Privacy Policy of viptatk

1.1 Information You Provide Directly

When you register an account, verify your identity, or contact our support team, you may provide the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and nationality as shown on your government-issued identification document.
• Contact data: Mobile phone number, email address, and residential address including city and district (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Account credentials: Username and encrypted password. We never store your password in plain text.
• Financial data: Mobile wallet account details (bKash, Nagad, Rocket, Upay), bank account information (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), and card details (Visa, Mastercard) used for deposits and withdrawals. Full card numbers are never retained by viptatk — they are handled exclusively by our PCI-compliant payment processors.
• KYC documents: Scanned copies or photographs of your National Identity Card (NID), passport, or other government-issued photo ID submitted during the identity verification process.
• Communications data: The content of messages, emails, and live chat transcripts you exchange with our support team.

1.2 Data Generated Through Platform Use

When you navigate and interact with the viptatk Platform, we automatically collect technical and behavioural data, including:

• Device and technical data: IP address, device type and model, operating system, browser type and version, screen resolution, and connection type.
• Usage data: Pages visited, games launched, session duration, click patterns, search queries within the Platform, and navigation paths.
• Transaction data: A complete record of all deposits, withdrawals, wagers, game outcomes, bonus activations, and account balance changes associated with your account.
• Geolocation data: Approximate geographic location derived from your IP address, used for fraud detection and regulatory compliance. We do not use GPS-level precise location tracking.
• Log data: Server-side logs recording access timestamps, error reports, and system events associated with your account activity.

1.3 Data From Third-Party Sources

We may receive supplementary information about you from trusted third parties in specific circumstances:

• Payment providers: Transaction confirmation and status updates from bKash, Nagad, Rocket, Upay, and banking partners to reconcile your account balance.
• Identity verification services: Results from third-party KYC screening tools used to validate the authenticity of identity documents you submit.
• Fraud prevention partners: Risk scores or alerts from fraud detection networks that help us identify suspicious account activity before it affects you or other players.
• Game providers: Technical session data from Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, and Habanero related to game rounds played within their environments.

2.1 Marketing Communications

If you have opted in to receive promotional communications from viptatk — for example, notifications about seasonal offers tied to the BPL cricket season, Eid promotions, Pohela Boishakh bonuses, or IPL-related betting offers — we will contact you using the mobile number or email address registered on your account. You may withdraw your marketing consent at any time by updating your notification preferences within Account Settings or by emailing support@viptatk. Withdrawal of marketing consent does not affect your ability to use the Platform.

2.2 Automated Decision-Making

viptatk uses automated tools as part of our fraud detection and responsible gaming monitoring systems. These tools may flag accounts for additional review based on patterns in transaction data or gameplay behaviour. Where an automated process results in an account restriction, you have the right to request human review of that decision by contacting our support team. We do not make purely automated decisions that have significant legal effects on you without a human review step being available.

3.1 Service Providers

We engage carefully selected third-party service providers who process personal data on our behalf and under our documented instructions. These providers are contractually prohibited from using your data for any purpose beyond the specific service they supply to viptatk. Current categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Sonali Bank, Visa, and Mastercard — for transaction processing and reconciliation.
• KYC and identity verification vendors: Third-party document verification platforms used to authenticate National ID cards, passports, and other submitted identity documents.
• Game technology providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, and Habanero — who receive session data required to deliver and operate their games.
• Cloud infrastructure providers: Hosting and data storage providers whose infrastructure underpins the viptatk Platform. All data is stored on servers with encryption at rest.
• Fraud prevention and risk management services: Tools that analyse transaction patterns to protect both the Platform and its players from financial crime.
• Customer support platforms: Live chat and ticketing systems used by our 24/7 support team.

3.2 Legal and Regulatory Disclosure

viptatk may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally compelled to do so by a valid court order, statutory obligation, or other binding legal requirement. In such cases, we will disclose only the minimum amount of data required to satisfy the legal request. Where legally permitted, we will notify you of such a disclosure.

3.3 Business Transfers

In the event that viptatk undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to how your data is handled as a result.

3.4 No Data Sales

viptatk does not sell, lease, or otherwise commercially exploit your personal data to data brokers, advertising networks, or any third party for marketing profiling purposes. This commitment applies to all registered players regardless of account status or jurisdiction.

4.1 What Are Cookies?

Cookies are small text files placed on your device by your web browser when you visit a website. They allow the site to recognise your device on return visits, remember your session state, and deliver a consistent user experience. Cookies do not contain executable code and cannot directly access other files on your device.

4.2 Managing Cookies

You may control or delete cookies through your browser settings at any time. Most modern browsers (Chrome, Firefox, Safari, Edge, and the major Android browsers used across Dhaka and Chittagong) provide granular controls for cookie management in the Privacy or Security section of their settings. Please note that disabling strictly necessary cookies will impair Platform functionality — in particular, you will not be able to remain logged in to your account across page navigations.

4.3 No Third-Party Advertising Cookies

viptatk does not place or permit third-party advertising or tracking cookies on the Platform. We do not use retargeting pixels or cross-site tracking technologies that follow your browsing behaviour outside the viptatk domain.

5.1 Retention Periods

The following general retention periods apply to the main categories of personal data we hold:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years after permanent account closure, to comply with applicable financial and anti-money-laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, in line with standard financial record-keeping practices.
• KYC documents: Retained for the duration of the account plus 5 years following closure. Physical document copies are not retained — only secure digital records.
• Support communications: Live chat transcripts and email correspondence are retained for 2 years to assist in resolving any related disputes or follow-up queries.
• Technical and log data: Server and access logs are retained for 90 days for security monitoring and debugging purposes, after which they are deleted or anonymised.
• Marketing preference records: Consent records and opt-out logs are retained for 3 years after the relevant communication was sent, as evidence of lawful processing.

5.2 Deletion and Anonymisation

When retention periods expire, personal data is either securely and permanently deleted or irreversibly anonymised so that it can no longer be linked to any individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis and Platform improvement without any privacy impact to individual players.

5.3 Requests for Early Deletion

You may request deletion of your personal data at any time (see Article 6 — Your Data Rights). Please note that where retention is required by law (for example, transaction records mandated under financial regulations), we are unable to delete data before the applicable statutory period has elapsed, and your deletion request will be partially fulfilled to the extent legally permissible.

7.1 Your Role in Account Security

While viptatk applies robust security controls at the infrastructure level, the security of your account also depends on your own practices. You are responsible for keeping your login credentials confidential, using a strong and unique password, enabling two-factor authentication, and logging out of your account when using shared or public devices. viptatk will never ask you to share your password or any payment PIN via live chat, email, or phone. If you receive any such request, treat it as fraudulent and report it immediately to support@viptatk.

8.1 Response Timeframes

viptatk commits to acknowledging all privacy-related enquiries within 2 business days of receipt. Substantive responses to data rights requests — including access, deletion, portability, or objection requests — will be provided within 30 calendar days of identity verification being completed. Where a request is particularly complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you in writing with a clear explanation.

8.2 Policy Updates and Notifications

viptatk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, we will update the "Last updated" date shown at the top of this page and, where the change significantly affects your rights or how your data is used, we will notify you via the email address or mobile number registered on your account. Your continued use of the Platform after such notification constitutes acceptance of the revised Privacy Policy. We recommend reviewing this page periodically, particularly if you receive a notification from us about an update.

8.3 Serving All Regions of Bangladesh

viptatk provides its platform and support services to players across all major regions of Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. All privacy communications are conducted in English. Support is available 24 hours a day, 7 days a week, including national holidays, with response times referenced in Bangladesh Standard Time (BST, UTC+6).