ppvib Privacy Policy — How We Handle Your Data

Introduction

This Privacy Policy ("Policy") describes how ppvib ("ppvib", "we", "us", "our") collects, uses, stores, discloses, and protects personal information about you ("User", "Member", "you") when you access and use the ppvib platform at ppvib.org and any associated services offered by ppvib. This Policy forms part of the overall agreement between you and ppvib and should be read alongside the ppvib Terms & Conditions. By registering an account or using any ppvib service, you confirm that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

ppvib is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only the information that is necessary to operate the platform, verify member identities, process payments, prevent fraud, and comply with our legal obligations. We do not sell your personal data to third parties, and we do not use your data for purposes beyond those described in this Policy without first obtaining your consent.

1. Information We Collect

ppvib collects personal data in three primary ways: information you provide directly when registering or using the platform, information generated automatically as you interact with the platform, and information received from third-party service providers such as payment processors.

3. Legal Basis for Processing

ppvib processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

5. Payment Data and Mobile Money

When you deposit or withdraw funds using bKash, Nagad, Rocket, or Upay, ppvib records the mobile number associated with the transaction, the transaction reference ID provided by the mobile money provider, the amount transacted, and the date and time of the transaction. This information is retained as part of ppvib's financial records and is used to reconcile account balances, process withdrawal requests, and respond to disputes or queries about specific transactions.

ppvib does not store full card numbers, mobile banking PINs, bKash or Nagad wallet passwords, or any other payment authentication credentials. Payment authentication is handled entirely by the respective mobile money provider on their own secure systems. ppvib only receives confirmation of a successfully completed transaction, not the authentication data used to authorise it.

7. Data Retention

ppvib retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. In practice, this means: active account data is retained for the duration of your membership; transaction records (deposits, withdrawals, bet history) are retained for a minimum of five years from the date of each transaction to comply with AML record-keeping requirements; KYC documentation is retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later; and support communication records are retained for a minimum of two years.

When personal data is no longer required and there is no legal obligation to retain it, ppvib securely deletes or anonymises that data. Anonymised data (data that cannot reasonably be used to identify you) may be retained indefinitely for statistical and platform improvement purposes.

9. Data Security

ppvib implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include SSL/TLS encryption for all data in transit, encrypted storage of sensitive account data, access controls that restrict internal access to personal data on a strict need-to-know basis, regular security assessments and penetration testing, and monitoring systems designed to detect and respond to potential data breaches promptly.

No security system is impenetrable and ppvib cannot guarantee the absolute security of your data. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, ppvib will notify affected members without undue delay via SMS to the registered mobile number, and will take immediate steps to contain the breach and minimise its impact.

11. Changes to This Privacy Policy

ppvib reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — ppvib will notify registered members via SMS to the registered mobile number at least 7 days before the changes take effect. Non-material changes (such as clarifications, typographical corrections, or updated contact details) may be made without advance notice.

The current version of this Privacy Policy is always the version published at ppvib.org/privacy-policy and is identified by the "Last updated" date shown at the top of this document. Your continued use of the ppvib platform after any amendment constitutes your acceptance of the revised Policy.