vpbat Privacy
Policy

vpbat collects personal data that is necessary to provide you with a safe, functional, and compliant online betting and casino experience. The categories of information we collect and the circumstances in which we collect them are described below.

1.1 Information You Provide Directly

When you register an account on vpbat, you provide us with information including your full legal name, date of birth, residential address (city and district within Bangladesh), mobile phone number, and email address. During the KYC identity verification process, you may also submit copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence, as well as screenshots or confirmation details for your registered payment method (bKash, Nagad, Rocket, bank account, or card). If you contact vpbat support, we retain records of those communications including the content of chat transcripts and emails.

1.2 Information Collected Automatically

When you access the vpbat platform, certain technical data is collected automatically by our systems. This includes:

• Your device's IP address and approximate geographic location (country and city level).
• Device type, operating system, browser type and version.
• Pages visited on the vpbat platform, time and duration of visits, clickstream data, and navigation paths.
• Login timestamps, session identifiers, and activity logs.
• Betting history, game participation records, deposit and withdrawal transaction logs, and account balance history.

1.3 Payment Information

vpbat does not store full card numbers or mobile banking PINs. Payment transactions are processed through secure third-party payment gateways and mobile money operators including bKash, Nagad, Rocket, Upay, and partner banks. vpbat retains transaction reference numbers, transaction amounts in BDT, timestamps, and the registered name associated with the payment method for compliance and reconciliation purposes.

1.4 Information from Third Parties

In certain circumstances, vpbat may receive information about you from third parties. This includes identity verification results returned by our KYC service partners, fraud screening alerts from payment processors, and geolocation data provided by network infrastructure services. vpbat uses this information solely for the purposes described in this Privacy Policy.

vpbat uses the personal data we collect for the following purposes. We process your data only where we have a lawful basis to do so, which includes the performance of our contract with you, compliance with legal obligations, our legitimate business interests, and in some cases your explicit consent.

2.1 Marketing Communications

vpbat may send you promotional emails or notifications about bonuses, new games, and seasonal offers (such as BPL cricket promotions or Eid special offers) if you have opted in to receive marketing communications during registration or via your account settings. You may opt out of marketing communications at any time by updating your account preferences or by contacting the support team at [email protected]. Opting out of marketing does not affect transactional communications related to your account, deposits, withdrawals, or security alerts.

2.2 Automated Decision-Making

vpbat may use automated systems to flag accounts for review based on patterns associated with fraud, multi-accounting, bonus abuse, or unusual betting activity. Where an automated flag results in an account restriction, you have the right to request a manual review by our compliance team by contacting [email protected] with your account details and the nature of your query.

vpbat shares your personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Service Providers

vpbat engages trusted third-party service providers to assist in operating the platform. These include KYC identity verification providers, payment processing partners (bKash, Nagad, Rocket, Upay, and partner banks including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank), cloud infrastructure and hosting providers, fraud detection and cybersecurity services, and customer support platform operators. All service providers are bound by data processing agreements that restrict the use of your data to the specific service being provided and prohibit further disclosure.

3.2 Game Providers

The casino games available on vpbat are supplied by licensed third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and anonymised player identifier to facilitate gameplay. They do not receive your full name, NID details, or payment information. Game round data and outcomes are returned to vpbat for wallet settlement.

3.3 Legal and Regulatory Disclosure

vpbat may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorities where required or permitted by applicable law. This includes compliance with anti-money laundering (AML) reporting obligations, responding to valid legal process (such as court orders or warrants), and cooperating with investigations into fraud, match-fixing, or other illegal activity. vpbat will notify you of any such disclosure where legally permitted to do so.

3.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the vpbat business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy terms applicable to your data following the transfer before the change takes effect.

vpbat uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and analyse how the platform is used. A cookie is a small text file stored on your device by your browser when you visit a website.

4.1 Types of Cookies Used

4.2 Third-Party Cookies

vpbat does not use third-party advertising or retargeting cookies. Analytics cookies used on the platform are configured to anonymise IP addresses and do not allow third-party providers to identify you individually. Game providers may set functional cookies within their embedded game windows solely to manage game session state.

4.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for specific websites. Please note that disabling strictly necessary cookies will prevent the vpbat platform from functioning correctly — you will not be able to log in, place bets, or access your account wallet if session cookies are blocked.

5.1 Security Measures

vpbat implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest (including KYC documents and payment details), multi-factor authentication options for account access, role-based access controls restricting internal staff access to personal data, regular security audits and vulnerability assessments, and intrusion detection systems monitoring platform infrastructure around the clock.

5.2 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights or interests, vpbat will take immediate steps to contain the breach, assess its scope and impact, and notify affected users by email as soon as reasonably practicable. The notification will describe the nature of the breach, the categories of data affected, the steps vpbat has taken in response, and any recommended actions you should take to protect yourself.

5.3 Your Responsibility

While vpbat takes all reasonable steps to protect your data, you also play an important role in keeping your account secure. You are responsible for maintaining the confidentiality of your vpbat username and password, not sharing your login credentials with any other person, logging out of your account after each session especially on shared devices, and notifying vpbat immediately at [email protected] if you suspect that your account has been accessed without your authorisation.

As a vpbat user, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact the vpbat support team at [email protected] with your registered account details and a clear description of your request. vpbat will respond to all rights requests within a reasonable timeframe and, where applicable, will require identity verification before processing the request.

6.1 Right of Access

You have the right to request a copy of the personal data vpbat holds about you. This includes your account registration details, KYC records, transaction history, and support communications. We will provide this information in a clear, structured format.

6.2 Right to Rectification

If any personal data held by vpbat is inaccurate, incomplete, or out of date, you have the right to request that it be corrected. Corrections to your registered name require supporting KYC documentation to ensure account security and AML compliance.

6.3 Right to Erasure

You may request that vpbat delete your personal data. vpbat will fulfil erasure requests subject to legal retention obligations — in particular, transaction records, KYC documents, and AML-related data must be retained for the minimum period required by applicable regulations before deletion can be completed. Once the retention period has elapsed, data will be securely deleted or anonymised.

6.4 Right to Restrict Processing

You have the right to request that vpbat restrict the processing of your personal data in certain circumstances, such as while a dispute over data accuracy is being resolved or where you have objected to processing based on legitimate interest.

6.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format. You may also request that vpbat transmit this data directly to another service provider where technically feasible.

6.6 Right to Object

You have the right to object to the processing of your personal data where vpbat relies on legitimate interest as the legal basis. This includes objecting to the use of your data for marketing communications, which you may opt out of at any time through your account settings or by emailing [email protected].

vpbat retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account registration data — retained for the duration of the account and for a minimum of five years following account closure, in accordance with AML record-keeping requirements.
• KYC identity documents — retained for a minimum of five years from the date of submission or the date of account closure, whichever is later.
• Transaction records (deposits, withdrawals, bets) — retained for a minimum of five years from the date of each transaction.
• Support correspondence — retained for three years from the date of the most recent communication in a support case.
• Cookie and analytics data — anonymised analytics data is retained for up to 24 months. Session cookies are deleted when you close your browser.
• Marketing preference records — retained for as long as your account is active, or until you withdraw consent, whichever is earlier.

After the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. vpbat reviews its data retention practices periodically to ensure they remain consistent with this Privacy Policy and applicable legal requirements.

8.1 Updates to This Privacy Policy

vpbat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, the "Last Updated" date at the top of this page will be revised and, where the changes are significant, registered users will be notified by email. We encourage you to review this Privacy Policy periodically to stay informed about how vpbat protects your data. Your continued use of the vpbat platform following any update constitutes your acceptance of the revised Privacy Policy.

8.2 How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data vpbat holds about you, please contact the vpbat data team at:

8.3 Children's Privacy

The vpbat platform is strictly intended for adults aged 18 and above. vpbat does not knowingly collect personal data from anyone under the age of 18. If you believe that a person under 18 has registered an account or provided personal data to vpbat, please contact us immediately at [email protected]. Upon confirmation, vpbat will close the account and delete all associated personal data without undue delay. 18+