Privacy Policy — How ph002 Protects Your Personal Data
Your privacy is a priority at ph002. This Privacy Policy explains in plain, formal English exactly what personal data we collect from players in Bangladesh, how we use it, who we share it with, and what rights you have over your own information. ph002 is committed to handling all personal data with the highest standards of security and transparency.
Introduction
ph002 operates the online betting and gaming platform accessible at https://ph002.io, serving registered players across Bangladesh. As a platform that processes account registrations, financial transactions, and gaming activity, ph002 necessarily handles personal data belonging to its users. This Privacy Policy sets out, in formal and precise terms, the nature of that data processing and the legal basis upon which it rests.
By creating a ph002 account and using any part of the ph002 Services — including the cricket sportsbook, live casino, slots, Mobile Financial Services deposits, and support communications — you acknowledge that you have read and understood this Privacy Policy, and that you consent to the collection and use of your personal data as described herein. This Privacy Policy forms an integral part of the ph002 Terms & Conditions.
ph002 may update this Privacy Policy from time to time to reflect changes in our data practices, platform functionality, or applicable legal requirements. Any material changes will be communicated to registered users via their registered email address or via an in-platform notification. Continued use of the ph002 platform following the publication of a revised Privacy Policy constitutes your acceptance of the revised terms.
- 1. Data Controller
- 2. Data We Collect
- 3. How We Collect Data
- 4. Legal Basis
- 5. How We Use Data
- 6. Data Sharing
- 7. Cookies & Tracking
- 8. Data Security
- 9. Data Retention
- 10. Your Rights
- 11. Children's Privacy
- 12. Policy Changes
- 13. Contact Us
Privacy Principles at a Glance
A plain-English overview of the core privacy principles ph002 upholds. This summary does not replace the full legal text — the sections below are the binding version of this policy.
ph002 protects all personal data using industry-standard SSL/TLS encryption in transit and AES-256 encryption at rest. Your financial data, identity documents, and account credentials are stored on secured infrastructure with strict access controls.
ph002 collects only the personal data that is strictly necessary to provide our Services. We do not collect data speculatively. Every data point we hold has a clearly defined purpose, and we do not use it beyond that purpose without your explicit consent.
ph002 does not sell, rent, or trade your personal data to any third party for commercial purposes. Data is shared only with service providers who are contractually bound to process it solely on ph002's behalf and subject to strict confidentiality obligations.
Every category of personal data processed by ph002 rests on a defined legal basis — either your contractual relationship with ph002, a legal obligation we must fulfil, our legitimate interests, or your explicit consent. We do not process data without a lawful basis.
Registered ph002 players have the right to access, correct, and in certain circumstances delete their personal data. You may also object to specific processing activities or request that we restrict how we use your data. All such requests are handled within 30 days.
ph002 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and financial record-keeping obligations. Inactive account data is subject to a scheduled review and deletion process.
The data controller responsible for your personal data is ph002, the operator of the online betting and gaming platform accessible at https://ph002.io. As the data controller, ph002 determines the purposes and means of processing personal data collected from registered players and visitors in Bangladesh.
For all data protection enquiries, requests to exercise your rights, or complaints regarding the handling of your personal data, you may contact the ph002 data protection team via email at: [email protected]. Please include "Privacy Request" in the subject line of your email so that it is routed to the appropriate team. ph002 aims to acknowledge all privacy-related correspondence within 5 business days (Bangladesh Standard Time, UTC+6).
ph002 collects the following categories of personal data from registered players and, in limited cases, from visitors to the ph002 platform who have not yet registered an account:
ph002 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where you have voluntarily disclosed health-related information in the context of responsible gaming self-exclusion requests, in which case it is processed solely for that purpose.
ph002 collects personal data through the following channels and mechanisms:
- Direct submission: Data you provide when registering a ph002 account, completing the KYC verification process, submitting a deposit or withdrawal request, contacting ph002 support via live chat or email, or completing any form on the ph002 platform.
- Automated technologies: Data collected automatically when you access or interact with the ph002 platform, including cookies, server logs, device fingerprinting, and session tracking technologies described in Section 7 of this Privacy Policy.
- Payment providers: Transaction confirmation data received from Mobile Financial Services providers (bKash, Nagad, Rocket, Upay) and banking partners when you execute a deposit or withdrawal. ph002 receives transaction reference data but does not receive or store your MFS PIN or full banking credentials.
- Game providers: Aggregated gaming activity and session data transmitted by third-party game studios (Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe) in connection with games played on the ph002 platform.
- Anti-fraud and KYC tools: Data from third-party identity verification and anti-money laundering screening services used to verify your identity and assess risk during the account registration and withdrawal approval processes.
- Publicly available sources: In limited circumstances relevant to fraud prevention and AML compliance, ph002 may cross-reference publicly available information such as publicly listed sanction databases.
ph002 processes your personal data on the following legal bases, depending on the nature of the processing activity:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and identity verification | Performance of a contract (the ph002 Terms & Conditions) |
| Processing deposits and withdrawals | Performance of a contract; Legal obligation (financial record-keeping) |
| AML and fraud screening | Legal obligation; Legitimate interests (protecting ph002 and other players) |
| Responsible gaming monitoring | Legal obligation; Legitimate interests (player welfare) |
| Platform security and fraud prevention | Legitimate interests (maintaining platform integrity) |
| Sending promotional communications | Consent (opt-in); Legitimate interests (direct marketing to existing customers) |
| Analytics and platform improvement | Legitimate interests (improving the ph002 product) |
| Responding to legal requests or disputes | Legal obligation; Legitimate interests (legal defence) |
ph002 uses the personal data collected from you for the following purposes, each of which corresponds to a lawful basis described in Section 4:
- Account management: To create, maintain, verify, and close your ph002 account, and to authenticate your identity when you log in.
- Service delivery: To allow you to place bets on cricket, football, kabaddi, and other sports; to allow you to play live casino games, slots, baccarat, and other games offered on the ph002 platform.
- Payment processing: To process your bKash, Nagad, Rocket, and Upay deposits and withdrawals, to credit winnings to your account balance, and to maintain accurate financial records of all transactions denominated in Bangladeshi Taka (BDT).
- Identity and age verification: To confirm that you are at least 21 years of age and that the identity information you have provided is accurate and genuine, in accordance with ph002's 21+ policy and KYC requirements.
- Anti-money laundering (AML) compliance: To monitor account activity for indicators of money laundering, terrorist financing, or other financial crime, and to report suspicious activity to relevant authorities where legally required.
- Responsible gaming: To monitor your betting and gaming behaviour for indicators of problem gambling, to apply the responsible gaming limits and restrictions you have set, and to proactively contact you if we identify patterns that may indicate harmful gambling behaviour.
- Customer support: To respond to your enquiries, complaints, and account disputes submitted via live chat or email, and to maintain records of support interactions for quality assurance purposes.
- Fraud prevention: To detect, investigate, and prevent fraudulent account activity including multi-accounting, bonus abuse, collusion, and unauthorised account access.
- Marketing communications: To send you promotional offers, bonus notifications, BPL and IPL betting market alerts, and seasonal promotions — subject to your communication preferences and opt-in status.
- Platform analytics: To analyse how players interact with the ph002 platform in order to improve navigation, game discovery, performance, and overall user experience.
- Legal compliance: To comply with applicable legal, regulatory, and judicial obligations and to defend ph002's legal rights in the event of disputes.
ph002 does not sell your personal data. ph002 shares personal data with third parties only in the circumstances described below, and only to the extent strictly necessary for the specified purpose:
- Game providers: Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe, and other certified studios receive the minimum session data necessary to deliver their games (such as a session token and account currency) but do not receive your full identity profile or financial data.
- Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) receive transaction data necessary to execute deposits and withdrawals.
- Identity verification providers: Third-party KYC and AML service providers receive identity documents and biometric data solely for the purpose of verifying your identity and age. These providers are contractually prohibited from using your data for any other purpose.
- IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity providers who process data on ph002's behalf under strict data processing agreements.
- Legal and regulatory bodies: Where required by applicable law, court order, or at the direction of a competent authority, ph002 may be required to disclose your personal data. ph002 will notify affected users of such disclosures where legally permitted to do so.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of ph002's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections as described in this Policy.
ph002 uses cookies and similar tracking technologies on the ph002 platform to ensure platform functionality, improve user experience, and analyse platform usage. The following categories of cookies are used:
- Strictly necessary cookies: Required for the ph002 platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without impairing platform functionality.
- Functional cookies: Used to remember your preferences, such as your language settings, responsible gaming limit preferences, and game lobby layout choices. These cookies improve the personalisation of your ph002 experience.
- Analytical cookies: Used to collect aggregated and anonymised data about how players use the ph002 platform — including which pages are visited most frequently, which games are launched most often, and how players navigate through the betting interface. This data is used exclusively for internal platform improvement and is not shared with advertising networks.
- Security cookies: Used to detect and prevent fraudulent login attempts, identify suspicious device behaviour, and support the ph002 two-step verification (2SV) system.
ph002 does not use third-party advertising cookies or cross-site tracking cookies. ph002 does not participate in behavioural advertising networks or retargeting programmes that track your browsing activity across websites other than ph002.io.
You may control cookie settings via your browser preferences. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the ph002 platform. Disabling functional or analytical cookies will not prevent you from accessing the platform but may reduce the quality of your experience.
ph002 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include, but are not limited to:
- SSL/TLS encryption: All data transmitted between your device and the ph002 platform is encrypted using industry-standard TLS 1.2 or higher. The ph002 platform enforces HTTPS on all pages and connections.
- Encryption at rest: Sensitive data stored on ph002 infrastructure — including identity documents and financial transaction records — is encrypted at rest using AES-256 encryption.
- Access controls: Access to personal data held by ph002 is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
- Two-step verification: ph002 offers SMS-based two-step verification (2SV) for all accounts and strongly recommends that all players enable 2SV to protect their account from unauthorised access.
- Penetration testing: ph002 infrastructure is subject to periodic security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
- Incident response: ph002 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a high risk to affected individuals, ph002 will notify affected users without undue delay.
ph002 retains personal data for no longer than is necessary for the purpose for which it was collected, or as required by applicable legal and financial record-keeping obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account identity and KYC documents | 5 years from account closure | Legal obligation (AML record-keeping) |
| Financial transaction records | 5 years from transaction date | Legal obligation (financial records) |
| Betting and gaming activity logs | 3 years from account closure | Legitimate interests (dispute resolution) |
| Support correspondence | 3 years from last interaction | Legitimate interests (quality assurance) |
| Technical and usage data (logs) | 12 months from collection | Legitimate interests (security monitoring) |
| Marketing preference records | Until opt-out or account closure | Consent; contractual relationship |
| Self-exclusion records | 7 years from exclusion date | Legal obligation; player welfare |
Upon expiry of the applicable retention period, ph002 will securely delete or anonymise your personal data such that it can no longer be attributed to you as an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
As a registered ph002 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the ph002 data protection team at [email protected] with the subject line "Privacy Request — [Right Type]". ph002 will respond to all valid requests within 30 calendar days.
- Right of Access: You have the right to request a copy of the personal data ph002 holds about you, along with information about how it is being used and with whom it has been shared.
- Right to Rectification: If any personal data ph002 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
- Right to Erasure: In certain circumstances, you have the right to request that ph002 delete your personal data. This right is not absolute — ph002 may be required to retain certain data to comply with legal obligations, including AML and financial record-keeping requirements, even after your account is closed.
- Right to Restriction: You have the right to request that ph002 restrict the processing of your personal data in certain circumstances, such as while a dispute about data accuracy is being resolved.
- Right to Object: You have the right to object to processing of your personal data that is based on ph002's legitimate interests. You also have an unconditional right to object to the use of your personal data for direct marketing purposes at any time.
- Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted directly to another data controller where technically feasible.
- Right to Withdraw Consent: Where ph002 processes your personal data on the basis of your consent (for example, for direct marketing), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
The ph002 platform is strictly intended for adults aged 21 years and above. ph002 does not knowingly collect personal data from any individual under the age of 21. The ph002 registration process includes mandatory date-of-birth collection and KYC age verification precisely to enforce this restriction.
If ph002 discovers or has reason to believe that personal data has been collected from an individual under the age of 21, the following steps will be taken immediately: the account will be suspended; all associated funds will be frozen pending investigation; identity verification will be escalated; and if the individual is confirmed to be under 21, the account will be permanently closed, all funds will be handled in accordance with applicable legal requirements, and all personal data collected will be securely deleted to the extent not required for legal compliance purposes.
Parents or guardians who believe that a minor may have registered a ph002 account are encouraged to contact [email protected] immediately so that appropriate action can be taken without delay. ph002 takes its 21+ obligation extremely seriously and treats any potential breach of this restriction as a matter of the highest priority.
ph002 reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be made to reflect updates to ph002's data processing practices, new product features, changes in applicable law, or feedback from players and data protection authorities.
When a material change is made to this Privacy Policy, ph002 will notify registered players via their registered email address and via an in-platform notification displayed upon next login. The updated Privacy Policy will be published at https://ph002.io/privacy-policy with a revised "Last Updated" date at the top of the document.
Your continued use of the ph002 platform following the publication of a revised Privacy Policy constitutes your acknowledgement and acceptance of the changes. If you do not agree with a revised Privacy Policy, you must stop using the ph002 platform and contact [email protected] to request account closure. ph002 will process your closure request and return any eligible real-money balance to your registered Mobile Financial Services account.
For all privacy-related enquiries, requests to exercise your data rights, concerns about how ph002 handles your personal data, or complaints about a specific data processing activity, please contact the ph002 data protection team using the details below.
ph002 is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with ph002's response to a privacy complaint, you have the right to escalate the matter to the appropriate data protection authority in your jurisdiction.
Ready to Explore ph002?
Your data is protected. Explore cricket betting, live casino, slots, and more — all with instant bKash deposits. 21+ only.