Privacy Policy – bpex h Online Casino Pakistan

This Privacy Policy is published by bpex h, the operator of the online gaming platform at bpexh.ws ("Platform", "we", "us", "our"). We are the data controller responsible for your personal information collected through the platform.

This policy applies to all individuals who visit the bpex h website, register a player account, make a deposit or withdrawal, contact our support team, or interact with our platform in any other capacity. It covers personal data collected through the website, mobile browsers, and any promotional communications sent by bpex h.

By registering on bpex h and using our services, you confirm that you have read and understood this Privacy Policy and consent to the data practices described here. This policy should be read alongside our Terms and Conditions, which together form the complete agreement governing your relationship with bpex h.

bpex h collects personal data in several categories. The table below summarises what we collect and why each category is required.

We only collect data that is necessary for the purposes outlined above. Where optional information is requested — such as preferences during account setup — this is clearly indicated and you are not required to provide it to use the core platform.

bpex h collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing verification, making a deposit, contacting support, or responding to a survey or promotion.
• Automated collection: Technical data gathered automatically when you access the platform, including IP address, device identifiers, browser type, session data, and cookie-stored preferences. This data is collected regardless of whether you are logged into an account.
• Payment processors: Transaction confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay, and bank transfer systems when you make a deposit or withdrawal. bpex h receives transaction confirmation and reference data — not your full wallet credentials or bank account details.
• Identity verification services: Where identity verification is required, a third-party verification provider may return a verification decision and relevant extracted data to bpex h as part of the KYC (Know Your Customer) process.
• Fraud prevention systems: Automated risk scoring systems may analyse patterns across session data, betting behaviour, and payment activity to flag potentially suspicious activity for manual review.

bpex h uses your personal data for the following purposes, each of which has a legitimate basis under applicable data protection principles:

• Account registration and management: To create and maintain your player account, verify your identity and age, and ensure you meet eligibility requirements for the platform.
• Payment processing: To process deposits and withdrawals in PKR via your chosen payment method, reconcile transactions, and investigate payment discrepancies.
• Fraud prevention and security: To detect and prevent fraudulent transactions, bonus abuse, money laundering, and other prohibited activities. This includes automated and manual review of account activity.
• Legal and regulatory compliance: To comply with applicable financial crime regulations, including Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements. bpex h may be required to retain certain records and report specific transaction types to relevant authorities.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and improve the quality of our support service.
• Platform operation and improvement: To maintain, test, and improve the technical performance of the platform, personalise your experience, and develop new features based on how players use the product.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behaviour and proactively offer responsible gaming tools or interventions where appropriate.
• Marketing (with consent): To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive marketing communications. See Section 11 for full details.

bpex h does not sell, rent, or trade your personal data. We share data only with the following categories of third parties, and only to the extent necessary for them to perform their function:

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive the transaction details necessary to process your payments. These providers operate under their own privacy policies and regulatory obligations.
• Identity verification providers: Third-party KYC services that verify identity documents and return a verification result to bpex h. These providers are contracted to process data only for verification purposes.
• Fraud prevention and security services: Risk management systems that analyse patterns across transaction and session data to identify potential fraud. Data shared is limited to what is needed for risk assessment.
• Game software providers: Evolution Gaming, Pragmatic Play, PG Soft, JILI, and other studio partners may receive technical session identifiers to enable gameplay and resolve game-related disputes. They do not receive your full personal profile.
• Customer support infrastructure: Chat platform and ticketing system providers that host support conversations. These systems are operated under data processing agreements with bpex h.
• Regulatory and law enforcement authorities: Where bpex h is legally required to disclose information — for example, in response to a court order or a regulatory investigation — we will comply with applicable legal obligations.

All third parties who receive data from bpex h are required to handle it in accordance with applicable data protection standards and are permitted to use it only for the specific purpose for which it was shared.

Given that bpex h processes financial transactions in PKR for Pakistani players, the security of payment-related data is treated as a top-tier priority. Here is specifically how payment data is handled:

• Full mobile wallet credentials (Easypaisa/JazzCash PINs, full wallet numbers) are never stored on bpex h servers. Transactions are authenticated directly through the respective payment provider's secure infrastructure.
• Bank account numbers provided for IBFT withdrawals are stored in encrypted form and are accessible only to the specific system functions that require them for payment processing.
• Card details for Visa/Mastercard transactions are processed through PCI DSS-compliant payment infrastructure. bpex h stores only the last four digits of the card and the card type — never the full card number, CVV, or expiry date.
• All payment data in transit between your device and bpex h servers is encrypted using TLS (Transport Layer Security) 1.2 or higher.
• Any payment data that is no longer required for operational purposes is securely deleted or anonymised in accordance with our data retention schedule.

bpex h uses cookies and similar tracking technologies to maintain platform functionality and improve your experience. A cookie is a small text file stored on your device by your browser when you visit a website. We use the following types of cookies:

• Essential cookies: Required for basic platform functionality — keeping you logged in during your session, maintaining your game state, and securing your connection. These cannot be disabled without breaking core platform features.
• Functional cookies: Remember your preferences such as language settings, game display options, and previously used deposit methods to save you time on return visits.
• Analytics cookies: Collect anonymised data about how players navigate the platform — which pages are visited most, where users encounter errors, and how long game sessions typically last. This data helps us improve the platform experience.
• Security cookies: Used by our fraud detection systems to identify unusual access patterns that might indicate account compromise or bot activity. These cookies do not track your activity across other websites.

bpex h does not use advertising or third-party tracking cookies that follow your activity across websites outside bpexh.ws. You can manage cookie settings through your browser's privacy controls. Disabling essential cookies will prevent the platform from functioning correctly — all other cookie types can be disabled without affecting core gameplay.

bpex h retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following guidelines:

• Active account data: Retained for the full duration of your account's active status on the platform, plus a minimum of five (5) years after account closure to meet financial record-keeping and compliance obligations.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of each transaction, as required by financial crime regulations.
• Identity verification documents: Retained for five (5) years after the completion of the verification process or account closure, whichever is later.
• Support communications: Retained for two (2) years from the date of the communication to support dispute resolution and service quality review.
• Technical and session logs: Retained for up to twelve (12) months and then anonymised or deleted unless required as evidence for an ongoing investigation.

When retention periods expire, bpex h securely destroys the relevant data or anonymises it such that it can no longer be linked to an individual player. Players may request earlier deletion of specific data categories — see Section 9 for your rights in this regard.

As a player on bpex h, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@bpexh.ws with "Privacy Request" in the subject line. We will respond within 30 days.

bpex h is strictly an adult platform. No person under the age of 18 is permitted to register an account or use the platform in any capacity. We do not knowingly collect personal data from anyone under 18 years of age.

If bpex h discovers that personal data has been collected from a minor — whether through false information provided at registration or any other means — that account will be immediately closed, all collected data will be deleted, and any balance in the account will be handled in accordance with our Terms and Conditions regarding underage accounts.

If you believe that a minor has registered on bpex h using false information, please contact us immediately at support@bpexh.ws.

bpex h sends marketing communications — including bonus offers, promotional emails, WhatsApp messages, and platform updates — only to players who have opted in to receive them. Opting in to marketing is voluntary and is presented as a separate choice during registration, not bundled with account acceptance.

You can withdraw your consent to marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email.
• Updating your communication preferences in your account settings under "Notifications".
• Contacting support at support@bpexh.ws with "Unsubscribe" in the subject line.

Withdrawing marketing consent does not affect your ability to use the platform or receive service communications — account notifications, transaction confirmations, and security alerts are not marketing communications and cannot be disabled while your account is active.

bpex h implements technical and organisational security measures appropriate to the nature of the data we hold and the risks associated with its processing. These include:

• TLS 1.2+ encryption for all data in transit between your device and our servers.
• Encryption at rest for sensitive data categories including identity documents and payment reference data.
• Role-based access controls ensuring that employees can only access the data necessary for their specific function.
• Continuous security monitoring and anomaly detection to identify potential breaches or unauthorised access attempts in real time.
• Regular internal security reviews and penetration testing by qualified security professionals.
• Two-factor authentication options for player accounts to provide an additional layer of protection beyond password access.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that affects your personal information, bpex h will notify affected players as promptly as possible with information about the nature of the breach and the steps we're taking to address it.

bpex h may update this Privacy Policy when necessary — for example, in response to changes in how the platform operates, new legal requirements, or improvements in how we protect your data. The "Last Updated" date at the top of this page will always reflect when the policy was most recently changed.

Where a change materially affects your rights — such as a change to what data we collect, how long we retain it, or who we share it with — bpex h will notify registered players by email or in-platform notification at least seven (7) days before the updated policy comes into effect.

Minor changes that do not substantively affect your rights — such as typographical corrections or clarifications — may be published without advance notice. Continuing to use bpex h after any policy update constitutes acceptance of the revised terms. If you object to a change, you may close your account and request deletion of your data by contacting support@bpexh.ws.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how bpex h handles your personal information, please contact us through any of the following channels. All privacy-related requests are handled with full confidentiality.

• Email (Privacy Requests): support@bpexh.ws — use subject line "Privacy Request" for data access, deletion, or correction requests.
• Live Chat: Available 24/7 on bpexh.ws — suitable for general privacy questions.
• WhatsApp / Telegram: Available 24/7 — contact details available on the platform.

We aim to acknowledge all privacy-related requests within 48 hours and resolve them within 30 calendar days. Where a request is particularly complex, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day deadline.