pbexch Privacy Policy

pbexch ("we", "us", "our") is an online betting exchange and casino platform accessible at pbexch.net, serving registered players across Pakistan including Karachi, Lahore, Faisalabad, Islamabad, and all other cities and regions. pbexch operates under an international gaming licence and is the data controller responsible for the personal information collected through this platform.

This Privacy Policy applies to all pbexch digital properties — including the pbexch website, any future pbexch mobile application, and all related services and communications. It governs how pbexch collects, processes, stores, shares, and protects the personal data of our registered users, visitors, and prospective players.

By registering a pbexch account, visiting our website, or using any pbexch product or service, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with this policy, please discontinue use of the pbexch platform.

pbexch collects only the personal data that is reasonably necessary to provide our services, fulfil our legal and regulatory obligations, and improve the platform experience for Pakistani players. The categories of data we collect are set out below.

pbexch does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data. We do not knowingly collect personal data from individuals under the age of 21.

pbexch collects personal data through the following channels:

• Direct registration: When you create a pbexch account, you provide identity data, contact data, and set your account credentials directly through our registration form.
• KYC verification submissions: When you submit identity documents (e.g., CNIC copy, proof of address, payment method screenshot) as part of our mandatory KYC process prior to first withdrawal.
• Transactions: Every deposit made via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Allied Bank, or USDT TRC20 generates a financial data record tied to your pbexch account.
• Platform usage: Your betting activity, game selections, session data, and in-platform behaviour are recorded automatically as you use the pbexch exchange and casino products.
• Cookies and tracking technologies: When you visit the pbexch website, cookies and similar technologies collect technical data about your device and browsing session. See Section 7 for full details.
• Communications: When you contact pbexch via live chat, email, or our support system, the content of those communications is stored for quality assurance and dispute resolution purposes.

pbexch uses personal data for the following specific, legitimate purposes:

• Account creation and management: To register your pbexch account, authenticate your identity at login, maintain your account preferences, and manage your account lifecycle including closures and self-exclusions.
• Service delivery: To process your bets on the pbexch exchange, run casino game sessions, settle markets, calculate and display account balances, and deliver the core betting and gaming experience.
• Payment processing: To execute deposits and withdrawals via your chosen payment method, and to verify that payment methods belong to you as the account holder.
• KYC and identity verification: To verify your age (21+), identity, and place of residence in compliance with our gaming licence obligations and to protect the integrity of the platform.
• AML and fraud prevention: To monitor transaction patterns, detect suspicious activity, prevent money laundering, and protect pbexch and its users against fraud, chargebacks, and account takeover.
• Customer support: To respond to your queries, resolve complaints, and provide ongoing support via live chat and email.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling, apply deposit limits or self-exclusions you have requested, and send responsible gaming communications where required.
• Legal and regulatory compliance: To meet reporting obligations under our gaming licence, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required by applicable law.
• Marketing (with consent only): To send you promotional emails, bonus offers, and platform news if you have opted in to marketing communications. You may opt out at any time.
• Platform improvement: To analyse aggregated, anonymised usage data to improve pbexch features, fix bugs, and enhance the overall user experience for Pakistani players.

For each purpose described in Section 4, pbexch relies on one of the following legal bases for processing your personal data:

Where pbexch relies on legitimate interests as its legal basis, we have assessed that our interests do not override your fundamental rights and freedoms. Where we rely on consent — in particular for marketing — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

pbexch does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your personal data only in the limited circumstances set out below, and only to the extent strictly necessary for each purpose:

• Payment providers: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and USDT TRC20 processors receive the minimum transaction data required to process your deposits and withdrawals. These parties are bound by their own privacy and data security obligations.
• KYC and identity verification partners: pbexch may use a third-party identity verification service to cross-check CNIC details and document authenticity as part of the KYC process. Such partners process data solely on pbexch's instructions.
• Game content providers: For live casino and RNG slot games, the relevant game provider's platform processes your game session data. Game providers are required to comply with applicable data protection standards under their own gaming licences.
• Regulatory and law enforcement authorities: pbexch will disclose personal data in response to a lawful order, subpoena, or regulatory request from a competent authority. We will notify you of such disclosure where permitted by law.
• Fraud prevention and AML networks: pbexch may share data with shared fraud prevention and AML databases operated by or on behalf of gaming industry regulators to identify and prevent financial crime across licensed platforms.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of pbexch's assets, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer.

pbexch uses cookies and similar tracking technologies on our website to deliver core functionality, improve your experience, and understand how Pakistani players interact with our platform. The types of cookies we use are described below:

You can manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to use the pbexch platform. pbexch does not use cross-site tracking cookies or third-party advertising networks.

pbexch retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention standards required under our gaming licence and applicable AML regulations:

• Account data and betting history: Retained for a minimum of five years from the date of account closure or the last transaction, whichever is later, in accordance with AML record-keeping requirements.
• KYC documents: Retained for a minimum of five years following the end of the business relationship, or longer if required by a regulatory order.
• Financial transaction records: Retained for a minimum of five years for audit, tax, and AML compliance purposes.
• Support communications: Retained for three years from the date of the communication, or until any related dispute is fully resolved.
• Marketing preferences: Retained until you withdraw your consent, after which marketing data is deleted within 30 days.

Once the applicable retention period expires and no legal obligation requires continued storage, pbexch securely deletes or anonymises your personal data so that it can no longer be associated with you.

pbexch implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and pbexch servers, ensuring that your login credentials, financial data, and personal information are never transmitted in plaintext.
• Encrypted password storage using industry-standard hashing algorithms. pbexch never stores your password in plaintext and our support team cannot view or retrieve your password under any circumstances.
• Two-factor authentication (2FA) available to all pbexch account holders and strongly recommended. 2FA adds a second layer of identity verification at login.
• Role-based access controls ensuring that pbexch staff can only access the personal data necessary for their specific job function. Access logs are maintained and reviewed regularly.
• Regular penetration testing and security audits conducted by independent third-party security professionals to identify and remediate vulnerabilities before they can be exploited.
• Data breach response protocol: In the event of a confirmed data breach affecting your personal data, pbexch will notify you and the relevant regulatory authority within the timeframe required by applicable law.

As a pbexch account holder or platform visitor, you hold the following rights in relation to your personal data. To exercise any of these rights, contact pbexch at [email protected] with the subject line "Data Rights Request":

pbexch is strictly an adult platform. We do not permit any person under the age of 21 to register an account, place bets, or access any real-money gaming product on the pbexch platform. This minimum age requirement applies to all players in Pakistan and all other jurisdictions where pbexch operates.

As part of our KYC verification process, every pbexch account holder is required to submit identity documentation confirming they are 21 years of age or older before any withdrawal can be processed. Where we have reasonable grounds to suspect that an account holder may be under the age of 21, we will suspend the account and withhold withdrawals pending age verification.

If you believe that a person under the age of 21 has registered a pbexch account or is accessing the platform, please contact us immediately at [email protected]. We will investigate and take appropriate action, including permanent account closure and return of any deposited funds where applicable.

pbexch does not knowingly collect, store, or process the personal data of any individual under 21. In the event we discover that such data has been collected without appropriate age verification, we will delete it promptly and notify the relevant regulatory authority if required.

pbexch reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or the features and services we offer. All updates will be published on this page with a revised "Last Updated" date shown at the top of the document.

For material changes — meaning changes that significantly affect how we collect, use, or share your personal data — pbexch will provide advance notice via email to your registered email address and/or via a prominent notice on the pbexch platform dashboard at least 14 days before the revised policy takes effect.

For minor or administrative changes that do not materially affect your rights or our core data practices, the updated policy will be published on this page without separate advance notice. We recommend checking this page periodically to remain informed of any updates.

Your continued use of the pbexch platform after a revised Privacy Policy takes effect constitutes your acceptance of the revised policy. If you do not agree with any material change to this policy, you must discontinue use of the platform and may request account closure via [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pbexch handles your personal data, our dedicated privacy and data support team is available to assist you. Pakistani players can reach us through the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request" so your message is routed to the correct team.
• Live Chat: Available 24/7 from within your pbexch account dashboard. Our live chat agents can handle general privacy questions and escalate formal data rights requests to the relevant team.

pbexch aims to acknowledge all privacy-related enquiries within 24 hours and to resolve formal data rights requests within 30 calendar days. Where a request is particularly complex or we receive a high volume of requests, we may extend this period by a further 60 days and will notify you accordingly.

If you are not satisfied with our response to your privacy enquiry or data rights request, you have the right to escalate your complaint to the relevant gaming regulatory authority under whose licence pbexch operates, or to the applicable data protection supervisory authority in your jurisdiction.