pvip8 Privacy Policy

pvip8 ("pvip8", "we", "us", "our") operates the online betting and gaming platform accessible at pvip8.io. We are committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with our platform. This Privacy Policy ("Policy") sets out in plain English how we handle personal data relating to players based primarily in Bangladesh, in a manner that is transparent, fair, and consistent with applicable data protection principles.

This Policy applies to all personal data collected through the pvip8 website, mobile-optimised browser interface, customer support channels, and any other touchpoint through which you engage with pvip8. It should be read alongside our Terms and Conditions, which govern your overall use of the platform.

We take data protection seriously. We have implemented technical and organisational measures proportionate to the risks associated with processing personal data in an online gaming context. This Policy is reviewed and updated at least annually, or whenever a material change in our data practices occurs.

We collect different categories of personal data depending on the context of your interaction with pvip8. The following table summarises the primary data categories, specific data points within each category, and the context in which that data is collected:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data except where strictly required for responsible gaming assessments (for example, where a player voluntarily discloses information to support a self-exclusion request). In such cases, the data is handled with the highest level of care and is not used for any commercial purpose.

pvip8 collects personal data through several distinct channels, each described below:

• Direct Collection: Information you provide voluntarily when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting our support team, or updating your account profile.
• Automated Collection: Technical and usage data collected automatically through server logs, cookies, pixel tags, and session-tracking technologies as you navigate the pvip8 platform. This includes your IP address, device fingerprint, and in-session behaviour.
• Third-Party Identity Verification: When you submit KYC documents, we may pass those documents to an accredited third-party identity verification service. That provider returns a verification result and risk score, which is stored alongside your account record.
• Payment Processors: When you initiate a transaction via bKash, Nagad, Rocket, Upay, or a bank transfer, the relevant payment service provider shares transaction confirmation data with pvip8 to reconcile your account balance.
• Game Studios: Certified game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) may return game-round result data and session metadata to pvip8 for account settlement and audit purposes.
• Analytics Partners: Aggregated, anonymised analytics data may be collected through trusted analytics platforms to help us understand platform performance. This data cannot be used to identify individual players.

pvip8 processes personal data for the following specific and legitimate purposes. We process only the minimum data necessary to fulfil each purpose (data minimisation principle):

• Account Management: To create, maintain, authenticate, and manage your player account, including processing your login sessions and account preference settings.
• Identity Verification (KYC): To verify that you are who you say you are, that you meet the 21+ age requirement, and that you are not on any self-exclusion or sanctions list.
• Transaction Processing: To process deposits and withdrawals securely, reconcile account balances, and issue transaction confirmations.
• Anti-Money Laundering (AML) Compliance: To monitor transaction patterns for signs of money laundering, fraud, or other financial crime in accordance with our AML obligations.
• Responsible Gaming: To monitor player behaviour for signs of problem gambling, enforce self-exclusion requests, and apply deposit limits or cooling-off periods that you have set.
• Customer Support: To respond to your queries, resolve disputes, and maintain support records for quality assurance.
• Platform Security: To detect and prevent unauthorised access, fraud, cheating, bonus abuse, and other prohibited conduct described in our Terms and Conditions.
• Marketing Communications: To send you promotional offers, bonus notifications, and event announcements via the channels you have opted into. You may withdraw marketing consent at any time via your account settings.
• Product Improvement: To analyse aggregated usage data, identify technical issues, and improve the features, performance, and user experience of the pvip8 platform.
• Legal Obligations: To comply with applicable laws, respond to lawful requests from competent authorities, and enforce our Terms and Conditions.

pvip8 does not use automated decision-making processes — including profiling — that produce legal or similarly significant effects on individual players without human oversight, except where such processing is required for fraud prevention or AML screening. In those cases, you have the right to request human review of any automated decision.

Every data processing activity carried out by pvip8 is grounded in one or more of the following legal bases:

• Contractual Necessity: Processing that is necessary to deliver the services you have requested under our Terms and Conditions — including account registration, transaction processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable laws, including identity verification, anti-money laundering obligations, and fraud prevention duties.
• Legitimate Interests: Processing carried out for purposes that are in pvip8's legitimate interests and that do not override your fundamental rights — including platform security monitoring, fraud detection, and internal analytics for product improvement. We apply a balancing test before relying on legitimate interests as a basis for processing.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. Where consent is the legal basis, you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

pvip8 does not sell, rent, or trade your personal data to any third party for their own commercial use. We share personal data only in the following limited and controlled circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive the minimum financial data necessary to process your transactions. These providers operate under their own privacy policies and are contractually bound to protect your data.
• Identity Verification (KYC) Providers: Accredited third-party KYC providers receive document images and identity data to perform verification checks. Results are returned to pvip8 and the original documents are not retained by those providers beyond their operational necessity.
• Game Studio Partners: Studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) receive a pseudonymous player identifier and session token to deliver and settle game rounds. They do not receive your full name, contact details, or financial data.
• IT & Infrastructure Providers: Cloud hosting, database, and network infrastructure providers may process data on our behalf as data processors. They are bound by data processing agreements requiring them to act only on pvip8's documented instructions.
• Fraud Prevention & AML Services: Where required, data may be shared with accredited fraud prevention and anti-money laundering screening services to protect the platform and its users.
• Legal & Regulatory Authorities: pvip8 will disclose personal data to competent courts, regulators, or law enforcement agencies where required to do so by law, court order, or in response to a lawful formal request.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of pvip8's business assets, personal data held by pvip8 may be transferred to the acquiring entity. Affected players will be notified in advance of any such transfer and the privacy protections applicable to their data.

pvip8 uses cookies and similar tracking technologies to operate the platform, authenticate sessions, remember your preferences, and collect usage analytics. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the pvip8 platform to function. They maintain your login session, preserve your language preferences, and enable secure transactions. These cookies cannot be disabled without significantly impairing platform functionality.
• Functional Cookies: These cookies remember choices you make — such as preferred payment method or display settings — to provide a more personalised experience during your session.
• Analytics Cookies: These cookies collect aggregated, anonymised data about how players use the pvip8 platform. We use this data to identify performance bottlenecks, prioritise feature improvements, and understand navigation patterns. No individual player is identified through analytics data.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and suspicious session behaviour. These cookies are essential for platform integrity.

pvip8 does not use third-party advertising cookies or behavioural targeting cookies that track your activity across external websites. Cookies set by game studio iframes are limited to the functional scope necessary to deliver the game session and are governed by the studio's own cookie policy.

pvip8 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to technical constraints (for example, data held in backup archives), we implement additional access controls to prevent that data from being used for any active purpose while it awaits scheduled deletion.

pvip8 implements a layered security architecture designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and pvip8 servers is encrypted using industry-standard TLS 1.2 or higher. Our SSL certificate is issued by a trusted Certificate Authority and renewed continuously.
• Encryption at Rest: Sensitive data fields — including financial account numbers, document images, and authentication credentials — are encrypted at rest using AES-256 encryption within our database infrastructure.
• Password Security: Passwords are never stored in plain text. They are hashed using a strong, salted cryptographic algorithm (bcrypt). pvip8 staff cannot retrieve your password — only a reset function is available.
• Access Controls: Access to personal data within pvip8's internal systems is restricted on a strict need-to-know basis. Staff with data access privileges are subject to background checks and mandatory data protection training.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their pvip8 accounts for an additional layer of login security. Certain high-value account actions may require 2FA as a mandatory step.
• Intrusion Detection: Our security operations team monitors the pvip8 infrastructure 24/7 for anomalous activity, potential intrusions, and DDoS attacks. Automated alerts trigger immediate investigation protocols.
• Regular Security Audits: pvip8 engages independent cybersecurity specialists to conduct periodic penetration tests and vulnerability assessments of the platform infrastructure.

While pvip8 takes all reasonable precautions to protect your personal data, no internet transmission is completely secure. You also have a responsibility to keep your account credentials confidential and to notify pvip8 immediately if you suspect any unauthorised access to your account.

As a pvip8 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request" and your registered account details.

• Right of Access: You have the right to request a copy of the personal data pvip8 holds about you. We will respond to access requests within 30 calendar days.
• Right to Rectification: If personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Minor corrections (such as a misspelled name) can often be made directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent and no other legal basis for processing applies. Note that we are legally required to retain certain data (such as transaction records) for a defined period even after account closure.
• Right to Restrict Processing: In certain circumstances, you may request that pvip8 restrict the processing of your data — for example, while you contest the accuracy of data we hold, or while we assess the grounds for an erasure request.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a structured, commonly used, machine-readable copy of the data you provided to pvip8.
• Right to Object: You have the right to object at any time to the processing of your personal data where pvip8 relies on legitimate interests as its legal basis. pvip8 will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.

pvip8 will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by an additional 60 days, and you will be notified of the extension and its reason within the initial 30-day window.

The pvip8 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data relating to any individual under the age of 21. The registration process includes an explicit date-of-birth declaration and a mandatory KYC verification step to enforce this requirement.

If pvip8 discovers or has reason to believe that personal data belonging to a person under the age of 21 has been collected — whether through a false date-of-birth declaration or any other means — we will immediately:

• Suspend the associated account and freeze all funds pending investigation
• Securely delete the personal data of the underage individual from our systems
• Return any deposits made by the underage player to the originating payment method
• Escalate the matter to relevant authorities where required by law

Parents and guardians are encouraged to make use of parental control software to prevent minors from accessing online gambling platforms, including pvip8. If you believe a person under 21 has registered on pvip8, please contact us immediately at [email protected].

The pvip8 platform may contain references to third-party services — such as payment providers (bKash, Nagad, Rocket, Upay) and game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — whose own privacy policies govern how they handle personal data. pvip8 is not responsible for the privacy practices of these third parties.

We recommend that you review the privacy policies of any third-party service you interact with in connection with your pvip8 account. The inclusion of a reference to a third-party service on the pvip8 platform does not constitute an endorsement of that party's data handling practices.

pvip8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. The updated Policy will be published on this page with a revised effective date. Material changes — meaning changes that significantly affect how we use your personal data or your rights — will be communicated to registered players via email or in-platform notification at least 14 days before the change takes effect.

Your continued use of the pvip8 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must discontinue use of the platform and submit an account closure request to our support team.

We encourage you to review this page periodically so you remain informed of how pvip8 protects your personal data. The version number and effective date displayed at the top of this page indicate the current edition of the Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pvip8 handles your personal data, please reach out to us through any of the following channels. All data-related enquiries are handled by our dedicated Privacy & Compliance team.

• Email: [email protected] — use subject line "Privacy Enquiry" for fastest routing
• Live Chat: Available 24/7 inside your pvip8 account dashboard — select "Privacy & Data" from the support topic menu
• WhatsApp: +880 1700 000000 — available during Bangladesh Standard Time (BST, UTC+6) business hours
• Postal Address: pvip8 Data Protection Team, pvip8.io, Dhaka, Bangladesh

We are committed to resolving all privacy-related enquiries promptly and transparently. If you submit a formal data rights request, you will receive an acknowledgement within 2 business days and a full response within 30 calendar days.