ppivip Privacy Policy

1. Information We Collect

When you interact with the ppivip platform — whether by registering an account, making a deposit, placing a bet, or contacting our support team — we collect certain categories of personal information. The information we collect falls into the following categories:

1.1 Information You Provide Directly

• Identity data: Full legal name, date of birth, gender, and nationality as provided during account registration or KYC verification.
• Contact data: Email address and Bangladesh mobile phone number linked to your account.
• Identity documents: Copies of your national ID card, passport, or other government-issued documents submitted during verification.
• Financial data: Mobile banking account numbers (bKash, Nagad, Rocket, Upay) and bank account details used for deposits and withdrawals. Full card numbers are never stored — card transactions are processed directly by our PCI-compliant payment partners.
• Communications data: Messages sent to our support team via live chat, email, or any other channel, including the content and metadata of those communications.

1.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, screen resolution, device identifiers, and time zone settings.
• Usage data: Pages visited on the Platform, games played, bets placed, session duration, referral source, and click-path data.
• Cookies and similar technologies: Session tokens, preference cookies, and analytics identifiers. See Section 4 for full details.
• Geolocation data: Approximate geographic location derived from IP address, used for fraud prevention and jurisdictional compliance checks.

2. How We Use Your Data

ppivip processes personal data for the following specific purposes. We only process data where we have a lawful basis for doing so — primarily performance of contract, legal obligation, legitimate interests, or your explicit consent where required.

Purpose	Data Used	Lawful Basis
Account registration and management	Identity, contact data	Contract performance
Identity verification (KYC/AML)	Identity documents, financial data	Legal obligation
Processing deposits and withdrawals	Financial data, contact data	Contract performance
Fraud detection and prevention	Device data, usage data, financial data	Legitimate interests
Platform security and abuse prevention	IP address, device data, usage data	Legitimate interests
Customer support and dispute resolution	Communications data, identity data	Contract performance
Responsible gaming monitoring	Usage data, financial data	Legal obligation / legitimate interests
Promotional communications (opt-in only)	Contact data	Consent
Platform analytics and improvement	Usage data, device data	Legitimate interests

ppivip does not use your personal data to build advertising profiles, sell data to marketing platforms, or engage in automated decision-making that produces legally significant effects without human review.

3. Data Sharing & Disclosure

ppivip does not sell, rent, or trade your personal information to any third party. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

3.1 Payment Service Providers

To process deposits and withdrawals, we share the minimum necessary payment information with our partner payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and international card networks (Visa, Mastercard). These providers are independent data controllers for their own services and are governed by their own privacy policies.

3.2 Game Content Providers

Our Platform integrates casino games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Your username and session token are shared with the relevant game provider to facilitate gameplay. These providers do not receive your full identity or payment data.

3.3 Compliance and Legal Authorities

ppivip may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we receive a legally valid request, court order, or where disclosure is necessary to prevent fraud, money laundering, or other serious crime. We will notify affected players of any such disclosure to the extent permitted by law.

3.4 Service Providers and Processors

We engage certain third-party service providers to support our platform operations, including cloud hosting providers, email delivery services, identity verification partners, and customer support software vendors. All such providers are subject to data processing agreements requiring them to handle your data only on ppivip's instructions and in accordance with this Policy.

4. Cookies & Tracking Technologies

The ppivip Platform uses cookies and similar technologies to deliver a functional, secure, and personalised experience. The following categories of cookies are used:

4.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens that keep you logged in, CSRF protection tokens, and load-balancing cookies. No personal browsing data is collected via these cookies.

4.2 Functional Cookies

Functional cookies remember your preferences such as language settings, preferred deposit method, and interface customisations. These cookies improve your experience but are not required for core Platform functionality.

4.3 Analytics Cookies

We use first-party analytics cookies to understand how players navigate the Platform — which pages are visited most often, where sessions begin and end, and how long users engage with specific features. This data is aggregated and used solely to improve Platform performance. We do not use Google Analytics or other third-party analytics services that share data with external advertising networks.

4.4 Fraud Prevention Cookies

Our fraud detection systems use cookies and device fingerprinting to identify potentially suspicious account activity, such as multiple accounts operating from the same device or unusual login patterns. These are strictly security-focused and do not involve any advertising profiling.

5. Data Security Measures

ppivip takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it from unauthorised access, loss, destruction, or alteration. Our security programme includes the following measures:

• Transport Layer Security (TLS): All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher, indicated by the padlock icon in your browser's address bar.
• Password hashing: Account passwords are never stored in plain text. We use industry-standard bcrypt hashing with unique salts to store password credentials.
• Encryption at rest: Sensitive data fields, including identity document copies and financial account numbers, are encrypted in our database using AES-256 encryption.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. All internal data access is logged and subject to audit review.
• Two-factor authentication: We offer optional two-factor authentication (2FA) for player accounts and require it for all internal staff accessing production systems.
• Regular security audits: Our platform and infrastructure are subject to periodic vulnerability assessments and penetration testing by independent security professionals.
• Incident response: ppivip maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and relevant authorities as required by applicable law.

Despite these measures, no internet-based platform can guarantee absolute security. You are encouraged to use a strong, unique password for your ppivip account and to enable two-factor authentication. If you suspect unauthorised access to your account, contact [email protected] immediately.

6. Data Retention

ppivip retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes or enforce agreements. The following retention periods apply as a general guide:

Data Category	Retention Period	Reason
Account identity and contact data	Duration of account + 5 years post-closure	AML compliance, dispute resolution
KYC / identity verification documents	Duration of account + 5 years post-closure	Regulatory and legal obligation
Transaction and payment records	7 years from transaction date	Financial record-keeping requirements
Betting and gaming history	Duration of account + 3 years post-closure	Dispute resolution, responsible gaming
Support communications	3 years from last communication	Quality assurance, dispute resolution
Analytics and usage data	24 months on a rolling basis	Platform improvement
Marketing consent records	Until consent is withdrawn + 1 year	Compliance with consent obligations

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis.

7. Your Privacy Rights

As a player on the ppivip Platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Subject Request". We will acknowledge your request within 48 hours and aim to provide a full response within 30 calendar days.

• Right of Access: You may request a copy of all personal data we hold about you, along with information about how it is processed and who it has been shared with.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it promptly.
• Right to Erasure: You may request the deletion of your personal data where we no longer have a lawful basis to retain it. Note that certain data must be kept for legal compliance purposes and cannot be deleted on request.
• Right to Restriction: You may ask us to restrict processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Portability: Where processing is based on your consent or contract performance and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., receiving promotional emails), you may withdraw that consent at any time by contacting support or using the unsubscribe link in any marketing communication.

8. Policy Updates & Contact

8.1 Changes to This Policy

ppivip may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable law. When we make material changes, we will notify registered players via email and display a prominent notice on the Platform at least 14 days before the changes take effect. The "Effective Date" at the top of this Policy will always reflect the date of the most recent version.

We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you disagree with any changes, you may close your account before the effective date of the amendment.

8.2 How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ppivip handles your personal data, please contact our Data Protection team at:

All privacy-related communications are handled exclusively in English. Our team will confirm receipt of your request and keep you updated throughout the review process.