Privacy Policy

This policy covers the Bepchan website, Windows x64 client and game connection service. Bepchan is the service brand. The Bepchan service operator is responsible for the account and service data described here and acts as its data controller where applicable. Contact [email protected] for privacy questions or requests. Games and third-party software have their own privacy policies.

We process your email address, account identifier and status, password hash, membership expiry, and login session records. Passwords are stored as hashes rather than plaintext. Email verification, password reset, redemption, trial and invitation features also keep the records needed to validate requests, apply membership and prevent repeated or abusive claims.

We use this information to create and secure your account, send service emails, verify sign-ins, recover access and manage membership. Providing the required account information is necessary to use account-based features. The client stores login credentials on your device so it can access the service. Bepchan account records are managed separately from the domestic service.

To connect you to supported games, the client and game-service infrastructure process IP addresses, game destinations and ports, connection times, data volumes, request identifiers and errors. Service credentials associate connections with your account's access rights. Relay servers receive and forward the traffic needed to reach authorized game servers.

Ordinary forwarding of encrypted game traffic does not require reading its HTTPS contents. Selected features that inspect game requests, sometimes called HTTP-aware or HTTPS features, can process request and response contents, including game login or authentication information carried in those requests. Applicable HTTPS features use a local certificate generated on your device. Connection recovery may temporarily hold request or response data to preserve an in-progress game operation. Not all game data stays on your device.

The client stores settings, local certificates and their private keys, cached game resources and logs on your device. Caches reduce repeated downloads. Logs and service diagnostics can include connection events, destinations, timing, errors and traffic statistics used to investigate faults.

You can use the client's cache and log directories and your system certificate settings to manage these local files. Clearing cached resources may require downloading them again. Signing out removes the active local login state but does not delete server account records, caches or every log. Uninstalling may leave separately installed certificates or files.

The website provides product information and policy pages. Its code does not include advertising or analytics scripts. Hosting and network providers can process ordinary access information such as your IP address and the pages you request.

For a purchase, the payment service provider identified at checkout processes payment information under its own privacy policy. Bepchan does not store full payment-card details. We may use the order reference and purchase details you provide to resolve access or refund requests. Support messages contain the information you choose to send. Do not send passwords, complete access tokens, full card details or unredacted game requests.

We process account, membership and connection data to provide the service you request and perform our agreement with you. We use relevant diagnostics and support records to investigate faults, respond to requests and keep the service working.

Where applicable data-protection law requires a legal basis, necessary service processing is based on performance of our agreement with you. Security and abuse prevention serve our legitimate interests in protecting accounts and service availability, subject to your rights and freedoms. Processing needed to meet a legal obligation is based on that obligation. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. We do not use game traffic to build advertising profiles.

Providers of account hosting, game connection infrastructure, email delivery, website hosting and backups may process information needed for those roles. Game servers receive the traffic directed to them. The merchant of record shown at checkout handles transaction information under its own terms and privacy policy. We may disclose information where required by law.

Game traffic may be processed outside your country, including in Japan. Account, email, website, log and backup processing locations depend on the providers used for those services. Contact support for information about the providers, processing countries and any applicable international-transfer arrangements.

Retention depends on the purpose and type of record: account and membership records support access and entitlement history; verification and session records support authentication and abuse prevention; diagnostic and support records support fault investigation and dispute handling. Applicable legal recordkeeping requirements and unresolved security issues or claims can also affect retention.

An expired membership or login session does not automatically erase historical account records. Temporary connection and recovery data is governed by connection and recovery lifetimes. Local files remain subject to your device and file-management choices, and backup copies follow the applicable backup cycle. Contact support for the retention and deletion arrangements that apply to your records. We do not promise immediate removal from every backup.

Email [email protected] to request access to or correction of your personal information, account closure or deletion. Depending on applicable law, you may also request restriction of processing or a portable copy of your data, object to processing based on legitimate interests, or withdraw consent where it is used. You may complain to your local data-protection authority where that right applies.

We may need to verify your control of the account before responding. Requests are handled under applicable law; some records may need to be retained for legal obligations, security or disputes. You can also stop acceleration, sign out, manage local caches and logs, remove the local certificate or uninstall the client. These local actions do not by themselves delete server records.