pgpc Privacy Policy

1 Introduction

pgpc operates the online sports betting and casino platform accessible at https://pgpc.io, serving players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. As the data controller for all personal information processed in connection with the pgpc platform, pgpc takes its obligations with respect to personal data seriously and is committed to handling all such data with the highest standards of care, transparency, and security.

This Privacy Policy sets out in formal terms what personal data pgpc collects from players and visitors, the purposes for which that data is processed, the legal basis for processing, the circumstances in which data may be shared with third parties, the security measures pgpc employs to protect your data, and the rights you are entitled to exercise with respect to your personal information.

This Privacy Policy should be read together with pgpc's Terms & Conditions, available at pgpc.io/terms-conditions, and the Responsible Gaming policy at pgpc.io/responsible-gaming. Where any conflict exists between this Privacy Policy and the Terms & Conditions on a matter of data privacy, this Privacy Policy shall prevail.

2 Personal Data We Collect

pgpc collects personal data in the following categories, depending on the nature of your interaction with the platform:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify compliance with the 21-year minimum age requirement).
• Residential address, including district, division, and postal code.
• Mobile number registered on the pgpc account.
• Email address used for account correspondence.
• Username and encrypted password credential.

2.2 Identity Verification (KYC) Data

• National Identity Card (NID) number and a scanned copy or photograph of the NID.
• Passport number and copy where NID is unavailable.
• Driving licence number and copy where used as an alternative identity document.
• Proof of address documentation (utility bill, bank statement dated within 3 months).
• Selfie photograph submitted for liveness verification where required.

2.3 Financial and Payment Data

• Mobile banking account numbers registered to bKash, Nagad, Rocket, and Upay accounts.
• Bank account details for players using Dutch-Bangla Bank, City Bank, BRAC Bank, or other supported institutions.
• Card type (Visa or Mastercard), last four digits, and expiry date — full card numbers are never stored by pgpc.
• Transaction history including deposit amounts, withdrawal requests, dates, reference numbers, and associated payment method identifiers.

2.4 Gameplay and Betting Data

• Sports betting activity including markets wagered on, stake amounts, odds accepted, and settlement outcomes.
• Casino game session data including games played, bet amounts, round outcomes, and session duration.
• Bonus and promotion participation records.
• Responsible gaming tool settings including deposit limits, loss limits, and self-exclusion records.

2.5 Technical and Device Data

• IP address at time of login and at time of each transaction.
• Device type, operating system version, and browser type and version.
• Geolocation data derived from IP address (country and city level — not GPS-level precision).
• Session timestamps, login history, and logout records.
• Cookie identifiers and similar tracking technologies as described in Section 7.

2.6 Communications Data

• Content of support tickets, live chat transcripts, and WhatsApp messages submitted to the pgpc support team.
• Email correspondence between the player and pgpc, including complaint submissions and dispute records.
• Survey responses and feedback submitted voluntarily through pgpc's platform tools.

3 How We Collect Personal Data

pgpc collects personal data through the following mechanisms:

• Direct submission by the player: Data provided when you complete the registration form, submit KYC documentation, make a deposit or withdrawal request, or contact our support team.
• Automated platform collection: Technical and device data collected automatically when you access the pgpc website or application, including IP address, browser type, and session data.
• Cookies and tracking technologies: Data collected via first-party cookies and session storage as described in Section 7 of this policy.
• Third-party identity verification services: Data returned by KYC and age verification service providers engaged by pgpc to confirm the identity and age of registering players.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard networks when a deposit or withdrawal is processed.
• Game providers: Gameplay session data transmitted to pgpc by third-party game software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.

4 Purposes of Processing

pgpc processes personal data for the following documented purposes. Each purpose is matched to the specific data category and legal basis in the table below:

5 Legal Basis for Processing

pgpc processes personal data under the following legal bases, as applicable to each processing activity:

• Contract performance: Processing necessary to fulfil our obligations under the account registration agreement, including operating your account, processing payments, and delivering betting and gaming services.
• Legal obligation: Processing required to comply with applicable regulations, including age verification obligations, anti-money laundering (AML) requirements, and financial transaction record-keeping mandates.
• Legitimate interest: Processing undertaken to protect pgpc and its players from fraud, abuse, money laundering, and platform security threats, where these interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications, personalised promotions, and optional platform features where you have given explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Third-Party Sharing

pgpc does not sell or rent personal data to any third party. Data sharing with third parties occurs only in the following circumstances and is limited strictly to what is required for the stated purpose:

6.1 Payment Processors

To process deposits and withdrawals, pgpc shares transaction-relevant data (including account identifiers and transaction amounts in BDT) with mobile banking operators (bKash, Nagad, Rocket, Upay) and card networks (Visa, Mastercard) and banking partners (Dutch-Bangla Bank, City Bank). These processors operate under their own privacy policies and data protection obligations.

6.2 KYC and Identity Verification Providers

To verify the identity and age of registering players, pgpc shares KYC documentation with contracted identity verification service providers. These providers process personal data solely for the purpose of verification and are contractually prohibited from using that data for any other purpose.

6.3 Game Software Providers

Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised or pseudonymised session identifiers to facilitate game delivery and record round outcomes. Full personal identity data is not transmitted to game providers.

6.4 Legal and Regulatory Disclosures

pgpc may disclose personal data to law enforcement agencies, regulatory bodies, or courts where it is legally obligated to do so — for example, in response to a valid court order, investigation into suspected financial crime, or regulatory audit request. In all such cases, disclosure is limited to the minimum data required by the legal process.

7 Cookies & Tracking Technologies

pgpc uses cookies and similar browser-side storage technologies to operate the platform, maintain session continuity, and improve player experience. The following categories of cookies are in use on the pgpc platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens that keep you logged in during an active session and security tokens that protect form submissions. These cookies cannot be disabled without preventing normal use of the platform.
• Functional cookies: Store your preferences such as language settings, display preferences, and responsible gaming tool configurations so that they persist across sessions.
• Analytics cookies: Collect anonymised data about how players navigate the pgpc platform — including pages visited, session duration, and error events — to help pgpc improve platform performance and usability. No personally identifiable information is included in analytics data sets.
• Marketing cookies: Used only where you have given explicit consent to receive personalised promotional communications. Marketing cookies track which promotions you have viewed and responded to, allowing pgpc to tailor offers to your stated preferences.

You may manage or withdraw consent for non-essential cookies through the cookie preference centre accessible from the pgpc platform settings. Withdrawing consent for functional or marketing cookies will not affect your ability to place bets or use core platform features.

8 Data Security

pgpc implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. The key security measures in place include:

• 256-bit SSL/TLS encryption on all data in transit between player devices and pgpc servers.
• AES-256 encryption applied to all sensitive personal data fields stored in pgpc databases, including identity documents, payment credentials, and authentication tokens.
• Password hashing using bcrypt with a work factor calibrated to current computational standards — passwords are never stored in recoverable plain text.
• Role-based access controls ensuring that pgpc staff can only access personal data categories relevant to their specific operational function.
• Regular third-party security audits and penetration testing of the pgpc platform infrastructure.
• Two-factor authentication (2FA) available to all players for account login security.
• Automated anomaly detection systems monitoring for unusual login patterns, IP changes, and transaction irregularities that may indicate account compromise.
• Data segmentation architecture ensuring that KYC document stores are physically separated from gameplay and transaction databases.

9 Data Retention

pgpc retains personal data for the periods set out in the following retention schedule. Following the expiry of the applicable retention period, data is securely deleted or anonymised in a manner that prevents re-identification:

10 Your Data Rights

As a player whose personal data is processed by pgpc, you are entitled to exercise the following rights at any time by submitting a written request to [email protected] (plain text — not a clickable link). pgpc will acknowledge all rights requests within 48 hours and provide a substantive response within 14 calendar days.

• Right of Access: You may request a copy of all personal data pgpc holds about you, together with information about how it is being used, who it has been shared with, and how long it will be retained.
• Right to Rectification: You may request that pgpc corrects any inaccurate or incomplete personal data held about you. Where the inaccuracy relates to identity or payment data, a KYC re-verification step may be required.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where the data has been unlawfully processed. This right is subject to pgpc's legal obligations to retain certain categories of data for minimum statutory periods.
• Right to Restriction: You may request that pgpc restricts the processing of your personal data while a dispute about its accuracy or the lawfulness of its processing is under review.
• Right to Data Portability: For data processed on the basis of consent or contract performance, you may request a structured, machine-readable export of your personal data to facilitate transfer to another service provider.
• Right to Object: You may object at any time to processing based on pgpc's legitimate interests. pgpc will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights, or where the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where pgpc processes data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

11 Children & Minors

The pgpc platform is strictly intended for adults aged 21 and above. pgpc does not knowingly collect, process, or store personal data relating to individuals under the age of 21. The collection of data from minors is explicitly prohibited, and pgpc employs mandatory age verification procedures at the point of registration to enforce this requirement.

If pgpc becomes aware that personal data has been collected from an individual under the age of 21 — whether through a failed KYC check, a parental notification, or any other means — the relevant account will be immediately suspended, all associated data will be securely deleted, any deposited funds will be returned to the verified source payment method, and the individual will be permanently barred from re-registering on the pgpc platform.

12 Marketing Communications

pgpc may send you promotional communications about bonuses, new game releases, BPL and IPL betting offers, seasonal promotions (including Eid, Pohela Boishakh, and Victory Day specials), and platform updates — but only where you have given explicit, informed consent to receive such communications at the time of registration or subsequently through your account preferences.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in the pgpc account settings panel.
• Submitting a written opt-out request to [email protected] (plain text — not a clickable link).
• Using the unsubscribe mechanism included in any marketing email sent by pgpc.

Opting out of marketing communications will not affect your ability to use the pgpc platform, place bets, or receive service-critical communications such as account security alerts, withdrawal confirmations, and KYC request notices. Service communications are sent on the basis of contract performance and cannot be opted out of while your account remains active.

13 Changes to This Privacy Policy

pgpc reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or platform functionality. Where material changes are made to this Privacy Policy, pgpc will notify registered players via the email address associated with their account at least 7 days before the changes take effect.

The current version of this Privacy Policy, including its effective date, is always accessible at https://pgpc.io/privacy-policy. Continued use of the pgpc platform after the effective date of any amended Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised Privacy Policy, you must cease using the pgpc platform and submit an account closure request to [email protected] (plain text — not a clickable link) before the effective date of the changes.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which pgpc processes your personal data, you may contact the pgpc Data Protection Officer (DPO) through the following channels. All contact details are provided as plain text only and are not clickable links:

• Email: [email protected]
• General contact: [email protected]
• WhatsApp: +880 1700 000000
• Support hours: 24/7 — Bangladesh Standard Time (UTC+6)

pgpc aims to resolve all privacy-related enquiries promptly and fairly. If you are not satisfied with the resolution provided by pgpc's DPO, you retain the right to escalate your complaint to the relevant data protection authority or competent court in Bangladesh.