bexch Privacy Policy — Your Data, Your Rights
This Privacy Policy explains how bexch collects, processes, stores and protects your personal information when you use the platform at https://bexch.cam. We are committed to handling your data responsibly and transparently, in accordance with the standards set out below.
Introduction
bexch ("we", "us", "our") operates the online betting and gaming platform accessible at https://bexch.cam. As part of our operations, we collect and process personal data belonging to individuals who visit, register with or otherwise interact with the platform ("you", "your", "User"). This Privacy Policy explains our data practices in full.
We take privacy seriously. This document sets out — in plain, accessible English — what data we collect, why we collect it, how long we keep it, who we may share it with, and what rights you have over your own information. Where we use technical or legal terminology, we define those terms in Section 02 below.
bexch is designed to serve English-language users including players based in Pakistan. Pakistani users should note that domestic data protection law differs from international frameworks such as the GDPR. While bexch applies data protection principles broadly consistent with international best practice, this Policy does not constitute a representation that bexch is regulated by any Pakistani authority. Users in Pakistan are encouraged to familiarise themselves with applicable local privacy and data protection legislation.
By creating an account or otherwise using the bexch platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not accept this Policy, you should not use the platform.
Definitions
The following definitions apply throughout this Privacy Policy:
- Personal Data: Any information relating to an identified or identifiable natural person — including name, identification number, location data, online identifiers or factors specific to that person's physical, economic or social identity.
- Processing: Any operation performed on personal data, whether automated or manual — including collection, recording, storage, use, disclosure, erasure or destruction.
- Data Controller: The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, bexch is the Data Controller in respect of User data collected through the platform.
- Data Processor: A third party that processes personal data on behalf of a Data Controller, pursuant to written instructions and contractual obligations.
- Consent: Freely given, specific, informed and unambiguous indication of agreement by a data subject to the processing of their personal data for one or more specific purposes.
- KYC / AML: Know Your Customer and Anti-Money Laundering — regulatory compliance processes requiring identity verification and transaction monitoring.
- Cookie: A small data file placed on your device by a website, used to store session information, preferences and analytical data.
Personal Data We Collect
We collect several categories of personal data from Users, depending on the nature of your interaction with the bexch platform. The table below summarises the main categories and examples of data within each category.
| Category | Examples of Data Collected | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC or passport number, photograph for verification | Account registration, KYC compliance, age verification |
| Contact Data | Email address, phone number, residential address (including city and province) | Account communication, support, notifications |
| Financial Data | Payment method details, transaction history, deposit and withdrawal records | Payment processing, AML monitoring, fraud prevention |
| Device & Technical Data | IP address, browser type and version, operating system, device identifiers | Platform security, fraud detection, performance optimisation |
| Usage Data | Pages visited, time spent, games played, betting patterns, session duration | Service improvement, responsible gambling monitoring |
| Communications Data | Support chat logs, email correspondence, complaint records | Dispute resolution, quality assurance, legal record-keeping |
| Cookie & Tracking Data | Cookie identifiers, session tokens, analytics data | Platform functionality, analytics, session management |
We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data or health data) unless specifically required for a compliance purpose and with an appropriate legal basis. Where we handle identification documents for KYC purposes, those documents are treated with enhanced security controls.
How We Collect Your Data
bexch collects personal data through the following channels and mechanisms:
- Direct Provision: Data you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal, submitting a support query or communicating with the bexch team via live chat or email.
- Automated Technical Collection: Data collected automatically when you access the platform, including IP addresses, browser fingerprinting information, session cookies and device identifiers, via web server logs and analytics tools.
- Payment Processing: Data received from payment service providers in connection with deposits or withdrawals, including confirmation of payment method ownership and transaction reference details.
- Identity Verification Services: Data received from third-party KYC/identity verification partners when we use those services to verify the accuracy of identity documents submitted by Users.
- Fraud Prevention Systems: Data received from fraud detection and AML monitoring services used by bexch to identify suspicious account activity or potentially fraudulent transactions.
- Cookies and Similar Technologies: Data collected via cookies, web beacons and similar tracking technologies placed on your device when you visit the platform. See Section 10 for full cookie details.
Legal Basis for Processing
Where international data protection frameworks — such as the General Data Protection Regulation (GDPR) — apply to our processing activities, we identify the relevant legal basis for each category of processing. The principal legal bases on which bexch relies are:
- Performance of a Contract: Processing necessary to create and manage your account, process deposits and withdrawals, settle wagers and provide the core platform services you have requested.
- Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC/AML requirements, tax reporting obligations and record-keeping mandates imposed by the operator's licensing jurisdiction.
- Legitimate Interests: Processing for the purposes of fraud prevention, platform security, improving service quality, responsible gambling monitoring and analytics — where those legitimate interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for marketing communications and optional personalisation features, where you have given your prior, freely given consent. You may withdraw consent at any time by updating your account preferences or contacting support.
How We Use Your Personal Data
bexch uses personal data collected from Users for the following purposes:
- Account Management: Creating, maintaining and administering your bexch account, including verifying your identity and processing account status changes.
- Service Delivery: Processing deposits and withdrawals, settling winning bets, crediting bonuses and providing access to sports betting, live casino and slot gaming products.
- KYC & Compliance: Verifying your identity, age and payment method as required under applicable KYC/AML obligations and the operator's licensing conditions.
- Customer Support: Responding to your queries, resolving complaints, providing account assistance and maintaining records of support interactions.
- Responsible Gambling: Monitoring your account activity for indicators of potential problem gambling, applying spending or session limits you have set, and providing relevant responsible gambling tools or support information where appropriate.
- Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, account takeover attempts and other abusive behaviour on the platform.
- Platform Improvement: Analysing aggregated usage data to improve the user interface, game selection, payment flows and overall platform performance.
- Marketing Communications: Sending you promotional offers, bonus announcements and platform updates by email or in-platform notification, where you have consented to receive such communications and have not subsequently withdrawn that consent.
- Legal Compliance: Maintaining records and fulfilling reporting obligations as required by the operator's licensing jurisdiction and applicable law.
bexch does not sell, rent or trade your personal data to third parties for their own marketing or commercial purposes. Data is shared with third parties only as described in Section 07 of this Policy.
Data Sharing & Disclosure
We may share your personal data with the following categories of third parties, strictly for the purposes described and subject to appropriate contractual and technical safeguards:
- Payment Service Providers: Third-party payment processors and financial institutions — which may include providers familiar to Pakistani users such as bank transfer processors, digital wallet operators or cryptocurrency exchange services — in connection with processing your deposits and withdrawals. These providers process data only as necessary to complete financial transactions and are bound by their own regulatory obligations.
- Identity Verification Partners: Third-party KYC and identity document verification services engaged to assist with compliance obligations. These processors act under bexch's instructions and under contractual data processing agreements.
- Fraud & AML Compliance Services: Third-party fraud detection and anti-money laundering screening tools used to monitor transaction patterns and flag potentially suspicious activity.
- Game Content Providers: Third-party game studios and software providers whose games are offered on the bexch platform. These providers may receive session data necessary to operate their games but do not receive your full personal profile.
- Analytics Providers: Third-party analytics tools used to analyse aggregated, anonymised platform usage data for performance and service improvement purposes.
- Legal & Regulatory Authorities: Regulatory bodies, law enforcement agencies and courts, where we are legally required to disclose personal data — for example, in response to a court order, regulatory investigation or mandatory reporting obligation.
- Professional Advisers: Legal counsel, auditors and compliance consultants, where access to personal data is necessary in connection with their professional services to bexch.
bexch does not disclose personal data to any party outside the categories listed above without your prior explicit consent, except where required by law.
International Data Transfers
bexch operates as an internationally based platform. As a result, your personal data may be transferred to and processed in countries outside Pakistan and outside the European Economic Area (EEA). This includes the jurisdiction in which bexch holds its operating licence and the countries where our technology infrastructure and third-party service providers are based.
Where personal data is transferred internationally, bexch takes steps to ensure that appropriate safeguards are in place to protect your data — including contractual obligations on data recipients consistent with applicable international data protection frameworks.
Pakistan does not currently have a comprehensive data protection law equivalent to the EU's GDPR. By using bexch, Pakistani users acknowledge that their data is processed under the legal framework of the operator's licensing jurisdiction. bexch applies data protection principles consistent with international best practice regardless of user location.
Data Retention
bexch retains personal data for as long as necessary to fulfil the purposes for which it was collected, and to comply with applicable legal, regulatory and contractual obligations. The following general principles apply:
- Active Accounts: Personal data is retained for the duration that your account remains active on the platform.
- Closed Accounts: Following account closure, personal data is retained for a minimum period required by applicable regulatory obligations — typically five (5) to seven (7) years — to comply with AML record-keeping requirements, licensing conditions and potential legal proceedings.
- KYC Documents: Identity verification documents are retained for the period required by the operator's licensing jurisdiction's AML/KYC regulations, after which they are securely deleted.
- Support Records: Communications and support records are retained for a period of up to five (5) years to support dispute resolution and quality assurance purposes.
- Analytics Data: Aggregated, anonymised analytics data may be retained indefinitely as it does not constitute personal data once anonymised.
- Marketing Consent: Records of marketing consent are retained for the duration of the consent and for a reasonable period thereafter to demonstrate compliance.
When personal data is no longer required for any retained purpose, it is securely deleted or anonymised using industry-standard methods.
Cookies & Tracking Technologies
bexch uses cookies and similar tracking technologies to operate the platform, maintain session security, analyse usage patterns and improve the overall user experience. By using the platform, you acknowledge the use of cookies as described in this section.
You may manage cookie preferences through your browser settings. Note that disabling certain cookies — particularly essential and security cookies — may significantly impair your ability to use the bexch platform.
Your Data Rights
Subject to applicable law and the legal basis on which data is processed, you may have the following rights in relation to your personal data held by bexch. To exercise any of these rights, contact us as described in Section 16.
Right of Access
Request a copy of the personal data bexch holds about you, along with information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data. You may also update many details directly within your account settings.
Right to Erasure
Request deletion of your personal data where there is no overriding legal obligation — such as a mandatory retention period — that requires us to keep it.
Right to Restrict Processing
Request that we limit how your data is used — for example, while a dispute about accuracy is resolved — rather than deleting it outright.
Right to Portability
Where technically feasible and legally applicable, receive your personal data in a structured, machine-readable format for transfer to another controller.
Right to Object
Object to processing carried out on legitimate interests grounds, including direct marketing. bexch will cease processing unless a compelling overriding interest exists.
Withdraw Consent
Where processing is based on consent — such as marketing emails — withdraw that consent at any time. Withdrawal does not affect prior processing carried out under the original consent.
Lodge a Complaint
File a complaint with the data protection supervisory authority of the relevant jurisdiction if you believe your data rights have been infringed.
bexch will respond to data rights requests within a reasonable period and in accordance with applicable legal timescales. We may need to verify your identity before processing a rights request.
Children & Minors
The bexch platform is strictly for adults aged 18 years or older, or the higher minimum age required by the operator's licensing jurisdiction. We do not knowingly collect, store or process personal data belonging to persons under the applicable minimum age.
If bexch becomes aware that personal data has been collected from a minor — through the account registration process, KYC verification or any other channel — that data will be deleted and the associated account will be closed immediately.
If you share devices with younger family members, we strongly recommend enabling device-level parental controls to prevent unauthorised access to the bexch platform. Keep your account credentials private. If you believe a minor has registered an account using false age information, contact support immediately.
Security Measures
bexch implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:
- HTTPS / SSL Encryption: All data transmitted between your browser and the bexch platform is encrypted in transit using industry-standard TLS/SSL protocols.
- Access Controls: Personal data is accessible only to bexch personnel and authorised processors who require access for a specified legitimate purpose. Role-based access controls are applied.
- Two-Factor Authentication: Account login security is strengthened through optional two-factor authentication. Users are encouraged to enable this feature in account settings.
- Data Storage Security: Personal data is stored on secure servers with appropriate technical protections, including encryption at rest for sensitive data categories.
- Breach Response Procedures: bexch maintains documented procedures for responding to personal data security incidents. Where a breach is likely to result in a high risk to affected individuals, notification will be provided in accordance with applicable law.
- Regular Reviews: Security controls and procedures are reviewed periodically to ensure they remain appropriate given evolving threats and changes in the operational environment.
No data transmission over the internet can be guaranteed to be completely secure. While bexch takes reasonable steps to protect your data, we cannot guarantee absolute security. Users are also responsible for keeping their own login credentials confidential.
Third-Party Links & Services
The bexch platform may contain references to third-party services, payment providers and game studios. While bexch takes care to work with reputable partners, we do not control and are not responsible for the privacy practices of third-party services.
Payment method names referenced on bexch — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are listed for user familiarity only. None of these institutions are affiliated with, endorse or have a data processing relationship with bexch. If you interact directly with any payment provider, their own privacy policy governs that interaction.
Users are encouraged to review the privacy policies of any third-party service they interact with in connection with their bexch account, including payment processors and identity verification services.
Changes to This Privacy Policy
bexch reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or operational requirements. When we make material changes, we will update the effective date displayed at the top of this page and, where appropriate, provide notice to registered Users via email or in-platform notification.
We recommend reviewing this Privacy Policy periodically. Your continued use of the bexch platform following the publication of an updated Policy constitutes your acknowledgment of and agreement to the revised terms.
If any change to this Policy results in a material reduction of your rights or imposes materially different obligations on you, we will provide reasonable advance notice before the change takes effect and offer you the opportunity to close your account if you do not accept the updated Policy.
Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how bexch has handled your personal data, please contact us using the following details:
- Email: [email protected] (plain text only — not a clickable link)
- Live Chat: Available 24/7 through the bexch platform interface.
- Subject Line: For data rights requests, please use the subject line "Data Rights Request — [Your Name]" to ensure prompt routing to the appropriate team.
- Response Timeframe: bexch aims to acknowledge data rights requests within 5 business days and to provide a substantive response within the timeframe required by applicable law (typically 30 days, extendable where necessary).
If you are dissatisfied with our response to a data rights request or a privacy complaint, you may have the right to lodge a complaint with the data protection supervisory authority in the jurisdiction under whose laws your rights arise. bexch will cooperate with any such authority in connection with a complaint investigation.
How bexch Protects Your Data
A brief overview of the key principles and practices that govern data handling at bexch.
End-to-End SSL Encryption
All communication between your device and the bexch platform is secured using HTTPS/SSL. Your login credentials, payment details and personal information are encrypted in transit at all times.
No Data Sales — Ever
bexch does not sell, rent or trade your personal data to third parties for marketing or commercial gain. Data sharing is limited to operational partners bound by confidentiality obligations.
Your Rights, Clearly Stated
Access, correction, deletion, portability and objection rights are documented in plain English. You can exercise any of these rights by contacting the bexch support team directly.
Defined Retention Periods
Your data is not kept indefinitely. bexch applies defined retention periods based on legal obligations and operational need. Data no longer required is securely deleted or anonymised.
KYC Data Handled Securely
Identity documents submitted for KYC verification are subject to enhanced security controls and handled only by authorised personnel. Documents are retained only for the period required by regulatory obligations.
Consent-Based Marketing
Promotional communications are sent only where you have provided prior consent. You can unsubscribe from marketing at any time through your account preferences or by contacting support.
Questions About Your Privacy on bexch?
Our support team is available 24/7 to help with any data questions. You can also review our FAQ or visit the homepage for the full platform overview.
Adults 18+ only, or the higher minimum required by the operator/license jurisdiction. Local laws in Pakistan may restrict gambling participation. Please understand applicable local regulations before using the platform.