Privacy Policy — How ppvpi Handles Your Data

1. Introduction

ppvpi ("we", "us", "our") is committed to protecting the privacy and personal data of all players who use the ppvpi platform at https://ppvpi.io. This Privacy Policy ("Policy") sets out in clear, formal terms how ppvpi collects, uses, stores, shares, and protects personal information in connection with the operation of its online casino and sports betting services, which are primarily directed at adult players (aged 21 and above) based in Bangladesh.

This Policy applies to all personal data collected through the ppvpi website, any associated mobile-browser interface, and all communications between players and ppvpi including support correspondence, account registration data, payment transaction records, and gameplay history. It should be read in conjunction with ppvpi's Terms & Conditions, which are available at /terms-conditions.

ppvpi takes its data-protection responsibilities seriously. We implement appropriate technical and organisational measures to safeguard your personal data against unauthorised access, accidental loss, destruction, or alteration. This Policy reflects our ongoing commitment to handling player data fairly, transparently, and with the highest standard of care.

2. Data Controller

For the purposes of this Privacy Policy, ppvpi acts as the data controller in respect of all personal data collected from players who use the ppvpi platform. As data controller, ppvpi determines the purposes and means by which personal data is processed.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to the ppvpi data team using the contact details set out in Section 15 of this Policy. ppvpi aims to respond to all formal data requests within 30 calendar days of receipt.

3. Data We Collect

ppvpi collects the following categories of personal data from players:

3.1 Identity and Contact Data

• Full legal name
• Date of birth (for age verification — players must be 21 years or older)
• Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or other)
• Email address
• Mobile phone number
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

• National Identification (NID) card number and scan
• Passport number and scan (where provided)
• Driver's licence (where provided as alternative identification)
• Proof of address documentation (utility bill, bank statement, or similar)
• Selfie or facial photograph where required for liveness verification

3.3 Financial and Transaction Data

• Payment method details — bKash account number, Nagad account number, Rocket account number, Upay account number, or bank account details
• Deposit history, withdrawal history, and transaction timestamps
• Account balance information (expressed in BDT)
• Bonus claims and wagering activity

3.4 Technical and Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session start and end times, pages visited, and features used
• Game round identifiers, bet amounts, and outcomes
• Login timestamps and authentication method used

3.5 Communications Data

• Content of support tickets, live chat transcripts, and email correspondence between you and ppvpi
• Feedback and survey responses (where voluntarily provided)
• Responsible gaming self-assessments or limit-setting requests

4. How We Collect Your Data

4.1 Directly from you. The majority of personal data ppvpi holds is provided directly by you during the registration process, when completing KYC verification, when making a deposit or withdrawal, when contacting our support team, or when voluntarily submitting feedback.

4.2 Automatically during platform use. When you access and use the ppvpi platform, certain technical data is collected automatically through server logs, session tracking, and cookies. This includes your IP address, device information, and gameplay activity. See Section 11 for full details on cookies.

4.3 From third-party service providers. ppvpi may receive data about you from trusted third-party partners, including identity verification providers (KYC/AML checks), payment processors (transaction confirmation and fraud signals), and fraud detection systems. Data received from third parties is handled with the same level of care as data collected directly.

5. How We Use Your Data

ppvpi uses personal data collected from players for the following specific purposes:

Purpose	Data Used
Account registration and management	Identity data, contact data
Age and identity verification (KYC)	KYC documents, date of birth, facial photograph
Processing deposits and withdrawals in BDT	Financial data, payment method details
Fraud prevention and anti-money-laundering checks	Financial data, IP address, device data, transaction history
Responsible gaming monitoring and compliance	Gameplay data, deposit history, self-assessment data
Platform security and access control	Technical data, login records, IP address
Customer support and dispute resolution	Communications data, transaction data, account data
Platform performance analytics and improvement	Usage data, session data (anonymised where possible)
Sending service-related account notifications	Contact data, account data
Legal and regulatory compliance	All categories as required by applicable law

ppvpi does not use personal data to serve targeted advertising on third-party platforms. Any promotional communications sent directly to you by ppvpi will be relevant to your existing account and status as a registered player.

6. Legal Basis for Processing

ppvpi processes personal data on the following legal bases:

• Performance of a contract: Processing necessary to operate your ppvpi account, process transactions, and deliver the services you have registered to use.
• Legal obligation: Processing necessary to comply with applicable anti-money-laundering regulations, age verification requirements, and responsible gaming obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement where these interests are not overridden by your data-protection rights.
• Consent: Where ppvpi relies on your consent as a legal basis (for example, for optional marketing communications), you have the right to withdraw that consent at any time by contacting ppvpi support or updating your account preferences.

7. Data Sharing and Disclosure

7.1 Service providers. ppvpi shares personal data with third-party service providers who process data on ppvpi's behalf and under ppvpi's instructions. These include payment processors (bKash, Nagad, Rocket, Upay, and banking partners), identity verification and KYC providers, fraud detection technology partners, and cloud infrastructure providers. All service providers are contractually bound to handle data securely and only for the purposes specified by ppvpi.

7.2 Game content providers. ppvpi's casino games are powered by licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical session data necessary to operate game rounds. They do not receive your full identity or payment data.

7.3 Legal and regulatory disclosure. ppvpi may disclose personal data to relevant authorities where required to do so by applicable law, court order, or regulatory directive. In such cases, ppvpi will disclose only the minimum data necessary to satisfy the legal obligation and will, where legally permissible, notify the relevant player that such a disclosure has been made.

7.4 Business transfers. In the event that ppvpi undergoes a merger, acquisition, or sale of assets, personal data held by ppvpi may be transferred to the successor entity as part of that transaction. Affected players will be notified of any such transfer and the privacy terms that will apply to their data going forward.

7.5 No data selling. ppvpi does not sell, rent, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes under any circumstances.

8. International Data Transfers

ppvpi's primary operations are focused on the Bangladesh market and BDT-denominated transactions. Some of ppvpi's third-party service providers (including cloud infrastructure and fraud detection partners) may process data in jurisdictions outside Bangladesh. Where such transfers occur, ppvpi ensures that appropriate safeguards are in place — including standard contractual data protection clauses — to ensure that your data receives an equivalent level of protection regardless of where it is processed.

By using ppvpi, you acknowledge that your personal data may be transferred to and processed in countries other than Bangladesh as described in this section. ppvpi will not transfer your data to a jurisdiction that does not provide adequate data protection standards without implementing the safeguards described above.

9. Data Retention

ppvpi retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account and for a minimum of five years following account closure.
• KYC and identity verification records: Retained for a minimum of five years following the completion of verification, in line with standard anti-money-laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five years following the date of each transaction.
• Support communications: Retained for two years following the resolution of each support case, unless the matter relates to an ongoing dispute or legal proceeding.
• Technical and usage data (server logs): Retained for up to 12 months, after which they are deleted or anonymised for aggregated analytics purposes.

Upon expiry of the applicable retention period, ppvpi will securely delete or irreversibly anonymise the relevant personal data.

10. Your Data Rights

As a player whose personal data is processed by ppvpi, you hold the following rights in respect of your information. To exercise any of these rights, please contact ppvpi using the details set out in Section 15.

• Right of Access: You may request a copy of the personal data ppvpi holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: You may request that ppvpi correct any inaccurate or incomplete personal data held about you. Corrections to core account data (name, date of birth) require supporting identity documentation.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to ppvpi's legal retention obligations. Requests to erase data that ppvpi is legally required to retain will be partially fulfilled — data will be erased to the extent permitted by law.
• Right to Restriction of Processing: You may request that ppvpi restricts the processing of your personal data in certain circumstances, for example while the accuracy of data is being verified following a rectification request.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that ppvpi provides your personal data to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data where ppvpi relies on legitimate interests as its legal basis. ppvpi will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where ppvpi processes your data on the basis of consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

11. Cookies and Tracking Technologies

11.1 ppvpi uses cookies and similar tracking technologies on its website. Cookies are small text files placed on your device by the ppvpi website when you access it. They allow ppvpi to recognise your session, maintain your login state, prevent fraud, and gather anonymised analytics about platform usage.

11.2 The following categories of cookies are used by ppvpi:

• Strictly Necessary Cookies: Required for the core operation of the ppvpi platform — including session authentication, account security, and payment processing. These cookies cannot be disabled without preventing use of the platform.
• Performance and Analytics Cookies: Used to collect anonymised data about how players interact with the ppvpi platform, including pages visited, time on page, and error events. This data is used solely to improve platform quality.
• Fraud Prevention Cookies: Used by ppvpi's fraud detection systems to identify unusual login patterns, detect bot activity, and prevent account takeover. These cookies do not track you across third-party websites.

11.3 ppvpi does not use advertising cookies, retargeting cookies, social media tracking pixels, or any cross-site tracking technology. You can manage or delete cookies at any time through your browser settings. Disabling strictly necessary cookies may prevent you from accessing certain features of the ppvpi platform.

12. Data Security

ppvpi implements a comprehensive set of technical and organisational security measures to protect player data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ppvpi platform
• AES-256 encryption for sensitive data stored in ppvpi's databases
• Role-based access controls ensuring only authorised ppvpi personnel can access player data, on a strict need-to-know basis
• Full audit logging of all access to player data, with regular review and anomaly detection
• Regular penetration testing and third-party security audits of the ppvpi platform infrastructure
• Secure data disposal procedures for expired data ensuring irreversible deletion

While ppvpi takes all reasonable steps to protect your data, no digital platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their ppvpi accounts, enable two-factor authentication where available, and notify ppvpi immediately at [email protected] if they suspect any unauthorised activity on their account.

13. Protection of Minors

ppvpi's platform and services are strictly intended for adults aged 21 years and above. ppvpi does not knowingly collect personal data from individuals under the age of 21. The registration process includes mandatory age declaration, and ppvpi's KYC verification process is designed to detect and reject underage registrations.

If ppvpi becomes aware that personal data has been collected from a person under the age of 21, ppvpi will immediately suspend the relevant account, delete the associated personal data, and return any deposited funds to the payment method used, in accordance with ppvpi's underage gambling policy. Parents or guardians who believe their child may have registered an account should contact ppvpi immediately at [email protected].

14. Changes to This Privacy Policy

ppvpi reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made, ppvpi will notify registered players by email to their registered address and will display a prominent notice on the ppvpi platform for a period of not less than 14 days following publication of the revised Policy.

The "Last updated" date displayed at the top of this Policy reflects the date of the most recent revision. Your continued use of the ppvpi platform following notification of changes constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised Policy, you must cease using the platform and may request account closure in accordance with ppvpi's account closure procedure.

15. Contact Us

For any questions, concerns, or formal requests relating to this Privacy Policy or the personal data ppvpi holds about you, please contact the ppvpi data and privacy team using the details below. All privacy-related correspondence should include your registered account username and a clear description of your request to enable ppvpi to process it efficiently.

Email: [email protected] (plain text — not a clickable link)

Response Time: Within 30 calendar days of receipt for formal data rights requests; within 2 business days for general privacy enquiries.

Business Hours: 24 hours a day, 7 days a week — including Bangladesh public holidays (Bangladesh Standard Time, UTC+6).

Correspondence Language: English