Privacy Policy

This Privacy Policy ("Policy") describes how bprxch ("bprxch", "we", "us", "our"), the operator of the online betting and casino platform available at https://bprxch.cam ("Platform"), collects, uses, stores, shares and protects the personal data of individuals ("Users", "you", "your") who access or use the Platform.

This Policy applies to all personal data processing activities conducted by bprxch in connection with the Platform, including account registration, identity verification, financial transactions, customer support, marketing communications (where opted in) and browsing activity. It applies to Users located in Pakistan and all other jurisdictions where the Platform is accessible.

By registering an Account or using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. Where consent is the applicable legal basis, it may be withdrawn at any time without affecting the lawfulness of prior processing.

The following terms carry the meanings assigned below unless the context requires otherwise:

The Data Controller for personal data processed through the bprxch Platform is the legal entity operating the bprxch brand under its applicable international gaming licence. For enquiries related to data protection, Users may contact the bprxch data team using the contact details provided in Section 15 of this Policy.

Where bprxch engages third-party Data Processors — such as payment processing providers, KYC and identity verification services, fraud detection platforms and customer support tools — those processors act on bprxch's documented instructions under written data processing agreements that impose equivalent confidentiality and security obligations.

bprxch collects personal data through three primary channels: data you provide directly, data generated automatically through your use of the Platform, and data received from authorised third-party sources.

4.1 Data You Provide Directly

4.2 Data Collected Automatically

4.3 Data Received from Third Parties

bprxch may receive supplemental identity or fraud-risk data from authorised KYC verification providers, credit reference agencies (where legally permitted), payment processors and fraud prevention databases to fulfil its regulatory obligations.

bprxch processes personal data only for the specific purposes described below, each supported by a recognised legal basis:

bprxch does not engage in automated decision-making that produces legal or similarly significant effects without human review, except where expressly disclosed and legally permissible.

bprxch does not sell personal data to third parties. Data may be shared with the following categories of recipients only to the extent necessary and under appropriate legal safeguards:

• KYC & Identity Verification Providers: Third-party services that process identity documents and perform liveness checks to fulfil age and identity verification requirements.
• Payment Processors: Entities facilitating deposit and withdrawal transactions. Where payment methods familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are referenced, they are noted as familiar local payment rails only. None of these providers endorses gambling or confirms support for bprxch. Data shared with payment processors is limited to what is necessary to complete the transaction.
• Fraud Detection & AML Screening Services: Providers that screen transactions and account behaviour against fraud and money laundering risk indicators.
• Regulatory & Licensing Authorities: bprxch may be required to disclose User data to its licensing authority or law enforcement agencies in response to a valid legal obligation, court order or regulatory request.
• Customer Support Tools: Third-party help desk and live chat software providers operating under data processing agreements with bprxch.
• Business Transfers: In the event of a merger, acquisition or asset sale, User personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

As an international platform, bprxch operates infrastructure and engages service providers across multiple jurisdictions. Personal data relating to Pakistani users and users in other locations may be transferred to and processed in countries outside the user's country of residence, including countries that may not provide an equivalent level of statutory data protection.

Where such transfers occur, bprxch implements appropriate safeguards, which may include:

• Standard contractual clauses approved by the relevant data protection authority in the operator's licensing jurisdiction.
• Adequacy decisions where the destination country has been assessed as providing an adequate level of data protection.
• Binding corporate rules or equivalent intra-group transfer mechanisms.

You may request information about the specific safeguards applied to your data in the context of international transfers by contacting our support team as described in Section 15.

bprxch retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, the resulting dataset is no longer considered personal data and falls outside the scope of this Policy.

bprxch implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. Measures include but are not limited to:

• Encryption in Transit: All data exchanged between your device and the Platform is encrypted using SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data — including KYC documents and financial records — is stored in encrypted form on our servers.
• Access Controls: Access to personal data is restricted to authorised bprxch personnel and contracted processors who require access to perform their functions. Role-based access management and audit logging are in place.
• Two-Factor Authentication: bprxch supports two-factor authentication for User accounts to reduce the risk of unauthorised access.
• Vulnerability Management: The Platform is subject to ongoing security monitoring and periodic vulnerability assessments.
• Data Breach Response: bprxch maintains an incident response procedure. In the event of a data breach that poses a risk to Users, affected Users will be notified without undue delay in accordance with applicable legal requirements.

Notwithstanding these measures, no system is entirely immune to security risks. Users are encouraged to use strong, unique passwords for their bprxch Accounts and to enable two-factor authentication where available.

bprxch uses cookies and similar tracking technologies on the Platform to deliver core functionality, remember your preferences, detect fraud, and understand how Users interact with the Platform. The following cookie categories are used:

• Essential Essential Cookies: Required for the Platform to function. These include session management cookies, login state cookies and security tokens. These cannot be disabled without impairing your ability to use the Platform.
• Functional Functional Cookies: Store your preferences such as language settings, odds format selection and responsible gambling tool configurations. Disabling these will not prevent Platform use but may affect your experience.
• Analytics Analytics Cookies: Used to collect aggregated, anonymised data about Platform usage — which pages are visited most, where Users navigate from, and session duration. This data helps bprxch improve the Platform. You may opt out of analytics cookies through your browser settings or the cookie management tool on the Platform.

Most browsers allow you to control cookies through their settings. Disabling certain cookies may affect Platform functionality. By continuing to use the Platform after being presented with the cookie notice, you consent to the use of cookies in accordance with this Policy.

Subject to applicable data protection law and any overriding legal obligations (such as AML record-keeping requirements), you have the following rights with respect to your personal data held by bprxch:

To exercise any of the above rights, please contact the bprxch support team using the details in Section 15. bprxch will respond to all verified requests within the timeframe required by applicable law (typically 30 days from receipt of a complete request). We may need to verify your identity before processing a request.

The bprxch Platform is strictly for adults. We do not knowingly collect personal data from individuals under the age of 18, or the higher minimum age required by the operator's licensing jurisdiction or applicable local law. The Platform's age verification (KYC) process is designed to identify and prevent underage access.

If bprxch becomes aware or has reasonable grounds to suspect that an Account is being operated by a minor, the Account will be immediately suspended pending investigation, and any personal data collected in connection with that Account will be deleted or returned in accordance with regulatory requirements.

If you are a parent or guardian and believe that your child has provided personal data to bprxch without your knowledge, please contact us immediately using the details in Section 15 and we will take appropriate action.

Financial data — including payment method details, transaction amounts and currency information — is collected solely for the purposes of processing deposits and withdrawals and fulfilling anti-money laundering compliance obligations.

bprxch does not store full payment card numbers on its servers. Card data is handled by our PCI-DSS compliant payment processing partners. Where familiar Pakistani payment methods are referenced — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — data shared with those processors is limited to what is strictly necessary to initiate or receive a payment.

Payment provider names are referenced as familiar local payment rails for Pakistani users only. None of these providers endorses gambling or confirms support for bprxch. Availability, processing rules and applicable fees are determined by the provider and the operator's current configuration and are subject to change.

Transaction records — including the amounts, dates and methods of deposits and withdrawals denominated in PKR or other currencies — are retained for the minimum periods required under AML regulations, as described in Section 8.

bprxch reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, applicable law, or the services provided on the Platform. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

For material changes — those that significantly affect how your personal data is collected, used or shared — bprxch will provide advance notice to registered Users via email or a prominent in-platform notification before the change takes effect. We encourage you to review this Policy periodically.

Continued use of the Platform following notification of a material change constitutes acceptance of the revised Privacy Policy. If you do not agree with the updated Policy, you should close your Account prior to the effective date of the change and request deletion of your personal data (subject to any applicable legal retention obligations).

For any questions or concerns relating to this Privacy Policy, to exercise your data protection rights, or to report a suspected data breach, please contact the bprxch team through the following channels:

• Live Chat: Available 24/7 through the Help Centre on the Platform. English and Urdu assistance available.
• Email: [email protected] — please include "Data Privacy Request" in the subject line along with your registered Account username.
• Help Centre: Accessible at all times for general data enquiries, access requests and opt-out requests.

bprxch will acknowledge all data protection enquiries promptly and will respond in full within the applicable legal timeframe — typically within 30 calendar days of receiving a complete, verified request. Complex requests may require additional time; if so, we will notify you of the extended timeline and reasons.