ppbip Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy describes how ppbip ("we", "us", "our") collects, uses, stores, and protects the personal information of players who register and use the ppbip platform available at ppbip.bio. ppbip is Bangladesh's premier online casino and sports betting platform, dedicated to providing a safe, transparent, and enjoyable experience for all registered players.

We understand that your personal data is valuable and sensitive. This Policy is written in plain English so that every player in Bangladesh can clearly understand what information we hold, why we hold it, and what control you have over it. We encourage you to read this Policy carefully before registering an account or using any ppbip service.

By creating a ppbip account or by continuing to use our platform after this Policy has been updated, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the ppbip platform.

For the purposes of applicable data protection law, ppbip acts as the data controller in respect of personal data collected from players using the platform. As data controller, ppbip determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data protection enquiries, access requests, and complaints should be directed to the ppbip data privacy team using the contact details set out in Section 16 of this Policy. We will acknowledge your request within 48 hours and provide a substantive response within 30 days.

ppbip collects the following categories of personal data from players. The specific data collected depends on how you use our platform and the services you access.

ppbip collects personal data through the following channels and methods:

• Direct collection: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting our support team, or responding to a survey or promotion.
• Automated technical collection: Information gathered automatically when you access our platform, including IP address, device identifiers, browser data, session logs, and cookie data (see Section 8).
• Transaction records: Financial data generated when you make deposits via bKash, Nagad, Rocket, Upay, or any other supported payment method, and when withdrawal requests are processed.
• Third-party verification services: Identity and age verification data obtained from authorised third-party KYC providers when you submit documentation for account verification.
• Game and betting activity: Records generated automatically by our gaming platform and sports betting engine as a result of your real-money activity on ppbip.

ppbip processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to create and manage your account, provide gaming services, process deposits and withdrawals, and fulfil our obligations under the Terms & Conditions you agreed to at registration.
• Legal obligation: Processing necessary to comply with applicable legal requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, age verification mandates, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out in pursuit of ppbip's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing for optional purposes where you have given us your clear, informed, and freely given consent — most notably for the receipt of marketing communications and promotional offers. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ppbip uses your personal data for the following specific purposes:

• Creating, maintaining, and securing your player account on the ppbip platform.
• Verifying your identity and age to ensure compliance with the 21+ age requirement and to prevent underage gambling.
• Processing deposits and withdrawals in Bangladeshi Taka (BDT / ৳) via bKash, Nagad, Rocket, Upay, and bank transfer services.
• Delivering the games, betting markets, and other services you access on ppbip, including live dealer tables, slots, cricket betting, and jackpot games.
• Monitoring your gaming activity for responsible gaming purposes, including detecting patterns that may indicate problematic gambling behaviour, and reaching out proactively where warranted.
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited activities as defined in our Terms & Conditions.
• Providing customer support and resolving disputes, complaints, and technical issues.
• Sending you service-related communications such as account notifications, security alerts, and important policy updates.
• Sending you promotional communications, bonus offers, and personalised recommendations — where you have consented to receive these.
• Analysing aggregated, anonymised usage data to improve the performance, reliability, and features of the ppbip platform.

ppbip does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment processors and financial partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the transaction data required to process your deposits and withdrawals. These parties are contractually bound to handle this data solely for payment processing purposes.
• KYC and identity verification providers: Third-party identity verification services receive the documentation you submit for account verification, solely for the purpose of confirming your identity and age.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive the minimum session and wagering data required to deliver their games and resolve any technical disputes.
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection vendors who support the operation and security of the ppbip platform, subject to strict data processing agreements.
• Legal and regulatory authorities: ppbip will disclose personal data to competent law enforcement or regulatory authorities where required to do so by applicable law, court order, or in connection with the investigation of fraud, money laundering, or other criminal activity.
• Professional advisers: Legal counsel, auditors, and accountants may access personal data on a strictly confidential, need-to-know basis in connection with the operation of ppbip's business.

ppbip uses cookies and similar tracking technologies to operate the platform, maintain session security, and improve user experience. The following types of cookies are used:

• Strictly necessary cookies: Essential to the operation of the platform, including session authentication, security tokens, and load balancing. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: Remember your preferences such as language settings and display options to personalise your experience on ppbip.
• Analytical cookies: Collect anonymised data about how players navigate the platform to help us identify areas for improvement. Data from analytical cookies is aggregated and never used to identify individual players.
• Security cookies: Support our fraud detection and account protection systems by identifying anomalous access patterns and flagging suspicious login attempts.

You may control non-essential cookies through your browser settings. Please note that disabling functional or analytical cookies may affect the quality of your experience on the platform but will not prevent you from accessing core gaming services. ppbip does not use third-party advertising or behavioural tracking cookies for the purpose of serving targeted advertisements on external websites.

ppbip retains personal data for as long as is necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations. The following general retention periods apply:

Upon expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to any identifiable individual.

ppbip employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• TLS/SSL encryption: All data transmitted between your device and ppbip's servers is protected by Transport Layer Security (TLS 1.2 or higher), ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encryption at rest: Sensitive stored data, including identity documents and financial records, is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within ppbip's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their duties.
• Two-factor authentication: ppbip's internal systems require multi-factor authentication for all staff access to production data environments.
• Regular security audits: ppbip conducts regular internal and third-party security audits and penetration tests to identify and remediate vulnerabilities in our systems.
• Incident response plan: A tested incident response plan is in place to ensure that any security breach is identified, contained, and communicated to affected parties in a timely manner.

As a ppbip player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within 30 days.

• Right of access: You have the right to request a copy of all personal data we hold about you, together with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may also update certain information directly within your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful — subject to our legal retention obligations.
• Right to restriction: You have the right to request that we restrict processing of your personal data in certain circumstances, for example while a correction request is being assessed.
• Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object at any time to processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, though ppbip may be able to demonstrate compelling grounds to continue processing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

ppbip will not charge a fee for responding to data rights requests unless the request is manifestly unfounded or excessive, in which case we will notify you of any applicable charge before proceeding.

The ppbip platform is strictly intended for adults aged 21 years and above. ppbip does not knowingly collect, store, or process any personal data relating to persons under the age of 21. The registration process includes age verification steps designed to prevent underage access.

If ppbip becomes aware or has reason to believe that personal data of a person under 21 years of age has been collected through our platform, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child may have registered on ppbip without authorisation, please contact us immediately at [email protected].

ppbip may send you promotional communications about bonuses, new games, seasonal offers (such as Eid specials, BPL cricket promotions, or Pohela Boishakh offers), and platform updates where you have given us your explicit consent to do so at the point of registration or subsequently through your account settings.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email sent by ppbip.
• Updating your communication preferences within your account settings.
• Contacting our support team at [email protected] and requesting removal from marketing lists.

Please allow up to 5 business days for opt-out requests to take effect across all communication channels. Opting out of marketing communications will not affect your receipt of essential service communications such as account security alerts, deposit confirmations, and withdrawal notifications.

The ppbip platform does not include links to third-party websites for commercial or affiliate purposes. In the event that any third-party reference is made within the platform for informational purposes, ppbip is not responsible for the privacy practices or content of those external sites. This Privacy Policy applies solely to personal data collected and processed by ppbip through the ppbip.bio platform and its associated services.

Game software provided by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operates within the ppbip platform environment. The minimal session data shared with these providers is governed by data processing agreements that require them to handle such data in accordance with this Privacy Policy and applicable data protection standards.

ppbip may update this Privacy Policy from time to time to reflect changes in our data processing practices, new services we introduce, changes in applicable law, or feedback from players and regulators. The "Last Updated" date at the top of this Policy will be revised whenever a material change is made.

Where changes are material — meaning they significantly affect your rights or the way we handle your personal data — ppbip will notify registered players by email to the address on file prior to the changes taking effect. For minor or clarificatory amendments, the updated Policy will be published on the ppbip platform without direct notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the ppbip platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ppbip handles your personal data, please contact our data privacy team using the details below. We are committed to addressing your enquiry promptly and professionally.

• Email: [email protected] (plain text — not a clickable link)
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and provide a full response within 30 days of receipt.
• Support hours: 24/7 — Bangladesh Standard Time (UTC+6)
• Language: All communications are handled in English.

When submitting a data rights request, please include your registered email address, a clear description of your request, and — where relevant — a copy of a government-issued identity document to allow us to verify your identity before disclosing or deleting any personal data. This step is necessary to protect your data from unauthorised access or deletion by third parties.