vipyes Privacy Policy

1. Information We Collect

When you register, use, or interact with the vipyes platform, we collect several categories of personal data. We collect only the information that is necessary for the purposes described in this Privacy Policy. The categories of data we collect are set out below.

• Full name: As it appears on your official government-issued identification document.
• Date of birth: Required to verify that you meet the 18+ age requirement for gambling on vipyes.
• Email address: Used for account notifications, security alerts, password resets, and promotional communications (where you have opted in).
• Mobile phone number: Used for account security (two-factor authentication), withdrawal verification, and customer support.
• Residential address: Collected at the KYC stage; used for identity verification and AML compliance purposes.
• Username and password: Your chosen account credentials. Passwords are hashed and are never stored in plain text.

Prior to processing any withdrawal, vipyes is required to verify your identity. You will be asked to submit copies of one or more of the following documents:

• National Identity Card (NID): The primary accepted document for Bangladeshi players.
• Valid passport: Accepted as an alternative to the NID.
• Proof of address: A recent utility bill, bank statement, or official correspondence dated within the last three months.
• Proof of payment method: A screenshot or confirmation screen of your bKash, Nagad, Rocket, or Upay account showing your registered name and number.

KYC documents are processed by our compliance team and, where applicable, by our third-party identity verification partner. These documents are stored securely and retained in line with the data retention schedule described in Section 5 of this Policy.

• Deposit and withdrawal amounts, dates, and payment method references (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard).
• Transaction IDs and references provided by your payment provider for reconciliation purposes.
• Bonus claims, wagering activity, and balance history associated with your account.

vipyes does not store full card numbers. Card payments are tokenised by our payment gateway partner and only a masked reference is retained on our systems.

• Game sessions played, bets placed, stakes, results, and winnings across all vipyes products (slots, live casino, cricket betting, and other sports markets).
• Bonus usage history, including which promotions were claimed and wagering progress.
• Self-exclusion history, deposit limit settings, and responsible gaming tool usage.

• IP address: Recorded at login and during transactions for fraud prevention and geolocation compliance.
• Device type, operating system, and browser: Collected automatically to optimise the platform experience.
• Session duration and navigation data: Pages visited, time spent on each section, and click-stream data collected via analytics tools.
• Cookies and local storage data: Described in full in Section 3 of this Policy.

• Records of your interactions with the vipyes Live Chat support team, including chat transcripts, timestamps, and issue resolutions.
• Email correspondence with our support and compliance teams.
• Responses to surveys or feedback requests, where you voluntarily participate.

2. How We Use Your Data

vipyes processes your personal data for specific, legitimate purposes. The table below outlines each processing purpose, the data categories used, and our legal basis for processing.

3. Cookies & Tracking Technologies

vipyes uses cookies and similar tracking technologies (including local storage and session storage) on its website and mobile platform. Cookies are small text files placed on your device that allow the platform to recognise your browser, remember your preferences, and gather analytics data. The following table describes the categories of cookies we use.

You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies — refer to your browser's help documentation for instructions. Please note that disabling strictly necessary cookies will impair your ability to use vipyes, as they are integral to account security and session management.

vipyes may use third-party analytics tools to collect aggregated, anonymised data about platform usage. These tools place their own cookies on your device, which are governed by the respective third party's own privacy policy. vipyes does not grant these tools access to personally identifiable information beyond what is technically necessary for the analytics service to function.

4. Data Sharing & Third Parties

vipyes does not sell, rent, or trade your personal data to third-party marketers or data brokers. We share your data only in the specific, limited circumstances described below, and only to the extent necessary to fulfil the stated purpose.

To deliver casino and sports betting products, vipyes integrates game content from third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and others. These providers may receive a player session token and anonymised player ID to launch game instances and record round results. They do not receive your name, contact details, or financial information.

To process deposits and withdrawals, vipyes shares the minimum necessary transaction data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card network partners. These parties receive only the data they require to complete the specific transaction (e.g., your registered mobile number for a bKash transfer) and are bound by their own data protection obligations.

vipyes may use a third-party KYC and identity verification service to validate the documents you submit. Your identity documents are shared with this service solely for the purpose of verification. The service does not retain copies of your documents beyond the verification process unless required by applicable law.

vipyes may be required to disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are compelled to do so by law, court order, or valid legal process. In such cases, we will disclose only the minimum amount of data required to satisfy the legal obligation and will notify you where we are legally permitted to do so.

In the event of a merger, acquisition, restructuring, or sale of all or part of the vipyes business, player account data may form part of the transferred assets. In such circumstances, vipyes will take reasonable steps to ensure that your data continues to be protected in accordance with this Privacy Policy and will notify affected players before their data is transferred to a new entity.

5. Data Retention

vipyes retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and compliance obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, vipyes will securely delete or anonymise your personal data so that it can no longer be attributed to you as an individual. Where complete deletion is not technically feasible (e.g., within backup archives), the data will be isolated from active processing until it can be securely purged.

6. Data Security

Protecting your personal data is a technical and organisational priority at vipyes. We implement a layered security architecture that covers data in transit, data at rest, and access controls across our internal systems. Our key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or mobile device and vipyes servers is encrypted using industry-standard TLS protocols. Our website enforces HTTPS on all pages.
• Password hashing: Account passwords are hashed using a strong one-way cryptographic algorithm. vipyes staff cannot view your password in plain text.
• Payment tokenisation: Card payment data is tokenised at the point of entry by our PCI-compliant payment gateway partners. Full card numbers are never stored on vipyes servers.
• Access control: Access to personal data within vipyes's internal systems is restricted on a need-to-know basis. Staff members are granted only the minimum permissions necessary to perform their duties.
• Two-factor authentication (2FA): vipyes supports and encourages the use of two-factor authentication on player accounts to prevent unauthorised access.
• Intrusion detection and monitoring: Our infrastructure is monitored continuously for unusual activity patterns, potential intrusions, and data exfiltration attempts.
• Regular security audits: vipyes conducts periodic internal and third-party security assessments to identify and remediate vulnerabilities in our platform.

Despite these measures, no internet-based system is entirely immune to security risks. In the unlikely event of a data breach that poses a material risk to your rights, vipyes will notify affected players as promptly as possible and will take all necessary steps to contain the breach and mitigate its impact.

You also play an important role in keeping your account secure. Never share your vipyes password with anyone — including our own support staff, who will never ask for it. Use a strong, unique password for your vipyes account and enable two-factor authentication where available.

7. Your Privacy Rights

As a player on vipyes, you have a number of rights with respect to your personal data. vipyes is committed to honouring these rights and will respond to all valid requests within a reasonable timeframe (ordinarily within 30 days of receipt).

You have the right to request a copy of the personal data vipyes holds about you. Upon a verified request, we will provide you with a structured summary of the data categories we process, the purposes of processing, and the recipients with whom your data has been shared.

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For account-level data (email address, phone number, address), you may be able to update information directly within your account settings, or by contacting our support team.

In certain circumstances, you may request the deletion of your personal data. This right is subject to exceptions where retention is required by law (e.g., AML record-keeping obligations), for the establishment or defence of legal claims, or where vipyes has a legitimate ongoing need to retain the data. Where full deletion is not immediately possible, we will anonymise your data so it can no longer be attributed to you.

You may request that vipyes restricts the processing of your personal data in situations where you have contested the accuracy of the data, where processing is unlawful but you prefer restriction to deletion, or where you have objected to processing and a determination is pending.

Where vipyes processes your data on the basis of legitimate interests (such as fraud prevention or analytics), you have the right to object to that processing. vipyes will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Where processing is based on your consent (such as marketing communications or personalised game recommendations), you may withdraw your consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. To withdraw consent, use the unsubscribe link in any marketing email, update your account preferences, or contact our support team.

To exercise any of the rights described above, please contact the vipyes Data team via:

• Email: [email protected] — please include "Privacy Request" in the subject line along with a brief description of your request.
• Live Chat: Available 24/7 in English. Our support team will log your request and escalate to the appropriate team.

For security purposes, vipyes may need to verify your identity before processing a data rights request. We will ask you to confirm details that match your registered account. We will acknowledge receipt of your request within 5 business days and aim to fulfil it within 30 days, or notify you of any extension if the request is complex.

8. Changes to This Policy

vipyes reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, changes in applicable law, feedback from players, or improvements to the platform. The effective date at the top of this document will be updated whenever a revised version is published.

Where changes are material — meaning they significantly affect your rights or the way we use your data — vipyes will notify registered players via the email address associated with their account at least 14 days before the changes take effect. For minor or administrative updates, a notice on the vipyes website will be sufficient.

Continued use of the vipyes platform after any Privacy Policy update constitutes your acknowledgement of the revised terms. If you do not agree with the revised Policy, you should stop using the platform and contact our support team to request account closure, after which any outstanding real-money balance will be returned to your verified payment method.