Champexch Privacy Policy — How We Handle Your Personal Data

Champexch operates the online gaming and sports betting platform at champexch.bet and the associated Champexch mobile application. For the purposes of this Privacy Policy, "Champexch", "we", "us", and "our" all refer to the operators of this platform. "You" and "your" refer to any person who visits, registers on, or uses the Champexch platform in any capacity.

This Privacy Policy applies to all personal data collected through the Champexch website, the Champexch mobile app, communications you have with our support team, and any interactions you have with the platform in the course of registering, depositing, playing, or withdrawing. It does not apply to third-party websites or services that may be linked from the platform.

Champexch collects personal data through several channels, all of which are necessary to operate a safe, compliant, and functional gaming platform for our Pakistani players. We collect only what we genuinely need. Below is a clear breakdown of what Champexch collects and when:

Champexch does not collect sensitive personal data such as biometric data, religious beliefs, or political opinions. We do not collect data from children — see Section 10 for our policy on under-18 access.

Every piece of data Champexch collects is used for a specific, legitimate purpose. The following explains each use case clearly:

• Account Creation & Management: Your name, mobile number, and email are required to create and maintain your Champexch account, verify your identity, and ensure only you can access your account.
• Processing Payments: Champexch uses your payment details to process deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments. Payment details are tokenised through certified payment gateways — full card or wallet numbers are not stored on Champexch servers.
• Identity Verification (KYC): CNIC / passport information is used to verify that you are who you say you are, that you are at least 18 years old, and that you are not on any financial exclusion or self-exclusion list. This is a legal and operational requirement for all licensed gaming platforms.
• Fraud Prevention & Security: Technical data (IP address, device ID, session patterns) is used to detect and prevent fraudulent activity including account takeover attempts, multi-accounting, and payment fraud. This protects both Champexch and all legitimate players on the platform.
• Improving the Platform: Usage data is analysed in aggregate to understand how players use Champexch, which features are most popular, and where the platform experience can be improved. This analysis uses anonymised or pseudonymised data wherever possible.
• Customer Support: Communications data is retained so that Champexch support agents have context when you raise a query, helping resolve issues more quickly without requiring you to repeat information.
• Responsible Gaming: Transaction history and usage patterns are monitored to identify signs of problem gambling behaviour. Where concerning patterns are detected, Champexch may proactively reach out with responsible gaming information and available tools.
• Marketing Communications: Where you have opted in, Champexch uses your contact data to send you information about promotions, new features, and seasonal offers. You can opt out at any time — see Section 11.
• Legal & Regulatory Compliance: Champexch is required to retain certain financial records for a minimum period in compliance with applicable anti-money laundering (AML) obligations and other regulatory requirements.

Champexch processes your personal data on the following legal bases. We will always be clear about which basis applies to which type of processing:

• Contractual necessity: Processing your account data, payment information, and transaction records is necessary to fulfil the contract between you and Champexch — i.e., to provide you with the gaming and betting services you registered for.
• Legal obligation: Champexch is required by anti-money laundering regulations and platform licensing obligations to collect and retain identity verification data and financial transaction records for specified minimum periods.
• Legitimate interests: Champexch has a legitimate interest in processing technical and usage data to prevent fraud, protect the security of the platform, and improve the product experience. This interest does not override your privacy rights.
• Consent: Where Champexch sends you marketing communications, this is done only where you have explicitly opted in during registration or at a later point in your account settings. You may withdraw this consent at any time without affecting any other aspect of your account.

Champexch does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and always with appropriate safeguards in place:

• Payment Processors: To process your deposits and withdrawals, Champexch shares the minimum necessary data with our payment partners (such as Easypaisa, JazzCash, and banking partners). These providers handle data under their own privacy policies and are contractually bound to use your data only for payment processing.
• Identity Verification Providers: For KYC purposes, Champexch may share identity documents with third-party identity verification services. These providers are contractually bound to confidentiality and data security standards.
• Fraud Prevention Services: Technical data (device ID, IP address, behavioural patterns) may be shared with fraud detection services to protect all users of the Champexch platform. Data shared for this purpose is pseudonymised wherever possible.
• Regulatory & Law Enforcement Authorities: Champexch will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law. We will notify you of such a disclosure where permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving Champexch, user data may form part of the transferred assets. Any new data controller would be bound by this Privacy Policy or a materially equivalent replacement, and you would be notified in advance.

The Champexch website and app use cookies and similar tracking technologies to provide core functionality, improve performance, and (where you consent) personalise your experience. A cookie is a small text file stored on your device by your browser when you visit a website.

Most browsers allow you to refuse or delete cookies through your browser settings. Note that disabling non-essential cookies will not prevent you from using Champexch, but some features (such as remembered preferences) may not function as expected. Essential cookies cannot be refused without preventing platform login.

Champexch does not retain your personal data longer than necessary for the purposes for which it was collected. The following retention periods apply:

• Active Account Data: Retained for as long as your Champexch account remains active. If you close your account, personal data is retained for a minimum of 5 years to comply with AML and financial record-keeping obligations.
• Transaction Records: All deposit, withdrawal, and betting records are retained for a minimum of 5 years from the date of the transaction.
• KYC Documents (CNIC / Passport): Retained for 5 years from the date of verification or from account closure, whichever is later.
• Support Communications: Chat transcripts and email correspondence are retained for 2 years to enable resolution of late-appearing disputes.
• Marketing Data: If you opt out of all marketing communications, your marketing preferences are updated immediately. Historical marketing data may be retained in anonymised form for reporting purposes only.
• Technical / Log Data: IP address logs and device session logs are retained for up to 12 months for fraud detection and security purposes, then deleted or anonymised.

At the end of an applicable retention period, Champexch securely deletes or anonymises the relevant data. Anonymised data — which cannot be linked back to any individual — may be retained indefinitely for aggregate analysis and platform improvement.

Champexch implements a comprehensive set of technical and organisational measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. Our current security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and Champexch servers.
• AES-256 encryption on all personal data stored at rest on Champexch servers.
• Payment tokenisation — card and wallet details are never stored as raw data on Champexch infrastructure. They are replaced by tokens managed by certified payment gateway providers.
• Two-Factor Authentication (2FA) available to all registered Champexch accounts as an additional layer of protection against unauthorised access.
• Role-based access controls limiting internal staff access to only the data needed for their specific job function.
• Regular penetration testing by independent security professionals to identify and remediate vulnerabilities.
• 24/7 automated monitoring for unusual access patterns, large-scale data requests, and other indicators of a potential security incident.

While Champexch takes every reasonable precaution, no internet-based platform can guarantee 100% security. You play an important role in keeping your account safe — use a strong unique password, enable 2FA, and never share your login credentials with anyone. If you suspect your account has been compromised, contact Champexch support immediately.

As a Champexch player, you have the following rights regarding the personal data we hold on you. All requests should be submitted to support@champexch.bet and will be acknowledged within 72 hours:

Champexch will respond to all verified data requests within 30 days. For complex requests, we may extend this by a further 30 days with notice. We do not charge a fee for any of the above data rights requests, except in cases of manifestly unfounded or excessive repetition.

Champexch is strictly an 18+ platform. We do not knowingly collect, store, or process personal data belonging to any person under the age of 18. All registration attempts are subject to age verification, and Champexch actively uses date of birth verification and identity document checks to enforce this restriction.

If Champexch becomes aware that a registered account belongs to a person under 18, that account will be immediately closed, all gaming activity will be voided, and any deposited funds will be returned to the original payment method used. If you are a parent or guardian and believe your child has registered on Champexch, please contact support@champexch.bet immediately with the account details so we can take action.

Champexch sends promotional communications — including bonus alerts, new game announcements, PSL season promotions, and seasonal offers — only to players who have opted in to receive them. You control your marketing preferences at all times.

• SMS Notifications: Opt in or out via your account notification settings or by replying STOP to any Champexch SMS.
• Email Marketing: Opt in or out via your account settings, or by clicking the unsubscribe link in any Champexch marketing email. Unsubscribes are processed within 48 hours.
• Push Notifications (App): Enable or disable via your device's app notification settings or within the Champexch app settings menu.
• In-Platform Promotions: Informational banners and offers displayed within the Champexch platform are part of the core service and are not affected by marketing opt-out choices.

Opting out of marketing communications does not affect your ability to use Champexch, access your account, make deposits, or withdraw winnings. Transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — are not marketing and will always be sent regardless of your marketing preferences.

Champexch reviews this Privacy Policy periodically and updates it when necessary — whether due to changes in the way we operate, changes in the services we offer, or changes in the regulatory environment. The "Last Updated" date shown at the top of this page will always reflect the date of the most recent revision.

When material changes are made to this Privacy Policy — changes that affect your rights or how we handle your personal data in a meaningful way — Champexch will notify all registered players by email and/or in-platform notification at least 7 days before the changes take effect. Minor changes (such as corrections of typographical errors or clarifications that do not alter the substance of the policy) may be made without advance notice.

Your continued use of the Champexch platform after a Privacy Policy update constitutes acceptance of the revised policy. If you disagree with any material change, you may close your account by contacting support@champexch.bet.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how Champexch handles your personal information, please reach out through one of the following channels:

• Email: support@champexch.bet — For all privacy-related requests and data rights enquiries. Responses are sent within 72 hours.
• Live Chat: Available 24/7 within the Champexch platform. For urgent privacy concerns, live chat is the fastest route to a response.
• FAQ: Many common privacy questions are covered in detail on the Champexch FAQ page.

Please include your registered mobile number and a clear description of your request or concern in all privacy correspondence. This helps Champexch verify your identity and ensures your request is handled correctly and securely.