At bpesch, we take the privacy and security of your personal information seriously. This Privacy Policy explains precisely what data we collect from players across Karachi, Lahore, Islamabad, Faisalabad, and throughout Pakistan, how we use it, who we share it with, how long we keep it, and what rights you hold over your own information.
Six core principles that guide how bpesch handles your personal data across every interaction on the platform.
bpesch collects only the personal data that is strictly necessary for account registration, KYC verification, payment processing, and regulatory compliance. We do not collect data beyond what serves a clearly defined and legitimate purpose.
All personal data stored by bpesch is protected using industry-standard AES-256 encryption at rest and TLS 1.3 encryption in transit. Our infrastructure undergoes regular security audits, and access to personal data is strictly limited on a need-to-know basis.
bpesch will never sell, rent, or trade your personal data to any third party for marketing or advertising purposes. Data sharing occurs only where required for service delivery, fraud prevention, or by legal and regulatory obligation.
You have the right to access, correct, export, and request deletion of your personal data held by bpesch. Requests are processed within 30 days. You also have the right to object to certain processing activities, including profiling for marketing purposes.
bpesch retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and regulatory obligations. Retention periods vary by data type and are set out in Section 7 of this Policy.
bpesch's data practices are designed to comply with applicable data protection legislation and the requirements of our international gaming license. KYC and AML obligations require us to retain certain data as prescribed by regulatory authorities, and we fulfil those obligations in full.
This Privacy Policy ("Policy") is issued by bpesch and governs the collection, processing, storage, and disclosure of personal data relating to users ("you", "User", "Player") of the bpesch online gaming and sports betting platform accessible at bpesch.net (the "Platform").
bpesch operates as Pakistan's premier cricket betting and online casino platform, serving players across major cities including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and Peshawar, as well as users throughout Pakistan and internationally. In the course of providing our services — which include cricket betting markets, live casino games, slot products, account management, and payment processing — bpesch necessarily collects and processes personal data about its users.
We understand that your personal data is valuable and sensitive. This Policy is designed to provide you with a clear and transparent account of exactly how bpesch handles your information, so that you can make informed decisions about using our Platform.
Key Point: By registering an Account on bpesch or continuing to use the bpesch Platform, you confirm that you have read and understood this Privacy Policy. This Policy forms part of bpesch's overall User Agreement alongside the Terms & Conditions and the Responsible Gaming Policy.
If you have any questions about how bpesch processes your personal data, our dedicated support team is available 24/7 and can be reached at [email protected].
For the purposes of applicable data protection legislation, bpesch acts as the data controller in respect of all personal data collected and processed through the Platform. As data controller, bpesch is responsible for determining the purposes and means of processing your personal data.
bpesch operates under an internationally recognized gaming license which imposes specific obligations regarding the collection, retention, and security of player data, including KYC documentation and transaction records. All data processing activities undertaken by bpesch are designed to meet or exceed the requirements imposed by our licensing authority.
Where bpesch engages third-party service providers — such as payment processors, KYC verification services, fraud prevention platforms, or game software suppliers — those parties act as data processors on bpesch's behalf and are contractually bound to process personal data only in accordance with bpesch's documented instructions and applicable data protection standards.
bpesch collects the following categories of personal data in the course of providing the Platform and its associated services:
| Data Category | Specific Data Points | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, CNIC document image (front and back) | KYC verification |
| Contact Data | Pakistani mobile number, email address (if provided) | Account registration |
| Financial Data | JazzCash / EasyPaisa / bank account details used for deposits and withdrawals, transaction histories | Payment processing |
| Account Data | Username, encrypted password, account balance, bonus balance, account status | Account management |
| Transaction Data | Deposit records, withdrawal records, bet histories, game session histories, win/loss records | Platform usage |
| Technical Data | IP address, device type, operating system, browser type, device identifiers | Automatic collection |
| Usage Data | Pages visited, features used, session duration, navigation paths, click data | Automatic collection |
| Communications Data | Support chat transcripts, email correspondence, live chat logs | Customer support |
| Responsible Gaming Data | Self-exclusion status, deposit limits set, cooling-off periods, problem gambling flags | Responsible gaming tools |
Note on Sensitive Data: CNIC documentation constitutes a form of government-issued identity document and is treated with the highest level of data security by bpesch. CNIC images and extracted data are stored in an encrypted, access-controlled environment and are only accessed by authorized compliance personnel for KYC verification purposes.
bpesch collects personal data through the following means:
4.1 Direct Collection. Data you provide directly to bpesch when you register an Account, complete KYC verification, make a deposit or withdrawal, place a bet or play a game, contact our customer support team, or participate in a bpesch promotion.
4.2 Automated Technical Collection. Data collected automatically through your use of the Platform, including via cookies, web beacons, pixel tags, log files, and similar technologies. This includes IP addresses, device identifiers, session data, and usage analytics. See Section 10 for full details of bpesch's cookie practices.
4.3 Third-Party Sources. Data received from third parties in limited circumstances, including:
bpesch does not purchase personal data lists from data brokers or marketing data aggregators.
bpesch uses the personal data it collects for the following specific purposes:
No Automated Decision-Making: bpesch does not make decisions that have a significant legal or similarly significant effect on you based solely on automated processing without human review. Where automated systems flag an account for review, a human compliance officer reviews the flag before any action is taken.
bpesch processes your personal data under one or more of the following legal bases:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contract Performance | Account creation and management, payment processing, game and betting service delivery, customer support |
| Legal Obligation | KYC/AML compliance, regulatory reporting, retention of financial records, responses to lawful authority requests |
| Legitimate Interests | Fraud prevention, platform security, service improvement analytics, responsible gaming monitoring |
| Consent | Marketing communications (email/SMS promotional offers). Consent may be withdrawn at any time via Account settings |
bpesch retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, including any applicable legal, regulatory, or contractual retention obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| KYC Identity Documents | 5 years from account closure | AML / gaming license regulatory requirement |
| Financial Transaction Records | 5 years from transaction date | AML / accounting compliance |
| Betting & Game History | 5 years from activity date | Dispute resolution / regulatory audit |
| Account Data (active accounts) | Duration of account + 5 years | Legal obligation and dispute resolution |
| Customer Support Records | 3 years from last interaction | Dispute resolution |
| Self-Exclusion Records | Indefinite | Responsible gaming obligation — to prevent re-registration |
| Marketing Consent Records | Until consent withdrawn + 1 year | Proof of consent |
| Technical / Usage Data | 13 months from collection | Analytics and security |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with bpesch's internal data deletion procedures. Anonymized data (where all identifying information has been removed) may be retained indefinitely for statistical analysis purposes.
bpesch does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:
8.1 Service Providers. bpesch engages carefully selected third-party service providers who process personal data on our behalf as data processors, including:
All service providers are bound by data processing agreements requiring them to process personal data only on bpesch's documented instructions and to maintain appropriate technical and organizational security measures.
8.2 Regulatory and Legal Disclosure. bpesch may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, a valid court order, or as required by our gaming licensing authority. bpesch will, where legally permitted, notify affected users of such disclosures.
8.3 Business Transfers. In the event that bpesch undergoes a merger, acquisition, or sale of its business or assets, personal data held by bpesch may be transferred to the successor entity as part of that transaction. Users will be notified of any material change in the identity of the data controller resulting from such a transaction.
8.4 With Your Consent. bpesch may share personal data with third parties where you have provided explicit prior consent to such sharing for a specific identified purpose.
bpesch operates internationally and some of the third-party service providers engaged by bpesch may process personal data in jurisdictions outside of Pakistan. Where personal data is transferred to countries that do not provide a level of data protection equivalent to that applicable in Pakistan, bpesch implements appropriate safeguards to protect the data, including:
By using the bpesch Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan in the manner described in this Section.
bpesch uses cookies and similar tracking technologies on the Platform to enable core functionality, improve user experience, and gather analytics data. The following categories of cookies are used:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Session authentication, account login state, security tokens, load balancing | Session duration |
| Functional | User preferences, language settings, remembered login details (if enabled by user) | Up to 12 months |
| Analytics | Platform usage statistics, feature engagement, error tracking, performance monitoring | Up to 13 months |
| Fraud Prevention | Device fingerprinting, suspicious behavior detection, bot identification | Up to 12 months |
bpesch does not deploy third-party advertising cookies or cross-site tracking cookies for the purpose of building advertising profiles. You may configure your browser settings to refuse cookies; however, disabling strictly necessary cookies will prevent you from logging in and using core Platform features.
bpesch implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Key security measures include:
Your Role in Security: While bpesch takes every reasonable measure to protect your data, you also play an important part. Keep your bpesch login credentials confidential, use a strong and unique password, enable two-factor authentication, and notify bpesch immediately if you suspect any unauthorized access to your Account.
Subject to applicable data protection law, you hold the following rights in respect of your personal data held by bpesch. To exercise any of these rights, contact bpesch at [email protected] with the subject line "Data Rights Request".
Request a copy of all personal data bpesch holds about you (Data Subject Access Request).
Request correction of inaccurate or incomplete personal data held by bpesch.
Request deletion of your personal data where no overriding legal obligation requires its retention.
Request that bpesch restrict the processing of your personal data in certain circumstances.
Request a machine-readable export of your personal data in a structured, commonly used format.
Object to processing based on legitimate interests or direct marketing, including profiling for marketing purposes.
All data rights requests will be acknowledged within five (5) business days and fulfilled within thirty (30) calendar days of receipt. Where a request is particularly complex or relates to a large volume of data, bpesch may extend this period by a further thirty (30) days and will notify you of the extension and the reason for it.
bpesch may require proof of identity before processing a data rights request to prevent unauthorized disclosure of personal data. Requests will be fulfilled free of charge unless the request is manifestly unfounded, excessive, or repetitive, in which case bpesch may charge a reasonable administrative fee or refuse the request.
The bpesch Platform is strictly restricted to individuals aged 21 years or older. bpesch does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age is verified as part of bpesch's mandatory KYC process before any withdrawal is permitted.
If bpesch becomes aware that a registered Account belongs to an individual under 21 years of age — whether through failed KYC verification, self-disclosure, or third-party report — that Account will be immediately closed, all balances forfeited, and all personal data associated with the Account deleted in accordance with bpesch's child protection obligations.
Parents or guardians who believe their child may have provided personal data to bpesch should contact bpesch support immediately at [email protected] with the subject line "Underage Account Report" so that appropriate action can be taken.
The bpesch Platform may contain links to third-party websites or services, including payment provider websites, game provider sites, or responsible gaming support resources. bpesch is not responsible for the privacy practices or content of those third-party sites.
When you click a link to a third-party site, you are leaving the bpesch Platform and will be subject to the privacy policy and terms of service of that third-party site. bpesch encourages you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies solely to personal data collected by bpesch through the bpesch Platform.
bpesch reserves the right to amend, modify, or update this Privacy Policy at any time to reflect changes in bpesch's data processing practices, new regulatory requirements, or changes to applicable data protection legislation. The effective date of the current version of this Policy is displayed at the top of this page.
Where bpesch makes material changes to this Policy that would significantly affect how we process your personal data, we will provide advance notice via email to the email address registered to your Account (if provided), or by displaying a prominent notice on the Platform. Your continued use of the Platform following such notice constitutes your acceptance of the revised Policy.
bpesch recommends that you review this Privacy Policy periodically to remain informed of how we collect, use, and protect your personal data.
Privacy Queries. If you have any questions, concerns, or require clarification regarding this Privacy Policy or bpesch's data processing practices, you may contact our privacy team at:
Data Rights Requests. To exercise any of the data rights described in Section 12 of this Policy, send an email to [email protected] with the subject line "Data Rights Request" and specify which right you wish to exercise.
Complaints. If you believe that bpesch has processed your personal data in a manner that violates applicable data protection legislation, or if you are dissatisfied with how bpesch has handled a data rights request, you have the right to lodge a complaint with bpesch's privacy team in the first instance. If you remain dissatisfied following bpesch's response, you may lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
Document Status: This Privacy Policy is effective as of 1 January 2026 and supersedes all prior versions. bpesch's legal and compliance team reviews this Policy on a regular basis to ensure it remains accurate and compliant with evolving data protection standards. Version control and change history is maintained internally for audit purposes.
At bpesch, we believe that transparency builds trust. Now that you understand how we protect and handle your personal data, join over 500,000 Pakistani players who trust bpesch for secure cricket betting and casino gaming. 21+ only. Play responsibly.