Privacy Policy — How ChampExch Keeps Your Data Safe

Welcome to the ChampExch Privacy Policy. ChampExch ("we", "us", "the Platform") operates the online sports betting and gaming platform at champexch.pro. This Privacy Policy explains how we collect, process, store and protect personal data that is provided to us by users ("you") when registering an account, placing bets, playing games, making PKR deposits or withdrawals, or simply browsing the platform.

We take privacy seriously. For Pakistani players who use JazzCash, Easypaisa or Raast to fund their ChampExch accounts, the security of financial and personal information is especially important. This policy is written to be clear and readable — not buried in legal language — so that every user can genuinely understand what happens to their data.

By using ChampExch, you agree to the collection and use of your information as described in this policy. This Privacy Policy should be read alongside the Terms and Conditions. If you do not agree with how we handle data, please stop using the platform.

ChampExch collects two categories of information: information you actively provide to us, and information generated automatically through your use of the platform.

Information you provide:

• Registration details: name, username, date of birth, email address and phone number.
• Identity verification: where required, a copy of your CNIC or other government-issued identification to confirm age and identity.
• Payment information: your JazzCash or Easypaisa mobile number, Raast ID, or bank account details used to process PKR deposits and withdrawals. Full payment credentials are not stored on our servers.
• Support communications: any messages, complaints or enquiries you send to ChampExch support.
• Responsible gaming preferences: deposit limits, self-exclusion requests and session time settings you configure in your account.

Information collected automatically:

• Device data: device type, operating system version, browser type and screen resolution.
• Network data: IP address, approximate location (country/region level), and mobile network information.
• Usage data: pages visited, betting markets viewed, games launched, session duration and click patterns within the platform.
• Transaction logs: records of every deposit, withdrawal, bet placed and game played, linked to your account.
• Cookie data: session identifiers, preference settings and analytics data stored in browser cookies or app local storage.

ChampExch uses the data we collect for specific, clearly defined purposes. We do not process your personal data for purposes that are incompatible with the reasons it was collected. Key uses include:

• Account management: to create, maintain and secure your ChampExch account, process logins, handle password resets and manage your preferences.
• Bet and game settlement: to record your betting activity on cricket, PSL, T20 and other markets, settle wagers and credit winnings in PKR to your balance.
• Payment processing: to handle PKR deposits via JazzCash, Easypaisa, Raast and bank transfer, and to process withdrawal requests to your registered payment method.
• Customer support: to respond to queries, investigate account issues and resolve disputes.
• Security and fraud prevention: to detect suspicious account activity, identify duplicate accounts, and investigate potential breaches of our Terms and Conditions.
• Responsible gaming: to apply deposit limits you have set, send session reminders, and action self-exclusion requests in accordance with your instructions.
• Platform improvement: to analyse how users navigate the platform, which features are most used, and where technical issues occur — in order to improve the ChampExch experience over time.
• Communications: to send you service notifications, account alerts, and where you have opted in, promotional updates about new features, bonuses or PSL betting offers.

We will never use your personal data to build advertising profiles for sale to third parties, nor will we use it for any purpose you have not been informed about in this policy.

All financial transactions on ChampExch are carried out in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, bank transfer or another supported mobile wallet, the following applies:

• We do not store your full payment credentials. Your JazzCash PIN, Easypaisa password or bank account login details are never transmitted to or stored on ChampExch servers. Payments are processed directly through the relevant payment provider's encrypted gateway.
• We retain a record of the transaction amount, date, payment method type and reference number for account balance management and dispute resolution purposes.
• Your mobile number linked to JazzCash or Easypaisa is stored as part of your account profile to facilitate future withdrawals and to prevent fraudulent payment switching.
• PKR transaction records are kept for a minimum period necessary for financial record-keeping and fraud investigation purposes.

ChampExch does not sell, rent or trade your personal information to any third party for marketing or commercial gain. Your data may be shared in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, Raast and other payment partners receive the minimum information required to process your PKR transactions securely.
• Game providers: where you play games sourced from third-party providers within the ChampExch game lobby, those providers may receive a session token and game-related data to operate the game. They do not receive your full account details or payment information.
• Fraud and security services: we may use third-party fraud detection tools that process IP addresses and device fingerprints to identify suspicious activity on the platform.
• Analytics providers: anonymised or aggregated usage data may be shared with analytics tools to help us understand platform performance. This data cannot be used to identify individual users.
• Legal obligations: if required by applicable law, court order or regulatory request, ChampExch may disclose user data to the relevant authority. We will notify you of such disclosure where legally permitted to do so.
• Business transfers: if ChampExch undergoes a merger, acquisition or asset sale, your personal data may be transferred as part of that transaction. You will be notified before your data becomes subject to a different privacy policy.

All third parties who receive your personal data are required to handle it securely and only for the specific purpose for which it was shared.

ChampExch uses cookies and similar technologies (such as local storage in the Android app) to operate the platform efficiently and improve your experience. Here is what we use:

• Essential cookies: required for the platform to function. These handle your login session, maintain your PKR balance display and keep your betting slip active while you browse markets. You cannot opt out of essential cookies without disabling the platform entirely.
• Preference cookies: remember your settings such as odds format, language preferences and notification choices across sessions.
• Analytics cookies: collect anonymised data about how users navigate the platform — which pages are visited most, how long sessions last and where users drop off. This helps us improve the ChampExch experience.
• Security cookies: help identify and block suspicious login attempts and protect against cross-site request forgery.

You can manage cookie preferences in your browser settings. Disabling non-essential cookies will not prevent you from using the core platform, but some personalisation features may not work as expected.

Keeping your personal data secure is one of ChampExch's core responsibilities. We implement a range of technical and organisational measures to protect your information from unauthorised access, loss, misuse or disclosure:

• TLS encryption: all data transmitted between your browser or app and ChampExch servers is encrypted using Transport Layer Security (TLS).
• Password hashing: your account password is stored as a cryptographic hash. ChampExch staff cannot read your password, and it is never stored in plain text.
• Access controls: only authorised ChampExch personnel with a legitimate need can access personal data. Access is logged and reviewed regularly.
• Anomaly detection: our systems monitor for unusual login patterns, rapid location changes and other signals that may indicate account compromise. Suspicious activity triggers automated alerts and may result in a temporary account lock for your protection.
• Secure infrastructure: the ChampExch platform is hosted on secured servers with regular vulnerability assessments and patching schedules.

ChampExch retains your personal data only for as long as is necessary to fulfil the purposes described in this policy, or as required to meet legal, financial or dispute-resolution obligations. General retention guidelines are as follows:

• Active accounts: all account data is retained for the duration of your active account relationship with ChampExch.
• Closed accounts: upon account closure, core account data including transaction records, betting history and identity verification documents is retained for a minimum of five years for fraud prevention and financial record-keeping purposes.
• Support communications: correspondence with our support team is retained for up to two years following resolution of the relevant issue.
• Analytics data: anonymised usage data collected for platform improvement purposes may be retained indefinitely in aggregated, non-identifiable form.
• Self-exclusion records: records of self-exclusion requests are retained permanently to prevent re-registration during any active exclusion period.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

As a ChampExch user, you have meaningful rights over the personal information we hold about you. These include:

• Right of access: you can request a copy of the personal data ChampExch holds about you at any time. We will respond within a reasonable timeframe.
• Right to correction: if your personal data is inaccurate or out of date — for example, a change of phone number used for JazzCash withdrawals — you can request that it be corrected.
• Right to deletion: you can request that ChampExch delete your personal data. We will fulfil this request unless retention is required by legal or financial record-keeping obligations. Note that transaction records associated with PKR activity may need to be retained even after account closure.
• Right to restrict processing: in certain circumstances you can ask us to limit how we use your data while a dispute or correction request is being resolved.
• Right to data portability: you can request your account and transaction data in a structured, machine-readable format.
• Right to object: you can object to the use of your data for marketing communications at any time. To stop receiving promotional messages, update your preferences in your account settings or contact support.

To exercise any of these rights, contact ChampExch support. We may need to verify your identity before processing a request to ensure that data is not disclosed to or deleted on behalf of an unauthorised party.

ChampExch is strictly an adult platform. We do not knowingly collect or process personal data from anyone under the age of 18. Our registration process requires users to confirm their age and, where verification is triggered, to provide documentation such as a CNIC proving they are 18 or older.

If we become aware that personal data has been collected from a user who is under 18, that account will be suspended immediately, all associated data will be deleted, and any PKR balance will be returned via the registered payment method following investigation.

If you are a parent or guardian and believe your child has registered on ChampExch, please contact our support team immediately so the account can be closed and data removed promptly.

The ChampExch game lobby includes games and content provided by third-party game studios. When you launch a game from a third-party provider within ChampExch, a limited data exchange takes place to initiate and operate the game session. This may include:

• A session token or player ID generated by ChampExch (not your real name or full account details).
• Your PKR stake amount for the relevant game round.
• Device type and browser information needed to render the game correctly.

Third-party game providers are contractually required to use this data only for the purpose of operating the game and are not permitted to store, sell or process it for any other purpose. ChampExch is not responsible for the independent privacy practices of third-party providers, though we only partner with reputable studios whose data practices meet our minimum standards.

Similarly, when you use JazzCash or Easypaisa to deposit PKR, you interact with those providers' own platforms and their respective privacy policies apply to that portion of the transaction.

The ChampExch Android app, available from our download page, collects broadly the same categories of information as the web platform. Additional data points relevant to the mobile app include:

• Device identifiers: Android device ID used for session management and fraud detection.
• Push notification token: if you enable push notifications, a device token is stored to deliver account alerts, balance updates and PSL match notifications.
• App version and crash reports: anonymised crash and error reports are collected to help us identify and fix technical issues in the app.
• Local storage: the app stores session data and preference settings in local device storage to enable faster loading and offline preference retention. This data does not leave your device except as part of your authenticated session with ChampExch servers.

The ChampExch app does not request access to your contacts, camera, microphone, or SMS inbox. If a future app version requires additional permissions, these will be clearly explained at the point of installation or update.

ChampExch may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable requirements. When changes are made, the "Last Updated" date at the top of this page will be revised accordingly.

For material changes — such as a new category of data being collected, a change in how payment data is handled, or a new type of third-party sharing — we will provide additional notice through a platform notification or email to your registered address where practicable.

Your continued use of ChampExch after any updated Privacy Policy has been posted constitutes acceptance of the revised terms. We recommend reviewing this page periodically so you are always aware of how your data is being handled.

If you have any questions, concerns or requests relating to this Privacy Policy or the way ChampExch handles your personal data, our support team is available to help. To exercise a data right — such as requesting access to your data or asking for deletion — please get in touch directly.

[email protected]

Please include "Privacy Request" in your subject line so your message is routed to the right team. We aim to acknowledge all privacy-related enquiries within 48 hours and resolve them as quickly as possible.