ppl75 Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") sets out how ppl75 ("we", "us", "our") collects, uses, stores, shares, and protects personal information relating to individuals ("you", "your") who access or use the ppl75 platform at ppl75.onl, including its associated mobile website, account portal, live chat system, and any related services (collectively, the "Platform").

This Policy applies to all users of the ppl75 Platform, including registered players, individuals who have initiated but not completed registration, visitors who browse the Platform without registering, and any individual who contacts ppl75 support. It applies regardless of whether you access the Platform from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or any other location.

This Policy should be read in conjunction with the ppl75 Terms & Conditions. By using the ppl75 Platform in any capacity, you acknowledge that you have read and understood this Policy.

For the purposes of this Policy, ppl75 acts as the data controller in respect of personal data collected through the ppl75 Platform. As data controller, ppl75 determines the purposes and means by which personal data is processed.

All data-related enquiries, subject access requests, correction requests, and deletion requests should be directed to the ppl75 data team via the contact details set out in Section 15 of this Policy. ppl75 commits to responding to all legitimate data enquiries within thirty (30) calendar days of receipt.

ppl75 collects the following categories of personal data from users of the Platform. The specific data collected depends on your level of engagement with the Platform:

Registration & Account Data

Identity Verification (KYC) Data

Financial & Transaction Data

Technical & Usage Data

Communications Data

When you contact ppl75 support via live chat or email, we retain records of those communications including the content of your messages, the channel used, timestamps, and any resolution notes. This data is used to provide support, maintain quality standards, and for training purposes in anonymised form.

ppl75 collects personal data through the following means:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, participate in a promotion, or update your Account settings, you provide personal data to ppl75 directly.
• Automatically during use: When you access the ppl75 Platform, certain technical data is collected automatically by our servers and analytics systems, including your IP address, device type, browser, session duration, and pages visited.
• From payment processors: When you use bKash, Nagad, Rocket, Upay, or another supported payment method, the relevant processor confirms transaction status and, in some cases, provides a masked reference associated with your payment account. ppl75 does not receive your full bank account or mobile banking PIN from any processor.
• From KYC verification partners: ppl75 may use a trusted third-party KYC verification service to assist in validating government-issued identity documents. Such services act as data processors under instruction from ppl75 and are bound by data processing agreements consistent with this Policy.
• From publicly available sources: In the course of fraud prevention and responsible gaming monitoring, ppl75 may reference publicly available information to corroborate identity details where there is a specific reason to do so.

ppl75 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing your Account data, payment data, and betting/game history is necessary for ppl75 to fulfil its contractual obligations to you under the ppl75 Terms & Conditions. Without this processing, ppl75 cannot operate your Account or settle bets and game outcomes.
• Legal obligation: Processing KYC identity documents, maintaining transaction records, and conducting fraud and anti-money-laundering (AML) checks are obligations imposed on ppl75 as an online gaming operator. These activities are carried out to comply with applicable legal requirements.
• Legitimate interests: Processing technical and usage data for fraud prevention, platform security, responsible gaming monitoring, and platform performance optimisation serves the legitimate interests of ppl75 and its users. Such processing is conducted in a manner that does not override your fundamental privacy rights.
• Consent: Where ppl75 sends you optional marketing communications (such as promotional emails or SMS notifications about new bonuses, seasonal offers, or BPL cricket promotions), this is done only where you have expressly opted in. You may withdraw this consent at any time from your Account notification settings or by contacting [email protected].

ppl75 uses personal data collected from you for the following specific purposes:

• Creating, maintaining, and securing your ppl75 Account, including processing login authentication and enabling two-factor authentication where configured.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, supported Bangladeshi banks, Visa, and Mastercard, and maintaining accurate Account balance records.
• Verifying your identity and age as required before enabling withdrawal functionality, in compliance with KYC obligations applicable to online gaming operators.
• Settling bets, resolving game rounds, calculating winnings, and maintaining a complete, auditable transaction and betting history for your Account.
• Monitoring Account activity for fraud indicators, multi-account detection, money laundering patterns, and prohibited conduct as defined in the ppl75 Terms & Conditions.
• Operating responsible gaming tools including deposit limits, loss limits, session reminders, reality checks, and self-exclusion — and monitoring your usage patterns to identify potential problem gambling indicators in order to intervene appropriately.
• Communicating with you about your Account, including transactional notifications (deposit confirmations, withdrawal status updates, promotional award credits), support responses, and mandatory legal notices.
• Sending optional marketing communications about ppl75 promotions, bonus offers, BPL cricket betting opportunities, and seasonal campaigns — only where you have opted in and only via the channels you have authorised.
• Analysing aggregated, anonymised usage data to improve the ppl75 Platform's performance, stability, user experience, and product offering.
• Enforcing the ppl75 Terms & Conditions and this Privacy Policy, including taking action against breaches.

ppl75 may share your personal data with the following categories of third parties, strictly for the purposes described and subject to appropriate data protection obligations:

• Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard): Transaction data is shared with the relevant payment processor solely to execute the deposit or withdrawal you have requested. Each processor operates under its own data protection framework.
• KYC verification service providers: Identity document data and selfie verification images are shared with our contracted KYC verification partner solely for the purpose of verifying your identity. These providers act as data processors under binding data processing agreements with ppl75.
• Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi): Certain session and account-reference data is shared with game providers to enable game launch, manage game sessions, and return accurate game outcomes. Game providers do not receive your full personal profile or payment details.
• Fraud prevention and security service providers: Technical data including IP addresses, device fingerprints, and session data may be shared with security service providers to detect and prevent fraud, bot activity, and unauthorised access attempts.
• IT and hosting infrastructure providers: Personal data is stored on secured servers operated by ppl75's infrastructure providers. These providers process data only under ppl75's instruction and are bound by contractual data protection obligations.
• Legal and regulatory authorities: Where ppl75 is required by applicable law, court order, or regulatory instruction to disclose personal data to a government authority or law enforcement body, ppl75 will comply to the extent legally required and will, where permitted, notify you of such disclosure.

All third parties with whom ppl75 shares personal data in a data processing capacity are required to maintain the security and confidentiality of that data and to use it only for the specific purpose for which it was shared. ppl75 does not permit third-party data processors to use your data for their own independent purposes.

The ppl75 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your logged-in session, and to analyse usage patterns in order to improve the Platform. The following categories of cookies are used on ppl75.onl:

Strictly Necessary cookies are required for the Platform to function and cannot be disabled. Functional and Analytics cookies may be declined or cleared via your browser settings. Note that disabling Functional cookies may impair your experience on the Platform by resetting your preferences on each visit.

ppl75 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as general guidelines:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

ppl75 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ppl75 Platform is encrypted using industry-standard TLS 1.2 or higher. This ensures that your Account credentials, payment details, and personal information cannot be intercepted during transmission.
• Password Hashing: Account passwords are never stored in plain text. ppl75 uses a strong, salted cryptographic hashing algorithm to store password representations, ensuring that even in the event of a data breach, original passwords cannot be recovered.
• Access Controls: Access to personal data within ppl75's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their specific role. All internal data access is logged and audited.
• Secure Data Centres: ppl75's data is hosted in secured server infrastructure with physical access controls, environmental protections, and redundant systems to protect against data loss.
• Two-Factor Authentication (2FA): ppl75 offers optional 2FA for player accounts to provide an additional layer of login security beyond username and password. ppl75 strongly recommends enabling 2FA from your Account security settings.
• Regular Security Assessments: ppl75's Platform and infrastructure are subject to periodic security reviews to identify and remediate potential vulnerabilities before they can be exploited.

While ppl75 takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying ppl75 immediately if you suspect unauthorised access to your Account.

As a user of the ppl75 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the ppl75 data team as described in Section 15:

• Right of Access: You have the right to request a copy of the personal data ppl75 holds about you, along with information about how it is processed. ppl75 will provide this information within thirty (30) calendar days of a verified request.
• Right to Rectification: If any personal data ppl75 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. Many Account details (such as contact email and phone number) can be updated directly from your Account settings. For identity and KYC data corrections, please contact support.
• Right to Erasure ("Right to Be Forgotten"): You may request that ppl75 delete your personal data. Note that this right is subject to ppl75's legal obligations to retain certain data (as set out in Section 9). Where erasure is not possible due to a legal retention obligation, ppl75 will restrict processing of the relevant data to the minimum necessary to fulfil that obligation.
• Right to Restriction of Processing: You may request that ppl75 restrict the processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data or object to processing based on legitimate interests, pending resolution of your objection.
• Right to Data Portability: Where processing is carried out by automated means on the basis of consent or contractual necessity, you have the right to receive a structured, machine-readable copy of your personal data for the purpose of transferring it to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. ppl75 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests or rights.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Opt-out controls are available in your Account notification settings.

ppl75 will not charge a fee for reasonable data subject requests. Where requests are manifestly unfounded or excessive, ppl75 reserves the right to charge a reasonable administrative fee or decline to respond, with written explanation.

The ppl75 Platform is strictly for individuals aged 21 years and above. ppl75 does not knowingly collect, process, or retain personal data from any individual under the age of 21. The minimum age requirement is enforced through the Account registration process and KYC verification.

If ppl75 becomes aware that personal data has been collected from an individual under 21 years of age — whether through a misrepresentation during registration or any other means — ppl75 will immediately close the relevant Account, delete all associated personal data to the extent not required to be retained for legal reasons, and void any transactions conducted via that Account.

If you are a parent or guardian and you believe that a minor in your care has registered an Account on the ppl75 Platform, please contact ppl75 immediately at [email protected]. ppl75 will investigate and take appropriate action as a matter of priority.

ppl75 operates as an international online platform. In the course of providing its services, personal data collected from users in Bangladesh and elsewhere may be transferred to, stored in, or processed in countries outside Bangladesh by ppl75's infrastructure providers, KYC verification partners, or game providers.

Where such international transfers occur, ppl75 ensures that appropriate safeguards are in place to protect your personal data to a standard consistent with the protections described in this Policy. Such safeguards may include:

• Contractual data protection clauses incorporated into agreements with third-party processors requiring them to handle data in accordance with applicable data protection standards.
• Restricting transfers to processors operating in jurisdictions that maintain recognised data protection frameworks or that have entered into binding data processing agreements with ppl75.
• Applying the same encryption and access control standards to data at rest and in transit regardless of the geographic location of the processing infrastructure.

If you would like further information about the specific safeguards applied to international data transfers affecting your personal data, please contact the ppl75 data team via the details in Section 15.

ppl75 reserves the right to update or revise this Privacy Policy at any time to reflect changes in the Platform's data processing practices, changes in applicable law or regulatory guidance, or improvements in how we explain our practices to users.

When material changes are made to this Policy — meaning changes that substantively affect how your personal data is collected, used, or shared — ppl75 will notify registered users via the Account notification system and/or by displaying a prominent notice on the ppl75 Platform at least fourteen (14) days before the updated Policy takes effect. For non-material clarifications and formatting updates, the revised Policy will take effect upon publication at ppl75.onl/privacy-policy.

Your continued use of the ppl75 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not accept a material change to this Policy, you may request Account closure as described in Section 13 of the ppl75 Terms & Conditions. The current version of this Policy — including its effective date — is always accessible at ppl75.onl/privacy-policy.

For any enquiries relating to this Privacy Policy, your personal data held by ppl75, or to exercise any of the rights described in Section 11, please contact the ppl75 data and support team through the following channels:

• Email: [email protected] — Please use the subject line "Data Privacy Request" for all data subject requests to ensure your enquiry is directed to the appropriate team. ppl75 commits to acknowledging all data privacy requests within five (5) business days and providing a substantive response within thirty (30) calendar days.
• Live Chat: Available 24 hours a day, 7 days a week, directly from within your ppl75 Account. For urgent matters — such as suspected unauthorised access, requests to immediately restrict processing, or child safety concerns — live chat is the fastest channel to reach ppl75's team.