Plain-Language Summary: Bepech collects the minimum personal data needed to run your account and process PKR payments. We never sell your data. You can request access to, correction of, or deletion of your data at any time by emailing support@bepech.com. Read on for the full details.
1. Introduction
This Privacy Policy ("Policy") explains how Bepech ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of users ("you", "Player") who access or use the Bepech website and its associated services. This Policy applies to all players based in Pakistan and to any other individual whose data we process in connection with the operation of Bepech.
Privacy is not something Bepech treats as a legal formality. Pakistani players share sensitive information — mobile numbers, payment details, CNIC data — when they use our platform, and we take the responsibility of handling that data seriously. This Policy is written in plain English so you can understand exactly what we do with your information, not in legal language designed to obscure things.
This Policy should be read alongside the Terms and Conditions and the Responsible Gaming Policy. By creating a Bepech account or using any part of our platform, you agree to the data practices described in this Policy. If you do not agree, you should not create an account or use Bepech's services.
2. Who We Are
Bepech is an online casino and sports betting platform built specifically for Pakistani players. The platform operates as a data controller in respect of the personal data processed through Bepech's services. This means that Bepech determines the purposes and means of processing your personal data and bears the associated responsibilities.
For all privacy-related queries, data access requests, or complaints, you can contact Bepech directly:
- Email: support@bepech.com (subject line: "Privacy Request")
- Live Chat: Available 24/7 within your Bepech account
- Languages: Urdu and English
3. Data We Collect
Bepech collects personal data in two main categories: data you actively provide to us, and data we collect automatically as you use the platform. Below is a breakdown of what we collect and why each type of data is necessary.
3.1 Data You Provide Directly
| Data Type | When Collected | Why It's Needed |
|---|---|---|
| Mobile number | Registration | Account identity, OTP verification, support communications |
| Password (hashed) | Registration | Account security — stored as a one-way hash, never readable |
| Full name | KYC verification | Identity confirmation, withdrawal processing |
| CNIC number & copy | KYC verification | Age verification (18+), anti-fraud, AML compliance |
| Payment account details | First deposit | Processing PKR deposits and withdrawals (Easypaisa, JazzCash etc.) |
| Date of birth | Registration / KYC | Age verification — confirming you are 18 or older |
| Email address (optional) | Account settings | Account recovery, promotional communications (with consent) |
3.2 Data Collected Automatically
When you access Bepech, our systems automatically record certain technical data about your interaction with the platform. This includes:
- IP address — used for fraud detection, geographic access controls, and security monitoring
- Device type and operating system — used to optimise the platform for your device
- Browser or app version — used for technical support and compatibility testing
- Session timestamps and duration — used for responsible gaming monitoring and account security
- Betting and gaming activity — all bets, deposits, withdrawals, and game interactions are logged for account management, dispute resolution, and responsible gaming purposes
- Cookie and session data — see Section 8 for full details on how Bepech uses cookies
4. How We Collect Your Data
Bepech collects your personal data through the following channels:
- Directly from you: When you register, complete KYC verification, make a deposit, contact support, or update your account settings, you provide data to us directly.
- Automatically through platform use: Our servers and analytics systems log technical data as described in Section 3.2 whenever you access Bepech — whether through a browser on your phone or any other device.
- From payment processors: When you complete a transaction via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard, the payment processor confirms transaction status and your registered payment account details to Bepech. Bepech does not store full card numbers or mobile wallet PINs — these remain with the payment provider.
- From identity verification services: If Bepech uses a third-party KYC verification provider to confirm CNIC details, that provider may supply a verification result to Bepech. Your raw identity documents are handled securely and not stored longer than necessary.
5. Why We Use Your Personal Data
Bepech processes your personal data for specific, legitimate purposes. We do not use your data for anything beyond what is described here without first seeking your consent.
- Account creation and management: To register your Bepech account, maintain it, and allow you to log in securely.
- Payment processing: To accept PKR deposits and process withdrawals to your verified payment method. All transactions on Bepech are denominated in Pakistani Rupees.
- Identity and age verification: To confirm that you are who you say you are, that you are 18 or older, and that you are not on any self-exclusion list that would prevent you from accessing gambling services.
- Fraud prevention and anti-money laundering (AML): To detect, investigate, and prevent financial crime, account abuse, and unauthorised access. Bepech has legal obligations in this area that require us to retain certain data and in some cases report to authorities.
- Responsible gaming: Session data, betting activity, and deposit history are monitored to identify players who may be showing signs of problem gambling — so that Bepech can proactively offer support tools.
- Platform improvement: Anonymised, aggregated usage data helps Bepech understand how players use the platform and improve the experience — faster load times, better mobile optimisation, more relevant game recommendations.
- Customer support: When you contact Bepech, your account information and interaction history allow our support team to help you effectively without asking you to repeat yourself.
- Marketing communications (with consent only): If you have opted in to receive promotional messages, Bepech may send you information about bonuses, new games, and platform updates via SMS or email. You can opt out at any time through your account settings or by replying STOP to any SMS.
6. Who We Share Your Data With
Bepech does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the following limited circumstances:
6.1 Payment Processors
To process your PKR deposits and withdrawals, Bepech shares necessary transaction data with Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT networks, and card processing partners. These providers process your data under their own privacy policies and security standards and are contractually obligated to protect it.
6.2 Identity Verification (KYC) Providers
Bepech may use a third-party KYC provider to verify the authenticity of CNIC documents and confirm identity. KYC providers receive only the minimum data necessary for verification and are bound by strict confidentiality agreements.
6.3 Technology and Infrastructure Partners
Bepech uses cloud hosting, cybersecurity, and analytics services provided by established technology companies. These partners may process limited technical data (such as anonymised usage logs) as part of providing their services to Bepech. They do not have access to your full personal profile and are contractually restricted from using your data for their own purposes.
6.4 Legal and Regulatory Obligations
Bepech may be required by law to disclose personal data to regulatory bodies, law enforcement agencies, or courts in response to a valid legal request. In such cases, Bepech will disclose only the minimum data required to comply with the legal obligation and will notify affected users where permitted to do so.
Bepech will never share your personal data with advertising networks, data brokers, or any third party for commercial marketing purposes without your explicit prior consent.
7. Payments and PKR Transaction Data
All financial transactions on Bepech are conducted in Pakistani Rupees (PKR). When you deposit or withdraw using Pakistani mobile wallets or bank transfer, Bepech records transaction reference numbers, amounts, timestamps, and the registered name on your payment account. This data is stored securely and used for:
- Confirming successful deposits to your Bepech balance
- Processing withdrawals to your verified PKR payment method
- Investigating failed or disputed transactions
- Anti-money laundering monitoring and compliance reporting
Bepech applies a rule that withdrawals may only be sent to payment methods previously used to deposit into the same account. This policy protects against fraud and money laundering — it is not a restriction on your access to your funds. If you have changed your primary payment method, contact support before withdrawing.
Bepech does not store full credit or debit card numbers. Card transactions are processed via a PCI-DSS compliant payment gateway — Bepech receives only a transaction confirmation and a masked card reference.
8. Cookies and Tracking Technologies
Bepech uses cookies and similar technologies to operate the platform, remember your preferences, maintain your login session, and understand how the site is used. Cookies are small text files stored on your device by your browser.
Types of Cookies Used on Bepech
- Strictly necessary cookies: Required for the platform to function — these include session cookies that keep you logged in while you navigate Bepech. These cannot be disabled.
- Functional cookies: Remember your preferences such as language settings and game display options. These improve your experience but are not essential for basic platform operation.
- Analytics cookies: Collect anonymised data about how players use Bepech — which pages are visited most, how long sessions last, where users drop off in a registration flow. This data helps Bepech improve the platform. Analytics data is aggregated and not linked to individual identity.
- Security cookies: Help Bepech detect and prevent suspicious activity such as automated login attempts or unusual session patterns.
Bepech does not use third-party advertising cookies. No tracking pixels or ad network cookies are placed by Bepech on your device for external advertising purposes.
You can control cookie behaviour through your browser settings. Note that disabling strictly necessary cookies may prevent Bepech from functioning correctly. For detailed browser cookie management instructions, consult your browser's help documentation.
9. Data Retention
Bepech retains your personal data for as long as your account is active and for a period after closure as required by our legal and regulatory obligations. Specific retention periods include:
- Active account data — retained for the full duration of your account's existence on Bepech, plus a minimum of 5 years after account closure for AML and fraud compliance.
- Transaction records — retained for 7 years from the date of each transaction, in line with financial record-keeping obligations.
- KYC documents (CNIC copies) — retained for the duration of the account plus 5 years, then securely deleted. Bepech does not retain CNIC copies longer than legally required.
- Support interaction logs — retained for 3 years from the date of interaction, to assist in resolving future queries or disputes.
- Marketing consent records — retained until you withdraw consent or for 3 years from the last interaction, whichever is sooner.
When data is no longer needed, Bepech deletes it securely — digital records are overwritten or purged from active systems, and any physical copies (if applicable) are shredded.
10. Data Security
Bepech takes the security of your personal data seriously and implements multiple layers of technical and organisational safeguards to protect it. These include:
- SSL/TLS encryption on all data transmitted between your device and Bepech's servers — the same encryption standard used by Pakistani banks and financial institutions.
- Password hashing — your Bepech account password is stored as a one-way cryptographic hash. Bepech staff cannot read your password, and it is never stored in plaintext.
- Access controls — only authorised Bepech personnel have access to personal data, on a strictly need-to-know basis. All staff with data access receive privacy and security training.
- Two-factor authentication (2FA) available to all Bepech accounts for additional login security.
- Regular security audits — Bepech conducts periodic security assessments to identify and address vulnerabilities.
- Data breach response plan — Bepech maintains a documented plan for responding to data breaches, including notifying affected users promptly if a breach occurs that puts their personal data at risk.
Tips to keep your Bepech account secure: Never share your password or OTP with anyone — Bepech staff will never ask for these. Use a strong, unique password for your Bepech account. Enable 2FA in your account settings. Log out when using a shared device.
11. Your Privacy Rights
As a Bepech user, you have the following rights in relation to your personal data. To exercise any of these rights, contact Bepech at support@bepech.com with the subject line "Privacy Request" and include your registered mobile number for identity verification. Bepech will respond to all privacy requests within 30 days.
12. Contact Us About Privacy
Bepech's privacy practices are an ongoing commitment, not a one-time exercise. If you have any questions about this Privacy Policy, want to exercise any of your rights, or have a concern about how Bepech has handled your personal data, please get in touch:
- Email: support@bepech.com — subject line "Privacy Request"
- Live Chat: Available 24/7 from within your Bepech account — fastest response channel
- Languages: Urdu and English
- Response time: All privacy requests acknowledged within 2 business days, resolved within 30 days
If you are unhappy with Bepech's response to a privacy complaint, you have the right to escalate the matter to relevant data protection authorities. Bepech will always cooperate with regulatory inquiries relating to data protection.
This Privacy Policy was last updated in June 2025. Bepech reserves the right to update this Policy at any time. Material changes will be communicated to registered players via SMS or in-app notification. Continued use of Bepech after a Policy update constitutes acceptance of the revised terms.