bplxch Privacy Policy — How We Protect Your Personal Data

1.1 This Privacy Policy applies to all personal data processed by bplxch in connection with: (a) registration and management of bplxch accounts; (b) access to and use of all games, sports betting markets, and other platform features; (c) deposits and withdrawals via payment methods including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20; (d) customer support communications; (e) promotional and marketing activities; and (f) fraud prevention, responsible gaming, and compliance processes.

1.2 This Policy applies to all Players who access bplxch from any location, including Pakistani players accessing the platform from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and all other cities and regions across Pakistan.

1.3 This Policy does not apply to third-party websites or services that may be linked from the bplxch platform. bplxch is not responsible for the privacy practices of any third party.

2.1 Registration Data. When you create a bplxch account, we collect: full legal name; date of birth; email address; Pakistani mobile number; and your chosen username and password (stored in hashed, non-reversible form).

2.2 Identity Verification Data. For regulatory compliance and fraud prevention, bplxch may collect copies of: your Pakistani CNIC (Computerised National Identity Card); passport or other government-issued identification; proof of payment method ownership (e.g., screenshot of JazzCash or EasyPaisa account in your name); and, where required, a selfie photograph for facial verification.

2.3 Transaction Data. We collect records of all deposits, withdrawals, bonus credits, and wagers — including amounts, timestamps, payment methods used, and game or event identifiers. This data is retained for financial record-keeping, dispute resolution, and compliance purposes.

2.4 Technical Data. We automatically collect: IP address; device type and operating system; browser type and version; session duration and activity logs; and approximate geolocation derived from IP address. This data is used for fraud prevention, security monitoring, and platform optimisation.

2.5 Support Communications. When you contact bplxch support via live chat or email, the content of those communications — including any personal data you provide within them — is retained as part of your account record for support quality and dispute resolution purposes.

2.6 Responsible Gaming Data. Where you use bplxch responsible gaming tools — including deposit limits, self-exclusion elections, session alerts, and reality check settings — records of these settings are maintained to ensure the platform enforces them correctly and consistently across all sessions and devices.

bplxch uses personal data collected from Players for the following specific purposes:

4.1 Contract Performance. The majority of personal data processing by bplxch is necessary for the performance of the contract between bplxch and the Player — specifically, operating the Player's account, processing transactions, and delivering the gaming and sports betting services the Player has registered to use.

4.2 Legal Obligation. Certain processing activities are required by applicable law or regulatory standards — including age and identity verification, anti-money laundering transaction monitoring, and regulatory record retention requirements. bplxch processes data for these purposes regardless of individual consent, as it is legally required to do so.

4.3 Legitimate Interests. bplxch processes certain data — particularly technical and behavioural data — on the basis of its legitimate interests in operating a secure, fair, and commercially viable platform. These interests are always balanced against Players' privacy interests and do not override them where Players' interests are stronger.

4.4 Consent. Processing for optional activities — primarily marketing communications — is based on your consent. You may withdraw consent for marketing at any time by contacting [email protected] or using the unsubscribe link in any bplxch marketing email. Withdrawal of consent for marketing does not affect processing carried out under other legal bases.

5.1 No Commercial Data Sales. bplxch does not sell, rent, or commercially license your personal data to any third party under any circumstances.

5.2 Payment Processors. To process deposits and withdrawals, bplxch shares transaction-related personal data — including your name and payment method reference — with our payment processing partners: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 network operators. Each of these partners processes your data under their own privacy terms and applicable financial regulation.

5.3 Identity Verification Providers. bplxch may use third-party identity verification services to validate identity documents submitted by Players. These services receive the document data necessary for verification only and are contractually prohibited from using it for any other purpose.

5.4 Game Software Providers. bplxch's gaming library is powered by third-party software developers. When you play a game, your username, session identifier, and wagering activity for that session may be processed by the relevant game provider's software. Raw personal identification data (name, CNIC, payment details) is not shared with game providers.

5.5 Regulatory and Legal Disclosure. bplxch may disclose personal data to regulatory authorities, law enforcement agencies, or courts where we are legally required to do so. We do not make such disclosures voluntarily and will always seek to disclose only the minimum data required to meet the legal obligation.

6.1 What Cookies bplxch Uses. The bplxch platform uses cookies and similar tracking technologies to operate the platform correctly and to understand how Players use it. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your bplxch session and security tokens that protect against cross-site request forgery. These cannot be disabled without preventing platform access.
• Functional Cookies: Cookies that remember your preferences — such as your preferred language, game lobby view, and responsible gaming settings — to personalise your bplxch experience across sessions.
• Analytics Cookies: Cookies that collect aggregated, anonymised data about how Players navigate and use the bplxch platform. This data is used to identify usability issues and prioritise platform improvements. No individually identifiable information is included in analytics reports.
• Fraud Prevention Cookies: Technical identifiers used to detect and prevent fraudulent account activity, multiple account registration, and bot access to the platform.

6.2 Cookie Control. You may manage non-essential cookies through your browser settings. Note that disabling cookies may impact the functionality of certain bplxch features. Strictly necessary cookies cannot be disabled through browser settings without preventing platform access entirely.

7.1 Active Accounts. For active bplxch accounts, personal data is retained for as long as the account remains open and for a period after account closure as required by applicable regulatory and financial record-keeping obligations.

7.2 Post-Closure Retention. Following account closure — whether voluntary, due to breach, or via self-exclusion — bplxch retains certain categories of personal data as follows:

• Identity and Verification Data (CNIC, DOB, name): Retained for a minimum of five (5) years post-closure for regulatory compliance purposes.
• Transaction Records: Retained for a minimum of five (5) years post-transaction for financial audit and anti-money laundering compliance.
• Support Communications: Retained for a minimum of two (2) years post-closure unless longer retention is required for an open dispute or regulatory matter.
• Technical and Device Data: Retained for a maximum of twelve (12) months post-closure for security and fraud investigation purposes.
• Marketing Consent Records: Retained for the duration of consent and for a period of three (3) years post-withdrawal to demonstrate compliance.

7.3 Deletion. Personal data that has passed its applicable retention period and is not subject to any open legal, regulatory, or dispute proceeding is securely deleted or irreversibly anonymised in bplxch's standard data lifecycle processes.

8.1 Technical Security. bplxch implements the following technical security measures to protect personal data:

• 256-bit SSL/TLS encryption on all data transmitted between Player devices and bplxch servers
• Hashed and salted password storage — bplxch does not store readable passwords in any system
• Access control systems that restrict internal access to personal data by role and operational need
• Automated fraud detection and account anomaly monitoring running continuously
• Regular security assessments of platform infrastructure and third-party integrations
• Two-factor authentication available and strongly recommended for all accounts

8.2 Organisational Security. All bplxch personnel with access to personal data are subject to: confidentiality obligations as a condition of engagement; data protection training appropriate to their role; and access review processes that promptly revoke access when roles change or engagement ends.

8.3 Limitation. While bplxch implements comprehensive security measures, no digital system can guarantee absolute security. Players are strongly encouraged to use strong, unique passwords for their bplxch account, enable two-factor authentication, and never share their login credentials with any third party.

As a registered bplxch account holder, you hold the following rights over your personal data. bplxch is committed to honouring these rights promptly and without unnecessary friction.

9.1 Right of Access. You may request a copy of all personal data bplxch holds about you at any time. We will provide this in a clear, readable format within thirty (30) days of receiving a valid request. The first access request in any twelve-month period is provided free of charge. Subsequent requests within the same period may attract a reasonable administrative fee.

9.2 Right to Rectification. If any personal data bplxch holds about you is inaccurate or incomplete, you have the right to request correction. For routine updates — such as a change of registered email address or mobile number — please contact [email protected] directly. Changes to identity-critical data (name, date of birth) may require supporting documentation.

9.3 Right to Erasure. You may request deletion of your personal data where: (a) the data is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) the data has been unlawfully processed. bplxch will comply unless retention is required by a legal obligation. Where full erasure is not possible due to regulatory retention requirements, bplxch will erase all data that is not subject to those obligations and inform you of what is being retained and why.

9.4 Right to Data Portability. Where processing is based on your consent or on contract performance, and is carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format. bplxch will provide this in JSON or CSV format as applicable.

9.5 Right to Restrict Processing. You may request that bplxch restrict processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data while bplxch carries out verification. During a restriction period, bplxch will continue to store the data but will not actively process it for other purposes.

9.6 Right to Object to Marketing. You may object to processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, bplxch will cease all marketing communications within five (5) business days. Objecting to marketing does not affect your ability to continue using the bplxch platform.

10.1 Minimum Age. The bplxch platform is strictly for adults aged 21 and above. bplxch does not knowingly collect or process personal data from persons under the age of 21 and takes active steps to prevent underage registration through age verification processes applied at account creation and at withdrawal.

10.2 Discovery of Underage Data. If bplxch discovers or has reason to believe that personal data belonging to a person under the age of 21 has been collected — whether through a misrepresentation at registration or any other means — the account will be suspended immediately, the data isolated, and the matter escalated to the compliance team. Any funds in the account will be frozen pending identity investigation. The personal data of confirmed underage persons will be deleted to the extent not required for the purposes of regulatory notification and compliance record-keeping.

10.3 Parental Responsibility. Parents and guardians who share devices with persons under the age of 21 are strongly encouraged to use parental control software to prevent access to the bplxch platform. bplxch accepts no liability for underage access resulting from a failure to apply available parental controls on a shared device.

11.1 Opt-In Basis. bplxch sends promotional and marketing communications — including bonus offers, deposit promotions, PSL betting specials, and platform news — only to Players who have opted in to receive them. Opt-in is collected during registration and can be updated in Account Settings at any time.

11.2 Communication Channels. Where you have opted in, bplxch may send marketing communications via: registered email address; SMS to your registered Pakistani mobile number; and on-platform notifications within your bplxch account. Each channel can be opted out of independently.

11.3 Unsubscribing. You may unsubscribe from bplxch marketing communications at any time by: (a) using the unsubscribe link included in every bplxch marketing email; (b) updating communication preferences in Account Settings; or (c) sending a request to [email protected]. Unsubscribe requests are processed within five (5) business days. Note that transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — are not marketing communications and will continue regardless of marketing opt-out status.

11.4 Personalisation. Where you have opted in to marketing, bplxch may use your account activity data — including your preferred game categories, betting history, and deposit patterns — to personalise the offers and promotions we send you. This personalisation is based on your bplxch account data only and does not involve purchase of external behavioural data from third parties.

12.1 Internal Response. In the event of a personal data breach — meaning any accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data — bplxch's security team will assess the breach within twenty-four (24) hours of discovery, contain the breach, and initiate a full investigation to determine the scope, cause, and impact.

12.2 Player Notification. Where a data breach is assessed as likely to result in a high risk to the rights or interests of affected Players, bplxch will notify those Players directly — via their registered email address — without undue delay, and in any event within seventy-two (72) hours of the breach being confirmed. The notification will describe: the nature of the breach; the categories and approximate volume of data affected; the likely consequences; and the steps bplxch is taking to address the breach and mitigate its effects.

12.3 Reporting a Suspected Breach. If you believe your bplxch account has been accessed without your authorisation, or that your personal data may have been compromised, please contact bplxch immediately at [email protected] with the subject line "Security Concern." Do not attempt to investigate suspected unauthorised access yourself — contact our team immediately so we can secure your account and investigate promptly.

13.1 Right to Update. bplxch reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or platform features. The current version of this Policy, together with its effective date and version number, is always available on the bplxch website.

13.2 Notification of Material Changes. Where a proposed change to this Policy materially affects how bplxch processes personal data — particularly where it expands the categories of data collected, introduces new third-party sharing arrangements, or alters the legal basis for processing in a way that affects Player rights — bplxch will notify registered account holders via email to their registered address at least fourteen (14) days before the change takes effect.

13.3 Continued Use. Continued use of the bplxch platform following the effective date of an updated Privacy Policy constitutes acceptance of the updated terms. Players who do not accept the updated Policy may close their account before the effective date by contacting [email protected], and their Real Money Balance will be processed for withdrawal following completion of any outstanding verification requirements.

14.1 Privacy Enquiries. For any questions, concerns, or requests relating to this Privacy Policy or bplxch's data processing practices, please contact the bplxch privacy team at [email protected] with the subject line "Privacy Enquiry." We will acknowledge your message within five (5) business days.

14.2 Complaints. If you are unsatisfied with how bplxch has handled your personal data or responded to a data rights request, you may raise a formal complaint by emailing [email protected] with the subject line "Privacy Complaint." bplxch will acknowledge your complaint within five (5) business days and provide a substantive response within thirty (30) days, setting out the outcome of our investigation and any steps taken.

14.3 Escalation. If your complaint is not resolved to your satisfaction through the bplxch internal complaints process, you may have the right to escalate the matter to the relevant regulatory or data protection authority in your jurisdiction. bplxch will not impede or discourage any Player from exercising their right to contact a supervisory authority.