Privacy Policy — pipvip

1. Data We Collect

pipvip collects personal data through several channels: directly from you when you register an account, make a deposit or withdrawal, contact our support team, or participate in promotions; automatically when you browse or use the platform; and, in limited circumstances, from third-party partners such as payment processors and identity verification services.

Registration and Account Data: When you create a pipvip account, we collect your full name, date of birth, mobile phone number, email address (if provided), and a chosen username. This information is required to create and manage your account and to verify that you meet the minimum age requirement of 18 years.

Identity Verification Data: To comply with responsible gaming and anti-money-laundering obligations, pipvip may ask you to submit a copy of a government-issued photo ID (such as a national identity card or passport) and proof of payment method ownership. This data is used solely for verification purposes and is handled with the highest level of security. Verification documents are reviewed by authorised personnel only and are not used for any purpose beyond confirming your identity and eligibility to play.

Financial Transaction Data: When you make a deposit or request a withdrawal, pipvip records the transaction amount, date and time, payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), and the transaction reference number provided by your payment provider. We do not store complete mobile wallet PINs or full bank account numbers on our servers.

Gameplay and Betting Data: We maintain a record of your betting and gaming activity on the platform, including wagers placed, games played, outcomes, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

Device and Technical Data: When you access pipvip, our servers automatically collect certain technical information including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited. This data helps us maintain platform security, detect fraud, and improve the user experience.

2. How We Use Your Data

pipvip processes your personal data only for the specific, legitimate purposes described in this Privacy Policy. We do not use your data for purposes that are incompatible with those listed below without first seeking your explicit consent.

Account Management: Your account data is used to create and maintain your pipvip account, authenticate your identity when you log in, and manage your account preferences and settings. Without this data, we cannot provide you with a functional account.

Transaction Processing: Financial data is used to process your deposit and withdrawal requests accurately and securely via bKash, Nagad, Rocket, Upay, and partner banks. Transaction records are also maintained for accounting, auditing, and dispute resolution purposes.

Identity and Age Verification: Verification data is processed to confirm that you are at least 18 years of age and that your identity matches the account you have registered. This is a core responsible gaming obligation and protects both you and the integrity of the platform.

Fraud Prevention and Platform Security: Technical data, gameplay data, and account activity patterns are analysed to detect and prevent fraudulent activity, account takeover attempts, money laundering, bonus abuse, and other forms of platform misuse.

Responsible Gaming Compliance: Gameplay and session data is used to monitor for signs of problem gambling behaviour, apply self-exclusion or deposit limit restrictions set by the player, and fulfil our duty of care obligations as a responsible gaming platform.

Customer Support: Communication data is used to respond to your support enquiries, resolve disputes, and improve our support processes. Support interactions may be recorded and retained for quality assurance purposes.

Platform Improvement: Aggregated, anonymised technical and gameplay data is used to analyse platform performance, identify bugs, and improve the overall user experience. This analysis does not involve identifying individual players.

Promotions and Communications: If you have opted in to receive promotional communications, we may use your contact details to notify you of relevant offers, tournaments, and seasonal promotions such as those aligned with the BPL, IPL, Eid, or Pohela Boishakh. You may opt out of promotional messages at any time by contacting [email protected].

3. Data Sharing & Disclosure

pipvip does not sell, rent, or trade your personal data to third parties. We share your data only in the limited circumstances described below, and only to the minimum extent necessary to fulfil the stated purpose.

Payment Processors: To process deposits and withdrawals, we share transaction-specific data with your chosen payment provider — bKash, Nagad, Rocket, Upay, or your selected bank (including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and others). These providers receive only the data required to complete the transaction and are bound by their own privacy policies and applicable financial regulations.

Identity Verification Partners: Where third-party verification services are used to confirm your identity or age, the relevant data is shared securely with that service provider under a contractual agreement that restricts use of the data to the verification purpose only.

Game Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session data (such as a session token and bet amounts) to facilitate gameplay. These providers do not receive your full account details or contact information.

Legal and Regulatory Disclosure: pipvip may disclose your personal data to law enforcement authorities, regulatory bodies, or courts if required to do so by applicable law, a valid legal order, or to protect the rights, property, or safety of pipvip, its players, or the public. We will notify you of such disclosure where we are legally permitted to do so.

Business Transfers: In the event of a merger, acquisition, or sale of all or part of pipvip's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any resulting changes to this Privacy Policy.

4. Cookies & Tracking

pipvip uses cookies and similar technologies (such as local storage and session tokens) to deliver a functional, secure, and personalised platform experience. A cookie is a small text file placed on your device by our web server when you visit the platform. Cookies do not contain executable code and cannot carry viruses.

We categorise the cookies used on pipvip as follows:

pipvip does not use advertising or retargeting cookies. We do not allow third-party advertising networks to place cookies on our platform.

Managing Cookies: You can control cookie behaviour through your browser settings. Most modern browsers allow you to view, block, or delete cookies via the settings or preferences menu. Note that disabling essential cookies will impair your ability to log in and use core platform features. Disabling analytics and preference cookies will not affect your access to games or account functions.

Session Tokens: When you log in to pipvip, a session token is generated and stored locally on your device. This token authenticates your session without transmitting your password on subsequent requests. Session tokens expire automatically after a period of inactivity and are invalidated when you log out.

5. Data Retention

pipvip retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce our Terms & Conditions.

Active Account Data: While your pipvip account remains active, we retain all account, transaction, and gameplay data associated with it. This data is necessary for the ongoing provision of services, including the processing of your bets, deposits, withdrawals, and support requests.

Post-Closure Retention: Following the closure of your account — whether initiated by you or by pipvip — we retain your personal data for a minimum period of five (5) years. This retention period is required to comply with anti-money-laundering regulations, respond to regulatory inquiries, and resolve any post-closure disputes relating to transactions or account activity that occurred during the active account period.

Verification Documents: Identity verification documents submitted by you are retained for the duration of your account and for five (5) years after account closure. After this period, verification documents are securely deleted or anonymised.

Support Communication Records: Records of your communications with the pipvip support team are retained for three (3) years from the date of the last interaction in a given support case. These records may be needed to revisit unresolved issues or to demonstrate compliance with our support obligations.

Anonymised Data: After the applicable retention period has expired, pipvip may retain anonymised and aggregated versions of certain data (such as general platform usage statistics) that can no longer be linked back to an individual player. This anonymised data is used for long-term analytics and platform improvement and is not subject to deletion timelines.

6. Security Measures

pipvip takes the security of your personal data seriously. We implement a combination of technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction.

Encryption: All data transmitted between your device and the pipvip platform is encrypted using TLS 1.3 with 256-bit AES encryption. Account passwords are stored using strong one-way hashing algorithms — your password is never stored in plain text on our servers, and our staff cannot retrieve your original password.

Access Controls: Access to systems that hold personal data is restricted to authorised pipvip personnel who require it to perform their job functions. Access rights are reviewed regularly, and all access events are logged. Employees who handle personal data are trained on data protection obligations and are bound by confidentiality agreements.

Infrastructure Security: pipvip's servers are hosted in facilities protected by physical security measures including access controls, surveillance systems, and environmental controls. Our systems are protected by enterprise-grade firewalls, intrusion detection and prevention systems, and regular vulnerability assessments.

Fraud Monitoring: Our platform employs real-time monitoring systems that flag unusual activity patterns — such as logins from new devices, rapid changes to account settings, or atypical transaction sequences — for review. This continuous monitoring helps us detect and respond to potential account compromise events promptly.

Data Breach Response: In the event of a data breach that poses a risk to your rights and freedoms, pipvip will take immediate steps to contain the breach, assess its scope, and notify affected players as quickly as practicable. We will communicate clearly about what data was affected, what steps we have taken, and what actions you should consider taking to protect yourself.

7. Your Privacy Rights

As a pipvip player, you hold a number of rights in relation to the personal data we hold about you. pipvip is committed to honouring these rights and will respond to valid requests within 10 business days of receipt. All requests should be directed to [email protected] with the subject line "Privacy Rights Request" and must include sufficient information to verify your identity before any data is disclosed or modified.

• Right of Access: You have the right to request a copy of the personal data pipvip holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that certain data must be retained by pipvip for legal and regulatory reasons even after an erasure request is received — in such cases, we will explain which data must be retained and why.
• Right to Restrict Processing: You may request that pipvip temporarily halts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being verified following a rectification request.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to pipvip in a structured, commonly used, and machine-readable format, and to request that this data be transmitted directly to another service provider where technically feasible.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of a valid objection to marketing, pipvip will cease using your data for that purpose immediately.
• Right to Withdraw Consent: Where pipvip processes your data on the basis of your consent (for example, for optional promotional communications or non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

To exercise any of the above rights, contact our support team at [email protected]. We will acknowledge your request within 2 business days and aim to resolve it fully within 10 business days. For complex or multiple requests, we may extend the response period by a further 20 business days and will notify you accordingly.

8. Policy Updates & Contact

pipvip reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable laws, or the services we offer. The effective date at the top of this document indicates when the current version came into force.

Notification of Changes: Where changes to this Privacy Policy are material — meaning they significantly affect the way we collect, use, or share your personal data — pipvip will notify registered account holders via the mobile number or email address on file at least 7 days before the updated policy takes effect. For minor or clarificatory changes, the updated policy will be published at pipvip.app/privacy-policy with the revised effective date, and continued use of the platform after that date constitutes acceptance of the updated terms.

Contact for Privacy Enquiries: If you have any questions, concerns, or complaints about this Privacy Policy or about the way pipvip handles your personal data, please contact our support team. We are committed to addressing privacy concerns promptly and transparently.

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. The authoritative version of this policy is the English-language version published at pipvip.app/privacy-policy.