bpxchi Privacy Policy — How We Collect, Use, and Protect Your Data

This Privacy Policy ("Policy") is published by bpxchi and governs the collection, use, storage, and disclosure of personal data in connection with the operation of the bpxchi platform at bpxchi.net, including all associated Services such as casino games, sports betting, poker, jackpot bingo, slot games, live casino, account management, and customer support.

bpxchi operates as an internationally licensed online gambling platform serving players across Pakistan, including major cities such as Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and Multan. In delivering these Services to Pakistani players, bpxchi processes a range of personal data as described in this Policy.

This Policy should be read in conjunction with the bpxchi Terms & Conditions and Responsible Gaming Policy, both of which form part of your agreement with bpxchi. By registering an account on bpxchi.net or by continuing to use the bpxchi Services, you acknowledge that you have read and understood this Policy.

For the purposes of this Privacy Policy, bpxchi (the operating entity behind bpxchi.net) acts as the data controller in respect of the personal data of all registered players and visitors to the bpxchi platform. As data controller, bpxchi determines the purposes and means by which personal data is processed.

Where bpxchi engages third-party service providers to process personal data on its behalf — such as payment processing partners, fraud detection providers, and cloud infrastructure suppliers — those third parties act as data processors under contractual data processing agreements that impose obligations consistent with the principles in this Policy.

For all data protection enquiries, access requests, or complaints relating to bpxchi's handling of your personal data, please contact bpxchi at the details provided in Section 15 of this Policy.

bpxchi collects the following categories of personal data in the course of providing its Services:

bpxchi does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, or medical records unless a specific regulatory obligation or responsible gaming intervention requires it and you have provided explicit consent.

bpxchi collects personal data through the following channels and mechanisms:

• Registration: Data you submit directly when creating your bpxchi account, including your name, email address, mobile number, and date of birth.
• KYC Verification: Identity documents and photographs submitted to complete age and identity verification before withdrawals are processed.
• Transactions: Data generated when you make deposits or withdrawal requests, including payment method identifiers and transaction amounts.
• Platform Usage: Data collected automatically as you use the bpxchi platform, including IP addresses, device fingerprints, session logs, and in-game activity records.
• Customer Support: Data you provide when you contact bpxchi's support team via live chat or email, including your account details and the content of your communications.
• Cookies and Tracking Technologies: Data collected via cookies, pixel tags, and similar technologies as described in Section 10 of this Policy.
• Third-Party Sources: In limited circumstances, bpxchi may receive data from fraud prevention agencies, identity verification service providers, or payment processors for the purpose of verifying your identity or preventing fraudulent activity.

bpxchi processes your personal data for the following purposes:

• Account Management: To register, maintain, and manage your bpxchi account, including processing login requests, managing account preferences, and communicating account-related updates.
• Service Delivery: To provide access to all bpxchi Services including casino games, sports betting markets, poker, slots, jackpot bingo, and live casino tables.
• Payment Processing: To process deposits and withdrawal requests via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT TRC20.
• KYC and AML Compliance: To verify your identity and age in compliance with our international gaming licence obligations and applicable anti-money laundering regulations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeovers, multi-accounting, and other security threats.
• Responsible Gaming: To monitor gaming behaviour patterns for indicators of problem gambling and to provide or apply responsible gaming interventions where appropriate under our licence obligations.
• Customer Support: To respond to your enquiries, resolve disputes, and manage complaints in accordance with bpxchi's published complaints procedure.
• Platform Improvement: To analyse usage patterns and improve the performance, reliability, and usability of the bpxchi platform.
• Marketing Communications: To send you relevant promotional communications about bpxchi offers and features, where you have not opted out of such communications. You may opt out at any time.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, including providing data to regulatory authorities, courts, or law enforcement agencies where required by law.

bpxchi processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil bpxchi's obligations under the Terms and Conditions you accepted upon registration, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with bpxchi's obligations under its international gaming licence, including KYC verification, AML transaction monitoring, and age restriction enforcement.
• Legitimate Interests: Processing necessary for bpxchi's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and analytics — provided these interests are not overridden by your privacy rights.
• Consent: Processing based on your specific, informed, freely given consent — principally for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the legality of prior processing.

7.1 No Sale of Data. bpxchi does not sell, rent, or licence your personal data to any third party for their own commercial purposes.

7.2 Service Providers. bpxchi shares personal data with carefully selected third-party service providers who process data on bpxchi's behalf under data processing agreements. These include payment processors (for JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT TRC20 transactions), identity verification providers (for KYC), cloud hosting infrastructure providers, customer support platform providers, and analytics service providers. All service providers are contractually bound to process data only as instructed by bpxchi and to maintain appropriate security standards.

7.3 Regulatory Disclosure. bpxchi may disclose your personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law or by the conditions of its international gaming licence.

7.4 Fraud Prevention Agencies. bpxchi may share data with fraud prevention agencies and multi-operator self-exclusion register operators where permitted or required by its licensing obligations, for the purpose of preventing fraud and protecting vulnerable players.

7.5 Business Transfers. In the event of a merger, acquisition, or transfer of substantially all of bpxchi's assets to a third party, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and the privacy implications before it takes effect, to the extent reasonably practicable.

bpxchi retains personal data only for as long as is necessary for the purposes for which it was collected, subject to our legal and regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, bpxchi will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

bpxchi implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS encryption with a minimum of 256-bit key strength for all data in transit between your device and bpxchi.net;
• Encryption of sensitive data fields at rest within bpxchi's database infrastructure;
• Strict access controls ensuring that only authorised bpxchi personnel with a legitimate operational need can access personal data;
• Two-factor authentication requirements for all bpxchi administrative system access;
• Regular penetration testing and vulnerability assessments by independent security specialists;
• Incident response procedures for the rapid detection and containment of data security incidents;
• Staff training on data protection obligations and information security practices.

While bpxchi takes all reasonable steps to secure your data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your bpxchi account credentials and for notifying bpxchi immediately if you suspect any unauthorised access to your account.

bpxchi uses cookies and similar tracking technologies on bpxchi.net to improve your experience, maintain your login session, prevent fraud, and analyse platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of bpxchi.net, including maintaining your authenticated session, remembering your account preferences, and enabling core security features. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Used to remember choices you make on the platform, such as language preferences and responsible gaming settings, to provide a more personalised experience.
• Analytics Cookies: Used to collect anonymised data about how visitors use bpxchi.net, including which pages are visited most frequently and how users navigate through the platform. This data helps bpxchi improve the platform experience.
• Security Cookies: Used to detect fraudulent activity, identify multiple account attempts from the same device, and support bpxchi's fraud prevention systems.

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use core bpxchi Services. Non-essential cookies can be declined without material impact on your account functionality.

Subject to applicable law and bpxchi's regulatory obligations, you have the following rights regarding your personal data held by bpxchi. You may exercise any of these rights by contacting bpxchi at the details provided in Section 15.

bpxchi will respond to all data rights requests within thirty (30) days of receipt. Where a request is complex or bpxchi receives a high volume of requests, this period may be extended by a further two months, with notice provided to you. Note that certain rights may be limited where bpxchi has an overriding legal obligation — for example, KYC and AML records must be retained for regulatory compliance regardless of a deletion request.

bpxchi enforces its 21+ age requirement through mandatory CNIC verification before any withdrawal is processed. If bpxchi becomes aware that personal data has been collected from an individual under 21, it will take immediate steps to delete that data and close the associated account, returning any funds after verification of the appropriate recipient's identity.

If you are a parent or guardian and you believe that a minor in your care has registered a bpxchi account or provided personal data to bpxchi, please contact bpxchi immediately at the details in Section 15. bpxchi will investigate and act promptly.

bpxchi operates on an internationally licensed basis and uses cloud infrastructure and service providers whose data processing facilities may be located in jurisdictions outside Pakistan. Where personal data is transferred to a country that does not provide a level of data protection equivalent to internationally recognised standards, bpxchi ensures that appropriate safeguards are in place, including:

• Standard contractual clauses or equivalent transfer mechanisms incorporated into data processing agreements with service providers;
• Binding corporate rules where applicable; and
• Assessment of the adequacy of data protection standards in the destination jurisdiction prior to transfer.

If you require further information about the international transfer safeguards applicable to your personal data, please contact bpxchi using the details in Section 15.

bpxchi reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy will be communicated to registered players via a notice on the bpxchi platform dashboard upon next login, and the updated Policy will be published at bpxchi.net/privacy-policy with a revised effective date clearly stated at the top of the document.

Your continued use of the bpxchi Services following the effective date of any amendment constitutes your acknowledgment of the updated Policy. We encourage you to review this Policy periodically. If you do not accept material changes to this Policy, you should close your account in accordance with the process described in the bpxchi Terms & Conditions.

If you have any questions, concerns, or complaints regarding this Privacy Policy or bpxchi's handling of your personal data, or if you wish to exercise any of your data rights described in Section 11, please contact bpxchi using the following channels:

• Email: [email protected] (for all data protection and privacy enquiries)
• General Support Email: [email protected]
• Live Chat: Available 24/7 within the bpxchi platform after login

bpxchi aims to acknowledge all privacy-related enquiries within forty-eight (48) hours and to provide a substantive response within thirty (30) days. Where your enquiry is complex or requires detailed investigation, bpxchi may extend this period by a further two months with advance notice.

Complaints to Supervisory Authorities: If you are dissatisfied with bpxchi's response to a data protection complaint, you have the right to lodge a complaint with the data protection supervisory authority in the jurisdiction where you reside or where the alleged infringement occurred. bpxchi encourages you to contact us directly before escalating to a supervisory authority so that we can attempt to resolve your concern.