BP Exch Privacy Policy –
Your Data, Your Rights, Our Responsibility

This Privacy Policy applies to the online gaming platform operated under the brand name BP Exch, accessible at bpexch-jit.com ("bp exch," "we," "our," or "the Platform"). BP Exch is the data controller responsible for the personal information collected from players who register and use our platform.

BP Exch is an online gaming platform designed specifically for Pakistani players. We offer live casino games, cricket betting, Andar Bahar, slots, crash games, card games, and other gaming products. All transactions on bp exch are conducted in Pakistani Rupees (PKR) through local payment methods including Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfers, and Visa/Mastercard cards issued by Pakistani banks.

Because bp exch handles real-money transactions and personal identity information, we take data protection seriously — not as a compliance exercise but as a genuine responsibility to the hundreds of thousands of Pakistani players who trust us with their information.

BP Exch collects personal data through several channels — directly from you when you register or interact with the platform, automatically when you use the site, and occasionally from third-party verification services. Below is a clear breakdown of the categories of data we collect.

BP Exch does not collect sensitive categories of personal data — such as racial or ethnic origin, religious beliefs, health data, or biometric data — unless explicitly required by applicable law for a specific verification purpose, in which case the reason will be clearly explained at the point of collection.

Every piece of data bp exch collects exists for a specific, legitimate reason. We do not collect information speculatively or because it might be useful one day. The purposes are as follows:

• Account creation and management — to create your bp exch player account, maintain it, and allow you to log in securely.
• Identity verification (KYC) — to confirm you are who you say you are, that you are 18 or older, and that you are eligible to play on bp exch.
• Payment processing — to process your PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card, and to ensure payments reach the correct account.
• Anti-money laundering (AML) and fraud prevention — to monitor transactions for patterns consistent with financial crime, account fraud, or multi-accounting, as required by applicable regulations.
• Responsible gaming monitoring — to identify players who may be developing problematic gaming behaviour and to intervene appropriately — including applying limits or initiating contact if necessary.
• Platform improvement — to understand how players use bp exch so that we can improve game loading, payment flows, and overall product quality for Pakistani players.
• Customer support — to respond to and resolve your support requests, complaints, and queries effectively.
• Marketing communications — to send promotional offers and updates to players who have opted in to receive them (you can opt out at any time).

BP Exch processes personal data on the following legal bases, depending on the purpose of the processing:

• Contract performance — Processing your identity, contact, and financial data is necessary to provide you with the bp exch service you registered for. Without this data, we cannot create or maintain your account or process payments.
• Legal obligation — BP Exch is required by applicable law and regulatory requirements to collect, verify, and retain certain categories of player data — including identity documents and transaction records — for anti-money laundering and responsible gaming compliance purposes.
• Legitimate interests — BP Exch uses technical and usage data to improve the platform, prevent fraud, and ensure platform security. These interests do not override your rights and freedoms as a data subject.
• Consent — Where bp exch relies on consent as a legal basis — for example, sending marketing emails or SMS messages — you will be asked to explicitly opt in, and you can withdraw that consent at any time without affecting your account status.

Beyond the core purposes of account management and payment processing, bp exch uses personal data in the following specific ways that are relevant for Pakistani players to understand:

Transaction monitoring: BP Exch's compliance systems analyse deposit and withdrawal patterns, bet sizes, and frequency of play to identify activity that may be inconsistent with normal recreational gaming. This is a legal obligation. Pakistani players should be aware that unusual transaction patterns — for example, very large rapid deposits followed by immediate withdrawals without significant gameplay — may trigger a manual compliance review and temporary account hold pending verification.

Responsible gaming profiling: BP Exch analyses gameplay patterns — including session length, time of day, frequency of play, stake escalation, and loss-chasing behaviour — to proactively identify players who may be at risk of gaming harm. Where such patterns are detected, bp exch may reach out directly and may apply responsible gaming controls to the account. This profiling is done to protect players, not to restrict them arbitrarily.

Device and IP-based security: BP Exch records and analyses device identifiers and IP addresses to detect and prevent account sharing, multi-accounting, use of VPNs to circumvent geographic restrictions, and bot-based access. This data is also used to detect unusual login patterns that might suggest unauthorised access to your account — a protection for you as much as for the platform.

Service personalisation: BP Exch may use your game history and preferences to show you relevant game recommendations, tailor promotional offers, and surface cricket betting markets relevant to the matches you typically follow. This personalisation is based on your own activity on bp exch and does not involve the purchase or use of any external personal data profiles.

BP Exch does not sell your personal data to any third party under any circumstances. We share personal data only in the following limited and controlled circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and bank/card processors receive the financial data necessary to complete your transactions. Each of these providers operates under their own privacy framework and is contractually obligated to handle your data securely.
• Identity verification providers: Where a third-party KYC service is used to verify the authenticity of identity documents submitted by bp exch players, only the minimum necessary data is shared for that verification purpose.
• IT and infrastructure providers: BP Exch uses cloud hosting, security, and software services. These providers may have technical access to data stored on their systems but are contractually prohibited from using that data for any purpose other than providing the agreed service to bp exch.
• Regulatory and law enforcement authorities: BP Exch is legally required to share player data with relevant regulatory authorities and law enforcement agencies when lawfully requested, including in connection with investigations into financial crime, fraud, or other serious offences.
• Responsible gaming organisations: If a player has self-excluded from bp exch, certain identifying information may be shared with cross-platform self-exclusion registries where applicable, to prevent circumvention of exclusion through alternative accounts.

Given that bp exch is a real-money platform where Pakistani players deposit and withdraw in PKR, payment data security deserves specific attention in this Privacy Policy.

When you initiate a deposit or withdrawal on bp exch via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card, the sensitive payment credential data — such as your wallet PIN or card number — is never transmitted to or stored on bp exch servers. Payment processing is handled directly by the respective payment provider through their own secure, encrypted infrastructure. BP Exch receives only a transaction confirmation and reference number — not your full payment credentials.

The payment method details you register with bp exch — for example, your JazzCash mobile number or an IBFT account number — are stored in encrypted form and used solely for the purpose of processing your PKR transactions and ensuring that withdrawals are sent to your own verified account. These details are never used for any other purpose and are never shared with third parties except the relevant payment processor required to complete the transaction.

All withdrawal requests on bp exch are matched against your verified identity before processing. Withdrawals will only be sent to a payment method confirmed to be held in the registered account holder's name. This protects you from unauthorised withdrawal attempts and protects the integrity of the bp exch payment system.

BP Exch uses cookies and similar tracking technologies to make the platform function correctly, to remember your preferences, and to analyse how players use the site so we can improve it. Here is a breakdown of the types of cookies used on bp exch:

You can manage optional cookie preferences through your bp exch account settings. Disabling optional cookies will not affect your ability to use the platform or process PKR transactions, but may affect the personalisation of your experience.

BP Exch retains personal data for as long as is necessary for the purpose for which it was collected, subject to any legal obligations requiring longer retention. The following retention periods apply:

• Account data (name, contact details, login history): Retained for the duration of your active bp exch account plus 5 years after account closure, as required for anti-money laundering compliance.
• Identity verification documents (CNIC, passport copies): Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Transaction records (deposits, withdrawals, bets in PKR): Retained for 7 years from the date of each transaction, as required by applicable financial record-keeping regulations.
• Support communications: Retained for 3 years from the date of the last communication in a support thread.
• Technical and usage data: Retained for 24 months, after which it is aggregated and anonymised.
• Marketing consent records: Retained for as long as you remain opted in, plus 3 years as evidence of consent after opt-out.

After the applicable retention period, personal data is securely deleted or irreversibly anonymised. If you request account closure on bp exch, your data will not be deleted immediately — the mandatory retention periods described above will continue to apply. You will be informed of this at the time of any closure request.

BP Exch implements a combination of technical and operational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption on all data transmitted between your device and bp exch servers, including during login, payment processing, and account management.
• Encrypted storage for sensitive data categories including identity documents, financial account details, and authentication credentials. Passwords are stored using irreversible cryptographic hashing — bp exch staff cannot read your password.
• Access controls that restrict which bp exch staff members can access which categories of player data, based on role and operational necessity.
• Two-factor authentication available for all player accounts and mandatory for internal staff systems that access player data.
• Regular security audits by independent security professionals reviewing bp exch systems for vulnerabilities and compliance with data protection standards.
• Incident response procedures — if a data breach occurs that could affect Pakistani players, bp exch will notify affected players and relevant authorities within the timeframes required by applicable law.

As a registered bp exch player, you have the following rights regarding your personal data. To exercise any of these rights, contact us at privacy@bpexch-jit.com with your account username and a clear description of your request. We will respond within 30 days.

BP Exch is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Registration on bp exch requires confirmation that you are 18 years of age or older, and age verification procedures are in place to enforce this requirement.

If bp exch discovers that personal data has been collected from a minor — whether through false declaration of age or any other means — all data related to that account will be immediately deleted, the account will be permanently closed, and any deposits made will be returned to the original payment source where technically possible. BP Exch will not retain any data about the minor beyond what is strictly required for the refund process.

If a parent or guardian believes that their child has registered a bp exch account, please contact us immediately at privacy@bpexch-jit.com with details. We will investigate and close the account without delay.

BP Exch may send promotional offers, bonus notifications, and gaming news to players who have opted in to receive marketing communications. These communications may be delivered via email, SMS to your registered Pakistani mobile number, or push notification within the bp exch platform.

Marketing communications from bp exch will always:

• Identify bp exch as the sender clearly.
• Include a clear and functional unsubscribe or opt-out mechanism.
• Never be sent to players who have not opted in or who have previously opted out.
• Comply with responsible gaming obligations — players who have self-excluded or set account limits will not receive promotional communications encouraging additional gaming activity.

To opt out of marketing communications at any time, click the unsubscribe link in any email from bp exch, update your notification preferences in your account settings, or contact support@bpexch-jit.com. Opting out of marketing does not affect your ability to receive important transactional communications about your bp exch account — payment confirmations, security alerts, and responsible gaming notifications are not marketing and cannot be disabled while your account is active.

BP Exch reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered bp exch players by email to their registered address and by displaying a prominent notice on the platform homepage, at least 14 days before the updated policy takes effect.

The "Last Updated" date at the top of this page reflects when the most recent revision was made. We encourage all bp exch players to review this Privacy Policy periodically. Continued use of bp exch after a revised Privacy Policy takes effect constitutes your acknowledgement of the updated version.

If you disagree with any changes to this Privacy Policy, you may close your bp exch account by contacting support@bpexch-jit.com. Your data will be handled in accordance with the policy version that was in effect when the relevant data was collected, subject to mandatory legal retention obligations.

If you have any question, concern, or request relating to this Privacy Policy or bp exch's handling of your personal data, please contact our data privacy team using the following:

• Privacy email: privacy@bpexch-jit.com (responses within 72 hours)
• General support email: support@bpexch-jit.com
• Live Chat: Available 24/7 directly through the bp exch platform

When contacting us about a privacy matter, please include your registered bp exch account username and a clear description of your query or request. This helps us locate the relevant records and respond accurately within the stated timeframe.

BP Exch takes all privacy queries seriously. If you feel your concern has not been adequately addressed after raising it with our support team, you have the right to escalate the matter through the formal complaints process described in our Terms and Conditions.