Privacy Policy — How vipvaji Protects Your Data

This Privacy Policy applies to all personal data collected, processed, and stored by vipvaji in connection with the operation of its online casino and sports betting platform accessible at vipvaji.net and all associated sub-domains (collectively, the "Platform"). vipvaji acts as the data controller in respect of all personal data collected directly from users of the Platform.

This policy applies to all current and former registered Players, visitors who browse the Platform without registering, and individuals who contact vipvaji via email or other support channels. It covers data collected through the Platform's website, mobile-optimised interface, and any communications exchanged between you and vipvaji's support team.

By accessing or using the vipvaji Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, you should discontinue use of the Platform and contact [email protected] to request Account closure.

vipvaji collects personal data from you in three primary ways: information you provide directly during registration and account use, information generated automatically by your use of the Platform, and information received from trusted third-party service providers such as KYC verification agencies and payment processors.

Information You Provide Directly

Information Collected Automatically

When you access the vipvaji Platform, our servers and analytics tools automatically collect certain technical data. This includes your IP address, device type and operating system, browser type and version, referring URL, pages visited, session duration, clickstream data, and game activity logs (including bets placed, game sessions, and outcome records). This data is collected to ensure Platform security, detect fraudulent activity, and improve the user experience.

Information From Third Parties

vipvaji may receive supplementary data about you from the following third-party sources: KYC and identity verification providers (to confirm the authenticity of documents you submit); payment processors such as bKash, Nagad, Rocket, and Visa/Mastercard networks (to confirm transaction status and flag anomalies); and fraud prevention and anti-money laundering (AML) screening services. Data received from these third parties is used solely for the purpose for which it was shared and is handled under the same standards as data collected directly.

vipvaji processes your personal data only for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The following table summarises each processing purpose and the legal basis that justifies it:

vipvaji does not make automated decisions that produce significant legal effects solely on the basis of profiling your personal data without human review. Where automated fraud-detection systems flag an account for review, a member of our compliance team personally reviews the case before any account action is taken.

vipvaji may share your personal data with the following categories of third parties, strictly for the purposes described:

Payment Service Providers

To process your deposits and withdrawals, vipvaji shares the minimum necessary transaction data with payment providers including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay (UCB Mobile Banking), and Visa/Mastercard acquiring banks. These providers operate under their own privacy policies and are PCI-DSS compliant. vipvaji does not transmit your full NID or passport details to payment providers.

KYC & Identity Verification Providers

To meet our age and identity verification obligations, vipvaji shares copies of documents you submit during the KYC process with trusted third-party identity verification services. These providers are contractually prohibited from using your data for any purpose other than verifying your identity for vipvaji and are required to store documents securely and delete them once verification is complete.

Game Content Providers

Games on the vipvaji Platform are delivered by licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may collect anonymised gameplay and session data for game integrity auditing purposes. They do not receive your name, contact details, or payment information — only a randomised player session identifier.

Fraud & Security Services

vipvaji uses third-party fraud detection and cybersecurity providers who may process your IP address, device fingerprint, and behavioural signals to identify and prevent fraudulent account activity, multi-accounting, and money laundering. This processing is conducted under strict data processing agreements.

Legal & Regulatory Disclosures

vipvaji may disclose your personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction when required to do so by applicable law, a binding court order, or to protect the legitimate rights and safety of vipvaji, its employees, or other users of the Platform.

Business Transfers

In the event that vipvaji undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you by email at least 30 days in advance of any such transfer that materially affects how your data is processed, and you will retain the right to request deletion of your data at that time.

vipvaji uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session state, remember your preferences, and analyse how the Platform is used. The following categories of cookies are used:

• Strictly Necessary Cookies: These are essential for the Platform to function. They enable you to stay logged in, maintain your Wallet session, and complete deposits or withdrawals securely. These cookies cannot be disabled without disrupting your use of the Platform.
• Functional Cookies: These remember your preferences such as preferred game lobby view, notification settings, and language selection. Disabling these cookies may result in a less personalised experience.
• Analytics Cookies: vipvaji uses anonymised analytics tools to understand aggregated user behaviour — such as which game categories are most visited, where users drop off in the registration flow, and how the Platform performs across different devices and browsers in Bangladesh. Analytics data is not linked to your individual identity.
• Security Cookies: Short-lived session tokens and CSRF protection cookies are used to protect your Account from cross-site request forgery attacks and session hijacking. These are strictly necessary for security.

Managing Your Cookie Preferences

You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block cookies, clear stored cookies, or receive a notification when a cookie is being set. Disabling strictly necessary cookies will prevent you from logging in or completing transactions on the Platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

vipvaji does not use third-party advertising cookies or retargeting pixels that track your activity across external websites for the purpose of serving you advertisements on other platforms.

vipvaji retains your personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal, regulatory, and contractual obligations. The following retention periods apply:

Upon the expiry of the applicable retention period, vipvaji will securely delete or permanently anonymise your personal data such that it can no longer be linked to your identity. Data that is subject to an ongoing legal dispute, regulatory investigation, or court order may be retained beyond the standard retention period until that matter is fully resolved.

All personal data is stored on servers located in secure, access-controlled data centres. vipvaji implements logical and physical access controls, encryption at rest, and regular security audits to ensure the ongoing integrity and confidentiality of stored data.

As a user of the vipvaji Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] from your registered email address, clearly stating the right you wish to exercise and the specific data concerned. vipvaji will acknowledge your request within 48 hours and provide a substantive response within 30 days.

• Right of Access: You have the right to request a copy of all personal data vipvaji holds about you, including your account information, transaction history, KYC records, and any notes associated with your account.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For changes to core identity data (name, date of birth), you may be asked to provide supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to retention obligations described in Section 6 — vipvaji cannot delete transaction records it is legally required to retain.
• Right to Restriction of Processing: You may request that vipvaji restrict the processing of your data in certain circumstances — for example, while the accuracy of data is contested, or where processing is unlawful but you prefer restriction over erasure.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to have that data transmitted directly to another service provider where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interest, including profiling for personalisation purposes. You may also object to processing for direct marketing at any time — this is an absolute right and vipvaji must cease marketing communications upon receiving your objection.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

vipvaji applies a multi-layered approach to data security, combining technical controls, operational procedures, and staff training to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures in place include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or device and the vipvaji Platform is encrypted using TLS 1.2 or higher, preventing interception of data in transit.
• Encryption at Rest: Sensitive personal data stored in vipvaji databases — including KYC documents and financial transaction records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to systems containing personal data is restricted on a strict need-to-know basis. Multi-factor authentication (MFA) is required for all internal staff accessing production systems.
• Intrusion Detection: vipvaji operates 24/7 security monitoring systems that detect and alert on anomalous access patterns, brute-force attempts, and unusual data export volumes.
• Regular Security Audits: vipvaji conducts periodic penetration testing and vulnerability assessments of its Platform infrastructure. Critical vulnerabilities are remediated within 48 hours of discovery.
• Staff Training: All vipvaji employees with access to personal data receive regular data protection and security awareness training. Handling of KYC documents is subject to additional access-logging requirements.
• Incident Response: In the event of a data breach that poses a risk to your rights, vipvaji will notify affected users by email within 72 hours of becoming aware of the breach, describing the nature of the incident, the data affected, and the steps taken to contain and remediate it.

While vipvaji takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are also responsible for maintaining the security of your own account credentials, including using a strong, unique password and enabling SMS OTP two-factor authentication within your Account settings.

vipvaji applies mandatory age verification checks at the point of registration and again during the KYC process to prevent minors from accessing real-money gaming on the Platform. Any account found to have been registered by a person under the age of 18 will be closed immediately, all balances voided, and any KYC data submitted by or relating to the minor will be securely deleted within 30 days of discovery.

If you are a parent or guardian and you believe that a minor in your care has registered an account on vipvaji without your knowledge, please contact us immediately at [email protected]. Provide the minor's full name, email address used for registration, and a brief description of the situation. vipvaji will investigate and act on your report within 24 hours. We take underage gambling protection extremely seriously and have a zero-tolerance policy on this matter.

vipvaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, Platform features, applicable laws, or regulatory guidance. When we make a material change to this policy, we will provide at least 7 days' advance notice by sending an email to your registered address and posting a prominent notice on the Platform prior to the change taking effect.

For minor or non-material changes — such as correcting typographical errors, clarifying existing language without altering the substance of our commitments, or updating contact details — we may update the policy without advance notice. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the vipvaji Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change to this policy, you have the right to close your Account before the change takes effect by contacting [email protected]. vipvaji will return any Real Money Funds in your Wallet to your verified payment method upon account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how vipvaji protects your personal data. Previous versions of this policy are available upon request by contacting [email protected].