Privacy Policy — How vippp Collects, Uses, and Protects Your Data

1 Who We Are

vippp operates the online betting and casino platform accessible at https://vippp.io (the "Platform"). vippp serves players primarily located in Bangladesh, providing sports betting (including cricket, football, and kabaddi), live casino games, slots, crash games, and related entertainment services.

For the purposes of this Privacy Policy, vippp is the data controller — meaning we determine the purposes and means by which personal data is collected and processed in connection with your use of the Platform.

You can contact us regarding any data protection matter by emailing our support team at [email protected] (plain text — not a clickable link) or via 24/7 live chat within the Platform.

2 Personal Data We Collect

vippp collects the following categories of personal data in connection with your use of the Platform. The collection of each category is limited to what is proportionate and necessary for the stated purpose:

vippp does not collect special category data (such as health data, religious beliefs, political opinions, or biometric data) except where a player voluntarily discloses such information in the context of a responsible gaming or support interaction. In those cases, the data is used solely for the player welfare purpose for which it was shared.

3 How We Collect Your Data

vippp collects personal data through the following means:

• Direct Provision: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automated Collection: Technical and usage data collected automatically as you navigate and interact with the Platform, via server logs, cookies, and similar technologies (see Section 6 — Cookies & Tracking).
• Third-Party Sources: Identity and fraud-risk data received from KYC verification service providers and payment processors during the verification of your account and transactions. vippp only receives data from third parties that have a lawful basis to share that data with us.
• Payment Providers: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and card payment networks (Visa, Mastercard) to confirm the status of deposits and withdrawals. Full payment credentials (e.g., full card numbers, mobile money PINs) are never transmitted to or stored by vippp.

4 Legal Basis for Processing

vippp processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and vippp — i.e., to operate your account, process bets and transactions, pay out winnings, and provide customer support. Without this processing, vippp cannot provide you with the Platform services.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) record-keeping, identity verification requirements, and the retention of financial transaction records.
• Legitimate Interests: Processing carried out for vippp's legitimate business interests where those interests are not overridden by your rights — for example, fraud detection, platform security, responsible gaming monitoring, and internal analytics to improve the Platform. vippp conducts a balancing assessment before relying on legitimate interests as a legal basis.
• Consent: Processing based on your explicit consent — for example, where you opt in to receive marketing communications from vippp. Consent-based processing is always accompanied by a clear opt-out mechanism, and withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

5 How We Use Your Personal Data

The personal data vippp holds about you is used for the following specific purposes:

• Creating and managing your vippp account, including verifying your identity and age (21+ requirement).
• Processing deposits in BDT via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and processing withdrawal requests back to your verified payment method.
• Settling sports bets (including BPL, IPL, T20 World Cup, and other cricket markets), casino game rounds, and other wagering activity accurately and in accordance with published rules.
• Communicating with you about your account status, security alerts, transaction confirmations, and responses to your support queries.
• Conducting fraud detection and prevention analysis to protect you and the Platform from unauthorised activity, including the detection of multi-accounting and payment fraud.
• Complying with anti-money laundering (AML) obligations, including the monitoring of unusual transaction patterns and the filing of reports where legally required.
• Monitoring and supporting responsible gaming commitments — for example, identifying players who may be showing signs of problem gambling and proactively reaching out to offer support tools.
• Personalising your Platform experience based on your game preferences, betting history, and activity patterns — for example, surfacing cricket markets relevant to your favourite teams.
• Improving the Platform through internal analytics — for example, identifying which features are most used, where players experience friction, and how to optimise mobile performance for users in Dhaka, Chittagong, Sylhet, Khulna, and other cities across Bangladesh.
• Sending you promotional communications where you have opted in to receive them (see Section 12 — Marketing).

6 Cookies & Tracking Technologies

vippp uses cookies and similar tracking technologies on the Platform to deliver core functionality, maintain session security, and analyse usage patterns. The categories of cookies used are as follows:

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies (to keep you logged in), security tokens (to protect against cross-site request forgery), and load-balancing cookies. Essential cookies cannot be disabled without preventing the Platform from functioning.
• Functional Cookies: Enable enhanced functionality and personalisation — for example, remembering your preferred language settings, odds format preferences, and recently viewed game categories. Disabling these cookies may reduce your experience but will not prevent basic Platform access.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform. This data helps vippp identify performance issues, optimise page load speeds, and prioritise feature development. Analytics data is not linked to your personal identity.
• Responsible Gaming Cookies: Short-lived session cookies used to enforce session time limits and display responsible gaming reminders at scheduled intervals during extended play sessions.

vippp does not use third-party advertising or retargeting cookies. No tracking data from the Platform is shared with advertising networks for the purpose of serving you advertisements on other websites.

You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in or using core Platform features. Clearing cookies will end your current session and require you to log in again.

7 Data Sharing & Third Parties

vippp shares your personal data with third parties only in the following limited and controlled circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data necessary to process your deposit or withdrawal transaction — typically your registered account reference and the transaction amount. These providers are contractually obligated to handle your data securely and only for the payment processing purpose.
• KYC Verification Providers: Third-party identity verification services receive your identity documents and personal details for the purpose of verifying your identity, age, and residence. These providers operate under strict data processing agreements with vippp.
• Game Content Providers: Providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe receive session tokens and anonymised player identifiers necessary to operate their games within the Platform. These providers do not receive your full identity data unless required for regulatory compliance in their own operating jurisdictions.
• Legal and Regulatory Authorities: vippp will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, or where such disclosure is necessary to protect the rights, property, or safety of vippp, its players, or third parties.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of vippp's assets, player data may be transferred to the acquiring entity as part of that transaction. In such circumstances, vippp will notify registered players by email prior to any transfer taking effect, and the acquiring entity will be required to honour this Privacy Policy.

8 Data Security

vippp implements a layered security architecture to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Transport Encryption: All data transmitted between your device and the vippp Platform is encrypted using TLS 1.2 or higher (256-bit SSL). The Platform enforces HTTPS on all pages and connections — unencrypted HTTP connections are automatically redirected.
• Data-at-Rest Encryption: Personal data stored in vippp's databases and on our servers is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data is restricted to vippp personnel who require it to perform their job functions. All staff with data access are subject to confidentiality obligations. Access is governed by role-based access control (RBAC) and reviewed regularly.
• Two-Factor Authentication: vippp offers two-factor authentication (2FA) for player accounts. We strongly encourage all players to enable 2FA from within their account security settings.
• Intrusion Detection: vippp employs continuous automated monitoring systems to detect and alert on anomalous access patterns, login attempts, and data access events.
• Penetration Testing: The Platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

While vippp applies industry-standard security measures, no data transmission or storage system is completely immune from risk. If you have reason to believe your account has been compromised, please contact our support team immediately via live chat or at [email protected].

9 Data Retention

vippp retains personal data for the following periods, after which data is securely deleted or anonymised:

Where a legal hold or regulatory investigation requires retention beyond the standard periods above, vippp will retain the relevant data for the duration of that requirement. Players will be notified where possible.

10 Your Data Rights

As a player on the vippp Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] or via live chat. vippp will respond to all verified requests within 30 days.

• Right of Access: You may request a copy of the personal data vippp holds about you, including the categories of data, purposes of processing, and any third parties with whom your data has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For account details, many fields can be updated directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Note that certain data (e.g., AML transaction records) must be retained by law and cannot be deleted on request.
• Right to Restrict Processing: You may request that vippp restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request a copy of your data in a structured, commonly used, machine-readable format (e.g., CSV or JSON).
• Right to Object: You may object to processing carried out on the basis of vippp's legitimate interests. vippp will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

11 Children's Privacy

The vippp Platform is strictly intended for adults aged 21 years and above. vippp does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process, and vippp employs both automated and manual checks to enforce this requirement.

If vippp discovers or is notified that personal data belonging to a person under the age of 21 has been collected, we will immediately:

• Close the associated account and void all activity conducted through it.
• Permanently delete all personal data associated with the underage individual from our systems.
• Return any deposited funds (where the source is verifiable) to the payment method from which they were received.

Parents or guardians who believe their child has registered on the vippp Platform should contact us immediately at [email protected]. We will treat all such reports as a priority and respond within 24 hours.

12 Marketing Communications

vippp may send you promotional communications — including information about new features, bonus offers, seasonal promotions (such as Eid specials, Pohela Boishakh offers, BPL cricket promotions), and platform updates — where you have provided explicit opt-in consent to receive such communications.

Marketing communications from vippp may be delivered via:

• Email to your registered email address.
• SMS to your registered mobile number.
• In-Platform notifications visible when you are logged in to your account.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email.
• Adjusting your communication preferences within your account settings.
• Contacting support at [email protected] and requesting to be removed from marketing communications.

Opting out of marketing communications will not affect the delivery of transactional messages relating to your account (such as deposit confirmations, withdrawal notifications, or security alerts), which are sent on the basis of contractual necessity rather than consent.

13 Third-Party Links

The vippp Platform may contain references to third-party game providers, payment services, or informational resources. Where the Platform links to or integrates with third-party services (for example, a game supplied by Pragmatic Play or a payment gateway operated by bKash), those third parties' own privacy policies govern the data they collect directly from you.

vippp is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policy of any third-party service you interact with through or alongside the vippp Platform. vippp exercises due diligence in selecting third-party partners and contractually requires them to implement appropriate data protection measures.

14 Changes to This Privacy Policy

vippp reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The effective date displayed at the top of this document will be updated whenever a new version is published.

Where changes are material — meaning they substantially alter how your data is collected, used, or shared — vippp will notify registered players by email to their registered address, or via a prominent in-Platform notification, at least seven (7) days before the changes take effect.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you should cease using the Platform and contact support to request account closure.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way vippp handles your personal data, please contact us through any of the following channels:

• Support Email: [email protected] (plain text — not a clickable link). Include your registered username and the subject "Privacy Enquiry" for the fastest response.
• Live Chat: Available 24/7 directly within the Platform. Our support team responds to live chat messages within 2 minutes on average.
• Response Language: All support communications are conducted in English. Bangladesh Standard Time (BST, UTC+6) is our primary reference timezone for response time commitments.

vippp is committed to resolving all privacy-related queries promptly and transparently. If you submit a formal data rights request (see Section 10), please allow up to 30 calendar days for a full response. We will acknowledge receipt of your request within 3 business days.