Privacy Policy — pvpvip Platform

When you register a pvpvip account, we collect the personal information necessary to create and verify your identity, process transactions, and maintain a safe and compliant platform for all players across Bangladesh. The categories of personal data we collect fall into three broad groups: information you provide directly to us, information we collect automatically during your use of the platform, and information received from third-party verification services.

Information you provide directly to pvpvip includes your full legal name as it appears on your Bangladesh National Identity Card, your date of birth, your registered email address, your Bangladeshi mobile phone number, and the payment method details (such as bKash wallet number, Nagad number, or bank account reference) that you connect to your pvpvip account for deposits and withdrawals. During the KYC (Know Your Customer) verification process, you may also provide a photograph or scan of your NID and a selfie image for liveness verification purposes.

Information we collect automatically includes your IP address at the time of each login and transaction, your device type and operating system, your browser type and version, session timestamps, pages visited within the pvpvip platform, game session data (games played, bet amounts, session duration), and deposit and withdrawal transaction records. This data is collected automatically via server logs and, where applicable, cookies and similar tracking technologies described in Section 4 of this Policy.

Where required to complete identity or payment verification, pvpvip may receive confirmation data from trusted third-party identity verification service providers. This data is limited to confirmation of identity match results and does not include raw biometric data stored by pvpvip beyond what you submitted directly during KYC.

pvpvip uses the personal data we collect for a defined set of operational, legal, and service purposes. We do not use your data for any purpose that falls outside the categories described below, and we do not engage in automated decision-making that produces legal or similarly significant effects on players without human review.

The primary purpose for which we process your data is to operate and maintain your pvpvip account. This includes verifying your identity at registration and during KYC, processing deposits and withdrawals to and from your connected payment methods (bKash, Nagad, Rocket, Upay, and Bangladeshi bank accounts), managing your bonus entitlements, and resolving account disputes or support queries you raise with our team.

We also process your data to fulfil our responsible gaming obligations. This includes monitoring your gaming activity for signs of problem gambling behaviour, applying deposit limits or cool-off periods that you request, and enforcing self-exclusion arrangements. Responsible gaming monitoring uses your gameplay history, session duration data, and deposit frequency to generate risk signals that are reviewed by our responsible gaming team.

pvpvip processes your technical and usage data to maintain the security and integrity of the platform. This includes detecting and preventing fraudulent account activity, identifying multi-account violations, monitoring for unusual betting patterns that may indicate collusion or match-fixing, and investigating reported technical issues. These processing activities are carried out in the legitimate interest of pvpvip and the player community as a whole.

Where you have provided consent, we may use your email address and mobile number to send you promotional communications about pvpvip bonuses, seasonal offers (such as Eid promotions, BPL tournament specials, or Pohela Boishakh offers), and platform updates. You may withdraw consent for marketing communications at any time by contacting our support team or clicking the unsubscribe link in any promotional email.

pvpvip does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. However, to operate a fully functional online casino and sports betting platform for players across Bangladesh, we necessarily engage a limited number of trusted third-party service providers who process data on our behalf. All such providers are bound by confidentiality obligations and are permitted to use your data only for the specific purpose for which it was shared.

Payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive only the transaction data necessary to execute and record deposits and withdrawals. pvpvip does not share your full account profile with payment partners — only the transaction reference, amount, timestamp, and your registered mobile number or bank reference required to complete the transfer.

Game technology providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming receive a pseudonymised player identifier and session token when you launch a game. These providers do not receive your full name, NID details, or payment information. Game session outcomes and bet records generated by these providers are returned to pvpvip and stored as part of your account history.

In the event that pvpvip is required by law, court order, or regulatory authority to disclose player data, we will comply with such requirements. Where permissible, pvpvip will notify the affected player before disclosing their data. pvpvip will not voluntarily disclose player data to any government body or third party without a lawful basis for doing so.

pvpvip uses cookies and similar tracking technologies to maintain session continuity, remember your preferences, analyse platform performance, and where you have consented, deliver relevant promotional content. A cookie is a small text file placed on your device by the pvpvip web server when you visit the platform. Cookies do not contain executable code and cannot be used to access other files on your device.

Strictly necessary cookies are required for the pvpvip platform to function at all. These include your authenticated session token (which keeps you logged in during a session), CSRF protection tokens (which prevent cross-site request forgery attacks), and load-balancing cookies that ensure your requests are handled consistently by the same server. These cookies are placed automatically and cannot be opted out of while you use the platform.

Performance cookies collect anonymous, aggregated data about how players navigate the pvpvip platform — which pages are visited most frequently, average session durations, and where players encounter errors. This data is used exclusively to improve the platform experience and is not linked to any individual player's identity. These cookies may be declined via your browser settings without affecting core platform functionality.

Functionality cookies remember your preferences such as your preferred language setting, your last-visited game category, and whether you have previously dismissed a particular platform notice. These cookies improve your experience on return visits but are not essential to platform operation. They may be cleared at any time via your browser's cookie management interface.

pvpvip applies a layered security architecture to protect the personal data of all registered players. All data transmitted between your device and the pvpvip platform is encrypted in transit using TLS 1.2 or higher. Data stored on pvpvip servers — including account records, transaction histories, and KYC documents — is encrypted at rest using industry-standard AES-256 encryption. Access to encrypted data stores requires multi-factor authentication and is restricted to authorised personnel only.

Player passwords are never stored in plain text. pvpvip uses bcrypt with a sufficiently high work factor to store password hashes, making brute-force attacks computationally infeasible even in the unlikely event of a database compromise. KYC documents including NID photographs and selfie images are stored in an isolated, access-controlled document vault that is separate from the main account database, and access to this vault is logged in full.

pvpvip conducts regular internal security reviews of its data handling practices. In the event of a data breach that poses a material risk to players — such as unauthorised access to unencrypted personal data — pvpvip will notify affected players by email to their registered address within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the steps pvpvip has taken to contain it, and the recommended actions for affected players.

pvpvip retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable legal, regulatory, or operational obligations. When data is no longer required for any of these purposes, it is securely deleted or anonymised so that it can no longer be associated with any individual player.

Active account data — including your registration details, contact information, transaction history, and game session records — is retained for the full duration of your account's active status plus a period of five years following account closure. This five-year post-closure retention period is maintained to satisfy anti-money laundering record-keeping requirements and to enable resolution of any dispute that may arise after closure.

KYC documents including NID photographs and selfie images are retained for five years from the date of submission or for five years following account closure, whichever is later. After this period, KYC documents are permanently deleted from the pvpvip document vault unless a live legal or regulatory investigation requires their continued retention. Support correspondence and dispute records are retained for three years from the date the matter was resolved.

pvpvip may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or the introduction of new platform features that involve data handling. The most current version of this Policy will always be available at https://pvpvip.bet/privacy-policy and will display the effective date at the top of the document.

Where a material change is made to this Policy — meaning a change that significantly affects how your data is collected, used, or shared — pvpvip will provide at least 7 days' advance notice by displaying a prominent notice on the platform and, where practicable, by sending an email notification to all registered players at their registered email address. Non-material changes such as typographic corrections or clarifications that do not alter the substance of the Policy may be made without advance notice.

Your continued use of the pvpvip platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with any material change to this Policy, you should stop using the platform and contact our support team to request account closure and deletion of your data in accordance with the retention obligations described in Section 6.