plrvip Privacy Policy — How We Collect, Use & Protect Your Data

plrvip ("we," "us," "our") is the operator of the online gaming platform accessible at plrvip.net and all associated sub-domains. plrvip operates under an international gaming licence and serves registered players across Pakistan, including members based in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Peshawar, and Quetta.

For the purposes of data protection law, plrvip is the data controller in respect of personal information collected from users of the Platform. As data controller, plrvip determines the purposes and means by which personal data is processed and bears responsibility for ensuring that processing is conducted lawfully, fairly, and transparently.

This Privacy Policy applies to all personal data collected by plrvip through the Platform, including data collected during account registration, during gameplay, through customer support interactions, and through automated means such as cookies and server logs.

plrvip collects the following categories of personal data from players, depending on the nature of their interaction with the Platform:

plrvip does not collect sensitive personal data — such as health information, religious beliefs, political opinions, or biometric data — unless this is strictly required for regulatory compliance in specific jurisdictions and is collected with your explicit prior consent.

plrvip collects personal data through the following means:

• Direct input by you: When you register an account, complete the KYC verification process, submit a deposit or withdrawal request, contact the support team, or update your account settings.
• Automated technical collection: When you access the Platform, our servers and analytics systems automatically record technical data including your IP address, device identifiers, session duration, pages visited, and actions taken within the Platform interface.
• Cookies and similar tracking technologies: The Platform uses session cookies, persistent cookies, and similar technologies to maintain your login session, personalise your experience, and — where you have consented — gather analytical data about how the Platform is used. See Section 7 for full details.
• Payment processors: When you make a deposit or withdrawal, our payment processing partners transmit confirmation data — including transaction reference numbers and payment method identifiers — back to plrvip. Full financial account numbers are not stored by plrvip; they are held by the payment processor subject to their own privacy policies.
• Identity verification partners: For KYC purposes, plrvip may use third-party identity verification services to validate documents and cross-reference information you provide during registration. These services return a verification result to plrvip and retain data in accordance with their own policies.

plrvip processes personal data only where a lawful basis for processing exists. The legal bases on which we rely are as follows:

• Performance of a contract: The majority of data processing by plrvip — including account management, transaction processing, game record maintenance, and customer support — is necessary for the performance of the contract between you and plrvip that arises when you register an account and accept our Terms & Conditions.
• Legal obligation: plrvip is required by applicable anti-money laundering regulations, gaming licence conditions, and international regulatory standards to collect, verify, and retain certain categories of personal data, including identity documents and transaction records. Processing of this data is a legal obligation that we cannot waive.
• Legitimate interests: plrvip processes certain technical and gaming behavioural data on the basis of its legitimate interests in operating a secure, fraud-resistant, and legally compliant gaming platform. These interests are balanced against your rights and interests, and we do not rely on legitimate interests where doing so would override your fundamental rights.
• Consent: Where plrvip collects data for marketing communications or for non-essential cookies, we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

plrvip uses the personal data we hold about you for the following purposes:

• Account management: Creating, maintaining, and securing your plrvip account, including password management, multi-factor authentication, and session management.
• Transaction processing: Processing deposits and withdrawal requests in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20.
• Identity and age verification: Verifying that you meet the 21+ age requirement and that the identity you have registered matches the payment methods you use — a requirement of our gaming licence and anti-money laundering obligations.
• Fraud prevention and security: Detecting and preventing fraudulent account activity, bonus abuse, multi-accounting, unauthorised access, and money laundering through analysis of transaction patterns, gaming behaviour, and device fingerprint data.
• Customer support: Responding to support queries, resolving disputes, and maintaining records of support interactions for quality assurance and training purposes.
• Responsible gaming: Monitoring gaming behaviour for indicators of problem gambling and applying responsible gaming interventions — including self-exclusion, deposit limits, and cooling-off periods — in accordance with our Responsible Gaming Policy.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to marketing communications. You may opt out at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to identify areas for improvement in the Platform's design, performance, and game offering.
• Legal and regulatory compliance: Fulfilling our obligations under applicable gaming licence conditions, anti-money laundering regulations, and any lawful requests from regulatory authorities.

plrvip does not sell your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment processors: Transaction data is shared with our payment processing partners — including JazzCash, EasyPaisa, and banking partners — to the extent necessary to process your deposits and withdrawals. These processors handle your financial data under their own regulatory obligations and privacy frameworks.
• Identity verification providers: Where required for KYC compliance, identity document data may be shared with regulated third-party verification services. These providers are contractually bound to use your data only for verification purposes and to apply appropriate security measures.
• Game content providers: Certain game session data — including bet amounts, game outcomes, and session timestamps — may be shared with our licensed game content providers for the purpose of game integrity monitoring, RTP verification, and progressive jackpot calculation. No identity data is shared with game providers beyond what is operationally required.
• Regulatory and law enforcement authorities: plrvip will disclose personal data to gaming licence regulators, financial intelligence units, and law enforcement agencies where required by law, by court order, or by regulatory directive. We will notify you of such disclosures where we are legally permitted to do so.
• Professional advisers: plrvip may share data with legal advisers, auditors, or accountants where necessary for the provision of professional services to plrvip, subject to appropriate confidentiality obligations.

All third parties with whom plrvip shares personal data are required to process that data in a manner consistent with this Privacy Policy and applicable data protection standards. plrvip does not permit third parties to use your personal data for their own independent marketing purposes.

The plrvip Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised user experience. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, CSRF protection tokens, and language preference cookies. No consent is required for these cookies.
• Functional cookies: These cookies remember your preferences — such as previously used payment methods or game lobby filters — to personalise your experience. They are set on the basis of your use of the relevant features.
• Analytical cookies: Where you have consented, plrvip uses analytical cookies to collect aggregated data about how the Platform is used — including pages visited, session duration, and navigation paths — to identify areas for improvement. This data is analysed at an aggregated level and is not used to identify individual players.
• Fraud prevention tracking: plrvip uses device fingerprinting and behavioural analytics technologies to detect and prevent multi-accounting, bonus abuse, and other fraudulent activities. This processing is conducted on the basis of plrvip's legitimate interests in operating a secure platform.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may affect the functionality of the Platform and prevent you from logging in to your plrvip account.

plrvip retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Account data (active accounts): Retained for the full duration of your active plrvip account.
• Account data (closed accounts): Retained for a period of five (5) years following account closure, in accordance with anti-money laundering record-keeping obligations and gaming licence requirements.
• Transaction and financial records: Retained for seven (7) years from the date of the transaction, in accordance with applicable financial record-keeping standards.
• KYC identity documents: Retained for five (5) years from the date of verification or from account closure, whichever is later.
• Customer support communications: Retained for two (2) years from the date of the interaction, or for the duration of any ongoing dispute resolution process, whichever is longer.
• Marketing consent records: Retained for the duration of your account and for three (3) years following account closure, as evidence of consent status.
• Technical logs: Retained for up to ninety (90) days in active form, and thereafter in anonymised aggregate form for longer-term platform performance analysis.

plrvip implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the plrvip Platform is encrypted using 256-bit SSL/TLS. This applies to every connection, regardless of whether you are accessing the Platform via mobile data, Wi-Fi, or fixed broadband.
• Encryption at rest: Sensitive personal data stored in plrvip's databases — including identity documents and financial account identifiers — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within plrvip's internal systems is restricted on a need-to-know basis. Staff who do not require access to personal data to perform their role do not have it. Access privileges are reviewed on a regular basis.
• Password security: Passwords are stored in hashed and salted form. plrvip staff cannot retrieve your password in plain text. If you lose your password, it must be reset — not recovered.
• Security monitoring: plrvip's systems are monitored for unusual access patterns, brute force attempts, and other security threats. Automated alerting systems are in place to flag anomalous activity for review.
• Data breach procedures: plrvip maintains an incident response plan for data security events. In the event of a breach that poses a risk to your rights and interests, plrvip will notify affected players and relevant authorities in accordance with applicable regulatory requirements.

No digital security system can be guaranteed to be impenetrable. While plrvip takes reasonable and proportionate measures to protect your data, we cannot provide an absolute guarantee against all possible security threats. You are responsible for maintaining the security of your own account credentials.

As a plrvip player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the plrvip support team via live chat or email as described in Section 14:

• Right of access: You have the right to request a copy of all personal data plrvip holds about you. We will respond to verified access requests within 30 calendar days.
• Right to rectification: You have the right to request correction of any inaccurate personal data we hold about you. Requests will be actioned within 14 calendar days of verification.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. This right is subject to our regulatory retention obligations described in Section 8.
• Right to restriction of processing: You may request that plrvip restrict processing of your data — for example, while a data accuracy dispute is being resolved — rather than deleting it.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw marketing consent: You may withdraw consent for marketing communications at any time by updating your account preferences or contacting the support team. Withdrawal does not affect the lawfulness of prior processing.
• Right to object: Where processing is based on legitimate interests, you have the right to object to that processing. plrvip will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

The plrvip Platform is strictly restricted to individuals who are 21 years of age or older. plrvip does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process.

If plrvip becomes aware that personal data has been collected from a person under 21 — whether through registration with a false date of birth or through any other means — that account will be immediately suspended, all associated funds will be reviewed in accordance with our Terms & Conditions, and all personal data collected from the minor will be deleted from our systems as soon as practicable, subject only to any mandatory legal retention requirements.

If you are a parent or guardian and believe that a minor in your care has registered a plrvip account, please contact our support team immediately through the live chat channel. We will handle such reports with urgency and full cooperation.

plrvip operates internationally and some of the third-party service providers we use — including game content providers, identity verification services, and cloud infrastructure providers — may process personal data in countries outside Pakistan. Where personal data is transferred internationally, plrvip takes appropriate steps to ensure that those transfers are conducted with adequate protections in place, including:

• Use of service providers who are contractually bound by data processing agreements that require them to apply data protection standards consistent with this Privacy Policy.
• Reliance on standard contractual clauses or equivalent mechanisms where applicable.
• Limiting transfers to jurisdictions or service providers that maintain demonstrably adequate security and privacy frameworks.

If you would like further information about the international transfer safeguards applicable to your personal data, please contact the support team as described in Section 14.

plrvip reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or regulatory requirements, or changes to our Platform and service offering.

Where changes to this Policy are material — such as changes to the categories of data we collect, the purposes for which we use data, or your data rights — plrvip will notify registered players via the mobile number or email address associated with their account at least 14 calendar days before the changes take effect.

Non-material amendments — including clarifications, typographical corrections, and structural reformatting that do not change the substance of any provision — will take effect upon publication without individual notification. The "Effective Date" at the top of this page will be updated on each revision. We encourage you to review this Policy periodically.

Continued use of the plrvip Platform following the publication of a revised Privacy Policy constitutes your acceptance of the revised terms of data processing.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, have a complaint about how plrvip has handled your personal data, or wish to report a privacy concern, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week on every page of the plrvip Platform. This is the fastest channel for privacy queries and data rights requests requiring urgent action.
• Email: [email protected] — please include "Privacy" in the subject line and your registered Account username to help us process your request efficiently. Response within 5 business days for privacy-related emails.

plrvip will acknowledge receipt of all privacy-related requests within 3 business days and will provide a substantive response within the timeframes specified in Section 10 for data rights requests, and within 14 calendar days for general privacy queries and complaints.

Where you are dissatisfied with plrvip's response to a privacy complaint and believe your data protection rights have been infringed, you may have the right to lodge a complaint with the relevant data protection supervisory authority under the laws applicable in your jurisdiction.