vip3k Privacy Policy

Section 01

Who We Are

vip3k is an online casino and sports betting platform accessible at https://vip3k.io, offering casino games, live dealer tables, and sports wagering services to adult players in Bangladesh. For the purposes of this Privacy Policy, vip3k acts as the data controller in respect of all personal data collected from players and visitors who interact with our platform.

As the data controller, vip3k determines the purposes and means by which personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors and are bound by contractual obligations to handle your data securely and only in accordance with our documented instructions.

All data protection enquiries, access requests, correction requests, and deletion requests should be directed to our support team at [email protected]. We will acknowledge all data-related communications within 48 hours and provide a full substantive response within 30 calendar days of receipt.

Section 02

Scope of This Policy

This Privacy Policy applies to all personal data collected, processed, and stored by vip3k in connection with:

• Your use of the vip3k website at https://vip3k.io and all sub-pages thereof
• Your registration and maintenance of a vip3k player account
• All deposit and withdrawal transactions processed via bKash, Nagad, Rocket, Upay, or any other accepted payment method
• Your participation in casino games, live dealer sessions, and sports betting markets
• Any communications you send to or receive from the vip3k support team
• Your participation in promotional campaigns, bonus offers, tournaments, or any other vip3k marketing programme
• Your interaction with any cookies or tracking technologies deployed on the vip3k platform

This Privacy Policy does not apply to third-party websites, payment service provider portals, or game studio environments that may be accessible via links from the vip3k platform. We encourage you to review the privacy policies of any third-party services you use in connection with your vip3k account.

Section 03

Data We Collect

vip3k collects the following categories of personal data from players and platform visitors. We collect only what is necessary for the purposes described in this Policy.

Identity Data — including your full legal name, date of birth, and any government-issued identity document details (such as National Identity Card number) provided during account verification.

Contact Data — including your registered mobile phone number (required for SMS OTP authentication and account security), and any email address you provide for account communications or support correspondence.

Financial Data — including your registered bKash, Nagad, Rocket, or Upay mobile wallet number; transaction amounts, dates, and references; and any bank account details provided for alternative payment methods. We do not store full payment card numbers, CVV codes, or banking passwords.

Account & Gaming Data — including your vip3k username, account creation date, login history (timestamps and IP addresses), session duration records, betting and wagering history, game participation records, balance history, bonus claims, and responsible gaming tool settings (deposit limits, self-exclusion status, session reminders).

Technical Data — including your IP address, device type and model, operating system, browser type and version, screen resolution, and general geographic location derived from IP address (country and city level).

Usage Data — including pages visited, time spent on each page, click-path data, game launch events, search queries within the platform, and error reports generated during your session.

Communications Data — including the content of any support tickets, live chat transcripts, email correspondence, or feedback forms you submit to vip3k.

Section 04

How We Collect Your Data

vip3k collects personal data through the following channels:

1. Direct submission by you: When you complete the account registration form, submit identity verification documents, make a deposit or withdrawal request, contact our support team, or participate in any promotion that requires you to provide information.
2. Automated technical collection: When you access and interact with the vip3k platform, our servers and analytics systems automatically record certain technical and usage data including your IP address, device identifiers, session timestamps, and in-platform behaviour.
3. Cookies and similar technologies: vip3k uses first-party cookies and similar tracking technologies to maintain your session state, remember your preferences, and gather aggregated analytics data. Full details are provided in Section 8 of this Policy.
4. Payment service providers: When you initiate a deposit or withdrawal, our payment processing partners (bKash, Nagad, Rocket, Upay) transmit to vip3k the transaction reference, amount, timestamp, and the mobile wallet number associated with the transaction for reconciliation and fraud prevention purposes.
5. Identity verification services: Where you are required to complete enhanced identity verification, our third-party verification partner may provide vip3k with a verification outcome and summary data derived from the documents you submitted to that partner.

Section 05

How We Use Your Data

vip3k uses the personal data it collects for the following specific purposes:

• Account creation and management: To create, maintain, and administer your vip3k player account, including authenticating your identity at login via SMS OTP and managing your account settings and preferences.
• Payment processing: To process deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and other accepted payment methods, and to maintain accurate financial records of all transactions associated with your account.
• Identity and age verification: To verify that you are who you claim to be and that you meet the minimum age requirement of 21 years, in compliance with our account verification obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, bonus abuse, and other prohibited activities as defined in our Terms & Conditions.
• Responsible gaming compliance: To monitor your gaming activity for indicators of problem gambling behaviour, to apply deposit limits and self-exclusion measures you have requested, and to fulfil our duty of care obligations to players.
• Customer support: To respond to your support queries, resolve account issues, process complaints, and communicate with you about your account.
• Legal and regulatory compliance: To comply with applicable laws, regulatory requirements, court orders, and law enforcement requests, including financial record-keeping and anti-money-laundering obligations.
• Platform improvement: To analyse aggregated, anonymised usage data to understand how players interact with the platform, identify areas for improvement, and enhance the overall user experience.
• Marketing communications (with consent only): To send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, or special offers — only where you have explicitly opted in to receive such communications. You may withdraw this consent at any time by contacting [email protected].

Section 06

Legal Basis for Processing

vip3k processes your personal data on the following legal bases, which we have identified as applicable to each processing activity described in this Policy:

1. Performance of a contract: Processing that is necessary to fulfil the contractual relationship between you and vip3k established when you create an account and accept our Terms & Conditions. This covers account creation, payment processing, game access, and customer support.
2. Legal obligation: Processing that is required to comply with applicable laws, including anti-money-laundering regulations, financial record-keeping obligations, identity verification requirements, and responses to lawful requests from competent authorities.
3. Legitimate interests: Processing that serves vip3k's legitimate business interests in fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics — where those interests are not overridden by your rights and interests as a data subject.
4. Consent: Processing for optional purposes such as direct marketing communications, for which vip3k will seek your explicit consent separately. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Section 07

Sharing Your Data

vip3k does not sell, rent, or share your personal data with third parties for their own independent marketing purposes. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment processing partners (bKash, Nagad, Rocket, Upay, and applicable card networks): We share the minimum data necessary to process your deposit and withdrawal transactions. These partners are regulated financial service providers operating under their own applicable privacy and data protection obligations.
• Identity verification service providers: Where enhanced KYC (Know Your Customer) verification is required, we may engage a third-party verification specialist. Data shared is limited to what that provider requires to complete the verification task.
• Game studio providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others): Game platforms accessed through vip3k may receive a session token and anonymised player identifier to enable gameplay. Full personal data (name, mobile number, payment details) is not passed to game studios.
• IT and infrastructure service providers: Third-party hosting, cloud storage, and cybersecurity providers who process data strictly on vip3k's instructions under data processing agreements that require them to maintain standards of security equivalent to those described in this Policy.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where required to do so by applicable law, valid legal process, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect vip3k's legal rights, or protect the safety of our players.
• Business successors: In the event of a merger, acquisition, or sale of all or substantially all of vip3k's assets, personal data held by vip3k may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. Players will be notified of any such transfer in advance.

Section 08

Cookies & Tracking Technologies

vip3k uses first-party cookies and similar browser-based storage technologies to operate and improve the platform. We do not deploy third-party advertising cookies or sell cookie data to advertising networks.

The following types of cookies are used on the vip3k platform:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session state, store your authentication token, and enable secure communication between your browser and our servers. These cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: These remember your preferences and settings — such as your preferred language, display settings, and responsible gaming tool configurations — so that you do not have to re-enter them on every visit.
• Analytics cookies: vip3k uses first-party analytics to collect aggregated, anonymised data on how players navigate the platform, which pages are most frequently visited, and where technical errors occur. This data is used solely to improve the platform and is not shared with third-party analytics providers.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in or using core platform features. Disabling functional or analytics cookies will not restrict access to the platform but may affect your experience.

Section 09

Data Security

vip3k implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit TLS/SSL encryption for all data in transit between your browser and our servers
• Encryption at rest for all stored personal data and financial records
• SMS OTP two-factor authentication available to all account holders
• Role-based internal access controls limiting employee access to personal data to those with a documented business need
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Automated anomaly detection systems that flag unusual login patterns, IP address changes, and suspicious transaction behaviour for manual review
• Secure deletion protocols applied to data that has reached the end of its retention period

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data security incident that poses a risk to your rights and interests, vip3k will notify affected players without undue delay and take all reasonable steps to mitigate the impact of the incident. You should report any suspected unauthorised access to your vip3k account immediately to [email protected].

Section 10

Data Retention

vip3k retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with vip3k's data deletion protocols. Anonymised, aggregated data (from which individual players cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

Section 11

Your Rights

As a player whose personal data is processed by vip3k, you hold the following rights in respect of that data. To exercise any of these rights, please contact us in writing at [email protected] with the subject line "DATA RIGHTS REQUEST" and include your registered account username and a clear description of the right you wish to exercise.

1. Right of access: You have the right to request a copy of all personal data vip3k holds about you, together with information about how that data is being used and on what legal basis.
2. Right to rectification: You have the right to request that inaccurate or incomplete personal data held about you is corrected or completed without undue delay.
3. Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to legal retention obligations that may require us to retain certain data regardless of an erasure request.
4. Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or pending the outcome of an objection to processing.
5. Right to data portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
6. Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. vip3k will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
7. Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

vip3k will respond to all data rights requests within 30 calendar days of receipt. In cases of complex or multiple requests, this period may be extended by a further two months, in which case we will notify you of the extension within the initial 30-day period.

Section 12

Children & Minors

The vip3k platform is strictly intended for adults aged 21 years and above. vip3k does not knowingly collect, process, or retain personal data from any person under the age of 21.

If vip3k becomes aware that personal data has been collected from a player who is under 21 years of age, we will take immediate steps to suspend the account, delete the associated personal data, reverse any financial transactions where technically possible, and report the incident to the appropriate authorities where required.

If you are a parent or guardian and believe that a minor in your care has accessed or registered on the vip3k platform, please contact us immediately at [email protected] with the subject line "MINOR ACCOUNT REPORT". We will investigate and act upon all such reports as a matter of highest priority.

Section 13

Changes to This Policy

vip3k reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Material changes to this Policy — that is, changes that significantly affect how we collect, use, or share your personal data — will be communicated to registered players via the email address associated with their account and/or via a prominent notice on the vip3k platform no less than 14 calendar days before the change takes effect.

Minor changes (such as corrections of typographical errors, clarifications that do not alter the substance of the Policy, or updates to contact information) may be made without advance notice, but the version date at the top of this document will be updated to reflect the revision date.

Your continued use of the vip3k platform after the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the platform and request account closure before the effective date. Archived versions of previous Privacy Policies are available on request by contacting [email protected].

Section 14

Contact Us

For all data protection enquiries, subject access requests, objections to processing, consent withdrawals, or any other privacy-related communications, please contact the vip3k data protection team using the details below. All contact information is provided as plain text — please do not attempt to use these as clickable links.

This Privacy Policy should be read in conjunction with the vip3k Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the full legal agreement between you and vip3k.