ppvp Privacy Policy — How We Protect Your Personal Data

1 Introduction

ppvp ("we", "us", "our", or "the Company") operates the online sportsbook and casino platform accessible at ppvp.im (the "Platform"). This Privacy Policy sets out how ppvp collects, processes, stores, protects, and shares personal data belonging to registered players, prospective players, and visitors to the Platform (collectively referred to as "you" or "the User").

ppvp is committed to handling your personal information with the highest standards of care, transparency, and security. We collect only the data that is genuinely necessary to provide our services, fulfil our legal obligations, and deliver a safe and reliable gaming environment for players across Bangladesh.

This Privacy Policy should be read in conjunction with the ppvp Terms & Conditions, which together constitute the complete legal framework governing your use of the Platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy shall take precedence.

2 Personal Data We Collect

2.1 Data You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion, you provide us with personal data that may include:

• Full legal name and date of birth
• Residential address (including city and division — e.g., Dhaka, Chittagong, Sylhet, Khulna)
• Mobile phone number and email address
• Government-issued identity document details (national ID, passport, or driving licence number)
• Payment method details (bKash/Nagad/Rocket account numbers, masked card numbers)
• Communications sent to ppvp support via live chat or email

2.2 Data Collected Automatically

When you access and use the Platform, certain technical data is collected automatically through cookies, log files, and similar technologies:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session timestamps, login history, and duration of play
• Pages visited, features used, and in-platform navigation patterns
• Deposit and withdrawal transaction logs
• Betting history, wagering patterns, and game activity records

2.3 Data from Third Parties

ppvp may receive personal data about you from trusted third-party sources where this is necessary to verify your identity, prevent fraud, or comply with legal obligations. Such third-party sources may include KYC verification providers, payment processors, fraud prevention agencies, and publicly available government records.

3 How We Use Your Personal Data

ppvp uses the personal data it collects for the following specific purposes:

Purpose	Data Used	Basis
Account registration and management	Name, email, phone, DOB, address	Contract performance
Identity verification (KYC)	ID documents, name, DOB, address	Legal obligation
Payment processing	Payment method details, transaction records	Contract performance
Fraud detection and prevention	IP address, device data, betting patterns	Legitimate interest
Responsible gaming monitoring	Wagering history, session data, deposit records	Legal obligation / Legitimate interest
Customer support	Communications, account activity	Contract performance
Regulatory compliance and audit	Transaction records, identity data	Legal obligation
Platform improvement and analytics	Anonymised usage data, session logs	Legitimate interest
Promotional communications (opted-in only)	Email, phone number	Consent

ppvp does not use your personal data for automated individual decision-making that produces significant legal effects without the involvement of a human reviewer, except in cases of real-time fraud detection where immediate automated action is required to protect the integrity of the Platform and other players.

4 Legal Basis for Processing

ppvp processes your personal data under one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contract performance: Processing is necessary to fulfil our obligations under the account agreement between ppvp and the player — including account creation, payment processing, and service delivery.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, and record-keeping duties.
• Legitimate interest: Processing serves ppvp's legitimate business interests — such as fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your freely given, specific, and informed consent — such as receiving promotional communications — you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing and Disclosure

5.1 Authorised Third-Party Partners

ppvp shares personal data with carefully selected third-party service providers only where necessary to operate the Platform and deliver services to players. These partners are contractually bound to process your data only on ppvp's instructions and in accordance with applicable data protection standards. Categories of authorised partners include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card scheme partners (Visa, Mastercard), Dutch-Bangla Bank, BRAC Bank — for the purpose of executing and recording financial transactions.
• KYC and identity verification providers: To verify player identity documents and confirm eligibility.
• Fraud prevention and AML screening services: To detect suspicious activity and comply with financial crime prevention obligations.
• Game software studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited session and wagering data necessary to deliver game functionality.
• IT infrastructure and hosting providers: For secure data storage and platform operations.
• Customer support platform providers: To facilitate live chat and ticketing functions.

5.2 Legal Disclosure

ppvp may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where we are required to do so by applicable law, court order, or to protect the legal rights and interests of ppvp or other players on the Platform. In all such cases, ppvp will disclose only the minimum data strictly necessary to satisfy the legal requirement.

5.3 No Sale of Data

ppvp does not sell, rent, lease, or otherwise transfer your personal data to any third party for that party's own marketing or commercial purposes. Your personal information is not a commodity at ppvp.

6 Cookies and Tracking Technologies

6.1 Types of Cookies Used

ppvp uses the following categories of cookies on the Platform:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in securely and cookies that maintain your active game session. These cannot be disabled without breaking core functionality.
• Performance and analytics cookies: Used to collect anonymised data about how players navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data helps us identify and fix issues and improve the overall player experience.
• Functional cookies: Store your preferences — such as language settings and responsible gaming tool configurations — so they persist across sessions.

6.2 Third-Party Advertising Cookies

ppvp does not deploy third-party advertising or retargeting cookies. We do not participate in ad networks or permit third-party advertisers to place tracking cookies on the ppvp Platform.

6.3 Managing Cookies

You may manage or disable non-essential cookies through your browser's privacy settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use certain features of the Platform, including maintaining an active login session.

7 Data Security

ppvp employs a comprehensive, layered approach to data security designed to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• SSL 256-bit encryption on all data transmitted between your device and the Platform.
• Encrypted storage of all sensitive personal and financial data at rest on our servers.
• Access controls: Personal data is accessible only to authorised ppvp personnel who require it to perform their specific role. Access is governed by role-based permissions and subject to regular review.
• Intrusion detection systems and continuous server monitoring to identify and respond to security threats in real time.
• Regular security audits and vulnerability assessments conducted by independent security professionals.
• Two-factor authentication options available for all player accounts to add an additional layer of login security.

8 Data Retention

ppvp retains personal data for the minimum period necessary to fulfil the purposes described in this Privacy Policy, after which data is either securely deleted or anonymised. Our general retention guidelines are as follows:

• Active account data: Retained for the duration of your account relationship with ppvp.
• Closed account data: Retained for a minimum of five (5) years following account closure to satisfy anti-money laundering record-keeping obligations and to resolve any disputes that may arise.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years in compliance with financial record-keeping requirements.
• Support communications: Retained for three (3) years from the date of the most recent communication in the thread.
• Marketing consent records: Retained for the duration of the consent and for three (3) years after consent is withdrawn, to demonstrate compliance.

Where data is retained beyond the initial account relationship solely to fulfil legal obligations, access to that data within ppvp is restricted to personnel with a specific compliance or legal function.

9 Your Privacy Rights

As a ppvp player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact ppvp support at [email protected] (plain text — not a clickable link). We aim to respond to all valid requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data ppvp holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you believe it has been processed unlawfully. This right is subject to overriding legal retention obligations.
• Right to Restriction of Processing: You may request that ppvp restrict the processing of your data while a dispute about its accuracy or the lawfulness of its processing is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request a structured, machine-readable copy of the personal data you have provided to ppvp.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interest, including profiling for responsible gaming monitoring purposes.
• Right to Withdraw Consent: Where processing is based on your consent — for example, for receiving promotional communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.

10 Children's Privacy

The ppvp Platform is strictly intended for adults aged 21 years and above. ppvp does not knowingly collect, process, or store personal data relating to individuals under the age of 21. If ppvp becomes aware that personal data has been collected from a person under 21 — whether through a fraudulent registration or any other means — the associated account will be immediately suspended, all data relating to the minor will be deleted from our systems, and any funds held in the account will be handled in accordance with applicable law.

If you are a parent or guardian and believe that a minor in your care has registered a ppvp account or has otherwise submitted personal data to the Platform, please contact us immediately at [email protected] (plain text — not a clickable link) so we can take appropriate action without delay.

11 International Data Transfers

ppvp operates primarily in and for the Bangladesh market. Some of our third-party service partners — including game software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — are headquartered in jurisdictions outside Bangladesh. Where your personal data is transferred to or accessed from a country outside Bangladesh in the course of delivering our services, ppvp takes reasonable steps to ensure that adequate safeguards are in place to protect your data in accordance with the standards described in this Privacy Policy.

Such safeguards may include contractual clauses requiring the recipient to maintain data protection standards equivalent to those applied by ppvp, or reliance on the recipient's participation in internationally recognised data protection frameworks. If you have questions about the specific safeguards applicable to a particular transfer, please contact us at the details provided in Section 13.

12 Updates to This Privacy Policy

ppvp reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, registered players will be notified via email or in-account notification prior to the changes taking effect wherever practicable.

The "Last updated" date at the top of this page will be revised whenever changes are made. We encourage you to review this Privacy Policy periodically to stay informed about how ppvp protects your personal data. Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ppvp handles your personal data, please contact our Data Protection team. We are committed to resolving all privacy-related queries promptly and transparently.

Email: [email protected] (plain text — not a clickable link)

Support availability: 24 hours a day, 7 days a week, 365 days a year via in-account live chat. For privacy-specific requests, email is the recommended contact channel as it creates a written record of your request and our response.

This Privacy Policy was last reviewed and updated on 1 January 2026. © 2026 ppvp. All rights reserved.