Your Privacy Matters at bepexh

01 Introduction

bepexh ("we", "us", "our") operates the online casino and sports betting platform accessible at bepexh.net (the "Platform"). This Privacy Policy describes how bepexh collects, processes, stores, shares, and protects the personal data of individuals who register for and use the Platform, with particular attention to the rights and expectations of our Pakistani player base.

By registering a bepexh account or using any part of the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree to this Privacy Policy, you must not register an account or use the bepexh Platform.

This Privacy Policy forms a binding part of the bepexh Terms and Conditions. Capitalised terms not defined in this Policy carry the meanings given to them in the Terms and Conditions.

02 Personal Data We Collect

bepexh collects personal data through several channels: directly from you during registration and KYC verification, automatically as you use the Platform, and in limited circumstances from third-party verification and fraud-prevention services. The categories of personal data we collect are described below.

2.1 Registration & Identity Data

When you create a bepexh account, we collect your full legal name as it appears on your CNIC, your date of birth, your residential city (e.g. Karachi, Lahore, Islamabad, Faisalabad), your email address, and your chosen username and password. This data is mandatory — without it, we cannot create or maintain a bepexh account for you.

2.2 KYC Verification Data

Before processing any withdrawal, bepexh is required to complete Know Your Customer (KYC) verification. This requires you to submit a clear photograph or scan of your CNIC (front and back), and in some cases a selfie photograph for biometric liveness verification. Where your payment method is JazzCash or EasyPaisa, we may also request a screenshot of your mobile wallet interface to confirm ownership of the payment method.

2.3 Financial Data

bepexh collects transaction data including deposit amounts, withdrawal amounts, payment method types (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or cryptocurrency wallet address), transaction reference numbers, and timestamps. We do not store full bank account numbers or complete card details on our servers — payment processing is handled by our regulated payment processing partners.

2.4 Gaming Activity Data

bepexh maintains records of your betting and gaming activity including games played, bets placed, wager amounts in PKR, outcomes, bonus usage, and session duration and frequency. This data is used for fraud prevention, responsible gaming monitoring, bonus eligibility assessments, and regulatory compliance reporting.

2.5 Technical & Device Data

When you access the bepexh Platform, we automatically collect certain technical data including your IP address, device type and operating system, browser type and version, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and platform optimisation.

2.6 Communications Data

bepexh retains records of all communications between you and our support team, including live chat transcripts, email correspondence, and any formal complaints or dispute submissions. This data is retained to ensure continuity of support and for regulatory compliance purposes.

03 How We Use Your Personal Data

bepexh uses the personal data it collects for the following purposes. Each use is tied to a specific legal basis, which is described in Section 4 of this Privacy Policy.

• Account creation and management: Creating, maintaining, and securing your bepexh account; allowing you to log in, deposit, wager, and withdraw.
• Identity verification (KYC): Verifying that you are who you claim to be, that you are at least 21 years of age, and that your payment methods belong to you.
• Payment processing: Facilitating deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency channels.
• Fraud prevention and security: Detecting and preventing unauthorised account access, multi-accounting, bonus abuse, money laundering, and other prohibited activities.
• Responsible gaming compliance: Monitoring gaming patterns to identify problem gambling indicators and triggering responsible gaming interventions where appropriate.
• Regulatory compliance: Maintaining records required by our operating licence and applicable anti-money laundering obligations; reporting suspicious transactions where legally required.
• Customer support: Responding to your queries, complaints, and dispute submissions in a timely and accurate manner.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the bepexh platform, user interface, and game selection.
• Promotional communications: Sending you information about bonuses, promotions, and platform updates — only where you have provided explicit consent for marketing communications, and only via email. You may withdraw this consent at any time.

04 Legal Basis for Processing

bepexh processes personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing your registration data, KYC documents, and payment information is necessary to enter into and perform the contract between you and bepexh (the Terms and Conditions). Without this processing, we cannot provide the service.
• Legal obligation: Certain processing activities — including identity verification, transaction record-keeping, and suspicious activity reporting — are required by our licence obligations and applicable anti-money laundering standards. We have no discretion to refuse this processing.
• Legitimate interests: bepexh processes technical and device data, gaming activity patterns, and communications records on the basis of our legitimate interest in maintaining platform security, detecting fraud, and improving the quality of our services. We have assessed that these legitimate interests are not overridden by your privacy rights.
• Consent: Marketing communications are sent only on the basis of your explicit, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing or your ability to use the bepexh Platform.

05 Data Sharing & Third Parties

5.1 Who We Share Data With

bepexh does not sell your personal data. We share your data only with the following categories of trusted third parties, and only to the extent necessary for each specific purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your deposits and withdrawals. Cryptocurrency transactions are processed through our integrated blockchain payment partner.
• KYC and identity verification providers: Your CNIC data and verification documents are processed by our third-party KYC verification partner, who is bound by strict data processing agreements and is prohibited from using your data for any purpose other than identity verification.
• Anti-money laundering screening services: bepexh uses third-party AML screening tools to check player names and transaction patterns against international watchlists. This is a mandatory requirement under our operating obligations.
• Game software providers: Live dealer and RNG game providers receive your account identifier and game session data to facilitate gameplay. They do not receive your CNIC or payment method details.
• Regulatory and law enforcement authorities: bepexh will disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or regulatory direction. We will notify you of such disclosure where legally permitted to do so.

5.2 Data Processing Agreements

All third parties who process personal data on behalf of bepexh are required to enter into binding data processing agreements that mandate appropriate technical and organisational security measures and prohibit the use of your data for any purpose outside of what bepexh has authorised.

06 Data Retention

bepexh retains your personal data for as long as your account is active and for a defined period after account closure, as required by our legal and regulatory obligations. The retention periods we apply are as follows:

• Active account data: Retained for the full duration of your account being open and active on the bepexh Platform.
• Post-closure account data: Following account closure, bepexh retains identity, KYC, and transaction data for a minimum of five years to satisfy anti-money laundering record-keeping obligations.
• Communications data: Live chat transcripts, email correspondence, and support tickets are retained for three years from the date of the interaction.
• Technical and device data: IP addresses and session logs are retained for 12 months for fraud detection and security investigation purposes.
• Marketing consent records: Records of marketing opt-in and opt-out are retained permanently to demonstrate compliance with consent requirements.

When data reaches the end of its applicable retention period, bepexh securely deletes or anonymises it so that it can no longer be attributed to an identifiable individual.

07 Your Privacy Rights

As a bepexh member, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request — [Your Username]". bepexh will respond within 30 days of receiving a valid request.

7.1 Right to Access

You have the right to request a copy of all personal data that bepexh holds about you. We will provide this in a structured, commonly used format. We may ask you to verify your identity before fulfilling an access request to protect against unauthorised disclosure.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor updates such as email address changes can be made directly through your bepexh account settings. Changes to identity data (name, CNIC) require KYC re-verification.

7.3 Right to Erasure

You may request deletion of your personal data. Please note that bepexh is subject to legal retention obligations (see Section 6) that may require us to retain certain data even after an erasure request. Where erasure is not possible for legal reasons, we will explain this clearly in our response and restrict further processing of your data to the extent possible.

7.4 Right to Portability

Where bepexh processes your personal data on the basis of your consent or contractual necessity, and that processing is carried out by automated means, you have the right to receive your data in a portable, machine-readable format to transfer to another service provider.

7.5 Right to Withdraw Consent

Where bepexh processes your data on the basis of your consent (specifically, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal was made.

08 Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the bepexh Platform. They allow the Platform to recognise your device on subsequent visits, maintain your session, and remember your preferences. bepexh uses first-party cookies only — we do not deploy third-party advertising cookies or behavioural tracking pixels.

8.2 Cookies We Use

• Essential cookies: Required for the Platform to function. These maintain your login session, remember your language preference, and enable security features. These cookies cannot be disabled without breaking core Platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how Pakistani players navigate and use the bepexh Platform. This data is used solely to improve the platform experience. No individual player is identified through analytics data.
• Security cookies: Used to detect and prevent fraudulent activity, including bot access attempts and account takeover attacks. These are strictly necessary for platform security.

8.3 Managing Your Cookie Preferences

You can manage, restrict, or delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging into your bepexh account and using core Platform features. Disabling analytics cookies will not affect your ability to use the Platform in any way.

09 Security Measures

bepexh takes the security of your personal data seriously and has implemented the following technical and organisational security measures to protect it against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption: All data in transit between your device and bepexh servers is encrypted using industry-standard 256-bit SSL/TLS protocols. The bepexh Platform operates exclusively over HTTPS.
• Encrypted data storage: Sensitive personal data including CNIC details and payment method information is encrypted at rest in our database systems using AES-256 encryption.
• Two-factor authentication: bepexh strongly recommends — and in some circumstances requires — two-factor authentication for account access, providing an additional layer of protection beyond your password.
• Access controls: Access to personal data within the bepexh organisation is restricted on a strict need-to-know basis. Customer support agents can only access the data fields necessary to resolve your specific query.
• Regular security audits: bepexh conducts periodic security audits and penetration testing of Platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: bepexh maintains a documented data breach response procedure. In the event of a breach that is likely to result in risk to your rights, we will notify affected members without undue delay.

While bepexh takes every reasonable precaution to protect your data, no internet-based system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your account password and for notifying us immediately if you suspect any unauthorised use of your account.

10 Children & Minors

The bepexh Platform is strictly for individuals aged 21 years and above. bepexh does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the bepexh account registration and KYC process, enforced through CNIC verification.

If bepexh discovers or is notified that an account has been registered by or on behalf of a person under 21 years of age, the following actions will be taken immediately: the account will be suspended and permanently closed; all deposits will be refunded to the original payment method; any winnings generated will be voided in full; and all personal data associated with the account will be securely deleted as soon as legally permissible.

11 International Data Transfers

bepexh's primary server infrastructure is located in secure, internationally recognised data centre facilities. In certain circumstances, personal data may be transferred to and processed in countries outside Pakistan, including by our KYC verification partners, game software providers, and payment processing partners who operate internationally.

Where such international transfers occur, bepexh ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Privacy Policy. These safeguards include contractual data processing agreements with all international partners that mandate technical and organisational security standards consistent with internationally recognised data protection best practices.

bepexh does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first ensuring that appropriate contractual safeguards are in place.

12 Updates to This Privacy Policy

bepexh reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, we will notify registered members by email to the address associated with their account and/or by displaying a prominent notice within the Platform on next login.

The "Last Updated" date at the top of this page will be revised whenever this Privacy Policy is amended. We encourage you to review this Privacy Policy periodically. Your continued use of the bepexh Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

If you have concerns about any changes to this Privacy Policy, please contact us at [email protected] before the amended policy takes effect. If you do not agree with the amended policy, you must close your account before the effective date.

13 Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your privacy rights, want to report a data security concern, or need to raise a data-related complaint, bepexh's support team is available to assist you around the clock, with peak staffing hours from 10am to 2am PKT to align with the active hours of our Pakistani player community.

This Privacy Policy was last reviewed and updated on 1 January 2026. bepexh reserves the right to update this Privacy Policy at any time in accordance with Section 12 above.