Privacy Policy – bpexch10 Pakistan Data Protection Statement

1. Who We Are — The Data Controller

This Privacy Policy applies to bpexch10, the online betting exchange and gaming platform operating at bpexch10.net. When this policy refers to "bpexch10", "we", "us", or "our", it means the company that operates the bpexch10 platform and holds your personal data as the data controller.

bpexch10 is a licensed online gaming operator. Our platform serves registered players from Pakistan, providing sports betting — with particular depth in cricket and PSL markets — alongside a live casino, online poker, and a library of RNG games. All services operate in Pakistani Rupees (PKR) and are designed specifically for the Pakistani market.

As data controller, bpexch10 decides how and why your personal data is used. This policy explains those decisions in full. If after reading this you still have questions about how we handle your data, our contact details are in Section 15.

2. What Personal Data We Collect

bpexch10 collects several categories of personal data during the course of operating your account. Here's a clear breakdown:

bpexch10 does not collect special category personal data — such as health information, religious beliefs, or political opinions — unless you voluntarily provide this in the context of a responsible gaming self-exclusion request or similar. In that narrow context, the data is used only for the purpose for which you provided it.

3. How We Collect Your Data

bpexch10 collects your data through three main channels:

• Direct collection: Information you provide when registering your bpexch10 account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account settings. This is the largest category of data we hold and the most important — without it, we cannot operate your account.
• Automated collection: Data generated automatically as you use bpexch10.net, including your IP address, device information, browser type, and your navigation patterns within the platform. This data is collected via server logs, session tracking, and cookies (see Section 8 for full cookie details).
• Third-party sources: In some cases, bpexch10 receives data from third parties. Payment processors confirm transaction completions and may flag transactions for fraud screening. Identity verification services may return a match or no-match response when we run a CNIC check. We do not purchase data from data brokers or marketing companies.

4. Why We Use Your Data — Our Purposes

bpexch10 uses your personal data for the following purposes. None of these purposes goes beyond what is reasonable and necessary for operating a licensed online betting and gaming platform for Pakistani players:

• Account creation and management: Setting up and maintaining your bpexch10 account, authenticating your identity at login, and managing your account settings.
• Providing the services: Processing bets, settling winnings, running casino and poker game sessions, and displaying your betting history and account balance accurately.
• Financial transactions: Processing deposits and withdrawals in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard. Reconciling transactions, handling chargebacks, and maintaining financial records as required by applicable regulations.
• Legal compliance and regulatory obligations: Completing Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by our operating licence. Retaining transaction and identity records for regulatory audit purposes. Reporting to competent authorities when legally required.
• Fraud prevention and security: Detecting unusual account activity, identifying potential match-fixing or collusion in the poker room, preventing duplicate account registrations, and protecting the integrity of bpexch10's platform.
• Responsible gaming: Monitoring gambling patterns to identify players who may be displaying signs of problem gambling, and applying responsible gaming tools (deposit limits, self-exclusion) that you have set or that we apply in line with our regulatory obligations.
• Customer support: Investigating and resolving complaints, answering questions about your account, and improving the quality of support interactions.
• Platform improvement: Analysing aggregated and anonymised usage data to understand how bpexch10 is used, identify technical issues, and improve the platform experience.
• Marketing communications (where you have consented): Sending you information about bpexch10 promotions, new games, and special offers. See Section 12 for full details on marketing and how to opt out.

5. Legal Basis for Processing

Every time bpexch10 processes your personal data, we do so on one of the following legal grounds:

• Contract performance: Most processing is necessary to deliver the services you signed up for. Without processing your identity data, we cannot open your account. Without processing your financial data, we cannot accept deposits or pay out winnings.
• Legal obligation: KYC verification, AML transaction monitoring, and record-keeping are required by our gaming licence and applicable financial regulations. We process this data because we must, not because we choose to.
• Legitimate interests: Fraud prevention, platform security, and internal analytics are conducted on the basis of bpexch10's legitimate interest in operating a safe and fair platform. We balance this against your privacy rights and do not use this basis to override your fundamental data protection interests.
• Consent: Marketing communications are sent only where you have given explicit consent during registration or subsequently opted in through your account settings. You can withdraw this consent at any time.

6. Who We Share Your Data With

bpexch10 does not sell your personal data to any third party. We share your data only where necessary and only with the following categories of recipient, each of whom is bound by confidentiality obligations and permitted to use your data only for the specific purpose for which it was shared:

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT-connected banks, and Visa/Mastercard networks receive the financial data necessary to process your deposit or withdrawal. Each operates under their own applicable privacy frameworks.
• Live casino partners: Evolution Gaming and Pragmatic Play receive your session and bet data as part of operating live dealer tables on bpexch10. These partners are certified gaming operators with their own data security standards.
• Identity verification services: Third-party KYC providers may receive your name, CNIC number, and date of birth to complete identity verification checks. These providers return a pass/fail result and do not retain your data beyond the verification transaction.
• Fraud and security services: Specialised fraud detection platforms may analyse transaction and behavioural data to flag unusual activity. All data shared with these providers is subject to strict contractual data processing agreements.
• Regulatory and law enforcement authorities: bpexch10 will disclose personal data to relevant regulatory bodies, law enforcement agencies, or financial intelligence units when required to do so by law or by a valid legal process. We will notify you of such disclosure wherever we are legally permitted to do so.
• Professional advisors: Legal, accounting, and audit firms may have access to limited personal data in the course of providing professional services to bpexch10. All such access is governed by professional confidentiality obligations.

7. KYC Verification & Anti-Money Laundering

As a licensed gaming operator, bpexch10 is legally required to verify the identity of account holders before processing withdrawals and to monitor transactions for signs of money laundering or financial crime. This is not optional — failure to comply with these obligations would put our licence at risk and ultimately harm every legitimate player on the platform.

The KYC process at bpexch10 requires you to submit a clear copy of your CNIC. Depending on the withdrawal amount or account history, we may also request a selfie (to confirm the CNIC photo matches the account holder) and a recent proof of address. All KYC documents are:

• Transmitted to bpexch10 over an encrypted SSL connection.
• Stored in an access-controlled, encrypted document management system.
• Accessible only to authorised bpexch10 compliance personnel and, where applicable, our third-party KYC verification partner.
• Retained for the period required by our licence and applicable regulations (typically a minimum of 5 years after account closure).

bpexch10's AML monitoring system analyses transaction patterns, deposit and withdrawal frequencies, and betting behaviour to detect activity that may indicate money laundering. Where suspicious activity is identified, bpexch10 is legally required to file a report with the relevant financial intelligence authority without notifying the account holder. This is a legal obligation, not a choice.

8. Cookies & Tracking Technologies

bpexch10.net uses cookies and similar tracking technologies to make the platform work correctly, remember your session, and understand how the site is used. Here's what we actually use and why:

bpexch10 does not use third-party advertising cookies or share cookie data with ad networks. The analytics cookies we use collect data in aggregated, anonymised form — they cannot identify you as an individual.

You can manage cookie preferences through your browser settings. Disabling functional cookies may affect your experience on bpexch10 — for example, your odds format preference will not be remembered between sessions. Disabling strictly necessary cookies will prevent bpexch10 from functioning correctly.

9. Data Retention — How Long We Keep Your Data

bpexch10 keeps your personal data for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable law — whichever is longer. Here's how this works in practice:

• Active accounts: While your bpexch10 account is open and active, all account data is retained to deliver the services you use.
• Closed accounts: After account closure, bpexch10 retains identity and transaction data for a minimum of five years. This is required by our gaming licence and AML regulations. During this period, the data is stored securely and accessed only for regulatory or legal purposes.
• KYC documents: CNIC copies and related identity verification documents are retained for five years from account closure or from the date of the relevant transaction, whichever is later.
• Support communications: Chat transcripts and email correspondence are retained for two years from the date of the interaction, after which they are securely deleted.
• Analytics data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes personal data once anonymised.
• Marketing consent records: Records of your marketing consent or opt-out are retained for seven years as evidence of compliance with consent requirements.

After the applicable retention period has elapsed, bpexch10 securely deletes or irreversibly anonymises your personal data. We do not retain data "just in case" — every item we hold has a defined retention purpose and timeline.

10. How We Protect Your Data

bpexch10 takes data security seriously. The following technical and organisational measures are in place to protect your personal data:

Despite these measures, no internet-based system is entirely immune from security risks. If bpexch10 experiences a data breach that is likely to affect your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach — or as soon as reasonably practicable — with information about what happened, what data was involved, and what steps we are taking.

11. Your Data Rights

As a bpexch10 account holder, you have the following rights over your personal data. These rights are not unlimited — in some cases, legal obligations (such as AML record-keeping requirements) may limit what bpexch10 can do in response to your request — but we will always explain any limitation clearly.

To exercise any of these rights, contact bpexch10 support via live chat or email at support@bpexch10.net. We may need to verify your identity before processing a data rights request. We will acknowledge your request within 5 working days and provide a substantive response within 30 days.

12. Marketing Communications

bpexch10 sends promotional communications — emails and in-platform notifications about new promotions, bonus offers, PSL betting specials, and new games — only to players who have given explicit consent. We do not send unsolicited marketing.

You can manage your marketing preferences at any time:

• Through the notification preferences section of your bpexch10 account settings.
• By clicking the "unsubscribe" link in any marketing email from bpexch10.
• By contacting bpexch10 support via live chat and requesting removal from the marketing list.

Opting out of marketing will not affect your ability to receive transactional communications from bpexch10 — we will still send you deposit confirmations, withdrawal notifications, account security alerts, and important policy update notices. These are not marketing; they are necessary account communications.

bpexch10 does not send marketing to players who are currently in a self-exclusion period, a cooling-off period, or who have active deposit limit restrictions. We consider targeted gambling promotions to these players inappropriate and our systems prevent it.

13. Children's Privacy

bpexch10 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes an age declaration and we conduct CNIC-based age verification as part of the KYC process.

If bpexch10 becomes aware that personal data has been collected from a person under 18, we will immediately suspend the account, delete the associated data, and return any deposited funds (minus any amounts required to be retained for regulatory investigation purposes) to the payment method used.

Parents or guardians who believe a minor has registered on bpexch10 should contact us immediately via live chat or at support@bpexch10.net. We treat such reports as high priority and act on them the same working day.

14. Changes to This Privacy Policy

bpexch10 may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page always reflects the most recent revision. We categorise changes as follows:

• Material changes — changes that meaningfully affect how we collect, use, or share your personal data, or that reduce your rights. For material changes, bpexch10 will notify all registered users by email at least 14 days before the new policy takes effect and will post a prominent notice on the platform.
• Minor changes — clarifications, typographical corrections, or updates to reflect minor process changes that do not affect the substance of the policy. These may be made without prior individual notification, though the version number and last-updated date will be updated.

If you continue to use bpexch10 after a material policy change takes effect, this constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised policy, please close your account before the effective date and we will return any real-money balance to your registered payment method.

15. Contact Us — Data Privacy Queries

If you have questions about this Privacy Policy, want to exercise your data rights, or want to raise a concern about how bpexch10 handles your personal data, please contact us through any of the following channels:

For responsible gaming queries — including self-exclusion, deposit limits, and session time tools — please visit our dedicated Responsible Gaming page.

For questions about the legal terms governing your bpexch10 account, including betting rules, bonus conditions, and account policies, please read our Terms and Conditions.