pbip Privacy Policy

1. Introduction

1.1 pbip is Bangladesh's premier online casino and sports betting platform. In the course of operating our platform and delivering services to Bangladeshi players, we necessarily collect and process certain personal data relating to our users. We take this responsibility seriously and are committed to handling your data with care, transparency, and respect.

1.2 This Policy applies to all personal data collected through the pbip website, mobile-optimised site, any pbip-branded application, live chat functionality, email correspondence, and any other channel through which you interact with pbip.

1.3 This Policy should be read in conjunction with the pbip Terms & Conditions and, where applicable, the specific terms governing individual products or promotional offers available on the platform.

1.4 pbip processes personal data in accordance with applicable data protection principles including purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.

2. Data We Collect

2.1 pbip collects the following categories of personal data, depending on your relationship with us and the features of the platform you use:

Category	Examples	When Collected
Identity Data	Full name, date of birth, gender, national ID or passport number	Registration & KYC verification
Contact Data	Email address, phone number, residential address	Registration & KYC verification
Financial Data	bKash / Nagad / Rocket mobile wallet numbers, bank account details, transaction history	Deposit & withdrawal processing
Technical Data	IP address, device type, browser type and version, operating system, session identifiers	Automatic collection during platform use
Usage Data	Pages visited, games played, bet history, session duration, clickstream data	Automatic collection during platform use
Communications Data	Live chat transcripts, email correspondence, support ticket content	When you contact pbip support
Responsible Gaming Data	Self-exclusion requests, deposit limits, session time settings, flagged behaviour patterns	When you use responsible gaming tools or are flagged by our monitoring systems
Marketing Preferences	Opt-in / opt-out status for promotional communications, preferred communication channel	Registration and ongoing account management

2.2 pbip does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data beyond responsible gaming monitoring, or biometric data) except where expressly required by applicable law or voluntarily provided by you in the context of a support interaction.

3. How We Collect Data

3.1 Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings.

3.2 Automatically — when you visit and interact with the pbip platform, our servers and analytics tools automatically record technical and usage data including your IP address, device characteristics, session duration, pages visited, and in-game activity.

3.3 From third parties — pbip receives data from third-party service providers in the ordinary course of operations, including:

• Identity verification and KYC service providers who confirm the authenticity of documents you submit;
• Payment processors and mobile wallet operators (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank) who confirm transaction status;
• Fraud prevention and anti-money-laundering screening services;
• Game content providers (such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and Microgaming) who may share session-level data with pbip for settlement and dispute resolution purposes.

3.4 Via cookies and similar technologies — as described in Section 9 of this Policy.

4. Purposes of Processing

4.1 pbip processes your personal data for the following specific purposes:

• Account creation and management — to register your account, verify your identity, and maintain accurate records of your account status;
• Transaction processing — to facilitate deposits and withdrawals via your chosen payment method and maintain an accurate transaction history;
• KYC and regulatory compliance — to verify your identity and age (21+), detect and prevent money laundering, and comply with applicable legal and regulatory obligations;
• Fraud prevention and platform security — to detect, investigate, and prevent fraudulent activity, account abuse, collusion, and other prohibited behaviours described in the pbip Terms & Conditions;
• Responsible gaming monitoring — to identify patterns of behaviour associated with problem gambling and to administer player-requested limits, cooling-off periods, and self-exclusions;
• Customer support — to respond to your enquiries, resolve disputes, and improve the quality of our support services;
• Platform improvement — to analyse usage patterns and technical performance data for the purpose of improving the platform's functionality, reliability, and user experience;
• Marketing and promotions — to send you information about pbip offers, bonuses, and promotions where you have provided consent or where pbip has a legitimate interest in doing so under applicable law;
• Legal compliance and enforcement — to comply with court orders, regulatory requests, and applicable laws, and to enforce pbip's Terms & Conditions.

5. Legal Basis for Processing

5.1 pbip processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform the contract between you and pbip (i.e., operating your account, processing bets, and handling transactions);
• Legal obligation — processing required to comply with applicable laws and regulations, including KYC, anti-money-laundering, and responsible gaming obligations;
• Legitimate interests — processing carried out for pbip's legitimate business interests, including fraud prevention, platform security, and platform improvement, provided these interests are not overridden by your fundamental rights and freedoms;
• Consent — processing based on your freely given, specific, informed consent, particularly in relation to marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

6.1 pbip does not sell, rent, or trade your personal data. We share personal data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment service providers — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard, for the purpose of processing your transactions;
• KYC and identity verification providers — third-party specialists engaged to verify the identity documents you submit during the registration or verification process;
• Fraud prevention and AML screening services — providers who assist in detecting and preventing financial crime and platform abuse;
• Game content providers — game studios and aggregators such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and Microgaming, who receive session data necessary for game operation and dispute resolution;
• IT and infrastructure providers — cloud hosting, data centre, and technology service providers who process data on pbip's behalf under strict data processing agreements;
• Legal and regulatory authorities — where pbip is required by law, court order, or regulatory direction to disclose personal data;
• Business successors — in the event of a merger, acquisition, or sale of pbip's business assets, personal data may be transferred to the relevant successor entity, subject to equivalent data protection obligations.

6.2 All third-party service providers that process personal data on pbip's behalf are required to implement appropriate technical and organisational security measures and are prohibited from using your data for purposes beyond those specified by pbip.

7. International Transfers

7.1 Some of pbip's third-party service providers operate outside Bangladesh. Where personal data is transferred to recipients in other countries, pbip takes reasonable steps to ensure that such transfers are conducted securely and that the recipient applies data protection standards consistent with those described in this Policy.

7.2 By using the pbip platform and providing your personal data, you acknowledge that your data may be processed in countries outside Bangladesh. pbip will not transfer your data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

8. Data Retention

8.1 pbip retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or for as long as is required by applicable law — whichever is the longer period.

8.2 In practice, pbip applies the following indicative retention periods:

• Account data and KYC documents — retained for a minimum of 5 years from account closure or the last transaction date, in accordance with anti-money-laundering record-keeping obligations;
• Transaction records — retained for a minimum of 5 years from the date of the relevant transaction;
• Responsible gaming records — retained for the duration of any self-exclusion period plus a minimum of 2 years following its expiry;
• Support and communications data — retained for a minimum of 3 years from the date of the relevant interaction;
• Marketing preference data — retained for as long as your account is active and for 2 years following account closure.

8.3 Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

9. Cookies & Tracking Technologies

9.1 pbip uses cookies and similar technologies (including web beacons and local storage objects) to operate and improve the platform. A cookie is a small text file stored on your device by your browser when you visit a website.

9.2 pbip uses the following categories of cookies:

• Strictly necessary cookies — required for the platform to function. These include session authentication cookies and security tokens. You cannot opt out of these cookies as they are essential to service delivery.
• Functional cookies — used to remember your preferences such as language settings, display preferences, and account configuration. These improve your experience but are not essential.
• Analytical cookies — used to collect aggregated, anonymised data about how users navigate and interact with the platform, enabling pbip to improve performance and usability. No personally identifiable information is associated with analytical cookies.

9.3 pbip does not place third-party advertising or retargeting cookies on your device.

9.4 You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the pbip platform. Consult your browser's help documentation for guidance on cookie management.

10. Your Data Rights

10.1 Subject to applicable law, you have the following rights in relation to the personal data pbip holds about you:

• Right of access — you may request a copy of the personal data pbip holds about you;
• Right to rectification — you may request correction of inaccurate or incomplete personal data;
• Right to erasure — you may request deletion of your personal data where pbip no longer has a legal basis or legitimate interest to retain it, subject to overriding legal retention obligations;
• Right to restriction — you may request that pbip restricts the processing of your data in certain circumstances, for example while a rectification request is being resolved;
• Right to data portability — where technically feasible and legally applicable, you may request a copy of your personal data in a structured, machine-readable format;
• Right to object — you may object to processing based on legitimate interests, including direct marketing. pbip will honour such objections unless it can demonstrate compelling legitimate grounds that override your interests;
• Right to withdraw consent — where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10.2 To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". Please include your account username, a description of the right you wish to exercise, and sufficient information to verify your identity. pbip will respond within 30 days of receiving a valid request.

10.3 pbip may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised party. In some cases, pbip may be unable to fulfil a request in full due to overriding legal obligations — in such cases, we will explain the reasons for the limitation.

11. Security Measures

11.1 pbip implements a layered approach to data security, combining technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the pbip platform;
• Encryption of sensitive personal data at rest in our database and file storage systems;
• Access controls and role-based permissions limiting staff access to personal data on a need-to-know basis;
• Regular security audits and vulnerability assessments of the pbip platform and underlying infrastructure;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Incident response procedures for identifying, containing, and reporting data security incidents.

11.2 Despite these measures, no method of data transmission over the internet or electronic storage is completely secure. pbip cannot guarantee the absolute security of data and accepts no liability for security incidents resulting from events outside its reasonable control, such as attacks on telecommunications infrastructure or user device compromise.

11.3 If you become aware of or suspect any unauthorised access to your pbip account, please notify us immediately at [email protected]. pbip will investigate all reported security incidents promptly.

12. Children & Minors

12.1 The pbip platform is strictly intended for adults aged 21 years and above. pbip does not knowingly collect personal data from any person under the age of 21. If pbip discovers or has reasonable grounds to believe that personal data has been collected from a minor, the relevant account will be immediately closed and all associated data will be deleted to the extent permitted by law.

12.2 If you are a parent or guardian and believe that a minor in your care has registered a pbip account or provided personal data to pbip, please contact us immediately at [email protected] so that appropriate action can be taken without delay.

12.3 pbip employs age verification processes during registration and KYC as a safeguard against underage gambling. These processes include document-based identity verification and cross-referencing of date of birth information provided at registration.

13. Marketing Communications

13.1 Where you have provided consent to receive marketing communications, pbip may contact you by email or in-platform notification with information about promotions, bonuses, new game releases, and other platform updates.

13.2 You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email pbip sends you; or
• Contacting pbip support at [email protected] with a request to opt out of all marketing communications.

13.3 Opting out of marketing communications will not affect your ability to use the pbip platform, nor will it prevent pbip from sending you essential service communications such as transaction confirmations, account security alerts, or updates to these Terms.

13.4 pbip does not engage in SMS marketing or third-party advertising networks. Our marketing communications are sent directly from pbip and are limited to players who have registered accounts and provided valid consent.

14. Changes to This Policy

14.1 pbip reserves the right to update or modify this Privacy Policy at any time. When we make material changes to this Policy, we will notify registered players by email or through a prominent notice on the pbip platform prior to the change becoming effective.

14.2 The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how pbip protects your personal data.

14.3 Your continued use of the pbip platform after any update to this Policy constitutes your acceptance of the updated Policy. If you do not agree with any changes, you must stop using the platform and may close your account by contacting [email protected].

15. Contact Us

15.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or pbip's data processing practices, please contact us using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Queries: "Privacy Enquiry" or "Data Rights Request"
• Support Hours: 24 hours a day, 7 days a week including Bangladesh public holidays
• Response Time: pbip will acknowledge all privacy-related enquiries within 24 hours and provide a substantive response within 30 days.

15.2 For formal complaints about pbip's data processing practices that have not been satisfactorily resolved through our internal process, you may have the right to escalate your complaint to a relevant supervisory authority in your jurisdiction.