pcp88 Privacy Policy — How We Collect, Use, and Safeguard Your Personal Data

1 Introduction and Scope

This Privacy Policy ("Policy") describes how pcp88 ("pcp88", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "Player") who access or use the pcp88 online casino and sports betting platform available at https://pcp88.io and all related subdomains, mobile interfaces, and services (collectively, the "Platform").

This Policy applies to all registered players, prospective players who browse the Platform without registering, and any individual whose personal data is submitted to pcp88 in connection with the Platform's services. By accessing the Platform, completing a pcp88 Login, or creating an account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside the pcp88 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference and form part of the overall framework governing your relationship with pcp88.

2 Data We Collect

pcp88 collects the following categories of personal data in the course of providing its services to players in Bangladesh and other permitted territories:

pcp88 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data used for identification purposes, health data, or data concerning a person's sex life or sexual orientation.

3 How We Collect Your Data

pcp88 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing the pcp88 Login process, submitting a KYC verification document, contacting customer support, or responding to a survey or promotion.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser fingerprint, and cookie data generated during your session.
• Payment providers: Confirmation data received from bKash, Nagad, Rocket, Upay, and partner banks when a deposit or withdrawal transaction is processed. pcp88 receives only the information necessary to match a transaction to your account — we do not receive your full mobile banking PIN or card CVV at any point.
• Identity verification partners: Where a third-party KYC service is used to verify a document you submit, that provider returns a verification result (pass/fail) and a confidence score to pcp88. The document images themselves may be processed and briefly stored by the verification partner in accordance with their own privacy policy.
• Fraud and risk management systems: Automated risk-scoring data generated by pcp88's internal fraud detection tools based on your account activity, transaction patterns, and technical session data.

4 Legal Basis for Processing

pcp88 processes personal data only where a valid legal basis exists. The legal bases on which pcp88 relies are as follows:

• Performance of a contract: Processing that is necessary to create your account, operate your pcp88 Login session, process your BDT deposits and withdrawals, and deliver the gaming and betting services you have requested.
• Legal obligation: Processing required to comply with anti-money-laundering regulations, age verification obligations, financial record-keeping requirements, and any lawful requests from competent authorities.
• Legitimate interests: Processing carried out for fraud prevention, platform security, abuse detection, responsible gaming monitoring, and the improvement of pcp88 services, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where pcp88 sends you direct marketing communications about promotions or new features, we do so only on the basis of your freely given, specific, and informed consent, which you may withdraw at any time by contacting [email protected].

5 How We Use Your Data

The personal data pcp88 collects is used exclusively for the following purposes:

• Creating, maintaining, and securing your pcp88 account and pcp88 Login credentials.
• Processing BDT deposits and withdrawal requests through your chosen payment method (bKash, Nagad, Rocket, Upay, or partner bank).
• Verifying your identity and age (21+) as required before authorising withdrawals or large transactions.
• Detecting and preventing fraud, money laundering, collusion, bot activity, and other prohibited conduct outlined in the Terms & Conditions.
• Monitoring your gaming and betting activity to identify early signs of problem gambling and to enforce responsible gaming measures such as deposit limits and self-exclusion where applicable.
• Providing customer support and responding to your queries, complaints, or data rights requests in a timely manner.
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and security alerts related to your account.
• Sending promotional communications about pcp88 bonuses and offers, strictly on the basis of your prior consent and only where you have not withdrawn that consent.
• Improving the performance, stability, and usability of the pcp88 Platform through aggregated, anonymised analytics data.
• Complying with applicable legal obligations and responding to lawful requests from regulatory or law-enforcement authorities.

6 Data Sharing and Third Parties

pcp88 does not sell your personal data. We share data only with the following categories of third-party recipients, and only to the extent strictly necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the account and transaction data necessary to execute your deposit and withdrawal instructions.
• Identity verification providers: KYC service providers receive copies of identity documents you submit for the purpose of verifying your age and identity. These providers are contractually bound to process data only for verification purposes and to delete documents once verification is complete.
• Game studio providers: Studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi receive a session token and a pseudonymous player identifier to operate game rounds. They do not receive your full name, contact details, or financial data.
• IT and hosting infrastructure providers: Cloud hosting and content delivery providers that store and serve the pcp88 Platform are subject to strict data processing agreements requiring compliance with applicable data protection standards.
• Fraud prevention and risk management services: Specialist fraud-detection providers receive technical session data (IP address, device fingerprint, behavioural patterns) to assist in identifying and blocking fraudulent activity.
• Legal and regulatory authorities: pcp88 will disclose personal data to courts, regulators, law-enforcement agencies, or other competent public authorities where required to do so by applicable law or a binding legal order.

All third-party data processors engaged by pcp88 are required to maintain appropriate technical and organisational security measures and to process personal data only in accordance with pcp88's documented instructions.

7 International Data Transfers

pcp88 operates a platform that is primarily designed for players based in Bangladesh. However, some of the third-party service providers engaged by pcp88 — including cloud hosting infrastructure and game studio partners — may process data on servers located outside Bangladesh.

Where personal data is transferred to servers or service providers located in other countries, pcp88 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Policy. Such safeguards may include contractual data protection clauses, binding corporate rules, or equivalent internationally recognised data transfer mechanisms.

If you have questions about the specific countries to which your data may be transferred or the safeguards in place, please contact us at [email protected].

8 Data Retention

pcp88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain the contractual relationship with you as a registered player, and to comply with applicable legal obligations. The following retention periods apply as general guidance:

• Active account data: Retained for the duration of your account's active status plus a minimum of five years following account closure, to satisfy anti-money-laundering and financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five years from the date of submission or the date of account closure, whichever is later.
• Transaction records: All deposit and withdrawal transaction records are retained for a minimum of five years from the transaction date.
• Game session logs: Retained for a minimum of three years to support dispute resolution and game integrity audits.
• Customer support communications: Retained for three years from the date of the most recent communication in a given support thread.
• Technical and usage data: Aggregated and anonymised after 13 months. Raw IP and device logs are retained for up to 12 months for fraud and security investigation purposes.
• Marketing consent records: Retained for the duration of your consent and for up to three years following withdrawal of consent, as evidence of the consent having been obtained.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Anonymised data that can no longer be linked to an identifiable individual falls outside the scope of this Policy and may be retained indefinitely for statistical purposes.

9 Security Measures

pcp88 implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• TLS 1.3 / 256-bit SSL encryption: All data in transit between your device and the pcp88 Platform is encrypted using TLS 1.3, the current industry standard for secure web communications.
• Password hashing: Account passwords are never stored in plain text. pcp88 uses a strong, one-way cryptographic hashing algorithm with per-account salting to store credentials so that even internal staff cannot retrieve your password.
• Session security: pcp88 Login sessions are protected by rotating session tokens, automatic timeout after a period of inactivity, and anomaly detection for logins from unrecognised devices or locations.
• Access controls: Personal data is accessible only to pcp88 staff and contractors who have a documented operational need to access it. All internal access is logged and subject to periodic audit.
• Penetration testing: The pcp88 Platform undergoes periodic security testing by qualified professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response: pcp88 maintains a documented data breach response procedure. In the event of a breach that is likely to result in risk to the rights and freedoms of affected individuals, pcp88 will notify affected players without undue delay.

10 Cookies and Tracking Technologies

pcp88 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by the Platform when you visit, which allows the Platform to recognise your device on subsequent visits. pcp88 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They include session cookies that maintain your pcp88 Login state, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure platform stability. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional cookies: These cookies remember your preferences such as language selection and display settings to improve your experience across sessions.
• Analytics cookies: pcp88 uses anonymised, first-party analytics cookies to measure aggregate metrics such as page views, session duration, and navigation paths. This data is used solely to improve Platform performance and is never linked to your individual identity.

pcp88 does not use third-party advertising cookies, social media tracking pixels, or any cookies that build a behavioural advertising profile linked to your identity. You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from using the Platform.

11 Your Rights as a Data Subject

As an individual whose personal data is processed by pcp88, you hold the following rights in respect of that data. To exercise any of these rights, contact pcp88 at [email protected] with the subject line "Data Rights Request" and your registered account username. pcp88 will respond within 30 calendar days of receiving a verifiable request.

• Right of access: You may request a copy of the personal data pcp88 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data pcp88 holds about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that pcp88 may be required to retain certain data for legal compliance purposes even following a valid erasure request.
• Right to restrict processing: You may request that pcp88 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to pcp88, for the purpose of transferring it to another service provider.
• Right to withdraw consent: Where pcp88 processes your data on the basis of consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of pcp88's legitimate interests where you believe your fundamental rights and freedoms override those interests.

pcp88 will not charge a fee for handling data rights requests submitted in good faith. Where a request is manifestly unfounded or excessive, pcp88 reserves the right to charge a reasonable administrative fee or decline to act, with written reasons provided.

12 Children and Minors

The pcp88 Platform is strictly for adults aged 21 and above. pcp88 does not knowingly collect personal data from individuals under the age of 21. If you believe that a minor has submitted personal data to pcp88, please contact us immediately at [email protected]. Upon confirmation, pcp88 will take immediate steps to delete the data and close the account.

pcp88 deploys age verification procedures at the point of registration and prior to the processing of withdrawals to minimise the risk of underage access. Any account where age verification reveals that the account holder is under 21 will be immediately suspended, all balances will be forfeited, and the matter will be escalated in accordance with pcp88's responsible gaming procedures.

13 Changes to This Policy

pcp88 reserves the right to update or amend this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this document. When material changes are made to the Policy, pcp88 will display a prominent notice on the Platform at the time of your next pcp88 Login, summarising the key changes.

Your continued use of the Platform following notification of changes to this Policy constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you should cease using the Platform and request account closure by contacting [email protected].

14 Contact and Data Requests

For all privacy-related enquiries, data rights requests, or concerns about how pcp88 handles your personal data, please contact the pcp88 data protection team using the details below. All communications are handled in English and are treated with strict confidentiality.

Support and data requests: [email protected] (plain text only — not a clickable link)

Please include your registered account username, the nature of your request, and any relevant details to enable us to locate your records and respond efficiently. pcp88 aims to respond to all data rights requests within 30 calendar days of receipt of a verifiable request.