Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how bpecch ("bpecch", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of users ("Player", "User", "you") who access or use the bpecch online gaming platform, available at bpecch.com ("Platform").

By registering an account on the bpecch Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not use the bpecch Platform.

This Policy applies to all services provided by bpecch, including live casino, sports betting, slots, Jackpot Bingo, account management, promotions, and customer support. It covers all personal data collected whether through the bpecch website, mobile platform, or direct communications with our support team.

Data Controller

For the purposes of applicable data protection law, bpecch is the data controller in respect of the personal data you provide when registering and using the Platform. As data controller, bpecch determines the purposes for which and the means by which your personal data is processed.

bpecch operates under an internationally recognised gaming licence. The data protection obligations applicable to bpecch are set in part by the regulatory requirements of that licensing authority. All data processing activities conducted by bpecch are consistent with those obligations.

For any data protection enquiries, you may contact bpecch's support team at the contact details provided in Section 16 of this Policy. All data subject requests will be handled in accordance with applicable regulatory timelines.

What We Collect

bpecch collects personal data in the following categories. The specific data points collected depend on the stage of your interaction with the Platform:

bpecch does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes. Where CNIC-based verification involves a photograph, that image is used solely for identity confirmation and is not used for facial recognition or biometric profiling.

How We Collect Your Data

bpecch collects personal data through the following channels:

• Direct submission: Information you provide when completing the bpecch registration form, updating your account profile, submitting KYC documents, or contacting our support team.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies, server logs, and session tracking technologies described in Section 11.
• Payment processors: Transaction confirmation data and payment method identifiers provided by third-party payment processors such as JazzCash, EasyPaisa, and HBL when you make a deposit or withdrawal.
• Identity verification services: Where bpecch uses a third-party KYC verification provider, that provider may return identity confirmation data (such as a verification status or risk score) to bpecch following a document check.
• Fraud and compliance databases: bpecch may receive data from third-party fraud prevention, AML screening, or responsible gaming self-exclusion databases as part of its regulatory compliance obligations.

How We Use Your Data

bpecch uses your personal data for the following purposes:

• Account creation and management: To register your bpecch account, verify your identity, maintain your account profile, and process your bpecch login requests.
• Service delivery: To provide access to all bpecch platform features including live casino, sports betting, slots, and Jackpot Bingo, and to personalise your experience where you have consented to personalisation.
• Payment processing: To process deposits and withdrawals via your chosen payment methods — JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, or USDT TRC20 — and to maintain an accurate transaction record.
• KYC and regulatory compliance: To verify your age (minimum 21 years), identity, and the source of your funds, as required by our gaming licence and applicable anti-money laundering regulations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, multi-accounting, and other prohibited conduct as defined in our Terms and Conditions.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to apply responsible gaming tools you have requested (such as deposit limits or self-exclusion), and to respond to requests from self-exclusion scheme operators.
• Customer support: To respond to your queries, complaints, and requests through live chat and email support in English and Urdu.
• Marketing and promotions: To send you promotional offers, bonus announcements, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time.
• Legal obligations: To comply with requirements imposed by our gaming licence, applicable law, court orders, or regulatory authorities.
• Platform improvement: To analyse aggregated and anonymised usage data to improve Platform performance, game selection, and user experience.

Legal Basis for Processing

bpecch processes your personal data on the following legal bases, depending on the purpose for which data is used:

• Contractual necessity: Processing required to perform the contract between you and bpecch — including account registration, service delivery, and payment processing — is carried out on the basis that it is necessary to fulfil our agreement with you.
• Legal obligation: Processing required to comply with our gaming licence conditions, anti-money laundering obligations, age verification requirements, and any applicable regulatory directives is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of bpecch's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and, where applicable, certain cookie categories is carried out on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time.

Sharing Your Data

bpecch does not sell your personal data to third parties. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment service providers: We share transaction data with payment processors — including JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, and USDT TRC20 network providers — as required to process your deposits and withdrawals.
• Identity verification providers: We share identity document data with third-party KYC verification services engaged by bpecch to perform age and identity checks as required under our gaming licence.
• Fraud prevention and AML services: We may share data with specialist fraud prevention and anti-money laundering screening providers to fulfil our regulatory obligations.
• Gaming regulatory authorities: We are obligated under our gaming licence to share certain player data with our licensing authority upon request. This may include account activity, transaction records, and identity verification outcomes.
• Responsible gaming schemes: Where you register for a self-exclusion programme, your data may be shared with the relevant scheme operator to give effect to your self-exclusion across participating platforms.
• Legal and law enforcement authorities: We may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or where we believe disclosure is necessary to protect the rights, property, or safety of bpecch, our players, or the public.
• Corporate successors: In the event of a merger, acquisition, or sale of all or part of bpecch's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and any changes to this Policy that result from it.

All third-party service providers engaged by bpecch are required to process your data only in accordance with bpecch's instructions and applicable data protection obligations. bpecch does not permit third-party providers to use your data for their own independent purposes.

International Transfers

As an internationally licensed gaming operator, bpecch may process and store your personal data on servers located outside of Pakistan. Where your data is transferred internationally, bpecch takes appropriate steps to ensure that it receives a level of protection consistent with the standards described in this Policy.

Such steps may include the use of contractual protections with the receiving party, confirmation that the destination jurisdiction maintains adequate data protection standards, or other appropriate safeguards as determined by the applicable regulatory framework under our gaming licence.

Data Retention

bpecch retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including the satisfaction of any legal, regulatory, accounting, or reporting requirements.

The following general retention guidelines apply:

• Active account data: Retained for the lifetime of your bpecch account and for a minimum period of five (5) years following account closure, as required by our gaming licence for audit and regulatory compliance purposes.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulations applicable under our gaming licence.
• Transaction records: Retained for a minimum of five (5) years following each transaction, for financial record-keeping and regulatory audit purposes.
• Customer support records: Retained for three (3) years following resolution of the relevant support interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing data: Retained until you withdraw consent for marketing communications, after which marketing preference records are updated accordingly.
• Technical and usage logs: Retained for up to twelve (12) months for fraud detection and platform security purposes, after which they are aggregated or deleted.

Where personal data is no longer required for any legitimate purpose, bpecch will securely delete or anonymise it in accordance with our data destruction procedures.

Data Security

bpecch implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS encryption for all data transmitted between your device and bpecch servers.
• Encryption of sensitive data at rest, including identity documents and financial information.
• Access controls limiting bpecch staff access to personal data on a strict need-to-know basis.
• Regular security audits and vulnerability assessments of the Platform.
• Two-factor authentication options available to all bpecch account holders.
• Monitoring systems designed to detect and respond to security incidents in real time.

While bpecch takes its security obligations seriously, no digital platform can guarantee absolute security. You are responsible for maintaining the security of your own bpecch login credentials. If you believe your account has been compromised, contact our 24/7 support team immediately via live chat from within your account dashboard.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, bpecch will notify affected players without undue delay, in accordance with the notification requirements of our gaming licence and applicable law.

Cookies & Tracking Technologies

bpecch uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and support fraud prevention measures. A cookie is a small text file placed on your device when you visit the bpecch Platform.

bpecch uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your bpecch account during a session. These cannot be disabled without affecting Platform functionality.
• Performance and analytics cookies: Used to collect anonymised information about how players use the Platform — such as which pages are visited most frequently and how long sessions last — to help bpecch improve the user experience.
• Fraud prevention cookies: Used to detect and prevent fraudulent activity, including multi-accounting and suspicious session patterns.
• Preference cookies: Used to remember your settings and preferences, such as language and display preferences.
• Marketing cookies: Used, where you have consented, to deliver relevant promotional content and to track the effectiveness of bpecch's marketing activities. These require your explicit opt-in consent.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to use certain features of the bpecch Platform. For marketing cookies, you may withdraw consent at any time through your account settings or by contacting support.

Your Rights

Subject to applicable law and the regulatory requirements of bpecch's gaming licence, you have the following rights in relation to your personal data held by bpecch:

• Right of access: You have the right to request a copy of the personal data bpecch holds about you, along with information about how it is used.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data. Many account details can be updated directly from within your bpecch account settings after completing your bpecch login.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to overriding legal and regulatory obligations — for example, bpecch is required to retain transaction records for a minimum period under its gaming licence and cannot delete these on request during the mandatory retention period.
• Right to restriction: You may request that bpecch restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to data portability: Where processing is based on your consent or on a contractual basis, you may request that bpecch provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of bpecch's legitimate interests. bpecch will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact bpecch's support team as described in Section 16. bpecch will respond to all valid data subject requests within the timeframe required by applicable regulations. In some cases, we may need to verify your identity before processing a request.

Marketing Communications

With your consent, bpecch may send you promotional communications about bonuses, new games, PSL betting markets, seasonal offers, and other bpecch platform updates. These may be delivered via SMS to your registered mobile number or email to your registered email address.

You may opt out of marketing communications at any time by:

• Updating your communication preferences within your bpecch account settings;
• Using the unsubscribe link included in any marketing email; or
• Contacting bpecch support via live chat and requesting removal from marketing lists.

Opting out of marketing communications does not affect your ability to use the bpecch Platform or receive transactional communications such as deposit confirmations, withdrawal notifications, and security alerts. Those communications are sent on the basis of contractual necessity and cannot be opted out of while your account remains active.

Minors

The bpecch Platform is strictly intended for individuals aged 21 and above. bpecch does not knowingly collect personal data from persons under the age of 21. Age verification is conducted as a mandatory part of the KYC process, and accounts found to belong to underage individuals are closed immediately.

If you believe that a minor has registered on the bpecch Platform or that bpecch has inadvertently collected personal data from a person under 21, please contact our support team immediately. Upon confirmation, bpecch will delete any personal data relating to the underage individual and close the associated account in accordance with our Terms and Conditions.

Changes to This Policy

bpecch reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform functionality. When material changes are made to this Policy, bpecch will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of the bpecch Platform following notification of changes constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you should cease using the Platform and may close your account.

We encourage you to review this Policy periodically to stay informed about how bpecch protects your personal data.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data bpecch holds about you, please contact our support team through the following channels:

• Live Chat: Available 24/7 from within your bpecch account dashboard — the fastest way to reach our support team.
• Email: [email protected] — for formal data subject requests and privacy-related enquiries.
• Support Languages: English and Urdu.

bpecch aims to acknowledge all privacy-related enquiries within two business days and to resolve them within the timeframe required by applicable regulations. For formal data subject access requests, bpecch will confirm receipt and provide a timeline for response upon acknowledgement.