vipvip Privacy Policy — How We Protect Your Data

vipvip collects personal information in order to operate a secure, compliant, and personalised gaming platform. The categories of data we collect fall into three broad groups: information you provide directly, information generated automatically through your use of the platform, and information obtained from verified third-party sources.

Information You Provide Directly

When you register a vipvip account, complete identity verification, make deposits or withdrawals, contact our support team, or participate in promotions, you provide us with personal information that may include:

• Identity data: Full legal name, date of birth, gender, and nationality as stated on your government-issued identification.
• Contact data: Email address, mobile phone number (including your Bangladeshi mobile number linked to bKash, Nagad, or Rocket), and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code.
• Verification documents: National ID card, passport, driving licence, or other government-issued documents submitted during KYC verification.
• Financial data: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), transaction amounts, and deposit/withdrawal history.
• Communications data: Records of your interactions with our live chat support, email correspondence to [email protected], and any feedback or complaints submitted.

Information Collected Automatically

When you access the vipvip platform through a web browser or mobile device, certain technical data is collected automatically. This includes:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, bet amounts and frequencies, session duration, click patterns, and navigation paths through the platform.
• Geolocation data: Approximate geographic location derived from your IP address. We do not collect precise GPS coordinates.
• Session data: Login timestamps, logout timestamps, and session identifiers used to maintain platform security.

Information from Third Parties

We may receive limited personal data from trusted third-party service providers, including identity verification agencies used during KYC, payment processors for transaction confirmation, and fraud detection partners. We do not purchase personal data from data brokers or marketing list providers.

vipvip processes your personal data only for clearly defined, lawful purposes. We do not use your data for purposes that are incompatible with the original reason it was collected. The table below sets out the primary purposes for which your data is used and the legal basis that applies in each case.

Where we rely on your consent as the legal basis for processing — for example, sending promotional emails about new vipvip bonuses, cricket betting offers, or seasonal promotions around events such as Eid, IPL, or the BPL — you may withdraw that consent at any time by contacting [email protected] or using the unsubscribe link in any marketing email. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

vipvip does not sell or rent your personal data to any third party for commercial purposes. We share your data only in the limited circumstances described below, and only with parties bound by appropriate data protection obligations.

Service Providers and Processors

We work with a small number of carefully selected third-party service providers who process personal data on our behalf, strictly in accordance with our instructions. These include:

• Payment processors: bKash, Nagad, Rocket, and Upay receive the transaction data necessary to process your deposits and withdrawals. Bank partners including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive similar data for bank transfer transactions.
• Identity verification providers: Third-party KYC agencies receive copies of identity documents and biometric data solely for the purpose of age and identity verification. These providers operate under contractual confidentiality obligations.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game studios may receive anonymised session identifiers necessary to operate games within the vipvip platform. They do not receive your full identity or financial data.
• Fraud and security partners: Specialist fraud detection services receive device fingerprinting and behavioural data to identify and prevent fraudulent activity. All data shared is anonymised or pseudonymised to the maximum extent possible.

Legal Disclosures

vipvip may disclose personal data to law enforcement agencies, regulatory authorities, or courts when required to do so by applicable law. This includes disclosures required under anti-money laundering legislation. We will notify affected players of such disclosures wherever we are legally permitted to do so.

vipvip uses cookies and similar tracking technologies to keep the platform functioning correctly, to remember your preferences, and to understand how players interact with the site. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies do not contain executable code and cannot access files on your device.

vipvip does not use third-party advertising cookies or behavioural profiling cookies that track your activity across external websites. You can manage or delete cookies through your browser settings at any time; however, disabling strictly necessary cookies will affect your ability to log in and use the platform. Clearing cookies does not affect your stored account data on our servers.

vipvip implements a layered security architecture to protect your personal and financial data against unauthorised access, disclosure, alteration, or destruction. Our security measures include both technical controls and organisational policies enforced across all staff with access to player data.

• Transport Layer Security (TLS): All data transmitted between your device and vipvip servers is encrypted using TLS 1.2 or higher, providing 256-bit encryption strength. The padlock icon visible in your browser confirms this connection is active.
• Data encryption at rest: Sensitive personal data stored in our databases — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to player data is restricted on a strict need-to-know basis. Staff accounts use role-based access control (RBAC), and all data access events are logged and audited regularly.
• Two-factor authentication (2FA): All internal staff accounts with access to player data are required to use multi-factor authentication. We strongly recommend that players also enable 2FA on their vipvip accounts for enhanced protection.
• Penetration testing: vipvip commissions periodic independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses in the platform.
• Incident response: In the event of a data breach that poses a risk to player rights, vipvip will notify affected players and relevant authorities within the timelines required by applicable law, and no later than 72 hours after becoming aware of the breach.

vipvip retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods below reflect both operational needs and legal obligations, particularly anti-money laundering record-keeping requirements.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for aggregate statistical purposes. You may request early deletion of your data subject to the conditions described in the Your Privacy Rights section below.

As a vipvip player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and aim to fulfil it within 30 days, subject to identity verification.

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format where technically feasible.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For most account details, you can update information directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where you object to processing. Note that we may be unable to fulfil erasure requests where we have a continuing legal obligation to retain the data (e.g., AML record-keeping).
• Right to Restriction: You may request that we restrict the processing of your data — for example, while a dispute about the accuracy of your data is resolved — without requesting full deletion.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that we provide your data to you or to a designated third party in a portable electronic format.
• Right to Object: You may object to processing of your personal data where we rely on legitimate interests as the legal basis. You may also object at any time to processing for direct marketing purposes, including profiling related to direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect processing that occurred before withdrawal.

vipvip reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or platform features. The "Effective" date at the top of this page indicates when the current version came into force. Where changes are material — meaning they significantly affect your rights or how your data is used — we will notify you by email to your registered address at least 14 days before the changes take effect.

Your continued use of the vipvip platform after the stated effective date of a revised Privacy Policy constitutes your acknowledgement of the changes. If you disagree with a material change, you have the right to close your account before the revision takes effect by contacting our support team.

This Privacy Policy governs only the vipvip platform at vipvip.app. It does not apply to third-party websites, game providers, or payment services that you may access through links or integrations on our platform. Each of those third parties operates under its own privacy policy, and vipvip accepts no responsibility for their data practices.

Contact Our Data Team

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us through the following channels. All privacy-related enquiries are handled in English during Bangladesh Standard Time (BST, UTC+6) business hours, with responses aimed within 2 business days.

• Email: [email protected] — subject line "Privacy Enquiry"
• Live Chat: Available 24/7 directly on the vipvip platform
• WhatsApp: +880 17XX XXX XXX (response within 4 hours during BST business hours)

vipvip is committed to resolving all privacy concerns promptly and fairly. If you feel your concern has not been adequately addressed, you retain the right to escalate the matter through applicable legal channels in your jurisdiction.