1Introduction
bpech ("we", "us", "the Platform") operates the online betting and gaming service available at bpech.biz. This Privacy Policy applies to all users of the bpech website and any associated mobile interface, and governs the collection, use, storage, sharing, and deletion of personal data provided to us or collected by us during your use of the platform.
bpech is the data controller for personal information processed in connection with your account and activity on the platform. This means bpech determines the purposes and means of processing your data. Where bpech uses third-party service providers to process data on its behalf – for example, payment processors handling your Easypaisa or JazzCash transactions – those providers act as data processors and are bound by data processing agreements with bpech.
This Privacy Policy should be read alongside the bpech Terms and Conditions and Responsible Gaming Policy. Together these three documents set out the complete framework governing your relationship with bpech.
Plain English Promise: bpech has written this policy to be genuinely readable. If you have a question about any section, email support@bpech.biz and a real person from the bpech team will give you a straight answer.
2Data We Collect
2.1 Information You Provide Directly
When you register an account on bpech or interact with our services, you provide us with personal information. The categories of data you directly provide include:
- Registration data: Full name, date of birth, Pakistani mobile number, email address, and a password of your choice.
- Identity verification documents: Copies of your CNIC or passport where the bpech KYC process requires verification.
- Payment information: Mobile wallet identifiers (Easypaisa, JazzCash, NayaPay, SadaPay account numbers), bank account details for IBFT, and masked card details for Visa/Mastercard transactions. Full card numbers are not stored on bpech systems.
- Communications: Any information you provide when contacting bpech support by email or in-platform chat, including the content of those messages.
- Responsible gaming information: Data you provide when setting deposit limits, using self-exclusion tools, or engaging with the bpech responsible gaming features.
2.2 Information Collected Automatically
When you use the bpech platform, certain technical and behavioural data is collected automatically. This includes:
- IP address and approximate geographic location derived from it
- Device type, operating system, browser type and version
- Pages and game sections visited on bpech, time spent, and navigation patterns
- Bet history, game history, deposit and withdrawal records on your bpech account
- Session timestamps and login history
- Referral source if you arrived at bpech from a link on another platform
2.3 Information from Third Parties
bpech may receive additional information about you from third-party sources in specific circumstances. Where identity verification is required, bpech uses KYC service providers who may return additional data points to confirm your identity. Where required by anti-money laundering obligations, bpech may cross-reference information from financial crime screening databases. This data is used only for compliance purposes and is not used for marketing.
| Category | Examples | Source |
|---|
| Identity Data | Name, DOB, CNIC, passport | You, KYC providers |
| Contact Data | Mobile number, email | You |
| Financial Data | Mobile wallet IDs, bank IBFT details | You, payment processors |
| Transaction Data | Deposits, withdrawals, bets, winnings | Platform activity |
| Technical Data | IP, device, browser, session logs | Automatic collection |
| Usage Data | Pages visited, game sessions, bet history | Automatic collection |
| Marketing Data | Communication preferences, opt-in status | You |
3How We Use Your Data
bpech uses personal data for the following specific purposes. We do not use your data for anything that is not listed here without first obtaining your consent.
3.1 Account Management
We use your registration data to create and maintain your bpech account, verify your identity, manage your login credentials, and communicate important account-related information such as security alerts, password resets, and policy updates. This use is necessary to fulfil our contractual obligation to you as a registered bpech player.
3.2 Payment Processing
Transaction data and payment method details are used to process deposits to your bpech account and to execute withdrawal requests to your Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card account. This data is shared with the relevant payment processor for each transaction and is not retained in raw form on bpech servers beyond what is necessary for transaction records.
3.3 Fraud Prevention and Regulatory Compliance
bpech has legal obligations to prevent money laundering, detect fraud, and comply with financial crime regulations. We use identity data, transaction data, IP addresses, and device fingerprints for this purpose. This may involve automated screening and, in some cases, manual review by the bpech compliance team. This processing is carried out on the basis of our legal obligations and legitimate interests in protecting the platform and its users.
3.4 Platform Improvement
Usage data and technical data are used in aggregate and anonymised form to understand how Pakistani players use the bpech platform, which games are most popular, where users encounter friction, and how we can improve the experience. Individual usage profiles are not created for this purpose – we look at patterns across the player base rather than tracking specific individuals for product development.
3.5 Responsible Gaming
bpech uses betting history, deposit patterns, session length data, and account activity to identify players who may be showing signs of problem gambling. This processing is in the legitimate interest of player welfare and forms part of our responsible gaming obligations. If bpech's responsible gaming system flags an account for review, a trained member of the team will assess the situation and may reach out to the player.
3.6 Marketing Communications
Where you have opted in to receive marketing communications from bpech, we use your contact data and betting preferences to send relevant promotional offers, game launch announcements, and bonus notifications. This is entirely optional and can be withdrawn at any time through your bpech account settings. bpech does not send unsolicited marketing communications to players who have not opted in.
4Legal Basis for Processing
bpech processes your personal data on one of the following legal bases depending on the specific purpose:
- Contract performance: Processing necessary to deliver the bpech service to you as a registered account holder – account creation, payment processing, bet settlement, and customer support.
- Legal obligation: Processing required for compliance with anti-money laundering, age verification, fraud prevention, and tax reporting obligations applicable to bpech's operation.
- Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and platform improvement that does not override your fundamental rights and interests.
- Consent: Marketing communications and certain optional analytics features. Consent can be withdrawn at any time without affecting your ability to use the bpech platform.
Note: Withdrawing consent for marketing does not affect the lawfulness of any processing bpech carried out before you withdrew consent. It also does not affect processing carried out on other legal bases such as contract performance or legal obligation.
5Data Sharing and Third Parties
5.1 Who We Share With
bpech shares personal data with third parties only where it is necessary to deliver the bpech service, comply with legal obligations, or protect the platform and its users. The categories of third parties with whom bpech shares data are:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking networks, and card processing providers receive the transaction data necessary to process your deposits and withdrawals.
- Identity verification providers: KYC service providers receive identity document images and biographic data where verification is required.
- Technology infrastructure providers: Cloud hosting, content delivery, and platform security providers that process data on bpech's behalf under strict data processing agreements.
- Regulatory and law enforcement authorities: Where bpech is required by applicable law to disclose data to a regulator, court, or law enforcement body, we will comply with that legal obligation.
- Fraud prevention services: Industry-standard fraud screening services that help identify and block fraudulent account activity.
5.2 What We Do Not Do
bpech does not sell your personal data to any third party. We do not share your personal data with advertisers for targeted advertising purposes. We do not share personal data with any affiliate or partner platform for their own marketing use. When data is shared with service providers, it is the minimum data necessary for the specific service being provided.
If you ever receive a communication claiming to be from bpech and asking for your password, financial details beyond standard deposit/withdrawal forms, or CNIC scans via unofficial channels – treat it as a phishing attempt and contact support@bpech.biz immediately.
6Data Retention Periods
bpech retains personal data for only as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:
- Active account data: Retained for the lifetime of your bpech account and for a period after closure as required by financial regulations and anti-money laundering obligations.
- Transaction records: Financial transaction records including deposits, withdrawals, and bet history are retained for a minimum period as required by applicable financial record-keeping rules.
- KYC documents: Identity verification documents are retained for the regulatory minimum period applicable to financial services providers from the date of last account activity.
- Customer support records: Support communications are retained for a period sufficient to resolve any related disputes or complaints that may arise after the initial contact.
- Marketing consent records: Records of your opt-in or opt-out status are retained for the lifetime of your bpech account to ensure we respect your preferences accurately.
When data is no longer required and no legal obligation exists to retain it, bpech securely deletes or anonymises it. Anonymised data that cannot be linked back to any individual may be retained indefinitely for aggregate analytics purposes.
7How bpech Protects Your Data
bpech implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- Encryption of personal data at rest using industry-standard encryption protocols
- TLS/SSL encryption for all data transmitted between your device and bpech servers
- PCI-DSS compliant payment processing – full card numbers are never stored on bpech infrastructure
- Access controls that restrict bpech employee access to personal data on a need-to-know basis
- Regular security assessments and penetration testing of the bpech platform
- Monitoring systems that detect and alert on unusual account activity
- Two-factor authentication available to all bpech account holders as an additional layer of account security
While bpech takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, bpech will notify those players promptly and take immediate steps to contain the breach and reduce harm.
You play an important role in protecting your own data. Use a strong, unique password for your bpech account. Do not share your login credentials with anyone. Log out of bpech when using shared devices. Enable two-factor authentication in your account settings if you have not already done so.
8Cookies and Tracking Technologies
The bpech platform uses cookies and similar tracking technologies to operate the site correctly, remember your preferences, and understand how the platform is used. Here is a plain breakdown of how bpech uses cookies:
8.1 Strictly Necessary Cookies
These cookies are required for the bpech platform to function. They manage your session, maintain your login state, remember your preferred language and currency, and handle security tokens. You cannot opt out of these cookies without breaking the platform's functionality.
8.2 Performance and Analytics Cookies
bpech uses anonymous analytics to understand how Pakistani players navigate the platform – which sections are popular, where errors occur, and how load times compare across device types. This data is aggregated and does not identify you as an individual. You can opt out of performance cookies through the bpech cookie preferences panel accessible from the site footer.
8.3 Functional Cookies
Functional cookies remember your game preferences, odds display format (decimal versus fractional), notification settings, and other customisations you have made to your bpech experience. Disabling these cookies means your preferences will not be saved between sessions.
8.4 Managing Cookies
Most browsers allow you to refuse or delete cookies through their settings menu. Doing so may affect how the bpech platform functions. Blocking strictly necessary cookies will likely prevent you from logging in or using the platform. bpech does not use third-party advertising cookies or cross-site tracking pixels of any kind.
9Your Data Rights
As a bpech player, you have meaningful rights over your personal data. bpech takes these rights seriously and has processes in place to handle requests within 14 days of receipt. Here is what you can request:
Right to Access
Request a copy of the personal data bpech holds about you, along with information about how it is used and with whom it is shared.
Right to Correction
If any personal data bpech holds about you is inaccurate or incomplete, you have the right to have it corrected. Some corrections can be made directly from your bpech account settings.
Right to Deletion
Request deletion of your personal data where it is no longer necessary for the purpose collected, where you withdraw consent, or where it has been processed unlawfully. Legal retention obligations may limit the scope of deletion in some cases.
Right to Restriction
Ask bpech to restrict processing of your data while a dispute or concern about accuracy or lawfulness is being resolved, rather than deleting it immediately.
Right to Portability
Receive a copy of personal data you have provided to bpech in a structured, machine-readable format that you can transfer to another service provider if you choose.
Right to Object
Object to processing of your personal data that is based on bpech's legitimate interests, including responsible gaming profiling or aggregated analytics, unless bpech can demonstrate compelling legitimate grounds.
To exercise any of these rights, email support@bpech.biz with the subject line "Data Rights Request" and your registered bpech username. Include a description of what you are requesting. bpech will acknowledge your request within 48 hours and complete it within 14 days, or notify you if more time is needed for complex requests.
10Children and Minors
The bpech platform is strictly for adults aged 18 and above. bpech does not knowingly collect personal data from anyone under 18 years of age. Registration on bpech requires confirmation that the registrant is at least 18, and age verification may be required at any point during the account lifecycle.
If bpech becomes aware that personal data has been collected from a person under 18, that account will be suspended immediately, the personal data will be deleted, and any associated balance will be handled in accordance with the bpech Terms and Conditions applicable to underage account closures.
If you are a parent or guardian and believe your child has created a bpech account, please contact support@bpech.biz immediately with as much detail as you can provide. bpech will investigate and act promptly. bpech also recommends using parental control software on shared devices to prevent minors from accessing online betting platforms including bpech.
18+ Only: Creating a bpech account as a minor or allowing a minor to use your account is a serious breach of bpech's Terms and Conditions and may result in reporting to relevant authorities.
11Changes to This Privacy Policy
bpech will update this Privacy Policy from time to time to reflect changes in our data practices, changes to the services we offer, or changes in applicable legal requirements. When material changes are made to this policy, bpech will notify registered players via email to the address associated with your account and will update the "Last Updated" date at the top of this page.
Minor clarifications or additions that do not change how your data is fundamentally used may be made without direct notification, though the updated date on the policy page will always reflect the most recent revision. bpech recommends bookmarking this page and checking it periodically, particularly before making significant deposits or engaging with new features on the platform.
Your continued use of the bpech platform after a change to this Privacy Policy becomes effective constitutes your acceptance of the revised policy. If you do not agree with a revised policy, you may request account closure by contacting support@bpech.biz.
Privacy FAQ – Quick Answers
No. bpech does not sell, rent, or trade your personal data to any third party for their own commercial use. Data is shared only with service providers who help bpech deliver the platform (payment processors, KYC providers, hosting infrastructure) and only under strict data processing agreements.
Yes. Email support@bpech.biz with the subject "Data Access Request" and your registered username. bpech will provide a copy of the personal data we hold about you within 14 days. The response will include a summary of your account data, transaction records, and any identity documents we hold on file.
Log into your bpech account, go to account settings, and update your communication preferences to opt out of marketing. You can also use the unsubscribe link in any marketing email you receive from bpech. Opting out of marketing does not affect your ability to use any part of the bpech platform.
When you close your bpech account, we retain certain data for the period required by applicable financial regulations and anti-money laundering obligations. This includes transaction records and identity verification documents. Data that is not required for legal compliance is deleted or anonymised within a reasonable period after account closure.
Yes. bpech processes payments through PCI-DSS compliant channels. Full card numbers are never stored on bpech's servers. Mobile wallet identifiers (Easypaisa, JazzCash account numbers) are stored in encrypted form and used only to process transactions you initiate. Payment data is never shared with third parties beyond the processing of your requested transactions.
