Hunza, Gilgit-Baltistanbpexch li players across Pakistan trust us to keep their data safe.
bpexch li is committed to protecting your personal data. This Privacy Policy explains exactly what information we collect, why we collect it, how it is stored and protected, and the full rights you have over your own data. It applies to every player who registers or uses the bpexch li platform.
Six core principles that define how bpexch li handles your personal information.
Every piece of personal information stored by bpexch li is protected with 256-bit SSL encryption — the same standard used by major banks and financial institutions.
bpexch li does not sell, rent, or trade your personal data to any outside party for commercial purposes — ever. Your information is used only to run and improve your account.
You have the right to access, correct, download, and request deletion of all personal data bpexch li holds about you. These rights can be exercised by contacting support at any time.
bpexch li collects only the data that is genuinely necessary to operate your account, process payments, verify your identity, and comply with legal obligations. Nothing more.
bpexch li will only send you promotional communications if you have explicitly opted in during registration or via your account settings. You can opt out at any time, instantly.
bpexch li retains your data only for as long as necessary for legal and operational purposes. Retention periods are published transparently in this Privacy Policy so you always know where you stand.
Important Notice: This Privacy Policy explains how bpexch li ("we", "us", "our", "the platform") collects, uses, stores, shares, and protects the personal data of all registered players and visitors. By creating an account or using the bpexch li platform, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside our Terms and Conditions.
bpexch li is an online gaming platform built specifically for Pakistani players, offering crash games, roulette, live casino, and slots, with PKR as the primary currency and local payment methods including Easypaisa, JazzCash, NayaPay, SadaPay, and bank transfer. bpexch li is the data controller responsible for the personal information collected through this platform.
This Privacy Policy applies to all personal data collected from players who register on bpexch li, visitors who browse the website without registering, and individuals who communicate with bpexch li support. It covers data collected through the website, any associated mobile browser experience, email correspondence, and live chat interactions.
If you have any questions about how bpexch li handles your personal data, or if you wish to exercise any of the rights described in this policy, you can contact our data team at any time at support@bpexchli.com. We aim to respond to all data-related inquiries within five working days.
bpexch li collects personal data through several channels: directly from you when you register or update your account, from your activity on the platform, from payment processors when transactions are made, and — in some cases — from identity verification service providers during KYC checks.
bpexch li does not store full card numbers, full bank account details, or mobile wallet credentials. Payment data is tokenised by the payment processor and only a reference token is retained by bpexch li. This means your financial credentials are never exposed to the platform.
What About Sensitive Data? bpexch li does not intentionally collect sensitive personal data such as ethnic origin, religious beliefs, or health information. The only category of sensitive data collected is biometric data in the form of CNIC and selfie images, collected solely for identity verification purposes and stored with heightened security controls.
bpexch li uses your personal data only for specific, legitimate purposes directly related to operating the platform and serving you as a player. We do not use your data in ways that are inconsistent with the purposes described in this policy without obtaining your consent first.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Mobile number, password, date of birth | Contract performance |
| Identity verification (KYC) | Full name, CNIC, selfie photograph | Legal obligation / fraud prevention |
| Processing deposits and withdrawals | Payment method identifiers, transaction records | Contract performance |
| Fraud prevention and anti-money laundering | Transaction history, IP address, device data | Legal obligation / legitimate interest |
| Responsible gaming tools | Gaming history, deposit limits, self-exclusion records | Legal obligation / legitimate interest |
| Customer support | Account records, support communications | Contract performance |
| VIP Club programme administration | Wagering volume, account tier, cashback records | Contract performance |
| Marketing communications (opted-in only) | Mobile number, email, gaming preferences | Consent |
| Platform analytics and improvement | Aggregated, anonymised usage data | Legitimate interest |
bpexch li does not use automated decision-making systems that produce legal or similarly significant effects on players without human review. Where account restrictions are triggered by automated fraud detection, a human review is conducted before any permanent action is taken.
bpexch li does not sell your personal data. We do not share it with third-party advertisers or data brokers. Data is shared only with the limited categories of service providers described below, and only to the extent necessary for the specific purpose involved.
When you make a deposit or withdrawal at bpexch li, relevant transaction data is shared with the payment processor handling that transaction — for example, Easypaisa, JazzCash, NayaPay, SadaPay, or the relevant bank or card network. These processors are contractually bound to process your data only for the purposes of completing the specific transaction and complying with their own regulatory obligations. bpexch li does not receive or retain your full payment credentials from these processors.
For KYC verification, bpexch li may use a third-party identity verification service. Your CNIC image and selfie are shared with this provider solely for the purpose of verifying your identity. The provider operates under a data processing agreement that restricts use of your data to verification purposes only.
bpexch li may share account and transaction data with fraud prevention services and, where legally required, with relevant authorities. This sharing is based on legitimate interest (protecting the platform and other players) and legal obligation.
bpexch li will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by law. We will always seek to limit the scope of such disclosures to the minimum necessary to comply with the relevant legal requirement.
No Cross-Border Transfers Without Safeguards: If personal data is ever transferred outside Pakistan to a service provider based in another country, bpexch li ensures that appropriate data transfer safeguards are in place, including contractual obligations that provide equivalent levels of data protection.
Data security is taken seriously at bpexch li. The following technical and organisational measures are in place to protect your personal information at all times.
Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that affects your personal data and poses a significant risk of harm, bpexch li will notify affected players promptly and take all reasonable steps to contain and remediate the breach.
bpexch li does not retain personal data indefinitely. Retention periods are set based on the minimum time necessary for the relevant operational or legal purpose.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal and regulatory obligation |
| KYC documents (CNIC, selfie) | 5 years from date of verification | AML compliance |
| Transaction records | 7 years | Financial records obligation |
| Gaming history | Duration of account + 2 years | Dispute resolution / responsible gaming |
| Support communications | 3 years from last interaction | Quality assurance / dispute resolution |
| Responsible gaming records | 7 years | Regulatory obligation |
| Marketing preferences | Until opt-out or account closure | Consent management |
| Cookie and analytics data | Up to 13 months | Platform improvement |
When retention periods expire, bpexch li securely deletes or anonymises the relevant data. Anonymised, aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes, as it can no longer be used to identify any individual.
You have meaningful rights over the personal data that bpexch li holds about you. These rights can be exercised at any time by contacting support@bpexchli.com. bpexch li will respond to all data rights requests within five working days and complete the request within 30 days wherever possible.
You can request a full copy of all personal data bpexch li holds about you, including account data, transaction history, KYC records, and support communications.
If any personal data bpexch li holds about you is inaccurate or incomplete, you have the right to have it corrected. Contact support with the details of the correction needed.
You can request deletion of your personal data. This right applies unless bpexch li is required by law to retain the data for a specified period (e.g., transaction records for AML compliance).
You can request that bpexch li restricts the processing of your data in certain circumstances — for example, while you dispute the accuracy of data held about you.
Where data was provided by you and processed on the basis of consent or contract, you can request a machine-readable export of that data to transfer to another service.
You can object to the processing of your data for direct marketing at any time. You can also object to processing based on legitimate interest where you feel it overrides your own interests.
Identity Verification for Data Requests: To protect your privacy, bpexch li will verify your identity before fulfilling any data rights request. This is to ensure that personal data is only disclosed to the account holder — not to an unauthorised third party claiming to be you.
bpexch li uses cookies and similar technologies on the platform. Cookies are small text files stored on your device that help the platform function correctly and remember your preferences. The following categories of cookies are used by bpexch li:
These cookies are required for the bpexch li platform to function. They include session management cookies that keep you logged in, CSRF protection tokens, and load balancing cookies. These cannot be disabled without breaking core platform functionality.
Functional cookies remember your preferences — such as your preferred game view, language settings, and lobby configuration. Disabling these cookies means the platform may not remember your settings between visits.
bpexch li uses anonymised analytics data to understand how players interact with the platform — which pages are most visited, where players encounter issues, and how navigation flows work. This data is aggregated and cannot be used to identify individual players. Analytics cookies are retained for up to 13 months.
Security cookies help bpexch li detect and prevent fraudulent login attempts, bot activity, and account takeover attacks. These run alongside the 2FA system and real-time fraud monitoring.
You can control cookie preferences through your browser settings. However, disabling strictly necessary and security cookies will impair your ability to use the bpexch li platform.
bpexch li will only send you direct marketing communications — including promotional offers, bonus notifications, and tournament announcements — if you have explicitly opted in to receive them. This opt-in is collected during registration and can be changed at any time through your account settings or by contacting support.
Even if you opt out of marketing communications, bpexch li will still send you essential transactional messages related to your account — such as withdrawal confirmations, KYC requests, security alerts, and important updates to these policies. These transactional messages are not marketing and cannot be disabled without closing your account.
If you are enrolled in the bpexch li VIP Club, your personal account manager may contact you directly regarding personalised bonus offers and tier updates. These communications are part of the VIP service and are covered by your VIP programme consent. You can ask to be removed from personal manager outreach at any time by informing your manager or contacting support.
The bpexch li platform is strictly for players aged 18 and above. bpexch li does not knowingly collect personal data from anyone under the age of 18. Age verification checks are built into the registration process and are reinforced through KYC verification prior to the first withdrawal.
If bpexch li discovers or has reason to believe that a player is under 18 years of age, the account will be immediately suspended and all data relating to that account will be reviewed. Any funds deposited will be returned to the original payment method after verification that the account holder is indeed a minor. Winnings generated during the period of underage use will be forfeited in accordance with our Terms and Conditions.
If you are a parent or guardian and believe that a minor in your care has registered on bpexch li, please contact us immediately at support@bpexchli.com and we will take prompt action. For responsible gaming tools including parental controls, please visit our Responsible Gaming page.
bpexch li reviews this Privacy Policy regularly and will update it when changes are made to how we collect, use, or protect personal data, or when required to do so by changes in applicable law or regulation.
Where changes are material — meaning they significantly affect your rights or how your data is processed — bpexch li will notify you via email to your registered mobile number and/or via an in-platform notification at least 14 days before the changes take effect. You will have the opportunity to review the changes and, if you do not agree, to request the closure of your account before the new policy comes into force.
Minor changes — such as typographical corrections, clarifications of existing language, or minor operational updates that do not affect your rights — may be made without advance notice. The date of the most recent update is always displayed prominently at the top of this page. We recommend checking the Privacy Policy periodically to stay informed about how bpexch li protects your data.
Current Version: This is version 2.4 of the bpexch li Privacy Policy, last reviewed and updated in January 2025. Continued use of the bpexch li platform after any updated version is published constitutes acceptance of the revised policy.
If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how bpexch li has handled your personal information, you can reach the data team through the following channels:
All formal privacy complaints will be logged, acknowledged within 24 hours, investigated thoroughly, and resolved within 30 calendar days. Where the issue is complex, bpexch li will provide a progress update within 30 days and a full resolution as soon as practicable.
bpexch li's full Terms and Conditions, including the sections that govern data use in the context of gaming activity and the VIP programme, are available at Terms and Conditions. Information about responsible gaming tools, including self-exclusion and deposit limits, is available at Responsible Gaming.
Play Responsibly. Gambling is entertainment. Never bet more than you can afford to lose. bpexch li provides deposit limits, session reminders, and self-exclusion for every registered player. Must be 18 or over.
Now that you understand how bpexch li protects your personal information, you can play knowing your data is in safe hands. Register in under two minutes, deposit via Easypaisa or JazzCash, and start playing the games Pakistani players love.