bpxeah Privacy
Policy & Data Protection

This Privacy Policy is issued by bpxeah ("the Company," "we," "us," "our"), the operator of the online gaming and sports betting platform accessible at bpxeah.net. bpxeah is a licensed international online gaming operator committed to protecting the personal data of all users who access or register on our platform.

For the purposes of data protection law, bpxeah acts as the data controller in respect of all personal data collected directly from users through the bpxeah platform, including Pakistani users accessing the site from Karachi, Lahore, Islamabad, Faisalabad, and elsewhere.

bpxeah collects personal data in the following categories, depending on how you interact with the platform:

We do not collect sensitive personal data categories (such as racial origin, health data, or religious beliefs) and do not request such information at any stage of the account lifecycle.

bpxeah uses the personal data we collect for clearly defined purposes only. We do not use your data for purposes incompatible with those listed below without first obtaining your explicit consent:

• Account Management: To create, maintain, and administer your bpxeah player account, including updating your profile, managing preferences, and processing password resets.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with our anti-money laundering obligations and responsible gaming commitments. This includes cross-referencing your submitted documents against identity databases.
• Payment Processing: To process deposits and withdrawals via your chosen payment method, including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, USDT, and Bitcoin. Financial data is shared with our licensed payment processors solely for transaction fulfilment.
• Gaming and Betting Services: To provide access to casino games, live betting markets, cricket and PSL odds, and other platform features; to record game outcomes and settle bets accurately.
• Responsible Gaming Monitoring: To monitor your gambling activity for signs of problem gambling, enforce deposit and betting limits you have set, and apply self-exclusion restrictions when requested.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, money laundering, and other prohibited activities. This includes automated analysis of betting patterns and transaction sequences.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance through live chat and email.
• Legal Compliance: To fulfil our obligations under applicable anti-money laundering regulations, licensing conditions, tax reporting requirements, and any other applicable laws.
• Marketing Communications (with consent): To send you promotional offers, bonus notifications, and news about bpxeah features — but only if you have opted in to receive such communications. You may withdraw your consent at any time through your account settings.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the performance, functionality, and user experience of the bpxeah platform.

bpxeah processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Performance of a Contract: Processing necessary to deliver the bpxeah service you have signed up for, including account management, game delivery, and payment processing.
• Legal Obligation: Processing required for compliance with AML regulations, KYC requirements, licensing conditions, and applicable financial laws. This processing cannot be opted out of, as it is legally mandated.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gaming monitoring, and improving our service — where these interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and certain non-essential cookies, where we have obtained your explicit prior consent. You may withdraw consent at any time.

bpxeah does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. We share your data only in the following limited, controlled circumstances:

• Payment Processors: Licensed payment gateways handling JazzCash, EasyPaisa, banking transfers, and cryptocurrency transactions receive only the data necessary to process your specific transaction. These partners operate under binding data processing agreements.
• Identity Verification Providers: Third-party KYC and identity verification services used to validate your documents and confirm your age. These providers are contractually prohibited from retaining or using your data beyond the verification purpose.
• Game Software Providers: Casino game providers whose titles are offered on the bpxeah platform may receive anonymised session data necessary to deliver the game correctly. No personally identifiable information is shared with game providers.
• Regulatory and Law Enforcement Authorities: bpxeah may be legally required to disclose personal data to regulatory bodies, licensing authorities, financial intelligence units, or law enforcement agencies in connection with AML investigations, licence audits, or court orders.
• Professional Advisors: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations and access data only as necessary for their professional engagement.
• Business Transfers: In the event of a merger, acquisition, or sale of bpxeah's business or assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

bpxeah uses cookies and similar tracking technologies on our platform. Cookies are small text files placed on your device that help us operate the platform effectively, remember your preferences, and analyse how the site is used.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the basic functioning of the platform — for example, maintaining your login session, enabling secure payment pages, and enforcing your self-exclusion settings. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language, preferred payment method, and display settings, so you do not have to re-enter them on each visit.
• Analytics Cookies: Collect anonymised data about how users navigate the bpxeah platform, which pages are visited most frequently, and where technical errors occur. This data is used solely for platform improvement. We use privacy-respecting analytics tools that do not share data with advertising networks.
• Security Cookies: Used for fraud detection, bot identification, and verifying that login attempts originate from legitimate users rather than automated systems.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use certain bpxeah features. bpxeah does not use third-party advertising or tracking cookies.

bpxeah retains your personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. Our retention periods are as follows:

• Active Account Data: Retained throughout the life of your account and for a period of five (5) years following permanent account closure, in line with AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, as required by anti-money laundering legislation.
• Transaction Records: All deposit, withdrawal, and betting records are retained for a minimum of five (5) years for regulatory and audit purposes.
• Customer Support Records: Chat transcripts and email correspondence are retained for two (2) years from the date of the interaction.
• Marketing Data: If you have opted in to marketing communications, your marketing preferences are retained until you opt out. Following opt-out, records of your consent and withdrawal are retained for three (3) years for accountability purposes.
• Technical / Log Data: Server logs and access records are retained for twelve (12) months for security and fraud prevention purposes.

At the end of the applicable retention period, your personal data is securely deleted or irreversibly anonymised. Anonymised aggregated data (which cannot be linked back to any individual) may be retained indefinitely for statistical analysis.

Subject to applicable legal limitations, you have the following rights in relation to the personal data bpxeah holds about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request":

bpxeah implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:

• TLS 1.3 encryption for all data in transit between your browser and our servers.
• AES-256 encryption for sensitive data stored at rest in our databases, including KYC documents and financial identifiers.
• Multi-factor authentication (MFA) options for player accounts to prevent unauthorised account access.
• Role-based access controls (RBAC) restricting internal employee access to personal data on a strict need-to-know basis.
• Automated intrusion detection systems (IDS) monitoring server infrastructure for suspicious activity patterns.
• Regular third-party penetration testing and security audits of the bpxeah platform infrastructure.
• Secure, geographically redundant data centre infrastructure with physical access controls.
• Regular staff training on data protection obligations and security protocols.

bpxeah operates as an international platform and your personal data may be processed or stored on servers located outside Pakistan. When your data is transferred outside your country of residence, bpxeah ensures that appropriate safeguards are in place to protect it, including:

• Transfers to service providers in jurisdictions with data protection laws considered adequate for international transfers.
• Standard contractual clauses (SCCs) or equivalent data transfer mechanisms where adequate adequacy decisions are not available.
• Binding corporate rules or equivalent instruments where data is transferred within a corporate group.

By using the bpxeah platform, you acknowledge that your personal data may be transferred to, and processed in, jurisdictions other than Pakistan. bpxeah will always ensure that such transfers are conducted in accordance with applicable data protection principles and that your data receives equivalent levels of protection regardless of where it is processed.

The bpxeah platform is strictly intended for adults aged 21 years and above. bpxeah does not knowingly collect, store, or process the personal data of any person under the age of 21 in connection with gaming or betting services.

If bpxeah discovers or has reason to believe that a registered account belongs to a person under 21 years of age, the account will be immediately suspended and all personal data associated with it will be reviewed. Following investigation, the account will be permanently closed, all winnings will be voided, deposited funds will be returned to the original payment source, and all personal data will be securely deleted, except where retention is legally required for AML or regulatory reporting purposes.

bpxeah reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The "Last Updated" date at the top of this document will be revised accordingly whenever material changes are made.

Where changes are material — meaning they significantly affect how we process your personal data or your rights in relation to it — bpxeah will notify registered users via the email address on their account prior to the change taking effect. For minor or administrative amendments, the updated policy will be published on this page without individual notification.

Your continued use of the bpxeah platform following the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should stop using the platform and request account closure.

bpxeah takes its data protection obligations seriously. If you have any questions, concerns, or complaints about how we handle your personal data, or if you wish to exercise any of your data rights, please contact us through any of the following channels:

bpxeah has appointed an internal Data Protection Officer (DPO) responsible for overseeing all data protection matters. You may contact the DPO directly regarding any privacy concern by addressing your email to "Data Protection Officer" at [email protected].