bpecch Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how bpecch ("the Company," "we," "us," or "our") — the operator of the online casino and sports betting platform accessible at bpecch.net — collects, uses, stores, discloses, and protects the personal information of its registered players and site visitors ("you" or "your").

bpecch is a registered online gaming brand operating under an international gaming license. As part of our licensing obligations and our own commitment to responsible data stewardship, we maintain strict data protection standards applicable to all players using our platform, including those located across Pakistan — in Karachi, Lahore, Islamabad, Faisalabad, and beyond.

This Policy should be read alongside the bpecch Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement governing your use of the platform. This Policy is effective from 1 January 2026 and supersedes all prior privacy notices.

2. Personal Data We Collect

bpecch collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from authorised third-party service providers. The categories of data we collect are as follows:

2.1 Registration and Identity Data

When you create a bpecch account, we collect your full legal name, date of birth, residential address in Pakistan, email address, mobile number, and any government-issued identification submitted during the Know Your Customer (KYC) verification process, including your Computerised National Identity Card (CNIC) number or passport details.

2.2 Financial and Transaction Data

We collect records of all deposits and withdrawals made through your bpecch account, including the payment method used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, or Mastercard), transaction amounts in PKR, timestamps, and transaction reference numbers. Full payment credentials such as card numbers or bank account numbers are not stored directly by bpecch — these are handled by our certified payment processing partners.

2.3 Gameplay and Betting Activity

We maintain records of your wagering and gameplay activity on the bpecch platform, including bets placed, games accessed (cricket betting, live casino, slots, virtual sports, crash games), session durations, win/loss history, and bonus participation. This data is used for account management, dispute resolution, and responsible gaming monitoring.

2.4 Technical and Device Data

When you access bpecch, we automatically collect certain technical data, including your IP address, device type and operating system, browser type and version, referring URL, and pages visited on the platform. This information is collected via server logs and cookies (see Section 7).

2.5 Communications Data

If you contact bpecch support via email or live chat, we retain records of those communications, including the content of messages, timestamps, and any attachments or documents shared, for the purpose of resolving disputes and improving service quality.

Data Category	Examples	Primary Purpose
Identity Data	Name, DOB, CNIC, address	Account registration, KYC compliance
Financial Data	PKR transaction records, payment method	Payment processing, AML compliance
Gameplay Data	Bets, sessions, win/loss records	Account management, responsible gaming
Technical Data	IP address, device info, browser	Security, fraud detection, analytics
Communications	Support emails, live chat logs	Dispute resolution, service improvement

3. How We Use Your Personal Data

bpecch processes your personal data only for legitimate, specific purposes. We do not use your data for purposes incompatible with those stated at the time of collection. The primary purposes for which we use your data are:

• Account creation and management — to register your bpecch account, verify your identity, and maintain accurate account records;
• Transaction processing — to facilitate PKR deposits and withdrawals via your chosen payment method and to maintain a complete transaction history;
• Regulatory compliance — to fulfil our obligations under our international gaming license, including KYC identity verification and Anti-Money Laundering (AML) monitoring;
• Fraud prevention and security — to detect and prevent fraudulent activity, unauthorised account access, and multi-accounting;
• Responsible gaming — to monitor for patterns of problematic gambling behaviour and to apply self-exclusion or account restrictions where triggered by you or required by our responsible gaming obligations;
• Customer support — to respond to your enquiries, process complaints, and resolve disputes;
• Platform improvement — to analyse aggregate usage patterns and improve the bpecch platform experience, including game performance and cashier functionality;
• Marketing communications — to send you promotional offers and bonus notifications where you have provided consent. You may opt out of marketing communications at any time via your account settings or by contacting support.

4. Legal Basis for Processing

bpecch processes your personal data on the following legal bases, as recognised under applicable international data protection standards:

• Contract performance: Processing necessary to fulfil the bpecch Terms & Conditions to which you have agreed, including account management and payment processing;
• Legal obligation: Processing required to comply with obligations under our international gaming license, including KYC verification and AML record-keeping requirements;
• Legitimate interests: Processing carried out for fraud detection, platform security, and service quality improvement, balanced against your privacy rights;
• Consent: Processing for direct marketing communications, where you have given explicit consent. This consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

bpecch does not sell or rent your personal data to third parties. We may share your personal information with the following categories of authorised recipients, strictly on a need-to-know basis:

5.1 Identity Verification and KYC Providers

To fulfil our licensing obligations, bpecch engages licensed third-party KYC and AML service providers to verify the identity of players and screen for sanctions or politically exposed persons (PEPs). Your identity documents and personal details may be shared with these providers for this purpose. All such providers are contractually bound to process your data only as instructed by bpecch and in accordance with applicable data protection standards.

5.2 Payment Processing Partners

Transaction data is shared with our certified payment processing partners — including the operators of JazzCash, EasyPaisa, and banking networks — solely to facilitate the processing of your PKR deposits and withdrawals. bpecch does not receive or store your full payment credentials from these partners.

5.3 Regulatory and Law Enforcement Authorities

bpecch may disclose personal data to regulators, law enforcement agencies, or courts where required to do so by applicable law, a court order, or in response to a legitimate legal process. Where permitted, bpecch will notify you of any such disclosure request.

5.4 Platform Technology Providers

We engage third-party technology vendors to support the operation of the bpecch platform, including cloud hosting providers, game content suppliers, and analytics tools. These vendors process data solely on behalf of bpecch under strict data processing agreements and do not use your data for their own purposes.

6. Payment Data and Financial Security

The security of your financial data is a priority for bpecch. All payment transactions on the platform are processed through encrypted channels using industry-standard TLS/SSL protocols. bpecch does not store full card numbers, CVV codes, or bank account credentials on its own servers. Instead, payment data is tokenised by our certified payment partners in accordance with applicable payment security standards.

All PKR transaction records — including deposit and withdrawal amounts, payment method references, and timestamps — are retained by bpecch for a minimum of five years from the date of the transaction, in compliance with our AML obligations under our international gaming license. These records may be provided to relevant authorities upon a valid legal request.

7. Cookies and Tracking Technologies

bpecch uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by your web browser when you visit bpecch.net. The types of cookies we use are as follows:

• Essential cookies: Required for the platform to function correctly, including maintaining your login session, remembering your language preference, and securing your account. These cannot be disabled without affecting platform functionality;
• Analytics cookies: Used to collect aggregate, anonymised data about how players interact with the bpecch platform — such as pages visited, session duration, and feature usage — to help us improve the platform experience;
• Functional cookies: Remember your preferences on the platform, such as game display settings and notification preferences, to provide a more personalised experience.

bpecch does not use cross-site advertising cookies or third-party tracking pixels for behavioural advertising purposes. You may manage cookie preferences through your browser settings; however, disabling essential cookies may impair your ability to use the bpecch platform.

8. Data Retention

bpecch retains personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five years following account closure, in accordance with AML and licensing requirements;
• Transaction records: Retained for a minimum of five years from the date of each transaction;
• KYC documents: Retained for a minimum of five years following the completion of the verification process or account closure, whichever is later;
• Support communications: Retained for three years from the date of the interaction, unless they relate to an ongoing dispute or legal matter;
• Technical and device data: Retained for up to 13 months from the date of collection for security and analytics purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that renders it irreversible.

9. Your Privacy Rights

As a bpecch player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within 30 days, though complex requests may take up to 60 days with prior notice to you.

Please note that certain rights may be limited where bpecch is required to retain or process your data in order to comply with legal obligations under our international gaming license — for example, AML record-keeping requirements. In such cases, we will explain the applicable limitation in our response to your request.

10. Children's Privacy and the 21+ Rule

The bpecch platform is strictly for use by adults aged 21 and above. bpecch does not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has created an account or provided personal data on the platform, we will immediately suspend the account and delete the associated personal data, except where retention is required by law.

bpecch encourages all account holders to use appropriate parental controls on shared devices to prevent underage access to the platform.

11. Data Security Measures

bpecch implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bpecch platform;
• Encrypted storage of personal data on access-controlled servers with role-based permission management;
• Regular security audits and penetration testing conducted by independent security professionals;
• Two-factor authentication options for player accounts;
• Automated fraud detection systems monitoring for unusual account activity or login patterns;
• Staff data protection training and strict internal data access policies on a need-to-know basis.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights and freedoms, bpecch will notify affected players and relevant authorities in accordance with applicable notification obligations under our licensing framework.

12. International Data Transfers

As bpecch operates under an international gaming license, some of your personal data may be processed or stored on servers located outside Pakistan. Where data is transferred internationally, bpecch ensures that appropriate safeguards are in place to protect your information to a standard equivalent to the protections described in this Policy.

Such safeguards may include contractual data protection clauses with the recipient, processing within jurisdictions that maintain adequate data protection standards, or other legally recognised transfer mechanisms. By using the bpecch platform, you acknowledge and consent to such international transfers where necessary for the purposes described in this Policy.

13. Updates to This Privacy Policy

bpecch reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. When material changes are made, we will notify registered players via the email address associated with their account and/or by displaying a prominent notice on the bpecch platform. The updated Policy will take effect from the date specified in the notice.

We encourage you to review this Policy periodically to stay informed of how bpecch is protecting your information. Your continued use of the platform following any update constitutes acceptance of the revised Policy. The "Effective" date at the top of this page reflects the most recent revision.

14. Contact Us and Data Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bpecch handles your personal data, please contact our Data Support team using the following details:

• Email: [email protected]
• Live Chat: Available 24/7 from your bpecch account dashboard
• Response time: bpecch aims to respond to all privacy-related enquiries within 5 business days and to formal data subject requests within 30 days

If you are not satisfied with bpecch's response to your privacy concern, you have the right to escalate your complaint to the relevant regulatory authority overseeing our international gaming license. Details of the applicable supervisory authority are available on request from our support team.