Privacy Policy

Introduction

bplxch ("we", "us", "our", "the Platform", "the Operator") is committed to protecting the privacy and personal data of every individual who accesses or uses the bplxch website at https://bplxch.cam ("you", "your", "the User"). This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure and protection of your personal data in connection with your use of the Platform and all associated services.

This Policy is to be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and bplxch. In the event of a conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.

By creating an account, accessing the Platform or submitting personal data to bplxch in any form, you acknowledge that you have read, understood and consented to the practices described in this Policy. If you do not agree, you must not use the Platform or submit any personal data to us.

Definitions

The following defined terms are used consistently throughout this Privacy Policy.

Personal Data We Collect

bplxch collects Personal Data through multiple channels, including account registration forms, KYC verification submissions, deposit and withdrawal processes, customer support communications, and automatic data collection from your device when you use the Platform.

• Full legal name as it appears on your government-issued identity document
• Date of birth (to verify age eligibility)
• Email address and, where provided, mobile phone number
• Residential address (street, city, postal code, country)
• Username and encrypted password hash
• Account preferences and communication opt-in status

• Copy of government-issued photo identification — CNIC, passport or equivalent
• Proof of residential address (utility bill, bank statement or equivalent, where required)
• Selfie or liveness check image paired with your identity document
• Source-of-funds documentation (payslips, bank statements) where requested for AML purposes

• Deposit and withdrawal amounts, dates, methods and transaction identifiers
• Payment instrument references (masked card numbers, wallet IDs, bank account references) — full card or account numbers are not stored by bplxch
• Bonus balances, wagering history and account statement data

• IP address, device type, operating system, browser type and version
• Geolocation data inferred from IP address (not GPS-level location unless separately consented)
• Pages visited, session duration, click patterns and navigation paths on the Platform
• Referring URL and search terms used to arrive at the Platform

• Content of live chat transcripts, email correspondence and support tickets submitted to bplxch
• Survey responses and feedback forms (where submitted voluntarily)

Data Processing — How We Use Your Information

bplxch processes your Personal Data only for the purposes described in this section. We do not use your data for purposes incompatible with those stated here without first obtaining your explicit consent or establishing a separate legal basis.

Legal Basis for Processing

Where data protection legislation requires us to identify a lawful basis for each category of processing, bplxch relies on the following bases:

• Contractual Necessity: Processing required to provide you with the Platform services under our Terms & Conditions, including account management, payment processing and KYC.
• Legal Obligation: Processing necessary to comply with AML requirements, regulatory licensing obligations, tax reporting duties and valid law enforcement requests.
• Legitimate Interests: Processing for fraud detection, security monitoring, platform improvement and responsible gambling safeguarding, where these interests do not override your fundamental rights.
• Consent: Processing for marketing communications, non-essential cookies and any purpose for which we have specifically sought your opt-in. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

bplxch does not sell your Personal Data to any third party for commercial or marketing purposes. We share your data only in the following circumstances, and only to the minimum extent necessary for the stated purpose.

We engage regulated third-party service providers who process data on our behalf under contractual agreements that require them to maintain the same level of data protection as bplxch. These include:

• KYC and identity verification providers
• Payment processors and fraud detection services
• Cloud hosting, database and infrastructure providers
• Customer support platform providers
• Analytics platforms processing anonymised usage data

We may disclose Personal Data to licensing authorities, financial intelligence units, tax authorities and law enforcement agencies where required to do so by law, regulation, court order or other lawful authority. We will notify you of such disclosures where legally permitted to do so.

In the event of a merger, acquisition, asset sale or corporate restructuring involving bplxch, your Personal Data may be transferred to the relevant acquiring or successor entity. You will be notified of any such transfer and your rights under this Policy will continue to apply.

bplxch will share your data with third parties for any purpose not described above only upon your explicit, informed and freely given consent. You have the right to withdraw such consent at any time.

International Data Transfers

bplxch operates in the operator's licensing jurisdiction, which may be outside Pakistan. Your Personal Data may therefore be transferred to and processed in countries other than Pakistan. Where such transfers occur, bplxch takes appropriate steps to ensure that your Personal Data receives an adequate level of protection, including through the use of contractual safeguards with data processors and sub-processors.

By using the Platform, you acknowledge that your Personal Data may be transferred internationally as described in this section. If you have concerns about international data transfers, please contact us using the details in Section 16.

Data Retention

bplxch retains Personal Data only for as long as is necessary for the purposes described in this Policy, unless a longer retention period is required by law, regulation or licensing obligations.

• Account data is retained for the duration of your account and for a minimum period following account closure as required by the operator's AML and licensing obligations (typically five years or as specified by the applicable regulatory framework).
• KYC documents are retained for the period required by the operator's licensing authority to satisfy AML and age-verification obligations.
• Transaction records are retained for the minimum period required by applicable financial regulatory obligations.
• Support communications are retained for a reasonable period to resolve disputes and improve service quality.
• Marketing consent records are retained for as long as required to demonstrate consent was obtained and until consent is withdrawn.

Upon expiry of the applicable retention period, your Personal Data will be securely deleted or anonymised so that it can no longer be attributed to you as an individual.

Cookies & Tracking Technologies

bplxch uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain session security and understand how users interact with our content.

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies for login authentication and security tokens. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language, display settings and responsible gambling tool configurations across sessions.
• Analytical Cookies: Collect aggregated, anonymised data about how users navigate the Platform to help us improve performance and user experience.
• Marketing Cookies: Track visits and interactions to enable targeted promotional communications where you have consented. These are not deployed without your explicit opt-in.

You may manage or disable non-essential cookies through your browser's privacy or cookie settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Detailed instructions for managing cookies are available in the help documentation of your browser.

Your Data Rights

Depending on the data protection laws applicable in your jurisdiction, you may have the following rights in relation to your Personal Data held by bplxch. To exercise any of these rights, submit a written request to [email protected]. We will respond within 30 days, or such shorter period as required by applicable law.

KYC & Document Privacy

Identity documents submitted as part of the KYC process — including CNIC, passport, proof of address and selfie/liveness data — are among the most sensitive categories of Personal Data we handle. bplxch applies heightened care to these documents.

• KYC documents are processed only for identity verification, age confirmation and AML compliance purposes. They are not used for marketing or shared with unauthorised parties.
• Access to KYC documents is restricted to authorised personnel and contracted KYC verification providers operating under strict data processing agreements.
• Documents are stored in encrypted form and retained only for the period mandated by the operator's licensing authority.
• You must submit KYC documents exclusively through the Platform's official secure HTTPS verification portal. Never send identity documents via unsecured email, WhatsApp, social media or any channel initiated outside your authenticated account dashboard.

Minors and Age Restriction

bplxch is strictly an adults-only platform. The collection of Personal Data from individuals under the age of 18 — or the higher minimum age required by the operator's licensing jurisdiction — is not permitted. We do not knowingly collect, store or process data belonging to minors.

Age verification is a mandatory component of the KYC process. Where bplxch discovers that Personal Data has been collected from a minor, we will delete that data without delay, close the associated account and, where required by law, report the matter to the relevant authority. Any funds deposited by a minor will be dealt with in accordance with the operator's Terms & Conditions and applicable legal requirements.

Security Measures

bplxch implements technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, destruction, alteration or disclosure. These include:

• HTTPS/TLS Encryption: All data transmitted between your device and the Platform is encrypted in transit using TLS protocols. Verify the padlock icon in your browser address bar at all times.
• Access Controls: Personnel access to Personal Data is limited to those with a legitimate need and is subject to role-based access controls and audit logging.
• Encrypted Storage: Sensitive data categories, including KYC documents and financial records, are stored in encrypted form at rest.
• Fraud and Intrusion Monitoring: Automated systems monitor Platform activity for anomalous patterns indicative of fraud, unauthorised access or cyberattacks.
• Incident Response: bplxch maintains a data breach response procedure. In the event of a breach likely to cause harm to affected individuals, we will notify those individuals and relevant authorities in accordance with applicable law.

While we take reasonable steps to protect your data, no internet-based system is completely immune to security risks. You should also maintain the security of your own account by using a strong, unique password and not sharing your credentials with any third party.

Third-Party Links & Services

The Platform may contain references to third-party payment providers, game studios and sports data partners. Where third-party technology is integrated into the Platform (for example, game content rendered within an iFrame), the relevant third party may collect technical data subject to their own privacy policies.

bplxch is not responsible for the data practices of third-party providers and cannot control how those providers collect, use or store information. Users are encouraged to review the privacy policies of any third-party service with which they interact.

Amendments to This Policy

bplxch reserves the right to amend this Privacy Policy at any time. The current version will always be accessible at https://bplxch.cam/privacy-policy and will carry an updated "Last Updated" date. Continued use of the Platform following the publication of an amended Policy constitutes your acceptance of the revised terms.

Where a material change to this Policy may significantly affect your rights or the way we process your data, we will endeavour to provide reasonable advance notice via email to your registered address or via a prominent in-Platform notice before the change takes effect. It is your responsibility to review this Policy periodically.

Contact Us

If you have questions, concerns or requests relating to this Privacy Policy or the handling of your Personal Data by bplxch, please contact our support team using the information below. Data subject rights requests must be submitted in writing and will be acknowledged within five working days and resolved within 30 days or such shorter period as required by applicable law.