bpech Privacy
Policy

bpech is an online casino and sports betting platform operating at bpech.bet, serving Pakistani players with cricket betting, live casino games, slots, kabaddi, and lottery products. In the context of this Privacy Policy, "bpech", "we", "us", and "our" refer to the operator of the bpech platform. "You" and "your" refer to any individual who accesses, browses, registers, or transacts on the bpech platform.

bpech operates under internationally recognised gaming regulations and is committed to handling all player data in a manner consistent with applicable data protection standards. As the data controller in respect of the personal data described in this policy, bpech determines the purposes and means by which that personal data is processed.

bpech collects personal data across several categories. The table below summarises what we collect and why each category is necessary:

bpech does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than document photographs submitted for KYC), or health data, except where a player voluntarily provides health-related information in the context of a responsible gaming self-exclusion request.

bpech collects personal data through the following channels:

• Direct registration: When you create a bpech account, you provide identity, contact, and in some cases financial data directly. This is the primary source of your personal data on our platform.
• Identity verification process: When you submit documents for KYC — such as a copy of your CNIC or passport — bpech collects the data contained in those documents and stores it securely for regulatory compliance purposes.
• Payment transactions: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or 1LINK, bpech receives transaction confirmation data from the payment processor, including your account identifier and transaction amount.
• Platform usage: bpech automatically collects technical and usage data as you interact with the platform — including game sessions, bet placements, and navigation patterns — through server logs and analytics tools operated solely by bpech.
• Cookies and similar technologies: bpech uses cookies and local storage to maintain session state, remember your preferences, and monitor platform performance. See Section 7 for full cookie details.
• Player support interactions: When you contact bpech via live chat or email, we record those communications to resolve your query and to improve our support service quality.
• Third-party verification services: Where required by our KYC or AML obligations, bpech may use licensed identity verification or fraud screening services that cross-reference the data you have provided against external databases. These services are bound by strict confidentiality obligations.

bpech uses personal data for the following purposes. Where applicable, the legal basis for each purpose is noted — full legal basis details are set out in Section 5.

• To create and maintain your bpech player account, including verifying your identity and age (21+ requirement) at registration.
• To process deposits and withdrawals via Pakistani payment methods including JazzCash, EasyPaisa, and linked bank accounts.
• To comply with our anti-money-laundering (AML), Know Your Customer (KYC), and counter-terrorist financing (CTF) obligations under applicable gaming and financial regulations.
• To monitor your gaming activity for responsible gaming purposes — including identifying patterns that may indicate problem gambling and triggering welfare checks where appropriate.
• To detect, investigate, and prevent fraud, account takeovers, multi-accounting, and other forms of prohibited conduct as defined in our Terms & Conditions.
• To send you service communications — including deposit confirmations, withdrawal notifications, account security alerts, and policy update notices — which are essential to your bpech account and cannot be opted out of while your account remains active.
• To send you marketing communications about bpech promotions, PSL betting offers, and new game launches — but only where you have given explicit consent to receive such communications. You may withdraw marketing consent at any time.
• To personalise your bpech experience, including surfacing games and betting markets relevant to your activity history on the platform.
• To improve bpech's products, resolve technical issues, and conduct internal analytics to understand how Pakistani players use our platform.
• To enforce our Terms & Conditions and to exercise or defend legal claims in the event of a dispute.

bpech processes your personal data on one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: The majority of bpech's data processing — including account creation, payment processing, and game operation — is necessary for the performance of the contract between bpech and the player. Without this processing, bpech cannot provide the platform services.
• Legal obligation: bpech is required by applicable gaming regulations to collect and retain KYC documentation, transaction records, and AML screening results. This processing is mandatory and cannot be waived by the player.
• Legitimate interests: bpech processes technical and usage data on the basis of its legitimate interests in operating a secure, fraud-free platform and in improving its products for Pakistani players. bpech has conducted a balancing test and is satisfied that these interests are not overridden by player privacy rights in this context.
• Consent: bpech processes marketing data and places non-essential cookies only on the basis of explicit, freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

bpech does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your data may be shared with the following categories of third parties only where strictly necessary and under appropriate data protection safeguards:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive the minimum transaction data required to process your deposits and withdrawals. These providers operate their own privacy policies and are independently regulated under Pakistani financial services law.
• Identity verification providers: Licensed KYC and AML screening services receive your identity document data solely for the purpose of verifying your identity and screening for financial crime risk. These providers are bound by strict confidentiality and data processing agreements.
• Game software providers: Third-party game studios whose games are available on the bpech platform receive anonymised session data necessary to operate the game engine and resolve disputes over game outcomes. They do not receive your personal identity or financial data.
• Regulatory and law enforcement authorities: bpech is legally obliged to share player data with licensing regulators, financial intelligence units, and law enforcement agencies upon receipt of a valid legal demand. bpech will notify players of such disclosures where legally permitted to do so.
• Professional advisers: bpech's legal counsel, auditors, and accountants may have access to player data on a strictly need-to-know basis and are bound by professional secrecy obligations.

bpech uses cookies and similar technologies on the bpech.bet platform. Cookies are small text files stored on your device that help bpech operate the platform securely and efficiently. The following cookie categories are used:

• Strictly necessary cookies: These cookies are essential for the bpech platform to function. They maintain your login session, remember your language preference, and ensure security features like OTP verification operate correctly. These cookies cannot be disabled without breaking platform functionality.
• Performance cookies: These cookies collect anonymised data about how players use the bpech platform — which pages are visited most frequently, which games are loaded, and where technical errors occur. This data helps bpech improve the platform experience for Pakistani players. These cookies require your consent.
• Functional cookies: These cookies remember your preferences such as display settings, previously played games, and notification preferences. They are not essential but improve your experience. These cookies require your consent.
• Marketing cookies: bpech may use marketing cookies to understand which promotions — such as PSL season offers — are most relevant to your usage patterns, and to avoid showing you offers you have already seen. These cookies require your explicit consent and are only placed if you have opted in.

You may manage your cookie preferences at any time through your bpech account settings or through your device browser settings. Withdrawing consent for non-essential cookies will not affect your ability to use the bpech platform for gaming purposes.

bpech implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• AES-256 encryption of all personal and financial data at rest across bpech servers.
• 256-bit SSL/TLS encryption for all data transmitted between your device and bpech infrastructure.
• Two-factor authentication via Pakistani mobile OTP for all new device login events.
• Role-based access controls ensuring that bpech staff can only access player data on a strictly need-to-know basis relevant to their function.
• Regular independent security audits and penetration testing of bpech platform infrastructure.
• Comprehensive intrusion detection systems and 24/7 security monitoring.
• Secure data centre facilities with physical access controls and environmental protections.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a high risk to your rights and freedoms, bpech will notify affected players without undue delay and will take all appropriate remedial steps. You are responsible for maintaining the confidentiality of your own account credentials — see Section 5 of bpech's Terms & Conditions.

bpech retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and gaming regulations. The following retention periods apply:

• Active account data: Retained for the full duration of your account being open and active on the bpech platform.
• KYC and identity documents: Retained for a minimum of 5 years following account closure, as required by anti-money-laundering regulations applicable to gaming operators.
• Financial transaction records: Retained for a minimum of 5 years following the date of each transaction, in compliance with AML and financial record-keeping requirements.
• Responsible gaming records: Self-exclusion requests and responsible gaming interventions are retained for a minimum of 7 years to protect against re-registration by excluded players.
• Marketing consent records: Retained for 3 years from the date of consent or the date of the last marketing communication, whichever is later, to demonstrate compliance with consent obligations.
• Technical logs: Server logs and security event logs are retained for 12 months unless a longer period is required for the investigation of a specific fraud or security incident.
• Support communications: Live chat transcripts and email correspondence are retained for 24 months following the closure of the relevant support ticket.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and business intelligence purposes.

As a bpech player whose personal data is processed by bpech, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact bpech player support:

• Right of access: You may request a copy of all personal data that bpech holds about you. bpech will provide this information in a structured, commonly used format within 30 days of a verified request.
• Right to rectification: If any personal data held by bpech is inaccurate or incomplete, you may request that it be corrected. Identity data corrections may require re-submission of supporting documentation.
• Right to erasure: You may request that bpech delete your personal data. This right is not absolute — bpech may retain data where required by law or legitimate interest, but will delete all data that is not subject to such a retention obligation.
• Right to restriction: You may request that bpech restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of legitimate grounds.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that bpech provide your data in a machine-readable format suitable for transfer to another service.
• Right to object: You may object to processing based on legitimate interests at any time. bpech will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

bpech is strictly a platform for adults. The minimum age to register and use the bpech platform is 21 years. bpech does not knowingly collect personal data from individuals under the age of 21.

As part of the registration process, bpech requires all applicants to confirm their date of birth and to submit government-issued identity documentation (CNIC or passport) that verifies their age. Where bpech has reason to believe that a user is under 21, the account will be suspended immediately pending age verification, and any funds deposited by an underage player will be returned via the original payment method.

If you have reason to believe that a person under 21 has registered a bpech account or that bpech has inadvertently collected personal data from a minor, please contact bpech player support immediately. bpech will investigate and take appropriate action, including deletion of the minor's data and closure of the account.

bpech reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to our platform. The version date shown at the top of this document indicates when the policy was last updated.

Where changes are material — meaning they significantly affect how bpech processes your personal data or affect your rights — bpech will notify registered players via the mobile number or email address associated with their account, or via a prominent notice on the bpech platform, at least 14 days before the changes take effect.

Continued use of the bpech platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated policy, you must stop using the platform and may request account closure by contacting bpech player support. Previous versions of this Privacy Policy are available upon request.

For all privacy-related enquiries — including data subject access requests, consent withdrawals, complaints about bpech's data practices, or questions about this Privacy Policy — please contact the bpech player support team: