🔏 bpech Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how bpech ("bpech," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "User," or "Player") who access or use the bpech online casino and sports betting platform available at bpech.app, including all associated pages, mobile interfaces, services, and features (collectively, the "Platform").

By registering an account, accessing the bpech login page, using any feature of the Platform, or otherwise interacting with bpech, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the bpech Platform immediately.

This Policy should be read alongside the bpech Terms and Conditions, which govern the broader relationship between you and bpech. Where this Policy uses terms defined in the Terms and Conditions, those definitions apply here unless otherwise stated.

2. Data Controller

For the purposes of applicable data protection law, bpech acts as the data controller in respect of the personal data it collects and processes through the Platform. All data protection enquiries, access requests, and complaints should be directed to bpech via the contact details provided in Section 16 of this Policy.

3. Personal Data We Collect

bpech collects the following categories of personal data in connection with the operation of the Platform:

3.1 Identity and Registration Data

• Full legal name as it appears on your Pakistani CNIC
• Date of birth
• Gender
• CNIC number and a copy of your CNIC document
• Profile photograph or selfie (collected for KYC facial verification)
• Username and account credentials (password stored only in hashed, non-reversible form)

3.2 Contact Data

• Pakistani mobile phone number (used for account access, OTP-based 2FA, and communications)
• Email address (where provided)
• City and province of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad)

3.3 Financial and Payment Data

• JazzCash and Easypaisa mobile wallet identifiers
• Bank account details (HBL, UBL, Meezan Bank, Bank Alfalah, or other supported PKR banking channels)
• Transaction history including deposit amounts, withdrawal requests, and bet records
• Source of funds documentation (where requested for AML compliance purposes)

3.4 Technical and Usage Data

• IP address and approximate geographic location derived therefrom
• Device type, operating system, and browser information
• Login timestamps and session duration data
• Pages visited, games played, and betting activity on the Platform
• Cookies and similar tracking data (see Section 8)

3.5 Communications Data

• Records of communications with bpech support including chat transcripts, support ticket contents, and email correspondence
• Survey responses and feedback submitted to bpech

4. How We Collect Your Data

bpech collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit, submit a withdrawal, contact support, or otherwise interact with the bpech Platform.
• Automatically — through cookies, server logs, and tracking technologies when you access and navigate the Platform.
• From payment providers — transactional confirmation data from JazzCash, Easypaisa, and banking institutions when you conduct financial transactions on the Platform.
• From identity verification providers — where bpech uses a third-party service to assist with CNIC verification or facial recognition as part of the KYC process.
• From fraud prevention and AML services — where third-party data matching is used to assess account risk or satisfy regulatory obligations.

5. Purposes and Legal Bases for Processing

bpech processes your personal data for the following purposes and on the following legal bases:

• Contract performance: To register your account, process deposits and withdrawals in PKR, provide access to casino games and sports betting markets, and deliver customer support.
• Legal obligation: To conduct KYC and AML checks, verify your age (18+), comply with applicable regulatory requirements, and respond to lawful requests from authorities.
• Legitimate interests: To detect and prevent fraud, protect the security of the Platform, analyse usage patterns for product improvement, and personalise the gaming experience.
• Consent: To send promotional communications, where you have explicitly opted in to receive such communications from bpech.

6. KYC, Identity Verification, and AML Obligations

As an online gaming and betting platform operating with real PKR-denominated financial transactions, bpech is required to maintain Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures. The collection and processing of identity documents — including CNIC copies, selfies, and financial records — is a legal and operational necessity rather than an optional activity.

bpech retains KYC documentation for the period required under applicable law and its own internal compliance policies. Failure to provide required KYC documents will result in account restrictions, including suspension of withdrawal rights, until verification is satisfactorily completed.

Identity data collected for KYC purposes is processed securely and is not shared with third parties except where required for verification processing or where legally mandated. All KYC processing partners engaged by bpech are bound by appropriate data protection agreements.

7. Payment Data and Financial Information

bpech processes payment data — including JazzCash wallet identifiers, Easypaisa account details, and PKR banking information — solely for the purpose of facilitating deposits and withdrawals. bpech does not store full bank account numbers or payment card numbers on its own systems. Financial data processed through third-party payment gateways is subject to the security and privacy standards of those respective payment providers.

All financial transactions on the bpech Platform are conducted in Pakistani Rupees (PKR). Transaction records are retained for the period required under applicable financial and regulatory law.

8. Cookies and Tracking Technologies

bpech uses cookies and similar technologies to operate and improve the Platform. The types of cookies used include:

• Essential cookies: Required for the Platform to function, including session management and bpech login state persistence.
• Analytics cookies: Used to understand how players use the Platform, which pages are visited most frequently, and where technical issues occur — enabling bpech to improve the user experience.
• Preference cookies: Used to remember your settings and choices on the Platform.
• Security cookies: Used to detect and prevent fraudulent logins and suspicious activity.

You may control cookie behaviour through your browser settings. Disabling essential cookies may affect the functionality of the bpech Platform, including the login and session management features.

9. Data Sharing and Third-Party Disclosure

bpech does not sell your personal data to third parties. We may share your personal data with the following categories of recipients strictly as necessary:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah, to process PKR deposits and withdrawals.
• KYC and identity verification providers: To assist with CNIC verification and age confirmation.
• AML and fraud prevention services: To screen transactions and accounts against relevant watchlists.
• Game content providers: Limited technical data necessary for game delivery and RNG audit purposes.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or governmental request.
• Professional advisors: Legal, audit, and accounting advisors bound by confidentiality obligations where necessary for bpech's business operations.

All third parties with whom bpech shares personal data are contractually required to maintain appropriate security standards and to use the data only for the specific purpose for which it was shared.

10. International Data Transfers

In some cases, your personal data may be transferred to or processed in countries outside your country of residence. Where such transfers occur, bpech takes appropriate steps to ensure that your data receives a level of protection equivalent to that provided under applicable data protection laws, including the use of standard contractual clauses or other approved transfer mechanisms.

11. Data Retention

bpech retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and financial record-keeping requirements. As a general guideline:

• Account and identity data is retained for the duration of your bpech account plus a minimum of five years following account closure, to comply with AML record-keeping obligations.
• Transaction records are retained for a minimum of five years from the date of the transaction.
• Communication records are retained for the duration of the account plus two years.
• Cookie and analytics data is retained for up to 24 months from collection.

Where retention is no longer necessary and no legal obligation requires continued storage, bpech securely deletes or anonymises your personal data.

12. Your Data Protection Rights

Subject to applicable law, you may hold the following rights in respect of your personal data held by bpech:

• Right of access: You may request a copy of the personal data bpech holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete data.
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to legal retention obligations.
• Right to restriction of processing: You may request that bpech restrict its processing of your data in certain circumstances.
• Right to data portability: You may request a copy of data you have provided to bpech in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact bpech using the details in Section 16. bpech will respond to verified requests within a reasonable timeframe and in accordance with applicable law.

13. Children's Privacy

The bpech Platform is strictly intended for individuals aged 18 years and above. bpech does not knowingly collect or process personal data from individuals under the age of 18. If bpech becomes aware that data has been collected from a minor, the account will be immediately suspended, the data will be deleted, and any funds will be held pending investigation. If you believe a minor has registered on the bpech Platform, please contact bpech support immediately.

14. Security Measures

bpech implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted to and from the bpech Platform
• Hashed and salted storage of account passwords — bpech staff cannot see your password in plain text
• Two-factor authentication available for all bpech accounts
• Access controls limiting internal data access to authorised personnel on a need-to-know basis
• Regular security assessments and vulnerability monitoring
• Suspicious login detection and automatic session management controls

While bpech takes all reasonable steps to protect your data, no platform can guarantee absolute security. You are also responsible for maintaining the security of your own bpech login credentials.

15. Changes to This Privacy Policy

bpech reserves the right to update or modify this Privacy Policy at any time. Where changes are material, bpech will notify registered players through the contact details held on file. The date of the most recent revision is shown at the top of this Policy. Continued use of the bpech Platform following any update constitutes acceptance of the revised Privacy Policy.

16. Contact and Data Enquiries

For all privacy-related enquiries, data access requests, complaints, or questions regarding this Policy, please contact the bpech data team:

📧 Email (plain text — not a clickable link): [email protected]

bpech support operates 24 hours a day, 7 days a week. Data protection requests will be handled promptly and in accordance with applicable law.