When you sign up on BP Exchange and start using the platform — whether you are placing bets on a PSL match, spinning through slot games, depositing PKR via JazzCash or Easypaisa, or just browsing available promotions — certain information is collected and processed. This Privacy Policy sets out a clear and honest account of what that data is, why it is collected, how it is protected and what you can do with it. This policy applies to all registered and unregistered users who interact with the BP Exchange website.
1 Information We Collect
BP Exchange collects personal data through two primary means: information you provide directly when you register and use the platform, and information collected automatically as you interact with the site.
Information You Provide Directly
When you create an account, we collect your name, date of birth, contact number, email address and any additional verification details requested during the identity check process. If you contact our support team, records of that correspondence are also retained. When you make a deposit or request a withdrawal, your payment details — such as your JazzCash or Easypaisa account number or bank account reference — are recorded in connection with that transaction.
Information Collected Automatically
Every time you visit BP Exchange, standard technical data is collected automatically. This includes your IP address, browser type, operating system, device type, the pages you visit, how long you spend on each section, and the actions you take — such as bets placed, games launched or bonuses claimed. This data is used in aggregate to understand how players use the platform and to improve the overall experience.
| Data Category | Examples | How Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC reference | Registration & verification |
| Contact Data | Phone number, email address | Registration form |
| Financial Data | JazzCash/Easypaisa account, bank details, PKR transaction history | Deposit & withdrawal activity |
| Usage Data | Pages visited, bets placed, games played, session duration | Automatic collection |
| Technical Data | IP address, browser, device type, OS | Automatic collection |
| Communications Data | Support messages, live chat logs | Direct contact with support |
2 How We Use Your Data
Every piece of data collected by BP Exchange has a defined purpose. We do not collect information for its own sake, and we do not use your data beyond what is necessary to deliver the platform, protect the integrity of the service and communicate relevant information to you.
- Account Management: Your name, contact details and date of birth are used to create and maintain your account, verify your identity and ensure you meet the 18+ age requirement.
- Processing Transactions: Financial data is used solely to process your PKR deposits and withdrawals via your chosen payment method — JazzCash, Easypaisa, Raast, bank transfer or other supported mobile wallets.
- Platform Personalisation: Usage and technical data help us understand how you interact with the platform so we can improve navigation, game loading, betting interfaces and overall performance for Pakistan users.
- Security and Fraud Prevention: IP addresses, login patterns and device data are monitored to detect suspicious activity, prevent unauthorised access and protect your account from fraud.
- Promotions and Offers: If you have opted in to receive promotional communications, we use your contact details to let you know about relevant bonuses, seasonal promotions — such as PSL season offers — and VIP programme updates. You can opt out at any time.
- Legal and Compliance Obligations: Certain data is retained to meet record-keeping requirements, respond to disputes and maintain transaction histories.
BP Exchange does not sell your data to advertisers or use it to build external marketing profiles. Any promotional communication comes directly from BP Exchange and is related to your use of the platform.
3 Payment Data & PKR Transactions
All financial transactions on BP Exchange are conducted in Pakistani Rupees (PKR). When you make a deposit through JazzCash, Easypaisa, Raast or a bank transfer, your payment reference details are shared with the relevant payment processor solely for the purpose of completing that transaction. BP Exchange does not store full payment credentials on its own servers — payment data is handled through the payment processor's own secure systems.
Transaction records — including deposit amounts, withdrawal requests and the dates of those transactions — are retained in your account history. This is necessary both for your own reference and for the platform to maintain accurate financial records. You can view your transaction history at any time through your account dashboard.
Third-Party Payment Processors
When you initiate a payment through JazzCash or Easypaisa, your transaction data passes through those providers' systems. These providers operate under their own privacy policies and security standards, which are separate from this document. BP Exchange shares only the minimum data required to process the transaction and does not grant payment processors access to your broader account data or gaming history.
All deposits and payouts on BP Exchange are in PKR. No currency conversion is applied and no data related to foreign currency accounts is collected or stored by the platform.
4 Data Sharing
BP Exchange does not sell, rent or trade your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for the purpose stated.
- Payment Processors: JazzCash, Easypaisa, Raast and other payment service providers receive transaction-specific data to process your deposits and withdrawals.
- Identity Verification Services: Where identity checks are required, your name, date of birth and document details may be shared with a third-party verification service to confirm your identity and age.
- Game Providers: When you play a game hosted by a third-party game provider, your account identifier and game session data may be passed to that provider to run the game. Game providers do not receive your full personal details or financial data.
- Technical Infrastructure: Service providers who support the operation of the platform — such as cloud hosting and security monitoring — may process data as part of delivering those services. These providers act under strict data processing agreements.
- Legal Requirements: If we are required by a competent authority to disclose data, we will comply to the extent required by applicable law. We will notify you of such a request where legally permitted to do so.
Your personal data is never sold to third parties, data brokers, advertisers or any other commercial entity. Data sharing is strictly limited to the operational needs described above.
5 How We Keep Your Data Safe
BP Exchange implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse or disclosure. These measures are reviewed and updated regularly as the platform evolves.
Technical Safeguards
All data transmitted between your device and the BP Exchange platform is encrypted using industry-standard TLS (Transport Layer Security). Account passwords are stored using secure one-way hashing — we do not have access to your actual password, only to the hashed version stored in the system. Login activity is monitored for unusual patterns such as access from new devices or locations, and suspicious sessions can trigger additional verification checks.
Access Controls
Access to personal data within BP Exchange is restricted to staff who genuinely need it to perform their role — for example, support agents handling an account query. Access is logged and reviewed. No member of the team has blanket access to the full database of player data without appropriate authorisation.
What You Can Do to Help
Platform-side security is only one part of protecting your account. You play an important role too. Use a strong, unique password for your BP Exchange account, do not share your login credentials with anyone, and always log out from shared or public devices. If you suspect your account has been accessed without your permission, contact support immediately.
7 Data Retention
BP Exchange retains your personal data for as long as your account is active and for a defined period after account closure. Transaction records and account data are retained for a minimum period to allow for dispute resolution, financial record-keeping and to meet any applicable legal obligations.
When the retention period for a specific data category has passed, that data is securely deleted or anonymised so it can no longer be linked back to you. You may request early deletion of certain data categories — see the Your Privacy Rights section below for details on how to submit such a request.
Where data must be retained for legal reasons beyond your request, we will inform you of that obligation and the specific data categories affected at the time of your request.
8 Your Privacy Rights
As a BP Exchange account holder, you have a number of rights over your personal data. These are not automatic in every circumstance — some are subject to verification of your identity and assessment of the specific request — but BP Exchange is committed to responding to all valid requests promptly.