Privacy Policy — Your Data at vip3

Section 1

Data We Collect

When you register for a vip3 account, use the platform, or interact with our customer support team, we collect certain categories of personal information. The specific data collected depends on how you use the platform and the services you access. The following table provides a clear overview of each data category, the source from which it is collected, and the purpose it serves.

Data We Do Not Collect

vip3 does not collect or store full credit card numbers, full debit card numbers, or international wire transfer credentials. vip3 does not collect biometric data such as fingerprints or facial recognition scans. vip3 does not collect data about your activity on other websites except where technically necessary for fraud detection through anonymised IP analysis.

Children's Data

vip3 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that data has been collected from a minor, that data will be deleted immediately and the associated account closed without delay. Parents or guardians who believe a minor has registered with vip3 should contact the support team immediately via live chat.

Section 2

How We Use Your Data

vip3 uses the personal data it collects only for legitimate, clearly defined purposes. We rely on one of the following legal bases for each category of processing activity: performance of a contract (necessary to provide your account and gaming services), compliance with a legal obligation, legitimate interests pursued by vip3 where those interests do not override your fundamental rights, or your explicit consent where required.

Account Management and Service Delivery

Your identity, contact, and financial data are used to create and maintain your vip3 account, process deposits and withdrawals in Bangladeshi Taka (BDT), verify your eligibility to use the platform, send transactional notifications such as deposit confirmations and withdrawal status updates, and provide access to the full vip3 game library including slots, live casino, crash games, and the sportsbook.

Security and Fraud Prevention

Technical and usage data are processed continuously to detect and prevent fraudulent activity, unauthorised account access, money laundering, and bonus abuse. This includes automated monitoring of login patterns, IP address consistency, device fingerprinting, and unusual betting behaviour. Where a security concern is identified, vip3 may temporarily restrict account access pending investigation.

Responsible Gaming Monitoring

vip3 uses your usage data — including session frequency, session duration, bet sizes, and deposit patterns — to monitor for indicators of problem gambling behaviour. Where our responsible gaming systems flag a concern, a member of the vip3 support team may proactively reach out to check on your wellbeing. This processing is carried out in your interest and forms part of vip3's commitment to safer gambling practices across Bangladesh.

Legal and Regulatory Compliance

vip3 processes your identity and financial data to meet its anti-money-laundering (AML) and Know Your Customer (KYC) obligations. Transaction records and identity verification documents are retained for compliance purposes for the periods specified in the Data Retention section of this policy. vip3 will disclose data to relevant authorities where required by applicable law or a valid legal process.

Platform Improvement and Analytics

Aggregated and anonymised usage data is used to understand how players interact with the vip3 platform, which games are most popular, where users encounter difficulties, and how the overall experience can be improved. This analytics processing does not identify you individually — it operates on statistical data sets that cannot be traced back to a specific account.

Marketing Communications

Where you have given your explicit consent during registration or subsequently through your account settings, vip3 may send you marketing communications about new games, seasonal promotions (such as Eid bonus campaigns, BPL cricket special odds, or Pohela Boishakh free bet offers), and platform updates. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting the support team.

Section 3

Data Sharing & Disclosure

vip3 does not sell, rent, or trade your personal data with any third party for commercial gain. There are, however, specific circumstances in which vip3 shares data with carefully selected third-party service providers or is legally required to disclose data to authorities. All third-party data sharing is governed by strict contractual agreements that require recipients to process data only for the specified purpose and to maintain appropriate security standards.

Payment Processing Partners

To process deposits and withdrawals, vip3 shares the minimum necessary financial data with the relevant payment service providers — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. This sharing is limited to the transaction data required to execute the specific payment instruction and is governed by each provider's own privacy and security standards.

Game Studio Providers

The games available on vip3 are powered by third-party studio providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming, among others. These studios may receive anonymised session identifiers and game-play data necessary to operate the game environment. They do not receive your full name, contact details, or payment information.

Identity Verification Services

To carry out KYC verification, vip3 may share identity document images and registration details with third-party identity verification service providers. These providers process data solely for the purpose of confirming your identity and are contractually prohibited from using your data for any other purpose.

Legal Disclosure

vip3 may disclose your personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where required to do so by applicable law, a court order, or a legitimate legal request. In such cases, vip3 will disclose only the minimum data necessary to satisfy the legal requirement and, where legally permitted, will notify you that such a disclosure has been made.

Section 4

Cookies & Tracking Technologies

vip3 uses cookies and similar browser-based storage technologies to deliver a functional, personalised, and secure platform experience. A cookie is a small text file placed on your device by the vip3 website when you visit. Cookies allow the platform to remember your session state, your language and display preferences, and to gather anonymised analytics data about how the platform is used in aggregate.

Types of Cookies Used by vip3

Third-Party Cookies

vip3 does not embed third-party advertising networks, social media tracking pixels, or cross-site behavioural targeting cookies on its platform. The only third-party scripts present on the vip3 website are those strictly necessary to deliver the game content from studio providers, and these are governed by the data sharing principles described in Section 3 of this policy.

Managing Your Cookie Preferences

You can review and manage cookies at any time through your browser's privacy or settings menu. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is set. Please note that disabling strictly necessary or security cookies will impair your ability to use the vip3 platform — specifically, you will not be able to maintain a logged-in session or complete payment transactions. Disabling functional or analytics cookies will not prevent you from using the platform but may reduce personalisation quality.

Section 5

Data Security Measures

vip3 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. No online platform can guarantee absolute security, but vip3 commits to maintaining security standards that are proportionate to the sensitivity of the data held and consistent with industry best practice.

Technical Safeguards

• SSL/TLS Encryption in Transit: All data exchanged between your browser or mobile device and the vip3 servers is encrypted using TLS 1.2 or higher. This includes login credentials, payment details, and all account management actions.
• Encryption at Rest: Sensitive data fields — including identity document references, payment method identifiers, and authentication credentials — are stored in encrypted form in vip3's database infrastructure.
• Password Hashing: Account passwords are stored as salted cryptographic hashes. vip3 staff cannot view your plain-text password and will never ask you to share it.
• Access Controls: Access to personal data within vip3's internal systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their specific role.
• Security Monitoring: vip3's infrastructure is subject to continuous automated security monitoring to detect and respond to intrusion attempts, unusual access patterns, and potential data breaches in real time.

Organisational Safeguards

• All staff with access to player data are trained on data protection obligations and the vip3 internal data handling policy.
• Third-party service providers are contractually required to maintain appropriate security standards and are subject to periodic review.
• vip3 maintains an incident response procedure for managing potential data breaches, including timely notification to affected players where required.

Your Role in Account Security

The security of your vip3 account also depends on actions you take. You are responsible for choosing a strong, unique password, for keeping your login credentials confidential, and for logging out of your account when using a shared or public device. If you suspect your account has been compromised, contact the vip3 support team immediately via live chat so that protective measures can be applied without delay.

Section 6

Data Retention

vip3 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal obligations, and to resolve any disputes or enforce our agreements with you. The following principles govern our data retention practices.

Active Account Data

While your vip3 account remains open and active, we retain all personal data associated with your account — including your registration details, identity verification documents, transaction history, gaming activity records, and communication logs. This data is necessary to operate your account, process your transactions, and comply with our ongoing legal obligations.

Post-Closure Retention

Following the closure of your vip3 account — whether at your request, through self-exclusion, or by vip3 — your personal data is retained for a minimum period of five years from the date of closure. This retention period reflects standard financial record-keeping requirements and ensures that historical transaction data is available if required in connection with a legal claim, a regulatory enquiry, or a dispute raised after account closure.

KYC Document Retention

Identity verification documents — including copies of National Identity Cards, passports, and proof of address documents — submitted during the KYC process are retained for a minimum of five years from the date of submission. This period is consistent with anti-money-laundering record-keeping standards applicable to financial services platforms.

Marketing Data

If you have consented to receive marketing communications from vip3, your contact details and communication preferences are retained for as long as your consent remains in force. If you withdraw your consent to marketing, your details are removed from active marketing lists within 30 days, though they may be retained in suppression records to ensure you do not receive further communications.

Deletion and Anonymisation

Once the applicable retention period has expired and no further legal obligation requires us to retain your data, vip3 will either securely delete the data or anonymise it so that it can no longer be associated with you as an individual. Anonymised data may be retained indefinitely for aggregate statistical and analytical purposes.

Section 7

Your Privacy Rights

As a vip3 account holder, you hold a set of rights with respect to the personal data that vip3 holds about you. These rights are described below. To exercise any of these rights, contact the vip3 support team via live chat or by emailing the address published on this page. vip3 will acknowledge your request within 48 hours and aims to respond substantively within 30 days. In some cases — particularly where requests are complex or numerous — the response period may be extended by a further 30 days, and you will be notified of any such extension.

• Right of Access: You have the right to request a copy of all personal data that vip3 holds about you. This is sometimes called a Subject Access Request (SAR). vip3 will provide the data in a structured, readable format within the response window described above.
• Right to Rectification: If any personal data vip3 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account-level data such as your contact email or phone number, you can update this yourself through your account settings.
• Right to Erasure: You may request that vip3 delete your personal data. This right is not absolute — it is subject to vip3's legal obligations to retain data for anti-money-laundering compliance, financial record-keeping, and dispute resolution. Where erasure is not possible in full, vip3 will explain which data must be retained and why.
• Right to Restriction of Processing: In certain circumstances — for example, while the accuracy of data is being contested — you may request that vip3 restrict the processing of your data to storage only, pausing other uses until the matter is resolved.
• Right to Data Portability: You have the right to receive a copy of data you have provided to vip3 in a structured, commonly used, machine-readable format, where technically feasible and legally appropriate. This right applies to data processed on the basis of your consent or the performance of a contract.
• Right to Object: You have the right to object to vip3 processing your personal data where that processing is based on legitimate interests. vip3 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests. You have an absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where vip3 processes your data on the basis of your consent — for example, for marketing communications — you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Section 8

Policy Updates & Contact

vip3 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal standards. When a material change is made to this policy, vip3 will notify active account holders via the email address registered to their account and by posting a prominent notice on the platform for a period of at least 14 days prior to the change taking effect.

Minor updates — such as clarifications of existing language, corrections to typographical errors, or additions of new payment partners who are processed under existing data sharing arrangements — may be made without advance notice, though the effective date at the top of this policy will be updated to reflect the revision date. It is your responsibility to review this Privacy Policy periodically and to ensure you remain comfortable with its current terms.

Continued Use as Acceptance

Your continued use of the vip3 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should contact the vip3 support team to discuss your options, including voluntary account closure and the return of any verified real-money balance to your registered payment method.

Governing Language

This Privacy Policy is written in English. In the event of any ambiguity arising from translation, interpretation, or alternative language summaries of this policy, the English-language version shall prevail as the authoritative text. All formal correspondence regarding data rights requests, complaints, and policy queries should be submitted in English.

Contact the vip3 Privacy Team

For any questions, concerns, or formal requests relating to this Privacy Policy or to the personal data vip3 holds about you, please contact the vip3 privacy and support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from the vip3 platform. This is the fastest way to reach the team for urgent data concerns.
• Email: [email protected] (plain text — not a clickable link). Please allow up to 48 hours for an initial acknowledgement of email enquiries.
• Written Requests: Formal Subject Access Requests and rights-exercise requests submitted in writing via email will be logged, acknowledged, and responded to within the timeframes described in Section 7.