bpk365 Privacy Policy

1. Who We Are

1.1 bpk365 is an online casino and sports betting platform operating under an internationally recognised gaming licence. The bpk365 platform is accessible at bpk365.net and serves players across Pakistan, including in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and other cities.

1.2 For the purposes of this Privacy Policy, bpk365 is the data controller responsible for personal data collected through the platform. If you have any questions about how we handle your data, please contact us at the details provided in Section 14.

1.3 This Privacy Policy should be read alongside the bpk365 Terms & Conditions, which govern your overall use of the platform. Together, these two documents form the complete agreement between you and bpk365.

2. Categories of Personal Data We Collect

2.1 bpk365 collects personal data across the following categories, described in greater detail in the data inventory table above:

• Identity Data — including your full legal name, CNIC details, date of birth, and KYC photographs.
• Contact Data — including your mobile number, email address, and general location (city/province).
• Financial Data — including payment account details for JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT wallets used to deposit or withdraw funds.
• Technical Data — including IP address, device identifiers, browser and OS information, and session metadata.
• Usage Data — including your betting and gaming history, session durations, and platform navigation patterns.
• Marketing Preference Data — including your opt-in status for promotional communications and stated preferences.
• Support Data — including all communications with bpk365 support staff via live chat or email.

2.2 bpk365 does not intentionally collect or process special categories of personal data (such as health data, political opinions, or biometric data) except where this is necessary to meet our responsible gaming obligations — for example, recording a self-exclusion request or processing a problem gambling referral.

3. How We Collect Your Data

3.1 Directly from you — when you register an account, complete KYC, make a deposit or withdrawal, contact our support team, respond to a survey, or update your account preferences.

3.2 Automatically — through cookies, web beacons, and similar tracking technologies as you interact with the bpk365 platform. This includes session data, click-stream data, and device fingerprinting used for fraud prevention.

3.3 From third parties — including identity verification providers who assist with KYC processing, payment processors who facilitate your transactions, and fraud prevention services. Data received from third parties is used only for the purposes for which it was obtained and is handled in accordance with this policy.

4. How We Use Your Personal Data

4.1 bpk365 uses the personal data it collects for the following purposes, each supported by a documented lawful basis:

• Account Management — to create and maintain your bpk365 account, verify your identity, and manage your account settings and preferences. Lawful basis: performance of contract.
• Payment Processing — to process deposits and withdrawals via JazzCash, EasyPaisa, bank transfer, and USDT. Lawful basis: performance of contract.
• Legal Compliance — to fulfil our obligations under anti-money laundering legislation, gaming regulations, and other applicable laws. This includes filing suspicious transaction reports where legally required. Lawful basis: legal obligation.
• Fraud & Security — to detect, investigate, and prevent fraudulent activity, multi-accounting, and other prohibited conduct on the platform. Lawful basis: legitimate interests.
• Responsible Gaming — to monitor player behaviour for indicators of problem gambling, enforce self-exclusions and deposit limits, and apply mandatory responsible gaming interventions where required. Lawful basis: legal obligation; legitimate interests.
• Customer Support — to respond to your queries, resolve complaints, and improve the quality of our support service. Lawful basis: performance of contract; legitimate interests.
• Platform Improvement — to analyse usage patterns, test new features, and improve the overall bpk365 user experience. Lawful basis: legitimate interests.
• Marketing — to send promotional offers, bonus notifications, and relevant game recommendations to players who have opted in. Lawful basis: consent. (See Section 5 for opt-out instructions.)

4.2 bpk365 does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where automated systems flag an account for investigation (for example, fraud detection or responsible gaming triggers), all consequential decisions are reviewed by bpk365 personnel before action is taken.

5. Marketing Communications

5.1 bpk365 sends marketing communications — including promotional emails, SMS messages, and in-app notifications about bonuses, PSL betting promotions, jackpot events, and platform features — only to players who have explicitly opted in to receive them.

5.2 You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your bpk365 account settings, or by contacting [email protected] with a clear opt-out request. Withdrawal of consent does not affect the lawfulness of marketing sent prior to your opt-out.

5.3 Even if you opt out of marketing communications, bpk365 may still send you service-related notifications that are necessary for the operation of your account — such as transaction confirmations, security alerts, and important policy updates. These are not marketing and cannot be disabled.

5.4 bpk365 does not send marketing communications on behalf of third parties, and your contact details are not provided to external advertisers for their own marketing purposes.

6. Cookies & Tracking Technologies

6.1 bpk365 uses cookies and similar technologies to operate and improve the platform. Cookies are small text files stored on your device when you access the bpk365 website. The types of cookies used are:

• Strictly Necessary Cookies — essential for the platform to function. These include session cookies that keep you logged in during a play session. These cannot be disabled.
• Performance Cookies — used to collect anonymised data about how players interact with the bpk365 platform, which pages are most visited, and where errors occur. This helps us improve functionality.
• Functionality Cookies — used to remember your preferences such as language settings and notification choices.
• Security Cookies — used as part of our fraud detection and anti-bot systems.

6.2 You can manage cookie preferences through your browser settings. Disabling non-essential cookies may affect the functionality of certain bpk365 platform features but will not prevent you from accessing core services.

6.3 bpk365 does not use third-party advertising cookies or tracking pixels that serve ads for external businesses.

7. Sharing Your Personal Data

7.1 bpk365 shares personal data with third parties only where necessary and only under strict conditions. The categories of third parties with whom data may be shared are:

• Identity Verification Providers — to perform CNIC-based KYC checks. Only the minimum data necessary for verification is shared.
• Payment Processors — including the processing infrastructure behind JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT networks. Data shared is limited to what is required to complete the transaction.
• Fraud Prevention Services — to cross-reference activity against known fraud indicators and device blacklists.
• Regulatory Authorities — bpk365 may be required to disclose personal data to its gaming licensing authority, financial intelligence units, law enforcement agencies, or other regulatory bodies where we are legally obligated to do so.
• Technology Providers — cloud hosting, platform infrastructure, and customer support software providers who process data on bpk365's behalf under data processing agreements.

7.2 bpk365 does not sell, rent, or commercially transfer your personal data to any third party for their own independent purposes.

7.3 All third-party service providers engaged by bpk365 are required to handle personal data in accordance with applicable data protection standards and are prohibited from using the data for any purpose beyond the specific service they provide to bpk365.

8. Data Retention

8.1 bpk365 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law.

8.2 The following retention periods apply as a general guide:

• Account and Identity Data — retained for the duration of the account relationship and for a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial Transaction Data — retained for a minimum of 5 years following the date of the transaction.
• Technical and Usage Data — retained for up to 24 months from the date of collection, after which it is anonymised or deleted.
• Support Communications — retained for up to 3 years from the date of the last interaction.
• Marketing Preference Data — retained until you withdraw consent, plus a brief period to process the withdrawal.

8.3 Where retention beyond these periods is required for ongoing legal proceedings, regulatory investigations, or dispute resolution, data will be retained until those matters are concluded.

9. Data Security

9.1 bpk365 implements a layered security architecture to protect personal data against unauthorised access, alteration, disclosure, or destruction. Security measures in place include:

• TLS 1.3 encryption for all data transmitted between your device and bpk365 servers.
• AES-256 encryption for sensitive data stored at rest, including financial and identity information.
• Access controls limiting internal access to personal data on a strict need-to-know basis.
• Multi-factor authentication requirements for bpk365 staff accessing production systems.
• Regular third-party security audits and penetration testing.
• Intrusion detection systems and 24/7 security monitoring.

9.2 While bpk365 takes all reasonable and industry-standard precautions, no online system can be guaranteed to be 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, bpk365 will notify affected players and relevant authorities in accordance with our legal obligations and as promptly as the circumstances permit.

9.3 Players are reminded of their own responsibility to protect their account credentials. Using a strong, unique password for your bpk365 account and enabling two-factor authentication significantly reduces the risk of unauthorised account access.

10. Your Data Rights

10.1 Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by bpk365:

• Right of Access — you may request a copy of the personal data bpk365 holds about you.
• Right to Rectification — you may request correction of inaccurate or incomplete personal data.
• Right to Erasure — in certain circumstances you may request deletion of your personal data. Note that this right may be limited by our legal obligations to retain certain records.
• Right to Restriction — you may request that we restrict processing of your data in certain circumstances, such as while the accuracy of the data is disputed.
• Right to Data Portability — you may request that we provide your data in a structured, commonly used, machine-readable format for transfer to another service.
• Right to Object — you may object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Rights Related to Automated Decision-Making — you have the right not to be subject to decisions based solely on automated processing that produce significant legal or other effects on you.

10.2 To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered email address and a description of the right you wish to exercise. bpk365 will respond to all valid requests within 30 days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension.

10.3 bpk365 will not charge a fee for processing data rights requests unless the request is manifestly unfounded or excessive — in which case a reasonable administrative fee may apply, or bpk365 may decline to act on the request.

11. Children, Minors, and the 21+ Rule

11.1 The bpk365 platform is strictly for adults aged 21 years and over. bpk365 does not knowingly collect personal data from individuals under the age of 21. Age is verified at registration using CNIC-based identity verification.

11.2 If bpk365 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately, the associated account will be closed, and any balance will be forfeited in accordance with our Terms & Conditions.

11.3 If you believe that a minor may have accessed bpk365 and provided personal data, please contact us at [email protected] immediately so that we can investigate and take appropriate action.

12. International Data Transfers

12.1 bpk365 operates infrastructure across multiple jurisdictions, and personal data may be transferred to and processed in countries outside Pakistan. Such transfers are made only where adequate safeguards are in place to protect your data, including:

• Standard contractual clauses with our service providers.
• Data processing agreements that require service providers to maintain equivalent data protection standards.
• Use of service providers whose data centres are located in jurisdictions with recognised adequate data protection frameworks.

12.2 By using the bpk365 platform, you acknowledge that your personal data may be transferred and processed in jurisdictions outside of Pakistan. bpk365 takes all reasonable steps to ensure that such transfers are conducted securely and in compliance with applicable data protection principles.

13. Changes to This Privacy Policy

13.1 bpk365 reserves the right to amend this Privacy Policy at any time. Where amendments are material — meaning they affect the way we collect, use, or share your data in a manner that is likely to impact you — we will provide notice via the registered email address or through a platform notification prior to the changes taking effect.

13.2 The effective date of the current version is displayed at the top of this policy. We recommend reviewing the policy periodically. Your continued use of bpk365 following the effective date of any amendment constitutes your acknowledgement of the revised policy.

13.3 Previous versions of this Privacy Policy are archived and available upon request to [email protected].

14. Contact & Complaints

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way bpk365 handles your personal data, please contact us:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: available 24/7 from within your logged-in bpk365 account dashboard

14.2 bpk365 is committed to resolving all privacy-related queries and complaints in good faith and within a reasonable timeframe. If you are not satisfied with our response, you may escalate the matter to the data protection authority or regulatory body in the jurisdiction applicable to your situation.

14.3 For data rights requests specifically, please use the subject line "Data Rights Request" in your email to ensure it is routed to the correct team promptly.

This Privacy Policy was last updated on 1 January 2026 and is currently in force as Version 3.2. Previous versions are available from bpk365 support upon request. bpk365 operates under an international gaming license. All players must be 21 years of age or older. Your privacy is our priority.