Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by Betpex ("Betpex", "we", "us", "our") and applies to all personal data collected through the Betpex website located at betpex.cam, its associated mobile site, any applications and all related services (collectively, the "Platform").

We understand that privacy matters deeply to our players, including those accessing the Platform from cities across Pakistan such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. This Policy is designed to give you a clear, honest picture of how your personal information is collected, stored, used and protected.

By registering an account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any aspect of this Policy, you should not use the Platform.

2. Definitions

The following definitions apply throughout this Policy:

• "Controller" means Betpex, the entity that determines the purposes and means of processing your personal data.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed — in the context of this Policy, this principally means registered Players.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, financial details and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure or destruction.
• "Processor" means any third party that processes personal data on behalf of Betpex, subject to a data processing agreement.
• "Special Category Data" means particularly sensitive personal data including health information, which may be relevant in the context of responsible gambling assessments.
• "Player" means a natural person who has registered an account on the Platform.

3. Data We Collect

Betpex collects personal data in the following categories:

3.1 Registration Data

When you create an account, we collect: full legal name, date of birth, email address, residential address, username and password (stored in hashed form). You may optionally provide a phone number to enable two-factor authentication or account recovery.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations, we may collect copies of government-issued identification (such as a national identity card or passport), proof of address documents and, where required, source-of-funds documentation.

3.3 Financial Data

We collect details of deposits and withdrawals made through the Platform, including transaction amounts (in PKR or other applicable currencies), payment method references and transaction timestamps. We do not store full payment card numbers on our servers — card data is tokenised by our payment processors.

3.4 Betting & Gaming Activity

We record your betting history, wagering patterns, game selections, session durations and outcomes. This data is used to operate the Platform, detect fraud and fulfil our responsible gambling obligations.

3.5 Technical & Device Data

We automatically collect the following technical data when you access the Platform:

• IP address and approximate geolocation;
• Browser type and version;
• Device type, operating system and screen resolution;
• Pages visited, time on page and navigation paths;
• Referring URLs and exit pages.

3.6 Communications Data

When you contact our support team — whether by email, live chat or any other channel — we retain records of those communications, including the content of messages, timestamps and any supporting files you provide. This data is used to resolve your enquiry and improve service quality.

3.7 Data from Third Parties

In limited circumstances, we may receive personal data about you from third-party sources, such as identity verification agencies, fraud prevention databases or public registers, where this is necessary to meet legal or regulatory obligations.

4. Legal Basis for Processing

We process your personal data only where a valid legal basis exists. The legal bases we rely on are set out in the table below:

Where we rely on legitimate interests as the legal basis, we have assessed that our interests are not overridden by your interests, fundamental rights or freedoms, taking into account the reasonable expectations of players using a betting platform.

Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

5. How We Use Your Data

Betpex uses the personal data we collect for the following purposes:

5.1 Platform Operations

To create and manage your account, process bets and transactions, display your account history and balances, and provide access to all Platform features including sports betting markets covering Pakistan cricket, PSL T20 fixtures, ICC tournaments and other live sports.

5.2 Identity Verification & Compliance

To verify your identity in accordance with our KYC obligations, conduct AML checks and satisfy any regulatory reporting requirements imposed on Betpex by applicable law. We may share data with licensed identity verification providers as part of this process.

5.3 Fraud Prevention & Security

To detect, investigate and prevent fraudulent transactions, bonus abuse, multi-accounting and other prohibited conduct described in our Terms & Conditions. This includes automated monitoring of betting patterns and account behaviour.

5.4 Responsible Gambling

To monitor player behaviour for signs of problem gambling, enforce self-exclusions and limit restrictions, and fulfil our duty-of-care obligations. Betpex may use your gaming activity data to identify players who may benefit from responsible gambling tools or intervention.

5.5 Customer Support

To respond to your queries, complaints and feedback. Support is available in English and Urdu, 24 hours a day, seven days a week. Communication records are retained for quality assurance and dispute resolution purposes.

5.6 Marketing (With Consent)

Where you have opted in to marketing, we may send you promotional offers, product updates, bonus notifications and event-related communications by email or other electronic means. You may withdraw consent and opt out at any time.

5.7 Analytics & Service Improvement

To understand how players use the Platform, identify technical issues, improve user experience and develop new features. Analytics data is generally processed in aggregated or pseudonymised form where possible.

6. Data Sharing

Betpex does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for each purpose:

6.1 Service Providers (Processors)

We engage trusted third-party service providers to help us operate the Platform, including payment processors, identity verification agencies, fraud detection providers, cloud hosting providers and customer support platforms. All such providers are bound by data processing agreements requiring them to handle your data in accordance with applicable data protection law.

Payment references on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are provided as familiar contextual references for Pakistani players only. These names do not imply that any named payment provider has an affiliation with, endorses or supports Betpex or its data processing activities.

6.2 Regulatory & Legal Disclosure

We may disclose personal data to regulatory authorities, law enforcement agencies, courts or other public bodies where we are required to do so by law, by a court order, or where disclosure is necessary to protect the rights or safety of Betpex, its employees or other players.

6.3 Business Transfers

In the event that Betpex undergoes a merger, acquisition, restructuring or sale of all or part of its assets, personal data held by Betpex may be transferred to the acquiring entity as part of that transaction. We will notify affected players via a notice on the Platform or by email before any such transfer completes, where reasonably practicable.

6.4 Aggregated Data

We may share aggregated, anonymised statistical data about Platform usage with partners, investors or industry bodies. Such data does not identify individual players and is not considered personal data for the purposes of this Policy.

7. Cookies & Tracking Technologies

Betpex uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain session security and gather analytics data. The main categories of cookies we use are described below:

You can manage cookie preferences via the cookie settings panel available on the Platform. Note that disabling strictly necessary cookies will impair Platform functionality and may prevent you from logging in to your account.

Most web browsers also allow you to manage cookies directly through browser settings. Refer to your browser's help documentation for guidance on how to view, block or delete cookies.

8. Data Retention

Betpex retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or regulation. Our general retention guidelines are as follows:

• Account data: Retained for the duration of the account relationship and for a minimum of five years following account closure, in accordance with AML regulatory requirements.
• KYC documentation: Retained for a minimum of five years from the date of the last transaction or account closure, whichever is later.
• Transaction records: Retained for a minimum of five years to support financial audit and regulatory compliance obligations.
• Betting activity: Retained for the life of the account and for five years post-closure.
• Support communications: Retained for up to three years from the date of the interaction, unless a longer period is required for dispute resolution.
• Marketing consent records: Retained for as long as you remain opted in, plus a reasonable period thereafter to demonstrate consent compliance.

When personal data is no longer required, Betpex will securely delete or anonymise it in accordance with our data retention schedule.

9. Data Security

Betpex implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest, including passwords (stored as salted hashes) and financial identifiers;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability testing of the Platform infrastructure;
• Two-factor authentication available to all players for account login;
• Incident response procedures to detect, contain and report data breaches in a timely manner.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, Betpex will notify affected individuals and the relevant supervisory authority in accordance with applicable legal requirements.

10. Your Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond to verified requests within the timeframe required by law.

11. International Data Transfers

Betpex operates internationally and your personal data may be transferred to, stored in, or processed in countries outside your country of residence. Where such transfers occur, Betpex ensures that appropriate safeguards are in place to protect your data, which may include:

• Standard contractual clauses approved by a competent data protection authority;
• Binding corporate rules where applicable;
• Transfers to countries recognised as providing an adequate level of data protection;
• Other legally recognised transfer mechanisms appropriate to the jurisdiction involved.

By using the Platform, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan. Betpex does not make any representations regarding the adequacy of data protection laws in any particular jurisdiction beyond its contractual and policy obligations.

12. Minors

The Platform is strictly intended for adults aged 18 years or over — or the higher minimum age required by the applicable license jurisdiction. Betpex does not knowingly collect or process personal data relating to minors. If we become aware that we have inadvertently collected data from a person under the minimum age, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered an account on the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

13. Policy Amendments

Betpex reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or operational requirements. When material changes are made, we will provide reasonable notice by posting a prominent notice on the Platform or by emailing you at your registered address.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy.

If any amendment materially affects the way we process your personal data in a manner that requires your consent, we will seek that consent before the amendment takes effect.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how Betpex handles your personal data, please contact our support team. We are available 24 hours a day, seven days a week, and aim to respond to all privacy-related enquiries within 30 days.

Support is available in English and Urdu. When contacting us about a data rights request, please include your registered email address and a description of the right you wish to exercise so that we can verify your identity and respond efficiently.

If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with a relevant data protection supervisory authority in your jurisdiction.