Privacy Policy —
How bpech Handles Your Data

Introduction

This Privacy Policy ("Policy") sets out the practices of bpech ("bpech", "we", "us" or "our") with respect to the collection, use, storage, sharing and protection of personal data obtained from individuals ("you", "the User") who access or use the bpech online gaming and sports betting platform accessible at https://bpech.cam ("the Platform").

bpech is committed to processing personal data responsibly and in compliance with applicable data protection legislation in the Operator's licensing jurisdiction. This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform as a whole.

By registering an account with bpech, using the Platform or providing personal information through any part of the site, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform immediately.

Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, contact details, identity documents, financial data and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, alteration or erasure.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, the Operator of the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under a written agreement.
• "KYC" means Know Your Customer — identity and age verification procedures required by anti-money laundering (AML) and licensing obligations.
• "CNIC" means Computerised National Identity Card issued by NADRA, Pakistan, as a recognised government-issued identity document.
• "Sensitive Personal Data" means categories of data requiring heightened protection, including identity document images, financial details and biometric liveness-check data.
• "Cookies" means small text files placed on your device by the Platform to support functionality, analytics and user preference storage.

Data Controller

The Data Controller responsible for your Personal Data collected through the bpech Platform is the Operator of the Platform, operating under an international gaming licence in its licensing jurisdiction. Questions regarding the identity of the Data Controller or its registered address may be directed to our support team at the contact details provided in Section 16 of this Policy.

Where third-party service providers process Personal Data on our behalf — such as identity verification providers, payment processors and fraud detection services — they act as Data Processors under written agreements that require them to maintain appropriate technical and organisational measures to protect your data.

Data We Collect

bpech collects Personal Data through the following channels: account registration, KYC verification, customer support interactions, deposit and withdrawal transactions, and your ongoing use of the Platform. The categories of data we collect are set out below:

Legal Basis for Processing

bpech processes your Personal Data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform our contract with you — including account registration, enabling deposits and withdrawals, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable AML, KYC, licensing, fraud prevention and regulatory obligations imposed on the Operator by its licensing jurisdiction.
• Legitimate Interests: Processing conducted for purposes such as platform security, fraud detection, responsible gambling monitoring and service improvement, where such interests are not overridden by your fundamental rights.
• Consent: Where you have expressly provided consent — for example, in relation to optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

How We Use Your Personal Data

bpech uses the Personal Data we collect for the following specific purposes:

6.1 Account Management & Service Delivery

To create and maintain your Account, verify your identity and age, process deposits and withdrawals, record your gaming activity, and provide access to the gaming products and sports betting markets available on the Platform.

6.2 Legal Compliance & Fraud Prevention

To fulfil obligations under AML regulations, to conduct KYC and enhanced due diligence checks, to detect and prevent fraudulent activity, money laundering, identity theft, bonus abuse and other prohibited conduct, and to comply with information requests from competent regulatory or law enforcement authorities where required by applicable law.

6.3 Responsible Gambling

To monitor account activity for signs of problem gambling behaviour, to administer player protection tools such as deposit limits, loss limits, session controls and self-exclusion, and to ensure that Account holders continue to meet eligibility requirements including age verification standards.

6.4 Customer Support

To respond to queries, complaints and support requests submitted via live chat or email, to maintain records of support interactions for quality assurance purposes, and to resolve disputes in accordance with our Terms & Conditions.

6.5 Platform Security & Improvement

To maintain the security and integrity of the Platform, to detect and respond to technical faults, to analyse usage patterns for the purpose of improving user experience, and to conduct internal testing and quality assurance activities.

6.6 Marketing Communications (Consent-Based)

Where you have given explicit consent, to send you promotional offers, bonus notifications and platform updates by email or in-platform notification. You may unsubscribe from marketing communications at any time. Withdrawal of marketing consent does not affect the processing of data required for contract performance or legal compliance.

Data Sharing & Disclosure

bpech does not sell, rent or trade your Personal Data to unaffiliated third parties for their own marketing or commercial purposes. We may share your Personal Data only in the limited circumstances described below:

• KYC & Identity Verification Providers: Third-party identity verification services engaged to assist with age verification, document authentication and liveness checks as part of the KYC process.
• Payment Processors: Financial service intermediaries engaged to process deposit and withdrawal transactions. These providers receive only the minimum data necessary to execute the transaction.
• Fraud & AML Detection Services: Specialist providers engaged to monitor transaction patterns for signs of money laundering, fraud or prohibited conduct, as required by the Operator's licensing obligations.
• IT Infrastructure & Cloud Services: Hosting, cloud storage and cybersecurity providers operating under data processing agreements that require appropriate technical security standards.
• Regulatory & Law Enforcement Authorities: Where compelled by applicable law, court order or regulatory requirement to disclose User data to competent authorities. bpech will notify you of such disclosure where it is legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition or sale of the Operator's business or assets, User data may be transferred to the acquiring entity subject to equivalent privacy protections.

International Data Transfers

As an internationally operated platform, bpech may transfer your Personal Data to, and process it in, countries outside of Pakistan or the European Economic Area, including the Operator's licensing jurisdiction and the jurisdictions in which our service providers are established. Such transfers occur where necessary for the purposes described in this Policy.

Where Personal Data is transferred internationally, bpech ensures that appropriate safeguards are in place — including standard contractual clauses, adequacy decisions or equivalent mechanisms — to protect your data to a standard comparable to that required under applicable data protection law in the Operator's jurisdiction.

Data Retention

bpech retains Personal Data for as long as is necessary to fulfil the purposes described in this Policy, and for as long as required to comply with applicable legal, regulatory and licensing obligations. The specific retention periods that apply include:

• Account Data: Retained for the duration of your active Account and for a minimum of five (5) years following account closure, as typically required under AML and licensing regulations.
• KYC & Identity Documents: Retained for the period required under the Operator's licensing jurisdiction AML obligations — typically five (5) years from the date of verification or account closure, whichever is later.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of each transaction in accordance with standard AML requirements.
• Support Correspondence: Retained for a minimum of two (2) years from the date of the relevant communication, or longer where required in connection with an open dispute or investigation.
• Technical & Usage Data: Retained for a maximum of twenty-four (24) months from collection, unless retention for a longer period is required for fraud investigation or compliance purposes.

Where Personal Data is no longer required, bpech applies secure deletion or anonymisation procedures to ensure that individual users cannot be re-identified from retained records.

Security Measures

bpech implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encrypted storage of sensitive Personal Data including identity documents and financial records.
• Role-based access controls limiting internal staff access to Personal Data on a need-to-know basis.
• Two-factor authentication (2FA) options for User Account access.
• Regular security assessments and penetration testing of Platform infrastructure.
• Incident response procedures for detecting, containing and reporting data security breaches.

Cookies & Tracking Technologies

The bpech Platform uses cookies and similar tracking technologies to operate correctly and to improve the user experience. The categories of cookies we use are as follows:

11.1 Essential Cookies

Cookies that are strictly necessary for the Platform to function — including session management, authentication, security tokens and load-balancing. These cookies cannot be disabled without impairing Platform functionality.

11.2 Analytics Cookies

Cookies that collect anonymised or aggregated information about how users interact with the Platform — including pages visited, session duration and navigation paths — to help us understand and improve usability. Where you have not provided consent for analytics cookies, these are not deployed.

11.3 Preference Cookies

Cookies that remember your settings and preferences — such as language preferences, display settings and responsible gambling limits — to provide a more personalised experience on subsequent visits.

11.4 Managing Your Cookie Preferences

You can manage, restrict or delete cookies through your browser settings at any time. Note that disabling essential cookies will affect the functionality of the Platform. Most web browsers allow you to refuse new cookies, be notified when a cookie is set, or disable cookies entirely through the browser's privacy or security settings.

Your Rights

Subject to applicable data protection law in the Operator's jurisdiction, you have the following rights in relation to your Personal Data held by bpech. To exercise any of these rights, please contact us using the details in Section 16.

Please note that certain rights may be limited where bpech is required to retain or continue processing data to comply with a legal obligation — such as AML record-keeping requirements. We will inform you of any such limitation when responding to your request. We aim to respond to all data rights requests within thirty (30) days of receipt.

Children's Privacy

The bpech Platform is strictly for adults aged 18 years or above — or the higher minimum age required by the applicable operator or licensing jurisdiction. We do not knowingly collect Personal Data from individuals under the minimum age. Age verification is conducted as part of the KYC process for all registered accounts.

If we become aware that Personal Data has been collected from an individual who does not meet the minimum age requirement, we will immediately close the associated Account, delete the collected data (subject to any legal obligations to retain evidence of the age verification failure) and refund any net deposits in accordance with applicable regulatory requirements.

If you believe that a minor has registered on the Platform, please contact our support team immediately at [email protected].

Specific Notice for Pakistani Users

Pakistani users should be aware of the following specific considerations in relation to their Personal Data and their use of the bpech Platform:

• bpech is not registered with or regulated by any Pakistani data protection authority. Our data processing obligations are governed by the laws of the Operator's international licensing jurisdiction.
• Pakistan's Personal Data Protection Bill and related legislation may apply to data processing activities involving Pakistani citizens. We encourage Pakistani users to understand their rights under applicable Pakistani law.
• CNIC documents submitted for KYC are processed exclusively for identity verification and age confirmation purposes. They are stored securely and are never shared with Pakistani government authorities, financial institutions, the PTA or any other Pakistani regulatory body except where compelled by a court of competent jurisdiction.
• Payment information associated with familiar Pakistani payment methods (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) is processed only to the extent required to execute your requested transactions. None of these providers are Data Processors for bpech, and their involvement in transactions does not constitute endorsement of gambling activity.
• bpech does not report user gambling activity to Pakistani financial intelligence units, tax authorities or regulatory bodies except where legally compelled to do so by a valid legal process.

Privacy Policy Updates

bpech reserves the right to amend, update or replace this Privacy Policy at any time. When we make material changes to this Policy — changes that substantially affect how we collect or use your Personal Data — we will notify registered users via email or in-platform notification where reasonably practicable, and update the effective date at the top of this document.

We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of any revised Policy constitutes your acceptance of the updated terms. If you do not accept any revision to this Policy, you should cease using the Platform and request Account closure.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data by bpech, please contact us through the following channels:

Please note that KYC documents and identity verification materials must never be submitted via email. All identity verification must be conducted exclusively through the Platform's official HTTPS-secured verification portal to ensure the security of your sensitive Personal Data.