Privacy Policy

1 Information We Collect

pivpp collects personal data that is necessary to provide a safe, reliable, and fully functional gambling platform for players in Bangladesh. We collect information in three primary ways: directly from you when you register or interact with the Platform, automatically as you use the Platform, and from trusted third-party partners who assist in delivering our services. The categories of information we collect are set out in detail below.

1.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, residential address, email address, and mobile phone number provided when creating your pivpp account.
• Identity verification (KYC) documents: National ID Card (NID), passport, birth certificate, proof of address (e.g., utility bill or bank statement), or payment method ownership documentation submitted during identity verification.
• Financial information: Payment method details such as bKash wallet numbers, Nagad account numbers, Rocket wallet numbers, Upay details, and bank account information used for deposits and withdrawals. pivpp does not store full card numbers or banking credentials.
• Communications: Messages, queries, and feedback you send to our support team at [email protected], including live chat transcripts and support ticket content.
• Responsible gaming preferences: Self-exclusion requests, deposit limit settings, time-out configurations, and other responsible gaming tool preferences set via your account dashboard or submitted to support.

1.2 Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language preferences.
• Usage and session data: Pages visited, time spent on each page, links clicked, game sessions played (including game titles, bet amounts, and session duration), deposit and withdrawal history, and bonus redemption activity.
• Geolocation data: Approximate geographic location derived from your IP address, used to verify that you are accessing the Platform from an eligible location and to comply with any applicable jurisdictional restrictions.
• Cookies and tracking technologies: Session cookies, persistent cookies, and similar technologies used to maintain login state, personalise content, and analyse Platform usage. See Section 4 (Cookies & Tracking) for full details.

1.3 Information from Third Parties

• Payment processors: Transaction confirmation data, payment status, and wallet verification signals from bKash, Nagad, Rocket, Upay, and bank partners. pivpp does not receive or store full payment credentials from these providers.
• Identity verification services: Confirmation signals from KYC verification partners used to validate the authenticity of identity documents you submit.
• Fraud and security providers: Risk signals, fraud scores, and device fingerprinting data from security technology partners used to detect and prevent fraudulent account activity and protect the integrity of the Platform.
• Game providers: Game session logs and RNG certification data from licensed providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, used for dispute resolution and fair play auditing.

2 How We Use Your Data

pivpp uses the personal data we collect for specific, legitimate purposes directly related to operating the Platform, protecting our players, and complying with applicable obligations. The table below summarises the key purposes for which we process your personal data and the legal basis for each.

pivpp will not use your personal data for any purpose that is incompatible with those listed above without first notifying you and, where required, obtaining your explicit consent. You may opt out of receiving personalised promotional communications at any time by contacting our support team at [email protected].

3 Data Sharing & Disclosure

pivpp does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary to fulfil each specific purpose.

3.1 Service Providers and Processors

pivpp works with a carefully selected group of third-party service providers who process personal data on our behalf. These providers are contractually bound to process data only on pivpp's instructions and to maintain appropriate security measures. Categories of service providers include:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — for processing deposits and withdrawals in BDT.
• Identity verification providers: KYC technology partners used to verify the authenticity of identity documents submitted during account registration or withdrawal processing.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Habanero, and Ezugi — for delivering game content and resolving game-related disputes.
• Security and fraud prevention: Technology partners providing device fingerprinting, fraud scoring, and anomaly detection services.
• Customer support infrastructure: Providers of live chat, ticketing, and email support platforms used to deliver our 24/7 support service.
• Cloud and hosting infrastructure: Server and data hosting providers who store Platform data on secured, encrypted infrastructure.

3.2 Legal and Regulatory Disclosure

pivpp may disclose personal data to competent authorities, law enforcement bodies, or regulatory agencies where we are required to do so by applicable law or where disclosure is necessary to:

• Comply with a legal obligation, court order, or lawful request from a public authority.
• Investigate, detect, or prevent fraud, money laundering, or other criminal activity on the Platform.
• Protect the rights, property, or safety of pivpp, its players, or the general public.
• Enforce pivpp's Terms & Conditions where a breach has occurred or is suspected.

4 Cookies & Tracking

pivpp uses cookies and similar tracking technologies on the Platform to ensure it functions correctly, to remember your preferences, and to understand how players interact with our content. A cookie is a small text file placed on your device by a website; it allows the site to recognise your browser on subsequent visits and retrieve stored information.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent core Platform features — including account login and game play — from functioning correctly. For most browsers, cookie management options are found under Settings > Privacy or Settings > Security. Consult your browser's help documentation for specific instructions.

pivpp does not use third-party advertising cookies or cross-site tracking technologies to serve targeted advertising to users outside the Platform. Analytics data collected via cookies is aggregated and anonymised wherever possible before being used for Platform improvement purposes.

5 Data Retention

pivpp retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, to maintain your active account, and to comply with applicable legal obligations. The specific retention periods we apply are outlined below.

• Active account data: Retained for the full duration of your account's active status on the Platform plus a minimum of five (5) years following account closure, to meet legal and regulatory record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with applicable anti-money laundering and financial record-keeping obligations.
• KYC identity documents: Retained for the duration of your account plus five (5) years post-closure, or longer if required by applicable law.
• Customer support communications: Retained for three (3) years from the date of each interaction, to facilitate resolution of follow-up queries and disputes.
• Analytics and usage data: Retained in anonymised or aggregated form for up to two (2) years for Platform analytics and improvement purposes.
• Self-exclusion records: Retained for a minimum of seven (7) years following the end of a self-exclusion period to prevent re-registration in violation of responsible gaming commitments.

When personal data is no longer required for the purposes set out above, pivpp will securely delete or anonymise it in a manner that prevents reconstruction of the original information. Deletion requests submitted by users will be processed in accordance with the timelines set out in Section 7 (Your Privacy Rights), subject to any overriding legal retention obligations.

6 Data Security

The security of your personal data is a core priority at pivpp. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption: All data transmitted between your browser and the pivpp Platform is encrypted using industry-standard 256-bit SSL/TLS technology, ensuring that data in transit cannot be intercepted or read by unauthorised parties.
• Encryption at rest: Sensitive personal data and financial records stored on pivpp's servers are encrypted at rest using AES-256 encryption standards.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. pivpp staff can only access the data categories required to perform their specific role, and all access is logged and audited.
• Secure password storage: Account passwords are never stored in plain text. They are hashed using a strong cryptographic algorithm with a unique salt applied to each password hash.
• Fraud detection systems: Automated and manual monitoring systems continuously review Platform activity to detect and respond to suspicious patterns, unauthorised access attempts, and potential security threats in real time.
• Regular security assessments: pivpp's technical infrastructure undergoes regular security reviews and vulnerability assessments to identify and remediate potential weaknesses before they can be exploited.

In the event of a data security incident that poses a significant risk to your personal data, pivpp will take immediate steps to contain the incident, notify affected users as required by applicable law, and implement remedial measures to prevent recurrence. Notifications will be sent to the email address or mobile number registered on your account.

7 Your Privacy Rights

As a user of the pivpp Platform, you hold a set of rights with respect to the personal data we hold about you. pivpp is committed to respecting and facilitating these rights in a timely and straightforward manner. Your rights are described in full below.

• Right of Access: You have the right to request a copy of the personal data pivpp holds about you. We will provide this information within 30 days of receiving your verified request, in a commonly used electronic format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain data directly in your account settings; for other corrections, contact our support team.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations (see Section 5). Accounts subject to active investigations or legal holds cannot be immediately erased.
• Right to Restriction of Processing: You may request that pivpp restrict processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending verification of legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another service provider where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., for personalised promotions), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for direct marketing purposes. pivpp will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the rights listed above, please submit a written request to [email protected] with the subject line "Privacy Rights Request — [Your Account Username]". We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

8 Contact & Updates

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pivpp handles your personal data, please contact our support team directly. We aim to resolve all privacy-related queries promptly and transparently.

• Email (Privacy Enquiries): [email protected] — use the subject line "Privacy Enquiry" for fastest routing to the appropriate team.
• Support availability: 24/7, Bangladesh Standard Time (BST, UTC+6). Our support team handles privacy queries in English.
• Response time: Privacy queries are acknowledged within 5 business days and substantively addressed within 30 calendar days in standard cases.

pivpp reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, we will notify registered users via the email address on their account and update the "Last Updated" date at the top of this Policy. Continued use of the Platform following notification of changes constitutes acceptance of the revised Policy. We recommend that you review this Policy periodically to stay informed about how we protect your personal data.

This Policy was last reviewed and updated on 1 January 2026. The current version supersedes all previous versions of the pivpp Privacy Policy. If there is a conflict between this Policy and any prior version, the current version shall prevail.