Privacy Policy – Your Data Protection & Rights at vipvip

Vipvip collects different types of data in different situations. Full details are provided below:

Information collected during registration

• Identity Information: Full name, date of birth, gender.
• Contact Details: Email address, mobile number, residential address.
• Login Credentials: Username and encrypted password. Passwords are never stored in plain text.

Information collected during KYC verification

• Scanned copy of National ID (NID), passport, or driving licence.
• A utility bill or bank statement for address verification.
• A selfie or photo may be required where necessary.

Data Collected Automatically While Using the Platform

• IP address and approximate geographic location.
• Device type, operating system, and browser version.
• Session duration, pages visited, and click patterns.
• Betting history, win/loss records, and transaction details.

Data Collected During Payment

• Payment method type (bKash, Nagad, Rocket, Bank).
• Transaction amount and timestamp.
• Phone number or account details associated with your payment method. Full card numbers or PINs are never stored.

Vipvip uses your data only for specific, legitimate purposes. It is never used for anything outside the scope listed here.

Vipvip does not sell your data to third parties. In limited circumstances, certain information may be shared with specific third parties — only to the extent necessary to provide the service.

Service Provider Partners

Only the minimum necessary data is shared with selected technology partners for payment processing, IT infrastructure, customer support software, and KYC verification services. These partners operate under strict data protection agreements and are not permitted to use the data for any other purpose.

Legal Authority

Vipvip is legally required to disclose information to authorities when mandated by a court order, regulatory request, or anti-money laundering laws. Where possible, members will be notified in advance.

Licensing Authority

Certain aggregated, non-personal data is provided to the licensing authority as part of regular audits required to maintain vipvip's gaming license.

When you use the vipvip website or app, certain cookies and similar technologies (such as local storage and session tokens) are stored on your device.

Cookie Types

• Essential Cookies: Maintaining login sessions and ensuring platform security. These cookies are essential for the platform to function and cannot be disabled.
• Functional Cookies: For language preferences, theme settings, and other personalized experience options.
• Analytics Cookies: Data on which pages are visited most and where issues arise is analyzed in aggregate to improve the platform.

Cookies can be blocked or deleted through your browser settings, though disabling essential cookies may cause certain features to stop working. In-app cookie management can be controlled through your device's app permission settings.

Vipvip has implemented both technical and organizational measures to protect your personal data.

Technical Safeguards

• 256-bit SSL/TLS encryption on all communications.
• Passwords are stored using bcrypt hashing — no one can view your actual password, including vipvip staff.
• Financial data is stored on separate, encrypted servers.
• Real-time Intrusion Detection System (IDS).
• Regular security audits and penetration testing.

Organizational Safeguards

• Only authorized personnel can access specific categories of data, based on role-based access controls.
• All staff receive regular training on data protection practices.
• In the event of a suspected data breach, affected members will be notified within 72 hours.

That said, no one can guarantee 100% security on the internet. On your end, use a strong password, keep two-factor authentication (2FA) enabled, and avoid logging into your account over public Wi-Fi.

Vipvip does not retain your data indefinitely. Each category of data has a defined retention period.

• Account & Identity Information: For the full duration your account is active. After closure, generally up to 5 years in line with regulatory requirements.
• KYC Documents: 5 years after account closure, as required under anti-money laundering regulations.
• Transaction & Betting History: 5 years after account closure – for financial audit purposes.
• Customer Support Records: 2 years after a support ticket is closed.
• Session & Device Logs: 90 days.
• Marketing Consent Records: 3 years after opt-out – retained for legal evidence purposes.

Once the retention period ends, data is securely deleted or anonymized so it can no longer be linked back to you.

You have several rights regarding your personal data. vipvip respects these rights and will assist you in exercising them.

Vipvip does not knowingly collect any information from individuals under the age of 18. All users confirm at the point of registration that they are 18 years of age or older.

If we are informed that a minor's data has been collected inadvertently, that data will be deleted and the account will be closed as soon as possible.

Vipvip may update this Privacy Policy from time to time. When changes are made:

• The "Last Updated" date at the top of this page will be revised accordingly.
• For significant changes, advance notice will be sent to your registered email at least 14 days beforehand.
• Continued use of the platform after changes take effect will be considered acceptance of the updated policy.

If you do not agree to the updated policy, you may request to close your account and, provided your KYC verification is complete, withdraw any remaining balance.

For any privacy-related questions, complaints, or requests to exercise your rights, please contact us:

• Email: support@vipvip.my
• Live Chat: After logging into the platform, use the chat button in the bottom-right corner.
• Support Hours: 24/7, seven days a week.

When emailing us, including "Privacy Policy Inquiry" in the subject line will help route your message to the right team faster. All requests must be sent from your registered email address for account verification purposes.