viptak Privacy Policy

1 Who We Are and How to Contact Us

viptak is an online casino and sports betting platform operating at https://viptak.xyz and serving players primarily based in Bangladesh. We are the data controller responsible for the personal data collected through the Platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way your personal data is handled, please contact our Data Protection team at:

• Email: [email protected] — please mark your message "Privacy Request" for priority handling.
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days, operating on Bangladesh Standard Time (BST, UTC+6).

2 Personal Data We Collect

When you register an account, use the Platform, or interact with our services, viptak may collect the following categories of personal data:

2.1 Registration and Identity Data

• Full legal name as it appears on your national identity document.
• Date of birth (required to verify that you are 21 years of age or older).
• Registered mobile phone number used for OTP verification and account communications.
• Email address (where provided).
• Residential address or district (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar).

2.2 Identity Verification (KYC) Data

• National Identity Card (NID) number and document image.
• Passport or driving licence details, where submitted as an alternative verification document.
• Facial photograph or selfie, where requested for biometric verification purposes.

2.3 Financial and Transaction Data

• Mobile wallet account details associated with bKash, Nagad, Rocket, or Upay transactions.
• Bank account details for Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, or other bank transfers.
• Visa or Mastercard details (card number last four digits, expiry, card type — full card numbers are never stored on our servers).
• Deposit and withdrawal amounts, timestamps, transaction reference numbers, and payment method used.
• Account wallet balance history.

2.4 Usage and Technical Data

• IP address and approximate geographic location derived from it.
• Device type, operating system, browser type and version.
• Pages visited, time spent on each page, click paths, and session duration.
• Game history: games played, wager amounts, outcomes, and session timestamps.
• Login timestamps and device fingerprint data used for fraud prevention.

2.5 Communications Data

• Records of correspondence between you and the viptak support team, including emails, chat transcripts, and complaint submissions.
• Feedback and survey responses, where voluntarily submitted.

3 How We Use Your Personal Data

viptak processes your personal data only for legitimate, clearly defined purposes. The primary purposes for which we use your data are set out below, together with the legal basis for each:

4 Cookies and Tracking Technologies

viptak uses cookies and similar tracking technologies to operate the Platform effectively and to improve your user experience. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery (CSRF) attacks. These cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language settings and last-used payment method, so you do not need to re-enter them on each visit.
• Analytics Cookies: Used to collect anonymised data about how Players navigate the Platform, which pages are most visited, and where technical errors occur. This data helps us improve the site and is not linked to individual identities.
• Anti-Fraud Cookies: Used in conjunction with device fingerprinting to detect and prevent multiple-account creation, bonus abuse, and other fraudulent activity.

You may control cookie preferences through your browser settings. However, disabling strictly necessary cookies will prevent you from using core Platform features including login and payment processing.

5 Sharing Your Personal Data

viptak does not sell your personal data to third parties. We may, however, share your data with carefully selected categories of third parties in the following circumstances:

• Payment Service Providers: We share transaction data with payment processors including bKash, Nagad, Rocket, Upay, and card processors (Visa, Mastercard) solely for the purpose of completing your financial transactions.
• Game Providers: To deliver casino games to you, technical session data is passed to game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers operate under their own data protection policies and are not permitted to use your data for any purpose other than game delivery.
• Identity Verification Partners: Where KYC verification is processed via a third-party verification service, your identity documents are shared with that provider under strict data processing agreements.
• IT and Security Service Providers: Cloud hosting providers and cybersecurity partners who support the operation of the Platform may have access to encrypted data as part of their infrastructure services. All such providers are bound by confidentiality obligations.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so — for example, in response to a valid court order, or as part of our anti-money laundering (AML) reporting obligations.

Any third party with whom viptak shares personal data is required to process that data only for the specific purpose for which it was shared and to maintain appropriate technical and organisational security measures.

6 Data Retention

viptak retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your Account's active status, plus a minimum of 5 years following Account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the relevant transaction, for AML compliance and dispute resolution purposes.
• Communication records: Support correspondence and complaint records are retained for 3 years from the date of the last interaction.
• Usage and analytics data: Aggregated, anonymised usage data may be retained indefinitely. Data linked to individual accounts is retained for 2 years from the date of collection, after which it is anonymised or deleted.
• Marketing consent records: Records of consent to receive marketing communications are retained until you withdraw consent, plus 1 year thereafter as evidence of the consent previously given.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

7 Data Security

viptak employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields (including payment details and identity document scans) at rest in our databases.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific duties.
• OTP-based two-factor authentication for new device logins, reducing the risk of unauthorised Account access.
• Regular security audits and penetration testing of Platform infrastructure.
• Automated monitoring systems designed to detect and alert on unusual access patterns or potential data breaches in real time.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to affect your rights or freedoms, viptak will notify affected Players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

8 Your Data Rights

As a Player on the viptak Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used format within 30 days of receiving your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Where possible, you may also update certain details directly through your Account settings panel.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing on the basis of legitimate interest. This right is subject to our legal retention obligations — we cannot delete data that we are required by law to keep.
• Right to Restrict Processing: You have the right to request that we pause processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a portable format so that it can be transferred to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interest, including profiling for marketing purposes. Where you object to marketing communications, we will stop sending them immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

viptak will respond to all data rights requests within 30 days. Where a request is complex or voluminous, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reasons for it.

9 Children and Minors

The viptak Platform is strictly for players aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been submitted by or on behalf of a minor, we will immediately close the associated Account, delete all related personal data, and return any deposited funds to the original payment source. If you believe that a minor has registered an account on the Platform, please notify us immediately at [email protected].

10 Third-Party Links

The viptak Platform does not contain links to third-party websites. All content and services accessible through https://viptak.xyz are operated directly by viptak. This Privacy Policy applies exclusively to data collected and processed by the viptak Platform and does not extend to any external services, applications, or payment provider portals that may open in a separate browser window or app during a payment transaction. We recommend that you review the privacy policies of your payment provider (such as bKash, Nagad, or your bank) separately.

11 Changes to This Privacy Policy

viptak reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. When material changes are made, the "Last Updated" date at the top of this page will be revised accordingly. We encourage you to review this Policy periodically. Your continued use of the Platform following the posting of an updated Policy constitutes your acceptance of the revised terms. For significant changes affecting your rights, we will additionally notify you via your registered mobile number or email address where possible.

12 Relationship with Terms & Conditions

This Privacy Policy forms an integral part of the viptak Terms & Conditions. By accepting the Terms & Conditions, you also acknowledge and accept this Privacy Policy. In the event of any conflict between the two documents on a data protection matter, this Privacy Policy shall take precedence.