Privacy Policy — How pcu88 Protects Your Data

pcu88 is committed to protecting the privacy and personal data of every individual who interacts with our platform. We recognise that the players who trust pcu88 with their information — whether registering from Dhaka, depositing via bKash from Chittagong, or placing cricket bets during a BPL fixture — deserve transparency about how that information is handled.

This Policy sets out in clear, plain English exactly what personal data pcu88 collects, the specific purposes for which it is processed, the conditions under which it may be shared with third parties, how long it is retained, the security measures in place to protect it, and the rights that you as a data subject hold over your own information.

This Policy should be read alongside the pcu88 Terms & Conditions, which govern the contractual relationship between pcu88 and registered players. Where this Policy references specific payment or bonus mechanics, the Terms & Conditions provide the governing framework for those matters.

If you have any questions about this Policy or wish to exercise your data rights, please contact our team at [email protected]. Our data handling team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).

pcu88 collects personal data across three broad categories: information you provide directly to us, information generated automatically by your use of the platform, and information we receive from authorised third-party sources such as payment processors and identity verification services.

Information You Provide Directly:

• Registration Data: Full name, date of birth, email address, mobile phone number, and residential address (including city, district, and postcode within Bangladesh).
• Identity Verification Documents: National ID card (NID), passport, or other government-issued photo identification; proof of address documents such as utility bills or bank statements.
• Payment Information: Mobile banking account references for bKash, Nagad, Rocket, and Upay; bank account details for Dutch-Bangla Bank, BRAC Bank, City Bank, or other supported institutions; Visa and Mastercard details as required for card transactions.
• Communications: The content of messages sent to pcu88 via live chat, email at [email protected], or any on-site contact form, including support requests, dispute submissions, and responsible gaming enquiries.
• Responsible Gaming Preferences: Deposit limit settings, session time reminder configurations, self-exclusion elections, and any other responsible gaming tool activations you apply to your account.

Information Collected Automatically:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, features accessed, games played, bet history, deposit and withdrawal activity, session duration, click-path data, and error logs.
• Location Data: General geographic location inferred from IP address. pcu88 does not collect precise GPS coordinates. IP-based location is used for fraud detection and platform security purposes only.
• Cookies and Tracking Technologies: Session cookies, preference cookies, and anonymised analytics data as described in Section 7 of this Policy.

Information from Third-Party Sources:

• Identity verification results from authorised KYC (Know Your Customer) service providers used to confirm the accuracy of the documents you submit.
• Transaction confirmation data from payment processors confirming deposit or withdrawal completion.
• Fraud and risk-screening data from anti-money laundering (AML) compliance databases where pcu88 is required to conduct enhanced due diligence.

pcu88 processes personal data only for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes listed below. Every processing activity is tied to one of the legal bases described in Section 4.

• Account Registration and Management: Creating and maintaining your pcu88 account, verifying your identity in accordance with our age verification policy (21+ only), and managing your account settings and responsible gaming preferences.
• Processing Deposits and Withdrawals: Facilitating instant deposits via bKash, Nagad, Rocket, and Upay, and processing withdrawal requests within the timeframes stated in our Terms & Conditions. All transactions are denominated in Bangladeshi Taka (৳).
• Providing Gaming and Betting Services: Enabling access to cricket betting markets (BPL, T20 World Cup, IPL, Bangladesh Tigers), football markets, live casino games from providers such as Pragmatic Play and Evolution Gaming, and slot games from NetEnt, Microgaming, and other certified studios.
• Customer Support: Responding to support enquiries, resolving disputes, and processing responsible gaming requests received via live chat or email at [email protected].
• Fraud Prevention and Security: Detecting and preventing fraudulent account activity, money laundering, multiple-account creation, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Regulatory Compliance: Meeting our obligations under applicable anti-money laundering, Know Your Customer, and financial crime prevention requirements.
• Platform Improvement: Analysing anonymised usage data to improve platform performance, game selection, payment processing efficiency, and the overall pcu88 user experience.
• Promotional Communications: Sending promotional offers, bonus notifications, and seasonal promotions (such as Eid, Pohela Boishakh, and BPL season offers) to players who have consented to receive marketing communications. You may withdraw this consent at any time.
• Legal Proceedings: Preserving and disclosing data where required by a valid legal order, court direction, or the instruction of a competent authority.

pcu88 processes personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our obligations to you under the pcu88 Terms & Conditions — including account management, payment processing, game provision, and customer support.
• Legitimate Interests: Processing carried out to pursue pcu88's legitimate business interests, provided those interests are not overridden by your rights. This includes fraud detection, platform security monitoring, and anonymised usage analytics.
• Legal Obligation: Processing required to comply with applicable laws, including identity verification, age verification (21+), anti-money laundering checks, and the retention of financial transaction records.
• Consent: Processing based on your explicit, freely given consent — primarily for the sending of marketing and promotional communications. Where consent is the legal basis, you retain the right to withdraw it at any time without affecting the lawfulness of prior processing.

pcu88 may share your personal data with the following categories of third party, solely to the extent necessary for the purposes described:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and other payment partners receive the minimum financial information required to process your deposit or withdrawal transactions. These providers operate under their own privacy frameworks and are contractually obligated to handle data securely.
• Identity Verification Providers: Authorised KYC and AML service providers receive identity document data solely to validate your identity and confirm you meet our 21+ age requirement. These providers are bound by confidentiality and data security obligations.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary for game delivery and fairness certification. These providers do not receive your identity or financial data.
• Cloud Infrastructure Providers: pcu88 uses secure cloud hosting infrastructure. Hosting providers operate as data processors under contractual obligations that prohibit independent use of any customer data.
• Legal and Regulatory Authorities: Where required by law, court order, or the direction of a competent authority, pcu88 will disclose personal data to the relevant body. Where legally permissible, we will notify affected players prior to such disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of pcu88's assets, player data may be transferred to the acquiring entity, subject to equivalent privacy protections. Players will be notified of any such transfer in advance.

Given the financial nature of the pcu88 platform, the handling of payment data is treated with the highest level of care and security. The following specific practices govern how pcu88 handles payment method information:

• pcu88 does not store full Visa or Mastercard card numbers on its own servers. Card data is tokenised at the point of entry by our PCI-DSS compliant payment gateway and stored only in tokenised form.
• Mobile banking references — including bKash wallet numbers, Nagad account numbers, and Rocket account identifiers — are stored in encrypted form and used solely to process the specific deposit or withdrawal transaction for which they were provided.
• pcu88 applies a matched funding policy: withdrawals must be processed to the same payment method used for the relevant deposit where technically possible. This policy exists to prevent financial crime and is a common requirement of responsible payment processing.
• Third-party deposits — where the payment account name does not match the registered pcu88 account holder — are not accepted. Funds received from unmatched sources are returned without being credited to the player account.
• All transaction records are retained for a minimum of five years in accordance with financial record-keeping obligations. This retention period may be extended where records are subject to an ongoing legal investigation or dispute.

pcu88 uses cookies and similar technologies to provide a functional, secure, and personalised experience on the platform. The following table describes the categories of cookies in use:

pcu88 does not deploy third-party advertising or retargeting cookies. No cookie data is shared with advertising networks or social media platforms. You can manage cookie settings through your browser's privacy controls. Disabling strictly necessary cookies may impair platform functionality, including the ability to log in or process transactions.

pcu88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status plus a period of five years following permanent account closure, to satisfy financial crime prevention and dispute-resolution obligations.
• Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of five years from the date of the transaction. This period may be extended if records are subject to legal proceedings.
• Identity Verification Documents: Copies of NID, passport, and proof-of-address documents are retained for five years from the date of verification or from account closure, whichever is later.
• Support Communications: Chat logs and email correspondence with pcu88 support are retained for three years from the date of the last communication in the relevant thread.
• Marketing Consent Records: Records of your consent to receive marketing communications are retained for the duration of your account plus two years, to provide an audit trail of consent history.
• Anonymised Analytics Data: Anonymised, aggregated usage data that cannot be linked back to an individual may be retained indefinitely for the purposes of long-term platform improvement.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Deletion is conducted using industry-standard secure erasure methods to prevent recovery.

pcu88 employs a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• Transport Layer Security: All data transmitted between your device and pcu88 servers is encrypted using TLS 1.2 or higher. The platform enforces HTTPS across every page and rejects insecure HTTP connections.
• Data at Rest Encryption: Personal data stored on pcu88 servers is encrypted using AES-256. Database access is restricted via role-based access control (RBAC) and multi-factor authentication is required for all administrative access.
• Password Security: Player passwords are stored as one-way cryptographic hashes using bcrypt with a high work factor. Plain-text passwords are never stored or accessible to pcu88 staff under any circumstances.
• Intrusion Detection: pcu88 operates continuous automated monitoring for suspicious access patterns, DDoS attempts, and other threat vectors. Our security team responds to alerts around the clock at Bangladesh Standard Time (UTC+6).
• Access Controls: Access to personal data is granted strictly on a need-to-know basis. Staff members receive privacy training upon onboarding and are bound by confidentiality obligations. Access logs are maintained and reviewed regularly.
• Penetration Testing: pcu88 conducts regular third-party penetration testing of its platform infrastructure to identify and remediate vulnerabilities proactively.

As a data subject, you hold the following rights over your personal data held by pcu88. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data that pcu88 holds about you, including the purposes for which it is processed and the categories of third parties with whom it has been shared.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. Account details such as your mobile number, email address, or residential address can also be updated directly through your account settings dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent is the legal basis), or where processing is unlawful. This right is subject to overriding legal obligations requiring retention of certain data, such as financial transaction records.
• Right to Restriction of Processing: You may request that pcu88 restrict the processing of your personal data in certain circumstances, such as where the accuracy of the data is contested or where processing is unlawful but you prefer restriction to erasure.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request its transfer to another data controller where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests at any time. Where processing is for direct marketing purposes, the right to object is absolute and pcu88 will cease such processing immediately upon receipt of a valid objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing communication. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

pcu88 enforces robust age verification at the point of registration. All players are required to confirm they are aged 21 or above during account creation, and identity documents confirming date of birth are required before any withdrawal is processed. Where pcu88 identifies or suspects that a registered player is under 21 years of age, the account will be immediately suspended and all funds will be held pending age verification.

If a parent or guardian believes that their child has registered an account on pcu88 or that their personal data has been collected without appropriate authorisation, they should contact pcu88 immediately at [email protected]. pcu88 will investigate promptly and, where an underage account is confirmed, will delete all associated personal data and close the account without delay.

Parents and guardians are strongly encouraged to use parental control software to restrict access to online gambling platforms. pcu88 supports responsible access controls and will cooperate fully with any parental request to block access from a specific device or account.

The pcu88 platform may, from time to time, reference or display content associated with third-party services such as game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) or payment partners (bKash, Nagad, Rocket, Upay). While pcu88 selects its partners carefully, we are not responsible for the privacy practices of external platforms or services.

This Policy applies solely to personal data processed directly by pcu88 in connection with the operation of the pcu88 platform. If you interact with a third-party service — for example, by accessing a mobile banking app to initiate a deposit via bKash — you do so subject to that service's own privacy policy. pcu88 recommends that you review the privacy policies of all third-party services you use in connection with your pcu88 account.

pcu88 does not control, and is not responsible for, the content, privacy practices, or security standards of any third-party platform, application, or service. Any personal data you provide directly to a third-party service is governed exclusively by that service's own privacy framework.

pcu88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or internal data processing practices. All updates will be published on this page at https://pcu88.io/privacy-policy with a revised effective date clearly indicated at the top of the document.

Where a change to this Policy is material — meaning it significantly affects the way pcu88 processes your personal data or alters your rights as a data subject — pcu88 will notify registered players via email to the address associated with their account at least 14 days prior to the change taking effect. Continued use of the pcu88 platform after the effective date of a revised Policy constitutes acceptance of the updated terms.

We encourage all pcu88 players to review this Policy periodically to stay informed about how their data is being protected. The current version number and effective date are displayed in the updated band at the top of this page for easy reference.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which pcu88 processes your personal data, please contact our dedicated data handling team using the details below. All privacy-related correspondence will be treated with strict confidentiality and responded to within 30 calendar days.

For urgent matters relating to a suspected data breach affecting your account, please mark your email "URGENT — Data Security" to ensure immediate escalation to our security team. pcu88 treats all data security reports as high-priority incidents and will acknowledge receipt within 4 hours during normal operating hours (Bangladesh Standard Time, UTC+6).

For responsible gaming concerns, including requests to set deposit limits, activate self-exclusion, or access problem gambling support resources, please visit our Responsible Gaming page or contact [email protected] with the subject line "Responsible Gaming Request".