vip15 Privacy Policy
— Your Data, Our Responsibility
At vip15, the privacy and security of every player in Bangladesh is a top priority. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your information. We handle your data with the same level of care we bring to every aspect of the vip15 platform.
256-bit SSL Encryption
Every piece of data transmitted between your device and the vip15 platform is protected by industry-standard 256-bit SSL encryption. Your login credentials, personal details, and payment data are never sent in plain text.
No Unauthorised Data Sale
vip15 does not sell, rent, or trade your personal information to third-party advertisers or data brokers. Your data is used exclusively to operate and improve the vip15 platform and to comply with legal obligations.
Minimal Data Collection
We collect only the information that is genuinely necessary to provide you with a safe, verified, and personalised gaming experience on vip15. We do not collect data speculatively or beyond what is required for KYC, payment processing, and platform security.
Segregated Data Storage
Player personal data and financial records are stored in segregated, access-controlled environments. Only authorised vip15 personnel with a legitimate operational need may access your personal information.
KYC & AML Compliance
Data collected during the Know Your Customer verification process is handled strictly in accordance with anti-money laundering obligations. Verification documents are reviewed by trained staff and stored securely for the legally required retention period.
Your Right to Access & Erasure
Players have the right to request a copy of all personal data vip15 holds about them, and to request deletion of that data subject to applicable legal retention requirements. Submit requests to [email protected] at any time.
Information We Collect
vip15 collects personal information from players in Bangladesh in order to operate a safe, compliant, and enjoyable gaming platform. The categories of information we collect fall into three broad groups: information you provide directly, information generated automatically through your use of the platform, and information obtained from third parties for verification purposes.
The following table summarises the primary categories of personal data collected by vip15 and the reason for collection:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, NID number, passport number | Age verification, KYC compliance, account authentication |
| Contact Data | Email address, mobile number, residential address in Bangladesh | Account communications, support, notifications |
| Financial Data | bKash/Nagad/Rocket account number, bank account details, transaction history | Deposit & withdrawal processing, AML checks |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Security monitoring, fraud prevention, platform analytics |
| Usage Data | Games played, bets placed, session duration, pages visited, bonus usage | Personalisation, responsible gaming monitoring, product improvement |
| Verification Documents | Scanned NID, utility bill, bank statement, payment account screenshot | KYC identity and address verification as required by our AML obligations |
| Communications Data | Support chat logs, email correspondence, feedback submissions | Customer service, dispute resolution, quality assurance |
vip15 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data beyond what is strictly necessary for responsible gaming obligations (for example, recording a self-exclusion request). We do not collect biometric data. We do not access your device's camera, microphone, or contacts.
- Seven categories of data collected — identity, contact, financial, technical, usage, documents, communications.
- No sensitive data (health, religion, ethnicity) collected beyond RG obligations.
- No biometric data, no camera or microphone access.
- Data from minors is deleted upon discovery.
- Financial data covers bKash, Nagad, Rocket, Upay, and bank accounts used on the platform.
How We Use Your Data
vip15 processes your personal data only where there is a lawful basis for doing so. The lawful bases we rely on are: performance of a contract (operating your player account), compliance with a legal obligation (KYC, AML, tax reporting), legitimate interests (fraud prevention, platform security, responsible gaming monitoring), and consent (marketing communications where you have opted in).
The specific purposes for which vip15 uses your personal data include the following:
- Account Management: Creating, maintaining, and managing your vip15 player account, including authentication, password resets, and account security alerts.
- KYC Verification: Verifying your identity, age, and residential address in Bangladesh to comply with anti-money laundering obligations and to prevent underage gambling.
- Payment Processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank, and maintaining transaction records.
- Customer Support: Responding to your queries, resolving disputes, and providing technical assistance through the vip15 support team at [email protected].
- Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling, enforcing self-exclusion decisions, and administering deposit and loss limits.
- Fraud Prevention & Security: Detecting and preventing fraudulent activity, multiple account creation, bonus abuse, money laundering, and unauthorised access to player accounts.
- Personalisation: Tailoring game recommendations, promotional offers (such as BPL and IPL cricket betting bonuses), and VIP tier communications to your preferences and gameplay history.
- Marketing (with consent): Sending promotional emails, SMS notifications, or in-platform messages about vip15 bonuses, tournaments, and seasonal offers (Eid, Pohela Boishakh) where you have opted in to receive marketing communications.
- Legal Compliance: Retaining records as required by applicable law and cooperating with lawful requests from competent authorities in Bangladesh.
You may withdraw your consent to marketing communications at any time by contacting [email protected] or by using the unsubscribe option included in any marketing message. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal, and it does not affect our right to process your data for account management, KYC, payment, and legal compliance purposes.
- Data used for: account management, KYC, payments, support, responsible gaming, fraud prevention, personalisation, marketing (with consent), and legal compliance.
- Marketing is consent-based — opt out at any time via [email protected].
- Automated decisions affecting your account can be reviewed by a human on request.
- No data processed without a lawful basis.
Data Sharing & Third Parties
vip15 does not sell, rent, or trade your personal data to any third party for commercial or advertising purposes. We share personal data only in the specific, limited circumstances described in this section, and only with parties who are contractually obligated to handle your data with equivalent levels of security and confidentiality.
The categories of third parties with whom vip15 may share your personal data are as follows:
- Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank — solely to process your deposits and withdrawals. These providers operate under their own privacy and security frameworks.
- Identity Verification Partners: Third-party KYC and AML service providers who assist in verifying the authenticity of identity documents and screening players against sanctions lists.
- Game Software Providers: Where a game provider (such as Pragmatic Play, Evolution Gaming, Spribe, or Ezugi) requires session data to deliver their game content, a minimal dataset (player session token, currency, stake limits) is shared. No full identity data is passed to game providers.
- Technology & Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers who support the technical operation of the vip15 platform under strict data processing agreements.
- Legal & Regulatory Authorities: vip15 will disclose personal data to law enforcement agencies, courts, or regulatory bodies in Bangladesh where required to do so by a valid legal obligation, court order, or regulatory direction. vip15 will, where legally permissible, notify the affected player of such a disclosure.
- Fraud Prevention Networks: Industry fraud prevention services where sharing your data helps detect, prevent, or report financial crime or bonus abuse affecting the broader online gaming industry.
All third-party data processors engaged by vip15 are required to sign data processing agreements confirming that they will process your personal data only on vip15's documented instructions, will not use it for their own purposes, and will maintain appropriate technical and organisational security measures.
- No data sold or rented to advertisers or data brokers.
- Shared only with: payment providers, KYC partners, game providers (session data only), tech infrastructure, legal authorities, and fraud prevention networks.
- All processors sign data processing agreements.
- International transfers include contractual safeguards.
- Game providers receive session tokens only — not full identity data.
Data Security & Storage
vip15 implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures are reviewed and updated regularly to address evolving threats in the online gaming environment. The key technical and organisational measures in place include the following:
- All data transmitted between your device and the vip15 platform is encrypted using 256-bit SSL/TLS encryption, ensuring that your login credentials, personal details, and payment information cannot be intercepted in transit.
- Player passwords are stored using one-way cryptographic hashing — vip15 staff cannot retrieve your plain-text password under any circumstances.
- Personal data and financial records are stored in access-controlled, segregated database environments. Database access requires multi-factor authentication and is restricted to authorised personnel on a strict need-to-know basis.
- All vip15 staff who handle personal data undergo regular data protection training and are bound by confidentiality obligations that survive the termination of their employment or contract.
- The vip15 platform undergoes periodic security assessments including vulnerability scanning and penetration testing by independent security professionals.
- In the event of a personal data breach that poses a risk to players, vip15 will notify affected players and the relevant authorities within the timeframes required by applicable data protection law.
Player data is stored on servers located in secure data centre facilities. All storage infrastructure used by vip15 is subject to physical access controls, environmental protections (fire suppression, climate control, redundant power), and 24/7 monitoring. Backup copies of player data are encrypted and stored in geographically separate locations to ensure resilience against localised outages.
- 256-bit SSL/TLS encryption on all data in transit.
- Passwords stored as one-way cryptographic hashes — never retrievable.
- Segregated, access-controlled database environments.
- Regular penetration testing and vulnerability assessments.
- Data breach notification to players and authorities within required timeframes.
- Encrypted, geographically distributed backups.
Your Privacy Rights
As a player on the vip15 platform, you have the following rights with respect to your personal data. vip15 is committed to honouring these rights promptly and without unnecessary obstacles. To exercise any of the rights described below, please submit a written request to [email protected], clearly identifying yourself and the specific right you wish to exercise. We will respond within 30 days of receiving your request.
- Right of Access: You may request a copy of all personal data that vip15 holds about you, including the categories of data, the purposes for which it is processed, and any third parties to whom it has been disclosed.
- Right to Rectification: If any personal data vip15 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact details directly within your vip15 account settings; other corrections require a support request.
- Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. Note that erasure requests may be refused where retention is required by AML, fraud prevention, or other legal obligations.
- Right to Restriction: You may request that vip15 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or pending the outcome of an objection to processing.
- Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that vip15 provide your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.
- Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, in which case vip15 will assess whether its interests are overridden by your particular circumstances.
- Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.
- Right to Human Review: Where an automated decision has significantly affected your account, you have the right to request that the decision be reviewed by a member of the vip15 team with appropriate authority.
- Eight privacy rights: access, rectification, erasure, restriction, portability, objection, consent withdrawal, and human review.
- Respond to requests within 30 days.
- Erasure may be refused where legal retention applies (AML, fraud).
- Submit requests to [email protected] with subject "Privacy Rights Request".
- Identity verification may be required before processing requests.
Data Retention Policy
vip15 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable legal, regulatory, or contractual obligations. When data is no longer required, it is securely deleted or anonymised in accordance with our internal data disposal procedures.
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML legal obligation, fraud prevention |
| KYC Verification Documents | 5 years from date of verification | Anti-money laundering legal requirement |
| Financial Transaction Records | 7 years from transaction date | Legal and regulatory compliance |
| Customer Support Correspondence | 3 years from last interaction | Dispute resolution, legitimate interests |
| Marketing Preferences & Consent Records | Until consent withdrawn + 2 years | Proof of lawful marketing basis |
| Technical Logs (IP, session data) | 12 months | Security monitoring, fraud detection |
| Anonymised Analytics Data | Indefinite (no personal data after anonymisation) | Platform improvement, statistical analysis |
Where an account is closed at the player's request, vip15 will retain the data categories listed above for the periods specified, as required by applicable law. Active deletion of data beyond these periods may be requested under the Right to Erasure described in Section 6, subject to the legal retention limits noted above. Data held beyond the minimum legal retention period, where no other legitimate purpose applies, will be deleted within 90 days of that period expiring.
- Account & identity data: retained 5 years post-closure.
- KY C documents: 5 years from verification.
- Financial records: 7 years from transaction date.
- Technical logs: 12 months.
- Permanent self-exclusion records retained indefinitely as a safeguard.
- Data deleted within 90 days of retention period expiry.
Updates to This Policy
vip15 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the vip15 platform. All updates will be published on this page with a revised effective date displayed at the top of the document.
Where a change to this Privacy Policy materially affects the way in which vip15 processes your personal data — for example, if we introduce a new category of data collection, a new third-party sharing arrangement, or a significant change to our retention periods — we will notify registered players by email to the address on file, or by a prominent notice within the vip15 platform, at least 14 days before the change takes effect. Continued use of the vip15 platform after the effective date of an update constitutes your acceptance of the revised Privacy Policy.
If you disagree with any material change to this Privacy Policy, you have the right to close your vip15 account before the change takes effect. Account closure requests can be submitted to [email protected]. Upon closure, your data will be retained for the periods specified in Section 7 in accordance with our legal obligations, after which it will be securely deleted.
We encourage all players in Bangladesh — whether based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or elsewhere — to review this Privacy Policy periodically to stay informed about how vip15 protects your personal data. The most current version of this policy is always available at vip15.app/privacy-policy. If you have any questions or concerns about this Privacy Policy or the way vip15 handles your data, please contact us at [email protected].
- Policy may be updated at any time — effective date shown at top of document.
- Material changes notified by email or in-platform notice at least 14 days in advance.
- Continued use after update date constitutes acceptance of the revised policy.
- You may close your account before a material change takes effect.
- Prior versions available on request via [email protected].
Ready to Experience vip15?
Now that you know how vip15 protects your personal data, explore Bangladesh's premier VIP casino and sportsbook. Bet on cricket, spin the slots, or try our live casino — all on a platform built around your security and privacy.