bpech Privacy Policy

bpech ("bpech", "we", "us", or "our") operates the online gaming platform accessible at bpech.org. This Privacy Policy governs the collection, storage, use, and disclosure of personal data relating to all individuals who visit, register on, or otherwise interact with the bpech Platform, including its website, account dashboard, gaming interfaces, payment systems, customer support channels, and any promotional communications.

This policy applies to all registered players regardless of their city of residence within Pakistan — including but not limited to Karachi, Lahore, Islamabad, Faisalabad, Multan, Rawalpindi, Hyderabad, and Quetta — as well as to visitors who browse the Platform without registering.

By accessing the bpech Platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with the terms of this Privacy Policy, you must discontinue use of the Platform immediately.

For the purposes of applicable data protection legislation, bpech acts as the data controller in respect of all personal data collected from players and visitors on the bpech Platform. This means bpech determines the purposes and means of processing your personal data, bears responsibility for ensuring that processing is lawful, and is the entity to whom all data rights requests should be directed.

bpech operates under an international gaming licensing framework. The licensing authority under which bpech is registered imposes data handling obligations that inform and supplement the commitments set out in this Privacy Policy.

bpech collects personal data across several categories, depending on the nature of your interaction with the Platform:

3.1 Registration Data

• Full legal name
• Date of birth (used to verify the 21+ age requirement)
• Pakistani mobile number (used as primary account identifier and for OTP authentication)
• Email address
• City of residence (optional, used for localisation)
• Account password (stored in encrypted, irreversible hashed form — bpech cannot read your password)

3.2 Identity Verification (KYC) Data

• Scanned or photographed copy of CNIC (Computerised National Identity Card) or valid Passport
• Selfie or live photograph where required for advanced verification
• CNIC number and expiry date

3.3 Financial & Transaction Data

• JazzCash mobile wallet number and transaction reference identifiers
• EasyPaisa mobile wallet number and transaction reference identifiers
• HBL or UBL bank account details where used for transfer-based deposits or withdrawals
• SadaPay account identifier where applicable
• USDT TRC20 wallet address where applicable
• Deposit amounts, withdrawal amounts, and transaction timestamps
• PKR wallet balance history

3.4 Gaming Activity Data

• Bet records across all gaming products — cricket betting, live casino, slots, Teen Patti Joker, Fortune Tree, and others
• Game session timestamps, duration, and frequency
• Wagering amounts, wins, losses, and account balance movements
• Bonus redemption history and promotional participation

3.5 Technical & Device Data

• IP address at the time of account login and each session
• Device type, operating system, and browser type
• Screen resolution and language settings
• Referring URL and page navigation paths within the Platform
• Session cookies and locally stored preference tokens

3.6 Communications Data

• Content of messages sent to bpech customer support via live chat or email
• Records of any complaints or dispute submissions
• Email marketing interaction data (opens, clicks) where you have opted in

bpech collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion
• Automatically via technical systems — when you visit or use the Platform, technical data such as IP address, device type, and navigation behaviour is collected automatically via server logs and first-party cookies
• From payment processors — when a JazzCash, EasyPaisa, HBL, or other payment transaction is initiated, the relevant payment provider shares transaction confirmation data with bpech to credit your PKR wallet
• From identity verification services — where automated KYC checks are performed, bpech may receive verification signals from its third-party KYC technology providers
• From anti-fraud and compliance systems — fraud monitoring tools may flag and record anomalous activity patterns associated with your account as part of ongoing security operations

bpech processes your personal data only for the specific, defined purposes outlined below:

bpech does not use personal data to make solely automated decisions that produce legal or similarly significant effects on players without human oversight, except where required for regulatory fraud screening purposes.

bpech processes personal data under the following legal bases as applicable to each processing activity:

• Contractual necessity: Processing required to fulfil the bpech Terms & Conditions agreement — including account management, payment processing, and game delivery
• Legal obligation: Processing required to comply with gaming licence conditions, KYC and AML regulations, and applicable financial compliance requirements — including retention of identity documents and transaction records
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, and Platform analytics, where bpech's legitimate interest in secure and compliant operation does not override your rights
• Consent: Processing for optional promotional communications, where you have actively opted in during account registration or subsequently. Consent may be withdrawn at any time without affecting the validity of processing prior to withdrawal

bpech does not sell, rent, or commercially trade your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and cryptocurrency wallet processors receive the minimum data necessary to process transactions and confirm PKR deposits and withdrawals to your bpech account
• KYC verification providers: Identity document data submitted during KYC is shared with authorised identity verification technology providers who process the data solely on bpech's instruction and under confidentiality obligations
• Gaming software providers: Certain game session data is shared with the licensed game studios and software providers whose products appear on the bpech Platform, limited to technical data required for game delivery and audit purposes
• Regulatory and licensing authorities: bpech's licensing authority may require access to player records as part of compliance audits or investigations. bpech is obligated to provide such data under its licensing framework
• Law enforcement and legal process: bpech will disclose personal data to law enforcement authorities where required by a lawful order, court warrant, or where disclosure is necessary to prevent or report suspected criminal activity including fraud or money laundering
• Group entities and service providers: Internal operational service providers acting as data processors on bpech's behalf — such as cloud hosting, email delivery, and customer support platforms — access personal data strictly under contractual data processing agreements

bpech uses first-party cookies and similar technologies to operate and improve the Platform. Cookies are small text files stored in your browser that allow the Platform to remember your session and preferences.

8.1 Essential Cookies — Required for the Platform to function. These include session authentication cookies that keep you logged into your bpech account and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking core Platform functionality.

8.2 Functional Cookies — Remember your preferences such as language, display settings, and opted-in features. These are set only on your bpech account and do not track you across external websites.

8.3 Analytics Cookies — bpech may use aggregated, anonymised analytics data to understand how players navigate the Platform, which pages are most visited, and where technical errors occur. This data is used solely to improve the bpech experience and does not identify individual players.

You may manage cookie preferences through your browser settings. Blocking essential cookies will prevent login and normal Platform use. Blocking functional and analytics cookies will not affect your ability to play.

bpech retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by applicable law and regulation.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with bpech's data destruction procedures.

bpech implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmissions between your device and bpech infrastructure are protected with 256-bit TLS/SSL encryption, rendering intercepted data unreadable
• Encryption at rest: Sensitive data fields — including identity document files, payment identifiers, and password hashes — are stored with encryption on bpech servers
• Password hashing: Account passwords are stored using a one-way cryptographic hash function. bpech cannot retrieve or read your password in plain text under any circumstances
• Access controls: Personal data access within bpech's operational team is restricted on a strict need-to-know basis. Access logs are maintained and audited
• OTP authentication: Two-factor authentication via mobile OTP adds a second layer of account security for login and withdrawal actions
• Fraud monitoring: Automated systems continuously monitor account activity for patterns indicative of unauthorised access or fraud
• Vulnerability management: bpech conducts regular security assessments of Platform infrastructure and patches identified vulnerabilities in a timely manner

As a bpech player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact bpech via the support channels set out in Section 15.

• Right of Access: You may request a copy of the personal data bpech holds about you, including account information, transaction history, and KYC records
• Right to Rectification: If any personal data bpech holds about you is inaccurate or incomplete, you may request that it be corrected. Name and mobile number corrections may require re-verification
• Right to Erasure: Subject to legal retention obligations, you may request the deletion of your personal data following account closure. Data required to be retained under AML, gaming licensing, or financial compliance laws cannot be deleted during mandatory retention periods
• Right to Restriction of Processing: You may request that bpech temporarily restrict the processing of your personal data in specific circumstances — for example, while a rectification request is under review
• Right to Data Portability: You may request a copy of your account and transaction data in a structured, machine-readable format where technically feasible
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time by updating your preferences in your bpech Account settings or by contacting support
• Right to Object: You may object to processing based on legitimate interests where you have grounds relating to your particular situation. bpech will assess the objection and cease processing unless compelling legitimate grounds override your interests

bpech will respond to all data rights requests within 30 days of receipt. Complex requests may require an additional 30 days, and you will be informed of any extension.

The bpech Platform is strictly restricted to individuals aged 21 years and older. bpech does not knowingly collect, store, or process personal data relating to anyone under the age of 21.

bpech employs age verification controls during registration and at the KYC stage to prevent underage access. If bpech discovers that personal data has been collected from an individual under 21, it will immediately close the associated account, delete the data, void any associated transactions, and take such further action as required by applicable law and its licensing obligations.

If you have reason to believe that a minor has registered on the bpech Platform, please notify bpech support immediately at [email protected].

bpech is an online platform and its technical infrastructure — including servers, databases, and third-party service providers — may be located in jurisdictions outside of Pakistan. Where personal data is transferred internationally, bpech implements appropriate safeguards to ensure that your data receives an equivalent level of protection as it would in a jurisdiction with robust data protection legislation.

Such safeguards include:

• Contractual clauses with third-party processors that obligate them to protect data to the standard required under bpech's licensing framework
• Transfers only to third-party providers that maintain recognised information security certifications
• Encryption of data during international transmission and at rest on foreign infrastructure

By using the bpech Platform, you acknowledge and consent to the transfer of your personal data to servers and service providers outside of Pakistan where necessary for the operation of the Platform, subject to the safeguards described above.

bpech may revise this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or new product features. When material changes are made, bpech will provide advance notice to registered players via email to the address associated with their account, and/or via a prominent notice within the Platform.

The revised policy will display an updated Effective Date at the top of this page. Your continued use of the bpech Platform following notification of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Privacy Policy, you should cease using the Platform and request account closure.

bpech recommends that players review this Privacy Policy periodically to stay informed about how their personal data is handled. Minor clarifications, corrections, or editorial updates that do not affect the substance of data processing practices may be made without separate notification.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a potential data protection concern, please contact bpech through the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line for data rights enquiries
• Live Chat: Available 24 hours a day, 7 days a week from your bpech Account dashboard after login — fastest response for time-sensitive security matters

bpech is committed to addressing all privacy-related enquiries fairly and promptly. Where a concern relates to a potential data breach or account compromise, please contact us immediately via live chat so that appropriate security measures can be activated without delay.