vipta Privacy Policy — How We Protect Your Data

Introduction

vipta ("we", "us", "our", "the Platform") operates the online casino and betting platform accessible at vipta.pro. In the course of providing our services to players in Bangladesh and beyond, we collect and process certain personal information. This Privacy Policy describes the categories of personal data we collect, the purposes for which we process it, the third parties with whom we may share it, the security measures we apply to protect it, and the rights you hold as a data subject. By registering an account and using vipta, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read alongside vipta's Terms and Conditions, which govern your use of the platform as a whole. If you have questions about how your personal data is handled, please contact us at [email protected] at any time. We will respond to all privacy-related queries promptly and in accordance with our obligations as a data controller.

Our Privacy Principles at a Glance

1. Information We Collect

vipta collects personal information in the following categories. This information is collected directly from you during registration and account use, automatically from your device during platform sessions, and from third-party payment processors and identity verification services where applicable:

• Identity information: full name, date of birth, national identification number (NID), and a copy of a government-issued identity document where KYC verification is required. This information is collected to verify your identity, confirm that you meet the minimum age requirement of 21 years, and comply with anti-money laundering obligations.
• Contact information: mobile phone number, and email address (if provided). This information is used for account communications, support interactions, security notifications, and responsible gaming reminders. vipta does not use contact information for unsolicited third-party marketing without your explicit consent.
• Financial information: records of deposits, withdrawals, and payment methods used (such as bKash account numbers, Nagad account numbers, Rocket account numbers, and card details). Full payment credentials are not stored by vipta — payment processing is handled by certified third-party payment processors who maintain their own security standards.
• Technical and usage data: IP address, device type, operating system, browser type, session timestamps, pages visited, games played, betting history, and platform interaction logs. This data is collected automatically during your use of vipta and is used for platform security, fraud prevention, performance optimisation, and responsible gaming monitoring.
• Communications data: records of your interactions with vipta's support team, including support ticket content, email correspondence, and chat logs. These records are retained for quality assurance, dispute resolution, and to ensure continuity of support interactions.

2. How We Use Your Information

vipta processes personal data for specific, identified purposes. We do not use personal data for purposes that are incompatible with those disclosed below without first obtaining your consent or identifying another lawful basis for doing so. The primary purposes for which vipta processes personal data are:

• Account creation and management: to create your vipta account, verify your identity and age, manage your account settings, process your deposits and withdrawals, and maintain an accurate record of your gaming activity and transaction history.
• Platform security and fraud prevention: to monitor account activity for signs of fraud, money laundering, bonus abuse, and prohibited activity as defined in our Terms and Conditions; to investigate suspicious activity; and to protect the integrity of the vipta platform and its player community.
• Responsible gaming: to monitor betting patterns and account activity for signs of problem gambling; to administer deposit limits, session time reminders, cooling-off periods, and self-exclusion tools; and to fulfil our obligations to promote responsible gaming among Bangladesh players.
• Legal and regulatory compliance: to fulfil vipta's obligations under applicable anti-money laundering requirements, age verification requirements, and any other legal or regulatory obligations that apply to the operation of an online gaming platform serving Bangladesh players.
• Customer support: to receive, investigate, and respond to support requests; to resolve disputes; and to maintain records of support interactions for quality assurance and continuity purposes.
• Platform improvement and analytics: to analyse aggregated, anonymised usage data to understand how players interact with vipta, identify areas for improvement, optimise game content and promotional offers, and improve the overall platform experience for Bangladesh players.

Where vipta wishes to use your personal data for a purpose that is not listed above — for example, to send you promotional communications about vipta offers — we will seek your explicit consent before doing so. You may withdraw any consent given to vipta at any time by contacting [email protected].

3. Legal Basis for Processing

vipta processes personal data only where a lawful basis for doing so exists. The legal bases on which vipta relies for its data processing activities are:

• Contractual necessity: the processing of identity data, contact data, financial data, and technical data is necessary for vipta to perform the contract with you (i.e., to operate your account, process your bets and transactions, and provide the platform services you have registered to receive).
• Legal obligation: the processing of identity data for KYC verification and the retention of transaction records are necessary to comply with applicable anti-money laundering requirements and other legal or regulatory obligations that apply to vipta's operations.
• Legitimate interests: the processing of technical and usage data for fraud prevention, platform security, and performance analytics is carried out on the basis of vipta's legitimate interests in maintaining a secure, fair, and functional platform. These interests are balanced against your right to privacy and do not override it.
• Consent: where vipta processes personal data for purposes beyond those listed above (for example, optional marketing communications), it does so on the basis of your explicit consent. You may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Sharing Your Information

vipta does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: vipta shares the minimum necessary financial information with certified payment processors (including bKash, Nagad, Rocket, and card processing partners) to facilitate your deposits and withdrawals. These processors are subject to their own privacy policies and security standards and are not permitted to use your information for any purpose other than processing the transaction.
• Identity verification providers: where KYC verification is required, vipta may share identity documents and associated personal data with certified identity verification service providers. These providers process identity data solely for the purpose of verification and are contractually prohibited from using it for any other purpose.
• Game providers: vipta's game library is powered by third-party providers including Evolution Gaming, Ezugi, Pragmatic Play, Spribe, NetEnt, and Microgaming. These providers may receive technical session data (such as a session token or player ID) to deliver game content and maintain game integrity. They do not receive your name, NID, or payment details.
• Legal authorities: vipta may disclose personal data to law enforcement, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or where vipta believes in good faith that disclosure is necessary to prevent fraud, money laundering, or other illegal activity.

vipta does not share personal data with third-party advertisers, data brokers, or marketing companies. Any third party that receives personal data from vipta is bound by contractual obligations to process that data only for the specified purpose and to maintain appropriate security standards.

5. Cookies and Tracking Technologies

vipta uses cookies and similar tracking technologies on the platform to support core functionality, maintain session security, and gather anonymised usage analytics. The categories of cookies used by vipta are:

• Essential cookies: strictly necessary for the platform to function. These include session authentication cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and cookies that store your language preference. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: used to remember your platform preferences and settings between visits, such as your preferred game category, display settings, and account configuration choices. These cookies improve the consistency of your platform experience but are not essential to core functionality.
• Analytics cookies: used to collect anonymised data about how players navigate vipta, which game categories are most visited, how long sessions last, and where players encounter difficulties. This data is used in aggregate form only and cannot be used to identify individual players. Analytics data helps vipta improve the platform experience.
• Security cookies: used to identify and mitigate security threats, detect unusual account activity, and support vipta's fraud prevention systems. These cookies are essential to platform integrity and cannot be disabled.

6. Data Retention

vipta retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal or regulatory obligations. The following retention principles apply: account data (including identity, contact, and financial records) is retained for the duration of your account relationship with vipta and for a period thereafter as required by anti-money laundering and financial record-keeping obligations. Technical and usage data is retained for a shorter period in line with its purpose (typically 12 to 24 months for analytics data). Communications data is retained for as long as is necessary to resolve the matter to which it relates, and for a reasonable period thereafter for quality assurance purposes.

When personal data is no longer required, vipta will securely delete or anonymise it. Where anonymisation is not technically feasible, vipta will securely destroy the data in a manner that prevents its reconstruction. You may request early deletion of your personal data by contacting [email protected], subject to any legal or regulatory obligations that require vipta to retain it for a specified period.

7. Data Security

vipta takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• SSL/TLS encryption on all data transmitted between your device and the vipta platform, ensuring that login credentials, payment details, and account information cannot be intercepted in transit.
• Encrypted storage of sensitive account data, including hashed password storage using industry-standard algorithms. vipta does not store plaintext passwords. If you believe your password has been compromised, you should change it immediately and contact [email protected].
• Access controls restricting employee and contractor access to personal data on a need-to-know basis. vipta staff members are trained in data handling obligations and are subject to confidentiality obligations with respect to player personal data.
• Regular security reviews and monitoring of platform systems to detect and respond to potential security incidents promptly. In the event of a security incident that affects your personal data, vipta will notify affected players and take immediate remedial action.

While vipta implements robust security measures, no online platform can guarantee absolute security against all possible threats. You play an important role in keeping your account secure by maintaining a strong, unique password, not sharing your login credentials, and notifying vipta immediately if you suspect unauthorised access to your account.

8. Your Privacy Rights

As a vipta player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact vipta at [email protected] with a clear description of your request. vipta will respond within a reasonable timeframe and will not charge a fee for handling privacy rights requests in standard cases:

• Right of access: you have the right to request a copy of the personal data that vipta holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: you have the right to request correction of any personal data held by vipta that is inaccurate or incomplete. You may update certain account details directly through your vipta account settings; for other corrections, contact [email protected].
• Right to erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to vipta's legal obligations to retain certain data for specified periods.
• Right to restrict processing: you have the right to request that vipta restricts its processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where processing is unlawful but you prefer restriction to erasure.
• Right to data portability: you have the right to receive a copy of certain personal data that you have provided to vipta in a structured, commonly used, and machine-readable format, and to request that vipta transmits that data directly to another controller where technically feasible.
• Right to object: you have the right to object to vipta's processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to processing of your personal data for direct marketing purposes, which vipta will honour without requiring justification.

vipta will respond to all privacy rights requests within a reasonable period. In some cases, vipta may need to verify your identity before processing a request to ensure that personal data is not disclosed to or acted upon at the request of an unauthorised party. vipta will not discriminate against you for exercising your privacy rights.

9. Children's Privacy

vipta is strictly an adults-only platform. The minimum age requirement for registering and using a vipta account is 21 years. vipta does not knowingly collect personal data from individuals under the age of 21. If vipta becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, that data will be deleted promptly and the associated account will be permanently closed.

If you are a parent or guardian and you believe that your child has registered a vipta account or provided personal data to vipta, please contact us immediately at [email protected]. vipta will investigate the matter, delete any data collected from the minor, and close the associated account. vipta will cooperate fully with any investigation by relevant authorities into underage access to the platform.

10. Changes to This Privacy Policy

vipta may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or the services we provide. When we make material changes to this policy, we will notify registered players via the platform prior to the changes taking effect. The updated policy will be published at vipta.pro/privacy-policy with the date of the most recent revision shown at the top of the page.

Your continued use of vipta after the effective date of any Privacy Policy update constitutes your acceptance of the revised policy. If you do not agree with the revised Privacy Policy, you must stop using the platform and may request account closure by contacting [email protected]. vipta recommends that you review this page periodically to stay informed of how your personal data is being protected.

11. Contact Us About Privacy

If you have questions, concerns, or complaints about this Privacy Policy or about the way vipta handles your personal data, please contact our support team. vipta is committed to resolving all privacy-related concerns fairly, transparently, and in a timely manner. We will acknowledge receipt of your query and provide a substantive response within a reasonable period.

Email us at: [email protected]