Vipta Privacy Policy — Your Data, Our Responsibility

1. Introduction

Vipta is a trusted online entertainment and betting platform in Bangladesh. We place the highest priority on protecting the personal data of our users. This Privacy Policy explains how Vipta collects, uses, and safeguards your information.

Our Privacy Policy is built in accordance with international data protection standards (GDPR-inspired principles) and aligns with Bangladesh's Digital Security Act 2018 and the Information & Communication Technology Act. Vipta processes user data in full compliance with these frameworks.

By accessing the Vipta platform, creating an account, placing bets, or using any of our services, you agree to all the terms of this Privacy Policy. If you do not agree with any part of this policy, please refrain from using Vipta.

2. What Information We Collect

Vipta only collects the information needed to deliver our services — nothing more. Below is a detailed breakdown of what we collect.

Beyond the above, Vipta does not collect any sensitive information such as religion, political opinions, or health data.

3. How Collected Information Is Used

Vipta uses your data solely for the purposes listed below. Your information is never used without a clear purpose or your consent.

• Account Management: To create, verify, and maintain your account.
• Transaction Processing: To process deposits, withdrawals, and bonus payments.
• Security Verification: To prevent fraud, money laundering, and unauthorized access.
• Service Improvement: For platform analytics to improve your experience.
• Customer Support: To address your complaints or queries.
• Promotions & Offers: To send you relevant offers with your consent (with opt-out available).
• Legal Obligations: To comply with directives from government regulatory authorities.
• Responsible Gaming: To analyze your betting patterns and identify potentially problematic behavior.

4. Data Sharing & Disclosure

Vipta may share your personal data with third parties in limited circumstances, which are detailed below.

• Payment Providers: Solely to process transactions with mobile banking services such as bKash, Nagad, and Rocket.
• Identity Verification Services: With authorized third-party verification services to complete the KYC process.
• Law Enforcement: As required by legal orders or court directives issued by the Government of Bangladesh.
• Regulatory Authority: When required by the National Board of Revenue (NBR) or other regulatory authorities.
• Anti-Money Laundering: Upon request by the Bangladesh Financial Intelligence Unit (BFIU) in connection with the prevention of financial crime.

Outside of the cases above, Vipta does not share your information with any other party. Any data shared with third parties is strictly limited to the minimum necessary for the purpose.

5. Cookie Policy

Cookies are small text files stored in your browser. Vipta uses the following types of cookies.

You can manage cookies at any time through your browser settings. However, disabling essential cookies may prevent Vipta from functioning properly. Vipta does not use any third-party advertising cookies.

6. Data Security Measures

Vipta has implemented industry-standard technical and organizational measures to protect your data. Our full security framework is outlined in detail below.

• TLS 1.3 / SSL 256-bit Encryption: All data transfers occur through encrypted channels.
• Two-Factor Authentication (2FA): OTP verification adds an extra layer of security to your account.
• Firewall & Intrusion Detection: 24/7 monitoring to prevent unauthorized access.
• Data Masking: Sensitive portions of financial information and identity documents are masked.
• Regular Security Audits: Annual penetration testing conducted by third-party security specialists.
• Employee Training: All Vipta employees are trained in data protection and are bound by confidentiality agreements.
• Data Breach Notification: In the event of a data breach, affected users will be notified within 72 hours.

7. Your Privacy Rights

As a Vipta user, you have the following rights over your personal data. To exercise any of these rights, please reach out to our support team.

To exercise these rights support@vipta.ws Send us an email at the address provided. We'll get back to you within 7 business days.

8. Data Retention Period

Vipta retains your information only for as long as necessary. Any data that is no longer needed is securely deleted.

• Active Account: All information is retained for as long as your account remains active.
• Closed Account: Data is retained for up to 5 years after account closure due to legal obligations.
• Transaction Records: Financial transaction records are retained for up to 7 years.
• KYC Documents: Identity verification documents are retained for 5 years.
• Log Files: Server logs are retained for a maximum of 90 days.
• Cookie Data: Deleted automatically when the cookie expires.

Once the retention period ends, data is permanently and securely destroyed in a way that makes recovery impossible.

9. Protection of Minors

Vipta strictly prohibits anyone under the age of 18 from creating an account or using the platform. We do not collect data from minors.

• Age is verified at the time of registration.
• In cases of doubt, a birth certificate or national ID may be requested.
• If an account belonging to a minor is identified, it is immediately suspended and all associated data is deleted.
• Parents are encouraged to ensure their children do not use Vipta.

10. Contact & Complaints

For any questions, requests, or complaints regarding this Privacy Policy, please contact our Data Protection team.

• Email: support@vipta.ws
• Response Time: Within 7 Business Days
• Data Protection Officer (DPO): dpo@vipta.ws
• Office Hours: Sun–Thu, 9:00 AM – 9:00 PM (BST)

If this Privacy Policy is updated, we will notify you by email or through the platform. The latest version will always be available on this page.