pvip Privacy Policy

1 Introduction and Scope

This Privacy Policy explains how pvip ("we", "us", "our", or "the Company") collects, uses, stores, and protects the personal information of individuals ("you", "the Player", "the User") who access or use the pvip platform at https://pvip.bar, including all associated services, games, promotional features, and account management tools.

By registering a pvip account, making a deposit, or continuing to use the platform after this Policy has been made available to you, you acknowledge that you have read and understood how your personal data is processed as described here. If you do not agree with any part of this Policy, you should cease using the platform and request account closure.

This Privacy Policy applies to all personal data collected through the pvip website, mobile-optimised browser experience, any associated customer support channels, and all communication methods used between you and pvip including email correspondence.

2 Data Controller Identity

For the purposes of this Privacy Policy, pvip is the data controller responsible for the personal information collected through the platform. pvip operates the website https://pvip.bar and is the entity with which you form a contractual relationship when you register an account.

All data protection enquiries, access requests, correction requests, and deletion requests should be directed to the pvip data protection contact using the details provided in Section 15 of this Policy. pvip will acknowledge all formal data requests within five business days and provide a substantive response within 30 calendar days.

3 Information We Collect

pvip collects personal data through several channels and at different stages of the player relationship. The categories of personal data we collect are set out below:

3.1 Registration and Account Data

• Full legal name as it appears on your official identity document
• Date of birth (for age verification — all players must be 21 or older)
• Residential address including district, city, and postal code
• Email address and mobile phone number
• Username and encrypted password
• Preferred currency (Bangladeshi Taka, BDT)

3.2 Identity Verification (KYC) Data

• National Identity Card (NID) number and scan or photograph
• Passport details where NID is unavailable
• Proof of address documentation (utility bill, bank statement)
• Selfie or facial verification photograph where required

3.3 Financial and Transaction Data

• Mobile banking account identifiers for bKash, Nagad, Rocket, and Upay
• Deposit amounts, timestamps, and transaction reference numbers
• Withdrawal requests, amounts, and processing status
• Bonus and promotional credit history
• Betting and gaming activity records including wager amounts, game selections, and outcomes

3.4 Technical and Usage Data

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Session duration, pages visited, and features used
• Referring URL and exit page
• Cookie identifiers and similar tracking data (see Section 8)

3.5 Communications Data

• Content of messages sent to pvip support via email or live chat
• Complaint and dispute records
• Responses to optional player surveys or feedback forms

4 How We Use Your Information

pvip uses the personal data it collects for the following specific purposes:

pvip does not use your personal data for automated decision-making that produces legal or similarly significant effects without a human review stage. Where automated tools are used to flag unusual account behaviour (such as potential fraud or responsible gaming indicators), a human operator reviews the flagged case before any account action is taken.

5 Legal Basis for Processing

pvip processes your personal data on the following legal bases depending on the purpose:

• Contract Performance: Processing your account data, payment transactions, and game activity is necessary to perform the contract between you and pvip.
• Legal Obligation: KYC verification, anti-money laundering record-keeping, and responsible gaming monitoring are required by applicable law and regulatory standards.
• Legitimate Interest: Platform security, fraud prevention, technical analytics, and service improvement are carried out on the basis of pvip's legitimate business interests, balanced against your privacy rights.
• Consent: Marketing communications by email or push notification are sent only where you have given explicit opt-in consent. You may withdraw consent at any time by contacting support or updating your account preferences.

6 Sharing Your Information

pvip does not sell, rent, or trade your personal information to third parties for commercial purposes. We may share your personal data with the following categories of recipients solely to the extent necessary for the stated purpose:

• Payment Processors: Mobile banking partners including bKash, Nagad, Rocket, and Upay receive transaction data necessary to process your deposits and withdrawals. Each partner operates under its own data protection framework.
• Identity Verification Providers: Certified KYC service providers receive copies of your identity documents and may compare them against official registries to confirm authenticity. These providers are contractually bound to process your data only for identity verification purposes.
• Game Software Providers: Third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive pseudonymised session identifiers necessary to operate their games within the pvip platform. These providers do not receive your full personal profile.
• Fraud and Security Services: Specialist fraud detection platforms may receive device fingerprint data, IP addresses, and transaction metadata to assist in identifying suspicious activity. All such sharing is governed by data processing agreements.
• Legal and Regulatory Authorities: pvip will disclose personal data to law enforcement agencies, financial regulators, or other competent authorities where required to do so by applicable law, court order, or regulatory direction. pvip will notify you of such disclosure where legally permitted to do so.
• Professional Advisors: Lawyers, auditors, and accountants engaged by pvip may access personal data on a need-to-know basis subject to professional confidentiality obligations.

7 Payment Data and Security

Financial data processed through the pvip platform is handled with additional layers of security given its sensitive nature. The following measures apply specifically to payment and transaction data:

• Mobile banking PINs, OTP codes, and full account passwords for bKash, Nagad, Rocket, or Upay are never requested by pvip and must never be shared with any pvip representative.
• pvip stores only the mobile number or account identifier necessary to direct a payment — not the underlying credentials of your mobile banking account.
• All payment data transmitted between your device and pvip's payment processing infrastructure is encrypted using TLS 1.2 or higher.
• Transaction records are retained for the period required by applicable anti-money laundering regulations, after which they are securely deleted or anonymised.
• In the event of a suspected security incident affecting payment data, pvip will notify affected players as soon as practicable and take immediate steps to contain the incident.

8 Cookies and Tracking Technologies

pvip uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, remember your preferences, analyse platform usage, and detect fraudulent activity. The categories of cookies used on the pvip platform are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language and currency settings, and enable core security features. These cookies cannot be disabled without breaking the platform's functionality.
• Analytics Cookies: These cookies collect anonymised data about how players navigate the pvip platform, which pages are visited most frequently, and where users encounter errors. This data helps pvip improve the platform experience. Analytics data does not identify individual players.
• Fraud Prevention Cookies: These cookies store device fingerprint identifiers that help pvip's security systems identify unusual login patterns and protect accounts from unauthorised access.
• Preference Cookies: These cookies remember choices you make on the platform such as display preferences and notification settings so that you do not need to reconfigure them on each visit.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the pvip platform. Disabling analytics or preference cookies will not prevent you from accessing the platform but may reduce the quality of your experience.

9 Data Retention

pvip retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods applicable to the main categories of personal data are as follows:

• Account and Registration Data: Retained for the duration of your active account relationship with pvip, plus a minimum of five years following account closure to meet anti-money laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five years from the date of submission, or longer where required by applicable law or ongoing regulatory inquiry.
• Transaction and Betting Records: Retained for a minimum of five years from the date of the transaction for compliance and audit purposes.
• Customer Support Communications: Retained for three years from the date of the last communication, or for the duration of any open dispute where longer retention is necessary.
• Technical and Session Data: Retained for up to 13 months from collection for analytics and security purposes, after which it is anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your marketing opt-in plus two years following withdrawal of consent.

When the applicable retention period expires, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data must be retained beyond the standard period due to an ongoing legal obligation or dispute, pvip will document the reason for the extended retention.

10 Your Data Rights

Subject to applicable law, you hold the following rights in respect of the personal data pvip holds about you. You may exercise any of these rights by contacting pvip support in writing at the address provided in Section 15:

pvip will acknowledge all data rights requests within five business days and provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, pvip may extend this period by a further 30 days with written notification to you explaining the reason for the extension.

pvip may request proof of your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised party. This verification step is a security measure and not a mechanism to delay or obstruct the exercise of your rights.

11 Children and Minors

The pvip platform is strictly for adults aged 21 years and older. pvip does not knowingly collect personal data from individuals under the age of 21. Age verification is performed at registration and again prior to the processing of a player's first withdrawal.

If pvip discovers that personal data has been collected from a player who is under the minimum age, that account will be immediately suspended, all funds will be returned to the originating payment method where possible, and all personal data associated with the account will be deleted from pvip's systems without undue delay.

If you are a parent or guardian and believe that a minor in your care has registered a pvip account, please contact us immediately at the address provided in Section 15 so that the account can be closed and the data removed promptly.

12 International Data Transfers

pvip's primary data processing infrastructure is located to serve the Bangladesh market. However, some of pvip's third-party service providers — including game software studios, fraud prevention systems, and identity verification platforms — may process data in data centres located outside Bangladesh.

Where personal data is transferred to a third-party processor in another country, pvip ensures that appropriate safeguards are in place before the transfer takes place. These safeguards may include contractual data processing agreements incorporating standard data protection clauses, certification under internationally recognised security frameworks, or other mechanisms providing an equivalent level of protection to that required under applicable Bangladeshi data protection standards.

You may request information about the specific safeguards in place for any international transfer of your personal data by submitting a written request to pvip support.

13 Security Measures

pvip implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include but are not limited to:

• TLS/SSL Encryption: All data in transit between your device and pvip's servers is encrypted using TLS 1.2 or higher, preventing interception by third parties.
• Encrypted Data Storage: Sensitive data fields including passwords and identity document references are stored in encrypted form. Passwords are hashed using a strong one-way algorithm and are never stored in recoverable plain text.
• Access Controls: Access to personal data within pvip's internal systems is restricted to authorised personnel on a need-to-know basis. Access permissions are reviewed regularly and revoked promptly when no longer required.
• Multi-Factor Authentication: Administrative access to systems containing player data requires multi-factor authentication.
• Regular Security Assessments: pvip conducts periodic reviews of its security posture and engages external security professionals to assess vulnerabilities and recommend improvements.
• Incident Response: pvip maintains a documented data breach response procedure. In the event of a breach affecting your personal data, pvip will notify you and the relevant authorities as required by applicable law.

While pvip takes all reasonable precautions to protect your data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own device and account credentials.

14 Changes to This Policy

pvip reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, pvip will notify registered players via the email address held on their account before the updated Policy takes effect.

The effective date shown at the top of this page will be updated with each revision. We recommend that you review this page periodically to stay informed of how pvip protects your personal data. Where changes are non-material — such as minor clarifications of existing provisions — pvip may update the Policy without individual notification, relying instead on the updated effective date as notice.

Your continued use of the pvip platform after the effective date of any amendment to this Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the platform and contact pvip to close your account.

15 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how pvip has handled your personal information, please contact us using the following details:

• Email: support@pvip.bar (plain text — not a clickable link)
• Subject Line: Please use "Privacy Request" or "Data Protection Enquiry" to ensure your message reaches the appropriate team
• Response Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
• Response Time: Acknowledgement within 5 business days; substantive response within 30 calendar days

pvip takes all privacy concerns seriously and will investigate any complaint promptly and thoroughly. If you are not satisfied with pvip's response to your privacy complaint, you may escalate the matter to the relevant data protection authority or seek independent legal advice regarding your rights under applicable law.