viptaka21 Privacy Policy

1.1 Information You Provide Directly

When you register a viptaka21 account or interact with our platform, you voluntarily provide personal information that we need to create and manage your account, verify your identity, process transactions, and deliver our services. This information includes:

• Identity data: Full legal name, date of birth, gender, and nationality as shown on your government-issued identification document (National ID card, passport, or birth certificate).
• Contact data: Email address, mobile phone number (including your registered bKash, Nagad, or Rocket number), and residential address including city (e.g., Dhaka, Chittagong, Sylhet) and postal code.
• Account credentials: Your chosen username and a hashed version of your password. We never store your password in plain text.
• KYC documents: Scanned or photographed copies of identity documents submitted for Know Your Customer (KYC) verification, including National ID cards, passports, utility bills, and bank statements used as proof of address.
• Financial data: Payment method details including your bKash account number, Nagad account number, Rocket number, Upay account, or bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other supported institutions). We do not store full card numbers — only masked identifiers and transaction references.
• Communication data: Any messages, enquiries, or complaints you send to the viptaka21 support team via email or live chat, including timestamps and resolution notes.

1.2 Information Collected Automatically

When you access viptaka21 through a web browser or mobile device, certain technical information is collected automatically by our systems. This data is used primarily for security monitoring, fraud prevention, platform performance analysis, and responsible gaming purposes:

• Device and browser data: Device type (mobile, tablet, desktop), operating system and version, browser type and version, screen resolution, and device language settings.
• Network data: IP address, internet service provider (ISP), approximate geographic location derived from IP address (country, city), and time zone (Bangladesh Standard Time, UTC+6).
• Session data: Login timestamps, session duration, pages visited, game titles accessed, bet amounts placed, and in-session navigation patterns.
• Cookies and tracking technologies: See Section 4 (Cookies & Tracking) for full details.

1.3 Information From Third Parties

viptaka21 may receive personal data about you from third parties in the following contexts:

• Payment processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a Bangladesh bank, the payment processor confirms the transaction status, the registered account holder name, and the transaction reference number. This confirmation is used to match the payment to your viptaka21 account.
• Identity verification services: Third-party KYC verification services may cross-reference the documents you submit against official databases to confirm authenticity. These services operate under their own data protection obligations.
• Game providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share session-level data (game ID, bet amount, outcome, RTP session) with viptaka21 for reconciliation and dispute resolution purposes. No sensitive personal data beyond a session token or player ID is shared with game providers.
• Fraud prevention partners: Anti-fraud and AML screening services may provide risk scores or flags associated with specific payment methods or IP addresses, which viptaka21 uses to assess transaction risk.

The table below summarises the primary purposes for which viptaka21 processes your personal data, the category of data involved, and the legal basis for that processing:

2.1 Responsible Gaming Use of Data

viptaka21 uses session data, betting frequency, deposit patterns, and self-declared responsible gaming preferences to monitor for signs of problem gambling behaviour. If our systems detect patterns that suggest a player may be experiencing gambling-related harm — such as significantly increased bet sizes, extended session durations without breaks, or rapid deposit-and-loss cycles — our responsible gaming team may proactively reach out to the affected player. This processing is carried out in the interest of player welfare and is not used for any commercial profiling purpose. For more information, visit our Responsible Gaming page.

2.2 Marketing Communications

viptaka21 will only send promotional emails or SMS messages — including notifications about new games, bonus offers, BPL season promotions, Eid special offers, or Pohela Boishakh campaigns — if you have explicitly opted in to receive such communications during registration or through your account settings. You may withdraw your marketing consent at any time by contacting support or adjusting your notification preferences in your account. Withdrawal of marketing consent does not affect the processing of your data for operational purposes.

2.3 Automated Decision-Making

viptaka21 uses automated systems to assess transaction risk, flag potentially fraudulent account activity, and determine bonus eligibility. Where an automated decision significantly affects your account — such as a temporary account hold triggered by a fraud flag — you have the right to request human review of that decision by contacting our support team. viptaka21 does not make any entirely automated decisions regarding account closure without human review of the supporting evidence.

viptaka21 shares your personal data with third parties only in the following defined circumstances:

3.1 Payment Service Providers

To process deposits and withdrawals, viptaka21 shares the minimum necessary personal data (name, registered mobile number or bank account identifier, and transaction amount in Bangladeshi Taka) with our integrated payment partners including bKash, Nagad, Rocket, Upay, and the relevant Bangladesh banking partners. These providers act as independent data controllers under their own privacy policies and are subject to Bangladesh financial regulations.

3.2 Game Technology Providers

Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Play'n GO, and Ezugi) receive a session token and anonymised player identifier when you launch their games. This allows the provider to load the correct game session and record the outcome for reconciliation purposes. Full identity data is not shared with game providers.

3.3 KYC and Compliance Vendors

viptaka21 uses third-party identity verification and AML screening services to fulfil its KYC obligations. These vendors process the documents you submit (NID, passport, proof of address) to verify authenticity and check against relevant watchlists. These vendors are contractually bound to use your data only for the verification purpose and to maintain appropriate data security standards.

3.4 Legal and Regulatory Authorities

viptaka21 will disclose personal data to law enforcement agencies, financial intelligence units, courts, or other competent government authorities when required to do so by a valid legal order, warrant, or regulatory obligation. In such cases, viptaka21 will disclose only the data specifically required by the authority and will, where legally permitted to do so, notify the affected player of the disclosure.

3.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of viptaka21's business, player personal data held by viptaka21 may be transferred to the acquiring or successor entity as part of the transaction. Players will be notified of any such transfer via their registered email address in advance, and the successor entity will be required to honour the commitments made in this Privacy Policy.

3.6 No Cross-Border Transfers Without Safeguards

Where any of viptaka21's technology vendors or service providers process data outside Bangladesh, viptaka21 ensures that appropriate contractual safeguards are in place to protect the privacy and security of that data at a standard equivalent to the protections described in this Privacy Policy.

4.1 What Are Cookies

Cookies are small text files that a website stores on your device (computer, phone, or tablet) when you visit. They allow the website to remember your preferences, keep you logged in between pages, and collect usage statistics. Similar technologies include web beacons, pixel tags, and local storage objects, all of which operate in a comparable fashion.

4.2 Cookies Used by viptaka21

4.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to block third-party cookies, clear existing cookies, or receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will prevent you from logging in to your viptaka21 account and using core platform features. Instructions for managing cookies in the most common browsers are available through each browser's official help documentation.

4.4 No Third-Party Advertising Cookies

viptaka21 does not use third-party advertising networks, ad exchanges, or retargeting services that place tracking cookies on your device for the purpose of serving targeted advertisements on other websites. The cookies used by viptaka21 are limited to the operational and analytical categories described above.

5.1 Active Account Data

While your viptaka21 account remains active, we retain all personal data associated with it — including identity data, financial transaction records, KYC documents, and session history — for the purposes of ongoing account management, transaction reconciliation, and regulatory compliance.

5.2 Post-Closure Retention

Following the closure of a viptaka21 account — whether voluntary, by self-exclusion, or by viptaka21 — personal data is retained for a minimum period of five (5) years. This retention period is required to comply with anti-money-laundering (AML) record-keeping obligations, to support the resolution of any outstanding disputes, and to honour self-exclusion restrictions (which must be enforced even if a player attempts to re-register). After the applicable retention period, data is securely deleted or anonymised in accordance with industry-standard data destruction protocols.

5.3 Marketing Data

If you have opted in to marketing communications, your contact details and communication preference are retained for as long as your account is active and you remain opted in, plus a reasonable period after opt-out to ensure suppression lists are maintained and you are not inadvertently contacted again.

5.4 Technical and Log Data

Server logs, IP address records, and session event logs are retained for a minimum of twelve (12) months for security monitoring and fraud investigation purposes. Aggregated, anonymised analytics data (which cannot be used to identify individual players) may be retained indefinitely for platform performance analysis.

6.1 Encryption in Transit and at Rest

All data transmitted between your device and the viptaka21 platform is encrypted using TLS 1.2 or higher, enforced via a 256-bit SSL certificate. Sensitive data stored in our databases — including identity documents, financial records, and hashed passwords — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect and rotated on a regular schedule.

6.2 Access Controls

Access to personal data within viptaka21's internal systems is restricted on a strict need-to-know basis using role-based access controls. Customer-facing support staff can access only the data required to respond to your specific enquiry. Access to sensitive KYC documents and financial records is further restricted to compliance and finance team members, with all access events logged for audit review. Administrative access requires multi-factor authentication (MFA).

6.3 Fraud and Intrusion Detection

viptaka21 operates continuous automated monitoring for suspicious login attempts, unusual transaction patterns, account takeover indicators, and network-level intrusion attempts. Alerts are reviewed by our security team and investigated promptly. Players are notified of any confirmed or strongly suspected unauthorised access to their account via their registered email address and mobile number.

6.4 Vulnerability Management

The viptaka21 platform undergoes regular security assessments, including penetration testing and vulnerability scanning, conducted by qualified third-party security specialists. Identified vulnerabilities are prioritised and remediated in accordance with their severity rating. Critical security patches are applied on an emergency basis without waiting for scheduled maintenance windows.

6.5 Reporting a Security Concern

If you believe you have discovered a security vulnerability in the viptaka21 platform, or if you suspect that your account has been accessed without your authorisation, please contact our support team immediately using the email address displayed in the footer of this page. We treat all security reports seriously and aim to acknowledge receipt within 24 hours (Bangladesh Standard Time).

7.1 Right of Access

You have the right to request a copy of the personal data that viptaka21 holds about you. We will provide this information within a reasonable period following identity verification. The response will include the categories of data held, the purposes for which it is processed, and the third parties with whom it has been shared.

7.2 Right to Rectification

If any personal data held by viptaka21 is inaccurate or incomplete, you have the right to request that it be corrected. For standard contact details (email address, mobile number, residential address), updates can be made through your account settings or by contacting support. For identity data that forms part of your KYC record, updated documentation will be required to effect the change.

7.3 Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent for marketing processing. However, viptaka21 may be unable to comply with an erasure request where retention is required by law (e.g., AML record-keeping obligations) or where the data is necessary to resolve an outstanding dispute or enforce our Terms & Conditions.

7.4 Right to Restrict Processing

You may request that viptaka21 restrict the processing of your personal data in specific circumstances — for instance, while a data accuracy dispute is being investigated, or where you have objected to processing based on legitimate interest and the objection is under review. During a processing restriction, viptaka21 will continue to store your data but will not actively use it for the purposes you have disputed.

7.5 Right to Object

Where viptaka21 processes your data on the basis of legitimate interest — such as platform analytics or fraud prevention profiling — you have the right to object to that processing. viptaka21 will review the objection and cease the contested processing unless it can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

7.6 Right to Data Portability

For data that you provided to viptaka21 and that is processed on the basis of your consent or a contract, you have the right to receive that data in a structured, commonly used, machine-readable format. This right applies to data such as your registration details and transaction history, but not to data that was generated internally by viptaka21 (e.g., risk scores or internal compliance notes).

7.7 How to Exercise Your Rights

To exercise any of the rights described above, please contact the viptaka21 support team using the email address displayed in the footer of this page. Include your full name, registered email address, and a clear description of the right you wish to exercise. We will acknowledge your request within 72 hours and aim to fulfil it within 30 calendar days. Identity verification is required before any personal data is disclosed or modified in response to a rights request.

8.1 How We Notify You of Changes

When material changes are made to this Privacy Policy — such as changes to the categories of data collected, new third-party sharing arrangements, or significant changes to retention periods — viptaka21 will notify active players via their registered email address and display a prominent notice on the platform for a reasonable period before the changes take effect. The "Last updated" date at the top of this page will always reflect the date on which the current version became effective. We encourage players to review this page periodically so they remain informed about how viptaka21 protects their data.

8.2 Minor Updates

Non-material updates — such as clarifications of existing practices, correction of typographical errors, or minor restructuring of this document for readability — may be made without advance notice to players. The revised date will still be updated to reflect any change, however minor.

8.3 Continued Use as Acceptance

Your continued use of the viptaka21 platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any change to this Privacy Policy, you have the right to close your account and request deletion of your data in accordance with Section 7.3 above, subject to applicable legal retention requirements.

8.4 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by viptaka21, please contact our support team. Our email address is displayed in the footer of every page on this site. We aim to respond to all privacy-related enquiries within one (1) business day (Bangladesh Standard Time, UTC+6). For formal rights requests, please allow up to 30 calendar days for full resolution as described in Section 7.7.