vip333 Privacy Policy — How We Protect Your Data

vip333 operates the online betting and casino platform available at https://vip333.bio (the "Platform"). We are committed to protecting the privacy and personal data of every player who accesses or uses the Platform. This Privacy Policy describes the types of personal information we collect, the purposes for which we use it, the circumstances under which we may share it, and the rights available to you in relation to your data.

This Privacy Policy applies to all users of the vip333 Platform, including registered players, visitors who browse without registering, and any individual who contacts our customer support team. It covers data collected through the Platform website, any mobile-optimised version, and all communications between you and vip333 including live chat, email, and promotional messaging.

References to "vip333", "we", "us", or "our" throughout this document refer to the operator of the vip333 Platform. References to "you" or "your" refer to any individual whose personal data is processed in connection with the Platform. "Personal data" means any information that identifies or could reasonably identify a living individual.

This Privacy Policy should be read alongside the vip333 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. Capitalised terms not defined here carry the meanings given to them in the Terms & Conditions.

We collect personal data in several ways: directly from you when you register, make a deposit, contact support, or respond to a promotion; automatically when you use the Platform through cookies and technical logging; and from third-party verification and payment service providers where necessary to fulfil our legal obligations.

Registration & Identity Data

• Full legal name, date of birth, and gender
• Email address, phone number, and residential address
• National identification number or passport details (collected during KYC verification)
• Selfie or photograph submitted as part of identity verification
• Username and encrypted password

Financial & Transaction Data

• bKash, Nagad, Rocket, or Upay mobile wallet account numbers (masked after verification)
• Deposit and withdrawal history including amounts in BDT, timestamps, and transaction reference numbers
• Bank account details where submitted for bank-transfer withdrawals
• Bonus redemption and wagering history

Usage & Behavioural Data

• Game sessions played, Wagers placed, odds accessed, and betting history
• Pages visited, time spent on each section, and click-path data
• Search queries entered within the Platform
• Session duration and login/logout timestamps (recorded in BST, UTC+6)

Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Unique device identifiers and mobile advertising IDs
• Cookie identifiers and local storage data (see Section 6)

Communications Data

• Content of live chat conversations with our support team
• Emails sent to and received from [email protected]
• Responses to surveys, promotions, or feedback requests
• Responsible gaming self-assessment responses and exclusion requests

vip333 processes personal data only for specific, explicit, and legitimate purposes. We do not use personal data in ways that are incompatible with the purposes stated at the time of collection. The table below summarises our primary processing purposes and the categories of data used for each.

Where vip333 uses personal data for direct marketing (such as promotional emails about bonuses tied to the BPL, IPL, Eid, or Pohela Boishakh), we will only do so with your consent, which you may withdraw at any time by contacting our support team or using the unsubscribe link in any marketing email.

vip333 processes personal data only where a valid legal basis exists. Depending on the specific purpose, we rely on one or more of the following legal bases:

• Contractual Necessity: Processing is required to perform the contract between you and vip333 — specifically, to register your Account, process your transactions, and deliver the gaming and betting services you have requested. Without this processing, we cannot provide the Platform to you.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including anti-money laundering (AML) rules, know-your-customer (KYC) requirements, and fraud prevention regulations. These obligations require us to collect and retain certain data regardless of your preference.
• Legitimate Interests: Processing is necessary for the legitimate interests of vip333, provided those interests are not overridden by your rights and interests. Legitimate interests include Platform security, fraud detection, responsible gaming monitoring, and internal analytics for service improvement.
• Consent: For direct marketing communications and non-essential cookies, we rely on your freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of processing already carried out before withdrawal.

Where we rely on legitimate interests as the legal basis, we carry out a balancing assessment to confirm that our interests do not override your fundamental rights. You may request details of that assessment by contacting our support team.

vip333 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share personal data only in the specific, limited circumstances described below, and only to the extent necessary for the relevant purpose.

Service Providers & Data Processors

We engage trusted third-party service providers who process personal data strictly on our behalf and under our written instructions. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and international card network operators (Visa, Mastercard) to facilitate deposits and withdrawals in BDT
• KYC/identity verification providers: Third-party services that verify the authenticity of identity documents and perform age verification checks
• Fraud prevention and AML screening services: Providers that screen transactions and account activity against sanctions lists and fraud databases
• Cloud infrastructure and hosting providers: Providers that host Platform servers and databases under strict security agreements
• Customer support software providers: Live chat and ticketing platform operators who process support communications on our behalf
• Analytics providers: Services that process aggregated, pseudonymised usage data to help us understand Platform performance

Legal & Regulatory Disclosure

We may disclose personal data to government authorities, law enforcement agencies, courts, or regulators where we are required to do so by law, court order, or formal legal process. We may also proactively disclose information where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of any person, or protect the rights and property of vip333.

Business Transfers

In the event that vip333 undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by the Platform may be transferred to the acquiring entity as part of that transaction. We will notify affected players via a prominent notice on the Platform in advance of any such transfer where reasonably practicable.

vip333 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the Platform, enhance your experience, maintain session security, and analyse usage patterns. The following categories of cookies are in use on the Platform:

vip333 does not use third-party advertising or retargeting cookies. You may control functional and analytics cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to the Platform. Clearing cookies on a shared or public device is strongly recommended to protect your Account security.

vip333 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes without constituting personal data processing.

vip333 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. These measures are reviewed and updated regularly in line with industry best practices.

• Encryption in Transit: All data transmitted between your device and vip333 servers is protected using 256-bit TLS/SSL encryption. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive data fields including passwords (stored as salted hashes), payment account numbers, and KYC document images are encrypted at rest on Platform servers.
• Access Controls: Internal access to personal data is restricted to authorised staff on a strict need-to-know basis. All internal access events are logged and audited.
• Two-Factor Authentication (OTP): vip333 supports one-time password (OTP) verification for account login and high-value withdrawal requests to reduce the risk of unauthorised account access.
• Intrusion Detection: Automated systems monitor Platform infrastructure 24/7 for anomalous activity indicative of a security breach or cyberattack.
• Penetration Testing: vip333 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Data Minimisation: We collect only the minimum personal data necessary for each specific processing purpose, reducing the potential impact of any security incident.

In the event of a personal data breach that poses a risk to affected individuals, vip333 will notify relevant parties in accordance with applicable law and will take prompt steps to contain the breach, assess its impact, and prevent recurrence. If you believe your Account has been compromised, please contact our 24/7 support team immediately via live chat.

As a player on the vip333 Platform, you hold meaningful rights over your personal data. These rights are exercisable by contacting our support team at [email protected]. We will respond to all verified rights requests within 30 calendar days of receipt. The following rights are available to you:

To exercise any of the above rights, contact our support team via live chat or email at [email protected]. We may need to verify your identity before processing a rights request to ensure the security of your data. We will not charge a fee for reasonable rights requests; however, we reserve the right to charge a reasonable administrative fee or decline manifestly unfounded or excessive requests.

The vip333 Platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the Account registration and KYC process, and any Account found to belong to a person under 18 years of age will be immediately suspended and all personal data associated with that Account will be deleted as promptly as technically possible, subject to any legal obligations to retain specific records.

If you are a parent or guardian and believe that a minor in your care has registered an Account on vip333, please contact our support team immediately at [email protected]. We will investigate and act promptly. vip333 cooperates fully with parental notification requests relating to underage Account registrations.

The vip333 Platform may reference or display the names and logos of third-party game providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe solely for the purpose of identifying available games. vip333 does not include outbound links to third-party websites in its main navigation or content areas.

Where game content is delivered via an embedded frame or integrated API from a third-party game studio, that studio's own privacy practices govern the processing of any data handled directly within their game engine environment. vip333 is not responsible for the privacy practices of third-party game studios or payment network operators beyond the obligations imposed on them through our data processing agreements.

If you have questions about how a specific game provider handles data within their gaming environment, we recommend reviewing that provider's published privacy documentation. vip333 selects game providers that meet industry-standard data protection requirements as a condition of our commercial partnerships.

vip333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When a material change is made, we will notify registered players by displaying a prominent notice on the Platform homepage and, where technically feasible, by sending a notification to the email address registered to your Account.

The updated Privacy Policy will become effective on the date stated at the top of the revised document. Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Privacy Policy, you must cease using the Platform and may request Account closure by contacting our support team.

We recommend that you review this Privacy Policy periodically to stay informed about how vip333 protects your personal data. The current version will always be accessible at https://vip333.bio/privacy-policy. The version history and effective date of each revision are recorded internally and available on request.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vip333 processes your personal data, please contact our support team using any of the methods below. We aim to acknowledge all privacy-related enquiries within 48 hours (BST, UTC+6) and to resolve them fully within 30 calendar days.

Please include your registered Account username and a clear description of your request when contacting us, so we can verify your identity and handle your enquiry efficiently. Do not include your full password or payment account PIN in any communication — our team will never ask for these.