bexch Privacy
Policy

This Privacy Policy ("Policy") is issued by bexch ("the Platform," "we," "us," or "our") and applies to all individuals who access, register on, or otherwise interact with the bexch platform, including the website at bexch.org, any mobile-optimised interface, and all associated services (collectively, "the Services"). This Policy governs the collection, use, storage, transfer, and protection of personal data in connection with your use of bexch.

bexch is committed to handling your personal data with integrity, transparency, and respect. We operate in accordance with internationally recognised data protection principles and in compliance with the requirements applicable under our gaming licence. This Policy is written in plain, accessible English — not just legal jargon — because we believe every bexch user in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else in Pakistan or beyond deserves to understand how their data is handled.

By registering a bexch account or using our Services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you should not access or use bexch.

bexch collects personal data that is necessary to provide, maintain, and improve our Services, satisfy legal and regulatory obligations, and protect the security and integrity of the platform. The categories of personal data we collect include the following:

We do not collect sensitive personal data beyond what is strictly necessary for identity verification and regulatory compliance. Where we do collect sensitive data — such as a copy of a national identity document — it is treated with enhanced security measures and is retained only for as long as required by applicable regulation.

bexch collects personal data through the following channels:

• Direct Collection at Registration: When you create a bexch account, you provide identity and contact data directly through the registration form. This data is submitted voluntarily by you and is necessary to open an account.
• Account Activity: As you use the bexch platform — placing bets, playing casino games, managing your wallet — we record your gaming activity, transaction data, and session information automatically as part of platform operation.
• Payment Processors: When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, Raast, or any other supported method, our payment processing partners transmit the transaction reference and confirmation data required to credit or debit your bexch wallet.
• KYC Verification: When we request identity documents for account verification, you submit those documents directly to bexch via the account verification interface or support channel.
• Automated Technical Collection: We automatically collect technical data — including IP address, device identifiers, browser type, and session metadata — when you access the bexch platform, via server logs and platform analytics tools.
• Cookies and Similar Technologies: bexch uses cookies and related tracking technologies to collect usage and preference data. See Section 7 for full details of our cookie practices.
• Customer Support Interactions: When you contact bexch via live chat or email, the content of those communications is collected and stored for support delivery, quality assurance, and dispute resolution purposes.

bexch processes your personal data on the basis of one or more of the following lawful grounds, applied contextually depending on the nature of the processing activity:

• Contractual Necessity: Processing your identity data, contact data, financial data, and gaming activity data is necessary to perform the contract between you and bexch — that is, to provide you with access to our betting and casino services, process your deposits and withdrawals, and manage your account.
• Legal Obligation: bexch is subject to legal and regulatory obligations — including anti-money laundering (AML) requirements, Know Your Customer (KYC) requirements, and gaming licence conditions — that require us to collect, verify, and retain certain categories of personal data.
• Legitimate Interests: Where neither contractual necessity nor legal obligation applies, bexch may process personal data where it is in our legitimate interests to do so — for example, for fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our Services — provided those interests are not overridden by your privacy rights.
• Consent: Where we seek to use your personal data for purposes beyond those described above — such as sending you marketing communications about bexch promotions — we will obtain your explicit consent and provide a clear and accessible mechanism to withdraw that consent at any time.

bexch uses your personal data for the following specific purposes, each grounded in the legal bases described in Section 4:

• Account Creation and Management: To register your bexch account, verify your identity and age (21+ requirement), manage your login credentials, and maintain your account in good standing throughout our ongoing relationship.
• Service Delivery: To process your bets, settle gaming outcomes, manage your PKR wallet, facilitate deposits and withdrawals via JazzCash, EasyPaisa, and other supported methods, and deliver the full bexch platform functionality.
• Regulatory Compliance: To fulfil our AML, KYC, and gaming licence obligations, including verifying the source of funds where required, reporting suspicious activity to relevant authorities, and maintaining records required by our regulatory framework.
• Fraud and Security: To detect, investigate, and prevent fraud, money laundering, account takeover, and other prohibited activity on the bexch platform. This includes monitoring login patterns, transaction behaviour, and gaming activity for anomalies.
• Responsible Gaming: To monitor your gaming activity for indicators of problem gambling, enforce the limits and self-exclusion tools you have set on your bexch account, and reach out where our monitoring systems suggest intervention may be appropriate.
• Customer Support: To respond to your support queries, resolve disputes, investigate complaints, and provide the 24/7 live chat and email support available to all bexch users.
• Platform Improvement: To analyse aggregated usage data, performance metrics, and error logs for the purpose of improving the bexch platform, identifying and resolving technical issues, and developing new features.
• Marketing Communications: Where you have provided consent, to send you promotional communications about bexch offers, bonuses, and platform updates. You may opt out of marketing communications at any time without affecting your account access.

bexch shares your personal data with third parties only where it is strictly necessary to deliver the Services, fulfil our legal obligations, or protect the security of the platform. We do not share personal data for the commercial benefit of third parties. The categories of third parties who may receive your data include:

• Payment Service Providers: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, NayaPay, SadaPay, and cryptocurrency processors receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy frameworks and applicable financial regulations.
• Gaming Content Providers: Third-party game studios and live casino providers (such as Evolution Gaming and Pragmatic Play) may receive anonymised session data necessary to deliver game content and ensure game integrity. These providers are contractually prohibited from using that data for any purpose beyond service delivery.
• KYC & Identity Verification Services: bexch may engage regulated third-party identity verification services to assist with processing identity documents submitted by account holders. These partners operate under strict data processing agreements with bexch.
• Regulatory and Law Enforcement Authorities: bexch will disclose personal data to regulatory bodies, gaming authorities, financial intelligence units, and law enforcement agencies where required by law, court order, or in connection with our gaming licence obligations — including AML reporting requirements.
• Fraud Prevention & Security Partners: bexch may share technical data (such as IP addresses and device fingerprints) with fraud prevention and cybersecurity service providers for the purpose of detecting and preventing fraudulent activity on the platform.
• Professional Advisers: In the context of legal proceedings, dispute resolution, or corporate transactions, personal data may be disclosed to legal counsel, auditors, and other professional advisers under obligations of professional confidentiality.

All third parties with whom bexch shares personal data are required to implement appropriate technical and organisational measures to protect that data and to use it only for the specific purposes for which it was shared, as governed by contractual data processing agreements.

bexch uses cookies and similar technologies — including local storage, session storage, and pixel tags — to operate core platform functions, improve your experience, and analyse usage. The categories of cookies deployed by bexch are as follows:

• Strictly Necessary Cookies: Essential to the operation of bexch. These cookies enable core functions such as maintaining your login session, remembering your currency setting, and processing your account interactions. They cannot be disabled without fundamentally impairing platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data on how users interact with the bexch platform — which pages are visited, how long sessions last, what features are used — to inform platform improvement decisions. This data is aggregated and does not identify individuals.
• Functionality Cookies: Enable bexch to remember your preferences — such as your preferred sport or casino category, notification settings, and display preferences — to provide a more personalised experience across sessions.
• Security Cookies: Assist in detecting and preventing fraudulent activity on your bexch account, including identifying unusual login patterns or suspicious session behaviour.

bexch retains your personal data for as long as necessary to fulfil the purposes for which it was collected, as described in this Policy, and in accordance with applicable legal and regulatory retention requirements. The following general retention periods apply:

• Active Account Data: Identity, contact, and account data is retained for the full duration of your bexch account and for a minimum period of five (5) years following account closure, as required by gaming licence and AML regulation.
• Financial Transaction Records: Records of all deposits, withdrawals, and financial transactions are retained for a minimum of five (5) years following the transaction date, in compliance with applicable financial regulatory requirements.
• Gaming Activity Records: Your complete betting and casino gaming history on bexch is retained for a minimum of five (5) years and may be retained for longer where required for dispute resolution or regulatory purposes.
• KYC Documentation: Identity documents and verification records are retained for a minimum of five (5) years following account closure, in compliance with AML legislation and gaming licence conditions.
• Support Communications: Live chat transcripts and email correspondence are retained for two (2) years following the close of the relevant support interaction, or longer where the communication is relevant to an ongoing dispute or regulatory matter.
• Technical and Log Data: Server logs and technical data are typically retained for twelve (12) months for security and fraud detection purposes, after which they are securely deleted or anonymised.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in a manner that makes individual re-identification impossible. Where anonymised data is retained for analytical purposes, it is no longer considered personal data and is not subject to this Policy.

Subject to applicable law and the limitations imposed by our regulatory obligations, bexch recognises and supports the following privacy rights for all account holders:

• Right of Access: You have the right to request a copy of the personal data bexch holds about you, including your account data, transaction history, and gaming records.
• Right to Rectification: You have the right to request correction of inaccurate personal data held by bexch. You may update certain account details directly through your bexch account settings; for other corrections, please contact support.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you may request that bexch delete your personal data. This right is subject to overriding legal and regulatory retention obligations — for example, we cannot delete financial records that we are legally required to retain under AML regulation.
• Right to Restriction of Processing: You may request that bexch restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is disputed, or where processing is unlawful but you prefer restriction over deletion.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests and to the use of your personal data for direct marketing purposes. An objection to marketing will be honoured immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bexch implements a multi-layered approach to data security, designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Transport Encryption: All data transmitted between your device and the bexch platform is encrypted using 256-bit SSL/TLS technology — the same standard used by international financial institutions. This applies to all sessions, including login, betting, and payment interactions.
• Data Storage Encryption: Personal data stored on bexch servers is encrypted at rest. Passwords are never stored in plaintext; they are hashed using industry-standard one-way hashing algorithms.
• Access Controls: Access to personal data within bexch's internal systems is restricted on a strict need-to-know basis. All internal access is logged, monitored, and subject to regular audit.
• Two-Factor Authentication: bexch provides two-factor authentication for all account logins. All users are strongly encouraged to enable 2FA to protect their accounts against unauthorised access.
• Intrusion Detection and Monitoring: The bexch platform and infrastructure are monitored 24/7 for intrusion attempts, anomalous access patterns, and security incidents.
• Incident Response: In the event of a personal data breach, bexch maintains a documented incident response procedure. Affected users will be notified in accordance with applicable regulatory requirements.

bexch operates a strict minimum age policy. The bexch platform is available only to individuals aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21, and we do not permit anyone under that age to register an account or access our Services.

Where bexch identifies or is made aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and to close the associated account. The 21+ age requirement is enforced at registration through our age verification procedures and may be further verified through our KYC process.

12.1 Policy Updates. bexch may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform services. Material changes will be communicated to registered account holders via the email address or mobile number on file, or through a prominent notice on the bexch platform. The date of the most recent revision is displayed at the top of this Policy. Your continued use of bexch following notification of any change constitutes your acceptance of the updated Policy.

12.2 Contact for Privacy Matters. For questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by bexch, please contact our Data Protection team via:

• Live Chat: Available 24/7 through the bexch platform — the fastest route to a response.
• Email: [email protected] — Reference "Privacy" or "Data Request" in your subject line for prioritised routing to the relevant team.

12.3 Complaints. If you are unsatisfied with bexch's response to a privacy concern, you may escalate the matter to the relevant supervisory authority under our gaming licence jurisdiction. bexch will provide the applicable authority's contact details upon written request.