Your Privacy Matters
to bpexvh

1 Introduction

This Privacy Policy ("Policy") describes how bpexvh ("we", "us", "our", "the Platform") collects, processes, stores and protects personal information provided by or collected about users ("you", "your") of the bpexvh website at https://bpexvh.cam and all associated services, mobile-optimised pages and features operated under the bpexvh brand.

bpexvh is an English-language online sports betting and casino information platform serving users across Pakistan, including players in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. We are committed to handling your personal data responsibly, transparently and in accordance with applicable data protection law.

By registering an account, depositing funds, or otherwise using the Platform, you confirm that you have read, understood and agreed to this Policy in full. If you do not agree with any part of this Policy, you must stop using the Platform immediately.

2 Definitions

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, directly or indirectly — for example, a name, email address, phone number, IP address or CNIC number.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For users of the Platform, bpexvh acts as the Data Controller.
• "Data Processor" means any third party that processes Personal Data on behalf of bpexvh under a data processing agreement.
• "KYC" means Know Your Customer — the identity and document verification process required to comply with anti-money laundering and responsible gambling obligations.
• "Cookie" means a small text file placed on your device by the Platform to facilitate session management, preference storage and analytics.
• "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.

3 Data We Collect

bpexvh collects Personal Data in three principal ways: data you provide to us directly, data generated automatically through your use of the Platform, and data received from authorised third parties. The table below summarises the main categories:

We do not intentionally collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data or biometric data, except where a document submitted for KYC incidentally contains such information (for example, a CNIC photograph).

4 How We Use Your Data

bpexvh processes your Personal Data only for the purposes described below. We do not use your data for any purpose that is incompatible with the reason for which it was originally collected.

• Account Management: To create, maintain and administer your account, verify your identity, and manage your login credentials and preferences.
• Service Delivery: To process deposits and withdrawals, settle bets, award bonuses and provide customer support across sports markets including Pakistan cricket, PSL, ICC T20 tournaments, football, UFC and live casino products.
• KYC & Compliance: To verify your age and identity in accordance with applicable anti-money laundering (AML) and responsible gambling regulations, and to fulfil any reporting obligations required under the operator's licence conditions.
• Fraud Prevention & Security: To detect and prevent fraud, money laundering, multi-accounting, bonus abuse and other forms of prohibited conduct as defined in our Terms & Conditions.
• Responsible Gambling: To monitor betting and gaming behaviour for indicators of problem gambling, apply self-exclusion or limit settings at your request, and contact you if our responsible gambling monitoring systems flag a concern.
• Platform Improvement: To analyse usage patterns, test new features, diagnose technical issues and improve the overall user experience on bpexvh.
• Marketing Communications: To send you promotional content — such as bonus offers, PSL match promotions and platform updates — where you have provided your consent. You may withdraw consent at any time.
• Legal Obligations: To comply with court orders, regulatory requests or other legally binding obligations that require us to retain or disclose your data.

5 Legal Basis for Processing

Every processing activity conducted by bpexvh rests on one or more of the following recognised legal bases:

• Contract Performance: Processing that is necessary to fulfil our contractual obligations to you — including account management, bet settlement and payment processing — is carried out on the basis that it is required for the performance of the contract between you and bpexvh.
• Legal Obligation: Where we are required by applicable law or regulation to process your data — for example, to conduct KYC checks, comply with AML reporting requirements, or retain transaction records — we process on the basis of legal obligation.
• Legitimate Interests: We process certain data — such as fraud detection, security monitoring and platform analytics — on the basis of our legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not required for contractual or legal reasons — particularly in relation to marketing communications and non-essential cookies — we rely on your freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

bpexvh does not sell, rent or trade your Personal Data to third parties. We share your data only in the following limited and controlled circumstances:

• Service Providers: We engage third-party companies to perform specific functions on our behalf, including payment processing, identity verification, cloud hosting, customer support tooling and platform analytics. These processors are bound by data processing agreements and are permitted to use your data only for the purpose for which they were engaged.
• Payment References: Payment method names referenced on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited only as familiar payment references for Pakistani users. These providers are not data processors of bpexvh unless a direct payment integration is explicitly in place. Their own privacy policies govern any data shared in the course of a payment transaction.
• Regulatory & Legal Authorities: We may be required to disclose Personal Data to law enforcement agencies, regulators, courts or other government authorities where required by applicable law, a valid court order, or to protect the rights and safety of bpexvh, its users or the public.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of some or all of bpexvh's assets, your Personal Data may be transferred to the successor entity, subject to the same protections described in this Policy. We will notify you of any such transfer.
• Responsible Gambling Referrals: Where you consent, or where we are required to do so under our licence conditions, we may share limited data with responsible gambling organisations for the purpose of applying self-exclusion or seeking appropriate support services.

7 Cookies & Tracking Technologies

bpexvh uses cookies and similar tracking technologies to operate the Platform effectively and improve your experience. Cookies are small text files stored on your device when you visit the Platform. We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, remember your basket and apply security settings. You cannot opt out of strictly necessary cookies without disabling the Platform.
• Functional Cookies: These cookies remember your preferences — such as your chosen language, odds format and notification settings — so you do not need to re-enter them each visit.
• Analytics Cookies: We use analytics tools to understand how users navigate the Platform, which pages are most visited and where technical issues arise. This data is aggregated and anonymised wherever possible.
• Marketing Cookies: Where you have consented, marketing cookies allow us to show you relevant promotional content on the bpexvh Platform, such as personalised bonus offers tied to upcoming cricket fixtures or PSL match schedules. We do not use marketing cookies to track you on external websites.

You may manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Disabling cookies may affect the functionality of certain Platform features. For a complete list of cookies used by bpexvh and their individual retention periods, please contact our support team.

8 Data Retention

bpexvh retains your Personal Data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and the operator's licence conditions. The following general retention principles apply:

• Active Accounts: Personal Data is retained for the full duration of your account's active status and for a minimum period thereafter as required by AML regulations and the operator's licence jurisdiction.
• KYC Documents: Identity verification documents — such as CNIC copies, passport scans and proof-of-address documents — are retained for the period required by applicable AML and regulatory obligations, typically a minimum of five years from the date of submission or from the date of account closure, whichever is later.
• Transaction Records: All financial transaction records, including deposits and withdrawals in PKR, are retained for the period required by the operator's licence conditions and applicable financial regulations.
• Support Communications: Live chat transcripts and support email records are retained for a period of three years from the date of the interaction, to allow for dispute resolution and quality assurance.
• Marketing Data: If you withdraw your consent to marketing communications, your marketing preferences will be updated immediately, but we will retain a record of your opt-out to ensure we do not inadvertently contact you again.
• Closed Accounts: Upon account closure, data is retained for the minimum period required by law and then securely deleted or anonymised.

9 Data Security

bpexvh implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers;
• encryption at rest for all Personal Data stored on our systems, including KYC documents and financial data;
• role-based access controls that limit employee access to Personal Data on a strict need-to-know basis;
• regular security audits, penetration testing and vulnerability assessments;
• multi-factor authentication for administrative access to systems containing Personal Data; and
• formal data breach response procedures, including notification protocols in accordance with applicable regulations.

While bpexvh takes every reasonable precaution to protect your data, no system is entirely immune to security threats. You are responsible for maintaining the security of your own account credentials. If you suspect that your account has been accessed without your authorisation, please contact our support team immediately.

10 International Data Transfers

bpexvh operates as an international platform. In the course of providing our services, your Personal Data may be transferred to and processed in countries outside your jurisdiction of residence, including countries whose data protection laws may differ from those applicable in Pakistan.

Where such transfers occur, bpexvh takes steps to ensure that your Personal Data receives an adequate level of protection, including by:

• transferring data only to service providers that are bound by appropriate data processing agreements;
• relying on recognised transfer mechanisms such as standard contractual clauses or equivalent safeguards where applicable; and
• conducting due diligence on recipient countries and organisations to assess the adequacy of their data protection standards.

Pakistani users should be aware that Pakistan's Personal Data Protection Bill (and any enacted successor legislation) may impose specific requirements on cross-border data transfers. bpexvh monitors regulatory developments in this area and will update its practices accordingly.

11 Your Rights

Depending on applicable data protection law, you may have some or all of the following rights in respect of your Personal Data held by bpexvh. We are committed to honouring these rights promptly and without undue complication.

To exercise any of these rights, please contact us using the details in Section 15. We will respond within 30 days. Where a request is complex or numerous, we may extend this period by a further 60 days, and we will notify you of the extension and the reason for it. We do not charge a fee for standard data subject requests.

We may need to verify your identity before processing a data rights request, to ensure that Personal Data is not disclosed to an unauthorised party. This may involve requesting a copy of a government-issued ID.

12 Children's Privacy

bpexvh is strictly an adults-only platform. The Platform is not directed at, and must not be used by, any person under the age of 18, or the higher minimum age required by the operator's licence jurisdiction, whichever is greater.

We do not knowingly collect Personal Data from individuals under the minimum age. If we become aware that a user under the minimum age has registered an account or submitted Personal Data, we will immediately close the account, delete the associated data and, where applicable, return any deposited funds in accordance with our KYC and responsible gambling procedures.

If you believe that a minor has submitted Personal Data to bpexvh, please contact us immediately at support@bpexvh.cam so that we can take appropriate action without delay.

13 Third-Party Links

The bpexvh Platform may, from time to time, reference third-party services or organisations — for example, responsible gambling support resources, payment method providers such as Easypaisa and JazzCash, or sporting bodies such as the Pakistan Cricket Board (PCB) or Pakistan Super League (PSL). These references are provided for informational context only.

bpexvh does not control the privacy practices of any third-party website or service, and this Policy does not apply to any external site you may access via a reference made on the Platform. We strongly encourage you to review the privacy policy of any third-party service before submitting your Personal Data to it.

The mention of any payment provider, sporting body or organisation on the bpexvh Platform does not imply endorsement, affiliation, sponsorship or any data-sharing arrangement unless explicitly stated.

14 Changes to This Policy

bpexvh reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our business practices or the services we offer. When we make material changes to this Policy, we will:

• update the "Last Updated" date at the top of this page;
• post a prominent notice on the Platform informing users of the change; and
• where required by applicable law or the significance of the change, send a direct notification to registered users at the email address on file.

Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.

We recommend that you review this Policy periodically to stay informed of how bpexvh is protecting your Personal Data. Archived versions of previous policies are available on request from our support team.

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the way bpexvh processes your Personal Data, please contact our Data Protection team using any of the following methods:

• Email: support@bpexvh.cam (plain text — not a clickable link)
• Live Chat: Available 24/7 directly within the Platform
• Language: Our support team operates in English; Urdu support is available on request

We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 calendar days. For complex data subject access requests, we may require additional time as outlined in Section 11.