pvipp Privacy Policy — How We Handle Your Personal Data

1 Introduction and Scope

This Privacy Policy ("Policy") describes how pvipp ("pvipp", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "your", "Member", "User") who access or use the pvipp online betting and casino platform available at https://pvipp.io (the "Platform").

This Policy applies to all personal data processed in connection with your use of pvipp, including data collected during account registration, identity verification, deposit and withdrawal transactions, gameplay activity, customer support interactions, and marketing communications.

This Policy should be read alongside pvipp's Terms & Conditions, which are available at /terms-conditions. By creating an account and using pvipp, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2 Data Controller Identity

For the purposes of this Privacy Policy, the data controller responsible for the personal data of pvipp Members is pvipp, operating the Platform at https://pvipp.io.

All data protection enquiries, access requests, and complaints should be addressed to the pvipp data protection team using the contact details provided in Section 16 of this Policy. pvipp is committed to responding to all data-related enquiries promptly and in good faith.

3 What Personal Data We Collect

pvipp collects the following categories of personal data in the course of operating the Platform. The table below summarises each category, examples of specific data points, and the primary purpose for collection:

pvipp does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, unless specifically required for identity verification purposes and with your explicit consent.

4 How We Collect Your Data

4.1 Directly from You

The majority of personal data pvipp holds is provided directly by you at the time you:

• Register an account on the pvipp Platform
• Complete identity verification (KYC) by submitting documents
• Make a deposit or submit a withdrawal request
• Contact our customer support team via live chat or email
• Set responsible gaming preferences such as deposit limits or self-exclusion
• Subscribe to promotional communications or participate in competitions

4.2 Automatically

pvipp automatically collects certain technical and usage data when you access the Platform, including through cookies, server logs, and session tracking technologies. This data is collected to ensure the security and performance of the Platform and to detect fraudulent or abusive activity.

4.3 From Third Parties

pvipp may receive personal data about you from the following third-party sources:

• Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank): transaction confirmation and wallet verification data
• Identity verification services: confirmation of NID authenticity and age verification results
• Fraud prevention agencies: risk scores and fraud flag data associated with specific identifiers
• Game Providers (Pragmatic Play, Evolution Gaming, Spribe, etc.): gameplay session data, bet outcomes, and RNG certification records where relevant to dispute resolution

5 Legal Basis for Processing

pvipp processes your personal data on one or more of the following legal bases:

• Contract performance: Processing is necessary to provide you with the services described in our Terms & Conditions — including account management, transaction processing, and game access.
• Legal obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, KYC requirements, and fraud prevention duties.
• Legitimate interests: pvipp processes certain data (such as technical and usage data) on the basis of legitimate interests — specifically to keep the Platform secure, prevent fraud, improve service quality, and monitor responsible gaming obligations.
• Consent: Where processing is based on your consent (for example, for marketing emails or push notifications), you may withdraw that consent at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

6 How We Use Your Personal Data

pvipp uses your personal data for the following specific purposes:

• To create, verify, and manage your pvipp account
• To process deposits and withdrawals via bKash, Nagad, Rocket, and other approved payment methods
• To verify your identity and age (21+ requirement) through our KYC process
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities
• To provide personalised game recommendations and relevant promotional offers (where you have consented to marketing)
• To monitor your gameplay for signs of problem gambling and to apply responsible gaming tools where appropriate
• To respond to your customer support enquiries, complaints, and dispute resolution requests
• To send transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts
• To comply with anti-money laundering, counter-terrorism financing, and other applicable legal obligations
• To analyse Platform usage and improve the overall quality and performance of pvipp's services

7 Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by the pvipp Platform when you visit. They allow the Platform to recognise your browser, remember your preferences, and keep your session active. pvipp uses both first-party cookies (set by pvipp directly) and third-party cookies (set by our service partners).

7.2 Types of Cookies Used

• Essential cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without affecting Platform functionality.
• Performance cookies: Collect anonymised data about how visitors use the Platform (pages viewed, time on site, error reports) to help us improve the service.
• Functionality cookies: Remember your preferences such as language settings, display preferences, and recently played games.
• Analytics cookies: Used to understand aggregate user behaviour patterns to improve service design. No individually identifying data is transmitted to analytics providers.

7.3 Managing Cookies

You can control cookie settings through your browser's privacy settings. Disabling non-essential cookies will not prevent you from using pvipp but may affect personalisation features. For specific instructions on managing cookies in your browser, refer to your browser's help documentation.

8 Third-Party Data Sharing

pvipp does not sell your personal data. We may share your personal data with the following categories of third parties, strictly for the purposes described:

• Payment service providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank): to process your deposits and withdrawals. These providers are independent data controllers subject to their own privacy policies.
• Identity verification and KYC providers: to verify your identity documents and confirm your age eligibility (21+).
• Fraud prevention and AML screening services: to screen transactions against known fraud indicators and sanctions lists.
• Game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi): limited technical session data may be passed to game servers to facilitate gameplay. These providers operate under contractual data processing obligations.
• Customer support platforms: support chat and ticketing systems may process your name, email, and support history to facilitate case management.
• Law enforcement and regulatory authorities: pvipp will disclose personal data in response to lawful requests from law enforcement, court orders, or regulatory investigations. We will notify you of any such disclosure where permitted by law.

All third parties with whom pvipp shares personal data are required to handle that data securely, use it only for the specified purpose, and comply with applicable data protection standards. pvipp does not authorise any third party to use your personal data for their own independent marketing purposes without your explicit consent.

9 International Data Transfers

pvipp's primary operations are focused on Bangladesh. However, some of our service partners — including game providers and fraud prevention services — operate internationally and may process your data on servers located outside Bangladesh.

Where personal data is transferred internationally, pvipp ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements that impose equivalent data protection obligations on the receiving party
• Use of reputable, internationally recognised service providers operating under established privacy frameworks
• Technical security measures (encryption, access controls) applied consistently regardless of where data is processed

By using pvipp and consenting to this Privacy Policy, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh for the limited purposes described in this Policy.

10 Data Retention Periods

pvipp retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

After the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (which can no longer identify you) may be retained indefinitely for statistical and service improvement purposes.

11 Your Data Rights

As a pvipp Member, you hold the following rights in relation to your personal data. pvipp is committed to honouring these rights promptly and without charge:

To exercise any of the above rights, please contact pvipp's data protection team at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request". pvipp will verify your identity before processing any request and will respond within thirty (30) calendar days. Where a request is complex or numerous, this period may be extended by a further sixty (60) days, with prior notification.

12 Data Security Measures

pvipp takes the security of your personal data extremely seriously. We have implemented a comprehensive set of technical and organisational measures to protect your data against unauthorised access, accidental loss, alteration, or disclosure:

• SSL/TLS encryption: All data transmitted between your device and pvipp's servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• AES-256 encryption at rest: Sensitive data stored on pvipp's systems — including identity documents and financial information — is encrypted at rest using AES-256 encryption.
• Role-based access controls: Access to personal data is restricted to authorised pvipp personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Regular security audits: pvipp's systems are subject to regular internal and third-party security assessments to identify and remediate potential vulnerabilities.
• Incident response procedures: pvipp maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights, pvipp will notify you without undue delay.
• Two-factor authentication (2FA): pvipp offers optional two-factor authentication on Member accounts to provide an additional layer of protection against unauthorised access.

Despite these measures, no internet-based system is entirely immune to risk. pvipp encourages all Members to use a strong, unique password for their account, to enable 2FA where available, and to report any suspected security issues to [email protected] immediately.

13 Children and Underage Users

pvipp is strictly an adult platform. No person under the age of 21 is permitted to register, access, or use any services on the pvipp Platform. pvipp does not knowingly collect personal data from individuals under the age of 21.

If pvipp discovers or reasonably suspects that personal data belonging to a person under 21 has been collected, that data will be deleted immediately and the associated account will be permanently closed. Any funds held in that account may be withheld and referred to relevant authorities.

14 Marketing Communications

pvipp may send you promotional emails, SMS messages, or in-platform notifications about offers, new games, tournaments, and seasonal promotions (for example, during BPL season, Eid, or Pohela Boishakh) where you have provided your consent to receive such communications.

You may withdraw your consent to marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email
• Updating your communication preferences in your pvipp account dashboard
• Contacting [email protected] with the subject line "Marketing Opt-Out"

Withdrawal of marketing consent will not affect the delivery of transactional communications (such as deposit confirmations, security alerts, and withdrawal notifications) which are necessary for the operation of your account.

pvipp does not share your contact details with third-party advertisers for their own marketing purposes. All promotional communications you receive will come from pvipp directly.

15 Changes to This Policy

pvipp reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. When we make material changes to this Policy, we will:

• Post the updated Policy on this page with a revised "Last Updated" date
• Send a notification to your registered email address summarising the key changes
• Display a prominent notice on the pvipp Platform for a period of at least fourteen (14) days following publication

We encourage you to review this Policy periodically. Continued use of pvipp after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the updated Policy, you must cease using the Platform and may request account closure by contacting support.

16 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how pvipp handles your personal data, please contact us:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
• Response time: Within 5 business days for general enquiries; within 30 calendar days for formal data rights requests
• Support hours: 24/7 — Bangladesh Standard Time (UTC+6)

pvipp takes all privacy complaints seriously. If you submit a complaint, we will acknowledge receipt within 48 hours and provide a substantive response within the timeframes stated above. Where a complaint cannot be resolved to your satisfaction, you may have the right to escalate the matter to an appropriate data protection authority.