described in this policy, you can contact our Data Protection team directly at support@bpexch10.bet with the subject line "Privacy Request". We aim to acknowledge all privacy-related requests within 48 hours.

3. What Personal Data We Collect

bpexch10 collects personal data in three ways: information you provide directly, information generated by your use of the platform, and information obtained from trusted third-party verification services. Below is a detailed breakdown of what we collect and when.

3.1 Information You Provide

• Registration data: Full legal name (as on your CNIC), date of birth, Pakistani mobile number, email address, and chosen password.
• Identity verification (KYC): CNIC number, CNIC photograph (front and back), and any additional documents requested during enhanced verification.
• Payment information: Mobile wallet identifiers (Easypaisa, JazzCash, NayaPay, SadaPay account numbers), bank account details for IBFT transfers, and card details for Visa/Mastercard transactions. Note that bpexch10 does not store full card numbers — card payments are handled through PCI-DSS compliant payment processors.
• Communications: Any messages, complaints, or requests you send to bpexch10 customer support via live chat, email, or any other channel.
• Responsible gaming preferences: Any deposit limits, loss limits, self-exclusion requests, or other responsible gaming settings you configure on your bpexch10 account.

3.2 Data Generated by Platform Use

• Betting and gaming activity: Records of every bet, wager, game session, and transaction associated with your bpexch10 account, including amounts, markets, outcomes, timestamps, and device used.
• Device and technical data: IP address, device type, operating system, browser type and version, mobile network operator, and approximate geographic location derived from IP.
• Session data: Login timestamps, session durations, pages visited on bpexch10, features used, and navigation patterns within the platform.
• Cookie and tracking data: Information collected through cookies and similar technologies as described in Section 7.

3.3 Data from Third Parties

• Identity verification providers: Confirmation of CNIC validity and age from our KYC service partners.
• Payment processors: Transaction status and reference information from Easypaisa, JazzCash, NayaPay, SadaPay, IBFT payment networks, and card payment processors.
• Fraud prevention services: Risk signals and flagging information from anti-fraud and anti-money-laundering screening services.

4. How We Use Your Personal Data

bpexch10 uses the personal data we hold for the following specific purposes:

bpexch10 will never use your personal data for any purpose not listed above without first obtaining your explicit consent and clearly explaining the new purpose in advance.

5. Legal Basis for Processing

bpexch10 processes your personal data on the following legal grounds depending on the specific purpose:

• Contract performance: Processing your registration data, KYC information, payment details, and betting activity is necessary for bpexch10 to provide the services you have contracted for when creating your account.
• Legal obligation: Certain data retention and reporting requirements are imposed on bpexch10 by applicable financial, anti-money-laundering, and gaming regulations. Processing for these purposes is mandatory.
• Legitimate interests: bpexch10 has a legitimate interest in preventing fraud, maintaining platform security, and improving our services through anonymised analytics. We only rely on legitimate interest where these interests are not overridden by your rights.
• Consent: Where bpexch10 processes your data for optional purposes such as personalised marketing communications, we do so only with your explicit opt-in consent, which you may withdraw at any time through your account settings or by contacting support@bpexch10.bet.

6. Sharing Your Personal Data

bpexch10 does not sell your personal data to any third party. We share your data only in the following limited and necessary circumstances:

• Payment processors: Your payment details are shared with the relevant processor (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT networks, card processors) solely to complete your deposit or withdrawal transaction on bpexch10.
• KYC and identity verification services: Your CNIC data and personal identifiers are shared with our verification partner solely to confirm your identity and age as required before withdrawals.
• Fraud and AML screening services: Transaction patterns and device data may be shared with fraud prevention and anti-money-laundering screening services to protect bpexch10 and its players from financial crime.
• Regulatory authorities: bpexch10 may be required to disclose player data to relevant regulatory, tax, or law enforcement authorities in response to a lawful request or as required by applicable law. bpexch10 will notify affected players of such disclosure where legally permitted to do so.
• Responsible gaming organisations: Where a player activates self-exclusion on bpexch10, limited account information may be shared with relevant responsible gaming registers as required by applicable regulations.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of bpexch10's assets, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. Affected players will be notified in advance.

7. Cookies and Tracking Technologies

bpexch10 uses cookies and similar tracking technologies on our platform to provide a functioning, personalised, and secure user experience. This section explains what types of cookies we use and why.

7.1 Essential Cookies

These cookies are strictly necessary for the bpexch10 platform to function. They maintain your login session, remember your active bets, and enable secure payment flows. Without these cookies, bpexch10 cannot operate. You cannot opt out of essential cookies while using the platform.

7.2 Performance and Analytics Cookies

bpexch10 uses analytics cookies to understand how players navigate and use the platform. This information is collected in aggregate and anonymised form and is used to improve the platform experience. These cookies do not identify you personally.

7.3 Preference Cookies

These cookies remember your preferences on bpexch10 — such as your preferred language settings, remembered login details (if you have enabled this), and display preferences. They make your bpexch10 experience more convenient without collecting any additional personal data.

7.4 Marketing Cookies

If you have opted in to personalised promotional communications from bpexch10, we may use cookies to identify which promotions are relevant to your account based on your activity. You can withdraw consent for marketing cookies at any time through your bpexch10 account preferences or by contacting support@bpexch10.bet.

8. Data Security

bpexch10 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, disclosure, or destruction. Our security measures include:

• Encryption in transit: All data transmitted between your device and bpexch10 servers is encrypted using TLS (Transport Layer Security) protocols. Look for the padlock icon and "https" in your browser when using bpexch10.
• Encryption at rest: Sensitive personal data and payment information stored on bpexch10 servers is encrypted at rest using AES-256 or equivalent standard.
• Access controls: Personal data is accessible only to bpexch10 employees and systems with a specific operational need. Access is governed by role-based permissions and logged for audit purposes.
• PCI-DSS compliance: All card payment processing on bpexch10 is handled through PCI-DSS compliant payment partners. bpexch10 does not store raw card numbers on its own systems.
• Regular security testing: bpexch10 conducts regular vulnerability assessments and penetration testing of platform systems.
• Incident response: bpexch10 maintains an active data breach response procedure. If a breach occurs that poses a risk to your personal data, we will notify you and relevant authorities within the timeframes required by applicable law.

9. How Long We Keep Your Data

bpexch10 retains your personal data for as long as your account remains active and for a defined period after account closure, as required by applicable financial, gaming, and tax regulations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your bpexch10 account and for a minimum of 5 years after account closure, as required by anti-money-laundering regulations.
• Transaction and betting records: Retained for a minimum of 5 years from the date of each transaction.
• KYC documents: Retained for the duration required by applicable identity verification and AML regulations, typically 5–7 years after your account is closed.
• Customer support communications: Retained for 3 years from the date of the interaction.
• Cookie and session data: Most session cookies expire when you close your browser. Persistent analytics cookies are retained for a maximum of 12 months.
• Self-exclusion records: Retained for the full duration of the exclusion period and for 7 years thereafter to ensure the exclusion can be enforced and audited.

After the applicable retention period expires, bpexch10 securely deletes or anonymises the relevant personal data in accordance with our data disposal procedures.

10. Your Privacy Rights

As a bpexch10 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@bpexch10.bet with the subject line "Privacy Request" and a clear description of what you are requesting. bpexch10 will respond within 30 days.

11. Children and Minors

bpexch10 is strictly for persons aged 18 years and over. We do not knowingly collect personal data from anyone under the age of 18. If bpexch10 discovers that personal data has been collected from a person under 18, we will immediately delete that data and close the associated account.

Parents and guardians in Pakistan who believe a minor under their care may have accessed or registered on bpexch10 should contact us immediately at support@bpexch10.bet. We will investigate and take appropriate action without delay. bpexch10 encourages parents and guardians to make use of internet filtering tools to help prevent minors from accessing gambling platforms.

12. Privacy and Responsible Gaming

bpexch10 uses the personal data and platform usage data it holds about players — including betting frequency, session durations, deposit patterns, and product usage — to identify players who may be showing signs of problematic gambling behaviour. This monitoring is a core part of our responsible gaming obligations and is done in the interests of player safety.

Where our responsible gaming systems flag a player account for follow-up, bpexch10 may proactively contact that player to offer information about responsible gaming tools and support resources. This outreach is conducted in full confidence and is not shared outside bpexch10 except as required by applicable responsible gaming regulations.

All responsible gaming preferences, limit settings, and self-exclusion requests made through your bpexch10 account are treated as sensitive personal data and are stored and processed with the highest level of care. Access to this information is restricted to bpexch10 staff who have a direct operational need. For more information about the responsible gaming tools available on bpexch10, please visit our Responsible Gaming page.

13. International Data Transfers

bpexch10's primary data processing operations are designed to serve Pakistani players, and we take steps to ensure that personal data is handled appropriately regardless of where the technical infrastructure supporting a particular service is located. Where personal data is processed outside Pakistan — for example, by a payment processor or KYC verification service operating in another country — bpexch10 ensures that appropriate contractual safeguards are in place before any transfer occurs.

These safeguards include standard contractual clauses and, where applicable, assessment of the data protection standards in the receiving jurisdiction. bpexch10 does not transfer personal data to countries with materially inadequate data protection standards without ensuring that compensating contractual protections are in place.

14. Third-Party Links

The bpexch10 platform may contain references to, or links to, third-party services such as payment provider information pages. This Privacy Policy applies only to bpexch10 and does not cover the data practices of any third-party service. bpexch10 is not responsible for the privacy practices of any external website or service, and we recommend that you review the privacy policy of any third party before providing them with your personal data.

15. Changes to This Privacy Policy

bpexch10 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When we make a material change — one that significantly affects how we process your personal data or your rights — we will notify you by email to your registered address and display a clear notice on the bpexch10 platform at least 14 days before the change takes effect.

Minor updates such as corrections or clarifications that do not materially affect your rights or our processing may be made without advance notice. The date at the top of this policy ("Last updated") reflects the date of the most recent version. The current version of this policy is always available at bpexch10.bet/privacy-policy.

Your continued use of bpexch10 after the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not accept a change, you should stop using bpexch10 and contact us to close your account.

16. Contact Us and Complaints

If you have any question about this Privacy Policy, how bpexch10 handles your personal data, or wish to exercise any of your privacy rights, please contact our team:

• Email: support@bpexch10.bet — subject line "Privacy Request"
• Live Chat: Available 24/7 through your logged-in bpexch10 account

bpexch10 takes all privacy queries seriously. We aim to acknowledge all privacy-related requests within 48 hours and resolve them within 30 days. For complex requests that require additional time, we will inform you of the extended timeline and the reason for it.

If you are not satisfied with how bpexch10 has handled your privacy concern after raising it with us directly, you may have the right to lodge a complaint with the relevant data protection authority in Pakistan. bpexch10 will cooperate fully with any such regulatory inquiry.