bxpech Privacy Policy — Pakistan Player Data Protection

bxpech ("we", "us", "the Platform") operates the online gaming and betting platform available at bxpech.app. For the purposes of applicable data protection law, bxpech is the data controller in respect of the personal data of registered players and site visitors.

bxpech is an online gaming platform designed for adult users in Pakistan. All transactions on bxpech are conducted in Pakistani Rupees (PKR) through local payment channels including Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT and Visa/Mastercard cards issued by Pakistani banks.

If you have any questions about this Privacy Policy or about how bxpech handles your personal data, you can contact our Data Protection contact at support@bxpech.app. We will respond to all privacy-related enquiries within 14 days.

bxpech collects personal data in three main ways: data you provide directly when registering or using the platform, data generated automatically through your use of the platform, and data received from third-party providers such as payment processors and identity verification services. Here is a breakdown:

bxpech uses the personal data it collects only for specific, legitimate purposes related to operating the platform and serving our Pakistani members. The primary purposes are:

• Account creation and management: To register your bxpech account, verify your identity, and maintain your account throughout your membership.
• Processing PKR transactions: To process deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT and bank cards. Your payment data is used solely to facilitate these transactions.
• Delivering gaming services: To provide access to bxpech games including slots, poker, Aviator, Ludo, casino games and sports betting, and to record game outcomes and maintain your wallet balance.
• Identity verification and compliance: To verify that you meet bxpech's age (18+) and eligibility requirements, and to comply with anti-money laundering (AML) obligations.
• Fraud prevention and platform security: To detect, investigate and prevent fraudulent activity, collusion, bonus abuse and other prohibited conduct on bxpech.
• Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling behaviour and to apply responsible gaming tools where appropriate.
• Customer support: To respond to your support requests, complaints and account queries.
• Marketing communications: To send you promotional offers and updates about bxpech — only where you have opted in and only to your registered mobile number or email. You can opt out of marketing communications at any time.
• Platform improvement: To analyse usage patterns, improve the bxpech interface and game library, and fix technical issues.

bxpech does not use your personal data for any purpose beyond those listed above without first obtaining your explicit consent or as required by applicable law.

bxpech processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to fulfil the contract between you and bxpech — including account management, game provision, deposit processing and withdrawal payments. Without this processing, bxpech cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, age verification requirements, and financial reporting obligations.
• Legitimate interests: Processing carried out in pursuit of bxpech's legitimate business interests where these do not override your rights — including fraud detection, platform security monitoring, responsible gaming analysis and improving our services.
• Consent: Where required, bxpech will seek your explicit consent before processing data for specific purposes — particularly for optional marketing communications. You may withdraw consent at any time by contacting support@bxpech.app.

bxpech does not sell your personal data. We share it only where strictly necessary, with the following categories of recipients:

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT processors, and Visa/Mastercard networks — only to the extent required to process your deposits and withdrawals in PKR.
• Identity verification providers: Third-party Know Your Customer (KYC) services used to verify your identity and age when required. These providers process your data solely for verification purposes under strict data processing agreements with bxpech.
• IT and hosting providers: Companies that provide technical infrastructure for the bxpech platform. These providers act as data processors under our instruction and are contractually prohibited from using your data for their own purposes.
• Fraud prevention services: Specialised services used to detect and prevent fraud, money laundering and prohibited conduct on bxpech.
• Legal and regulatory authorities: Where bxpech is required by applicable law, court order or regulatory requirement to disclose data, we will comply. We will notify you of such disclosure where we are legally permitted to do so.

bxpech processes all financial transactions in Pakistani Rupees (PKR) through trusted local payment providers. The way payment data is handled depends on the method used:

• Easypaisa and JazzCash: When you initiate a deposit or withdrawal via these mobile wallets, bxpech passes only the necessary transaction details (amount in PKR, your registered mobile number) to the respective provider. bxpech does not store your Easypaisa or JazzCash PIN or full account credentials.
• NayaPay and SadaPay: Similar to the above — only the data required to initiate and confirm the PKR transaction is exchanged with the payment provider.
• Bank IBFT: bxpech requires your bank account title, account number and bank name to process IBFT withdrawals. This data is used solely for the withdrawal transaction and is not stored beyond the period required for transaction records.
• Visa/Mastercard: Card payments are processed through a PCI-DSS compliant payment gateway. bxpech does not store full card numbers — only the last four digits and card type are retained in your transaction history for reference.

Transaction records — amounts, dates, payment method type — are retained as part of your bxpech account history for the period described in Section 8. These records are used for dispute resolution, regulatory compliance and to provide you with an accurate account statement.

bxpech uses cookies and similar technologies on its website to provide a functional, secure and improved experience. Here is a breakdown of the types of cookies used:

Most web browsers allow you to control cookies through browser settings. Disabling essential cookies will affect your ability to log in and use bxpech. Disabling optional cookies will not affect your core gaming experience.

bxpech retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are:

• Account data (name, contact, identity): Retained for the duration of your active account plus 5 years after account closure, to comply with AML and financial record-keeping requirements.
• Transaction records: Retained for 7 years from the date of each transaction, in line with standard financial record-keeping practice.
• Gaming activity logs: Retained for 2 years from the date of activity. Used for dispute resolution and responsible gaming monitoring.
• KYC documents (CNIC, selfie): Retained for the duration of your bxpech account plus 5 years after closure, or longer if required by regulatory obligation.
• Support correspondence: Retained for 2 years from the date of the last interaction.
• Marketing consent records: Retained for the period during which consent is active, plus 2 years after withdrawal of consent.

When data is no longer required and there is no legal basis for continued retention, bxpech will securely delete or anonymise it. Anonymised, aggregated data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

Protecting the personal and financial data of our Pakistani members is a core operational priority for bxpech. We implement technical and organisational security measures proportionate to the nature and sensitivity of the data we hold. These include:

• Encryption in transit: All data transmitted between your browser or mobile device and bxpech is encrypted using TLS (Transport Layer Security). The padlock icon in your browser confirms this is active.
• Encryption at rest: Sensitive personal and financial data stored on bxpech servers is encrypted at rest. This means that even if storage media were physically compromised, data would remain unreadable without the encryption keys.
• Access controls: Access to personal data within bxpech's systems is restricted on a need-to-know basis. Staff with legitimate operational requirements can access specific categories of data; general access is not permitted.
• Fraud monitoring: Automated systems monitor bxpech accounts and transactions for anomalous activity that could indicate unauthorised access or fraud. Suspicious activity triggers review and, where necessary, temporary account holds.
• Password security: bxpech stores account passwords in hashed form — we do not hold plaintext passwords and cannot retrieve them. This is why our support team will never ask for your password.

No platform can guarantee absolute security, but bxpech takes all reasonable steps to protect your data. In the unlikely event of a data breach that poses a risk to your rights and freedoms, bxpech will notify affected users promptly and take immediate remediation action.

As a bxpech user, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@bxpech.app with the subject line "Privacy Rights Request".

bxpech will respond to all verified privacy rights requests within 30 days. Where a request is complex or numerous, we may extend this by a further 30 days and will inform you of the extension. We may need to verify your identity before fulfilling a request to ensure we are disclosing data to the correct person.

bxpech is strictly for adults aged 18 and over. We do not knowingly collect, process or retain personal data from anyone under the age of 18. The registration process on bxpech requires confirmation of age, and bxpech reserves the right to conduct age verification checks at any time.

If bxpech discovers that a registered account belongs to a person under 18, the account will be immediately and permanently closed, any balance will be forfeited, and any deposited funds will be returned to the original payment method after verification. All associated personal data will be deleted.

If you are a parent or guardian and believe your child has registered on bxpech, please contact us immediately at support@bxpech.app so we can take appropriate action.

bxpech may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, we will:

• Update the "Last updated" date at the top of this page.
• Where the change significantly affects how we process your personal data, notify registered users by email or in-platform notification at least 14 days before the change takes effect.

Your continued use of bxpech after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically so that you remain informed about how bxpech handles your data.

If you disagree with a material change to this Privacy Policy, you may close your bxpech account before the change takes effect by contacting support@bxpech.app.

If you have any questions, concerns or requests relating to this Privacy Policy or the way bxpech handles your personal data, please get in touch:

• Email: support@bxpech.app (subject: "Privacy Policy Query" or "Privacy Rights Request")
• Live chat: Available 24/7 within your logged-in bxpech account dashboard

We aim to acknowledge all privacy-related communications within 48 hours and to resolve them fully within 30 days. Where a request requires additional time, we will keep you informed of progress.