Privacy Policy — How vp77 Handles Your Data

Data We Collect

vp77 collects personal data from players to the minimum extent necessary for the lawful and efficient operation of the platform. We do not collect data speculatively. Every category of data we hold serves a defined and documented purpose. The following table summarises the primary categories of personal information collected and the context in which each is gathered.

1.1 Data Collected from Minors

vp77 does not knowingly collect personal data from individuals under the age of 18. The platform is strictly for adults. If we become aware that personal data belonging to a minor has been submitted, that data will be deleted immediately and the associated account will be closed. Parents or guardians who believe a minor has registered on vp77 should contact [email protected] without delay.

1.2 Voluntary Data

Certain data — such as optional profile details or communication preferences — is provided voluntarily by the player and is not required for account operation. Players may update or remove voluntary data fields at any time through their account settings panel without affecting their ability to use the platform.

How We Use Your Data

vp77 processes personal data only for purposes that are directly connected to the provision of the platform and its ancillary services. We apply a strict purpose-limitation principle: data collected for one stated purpose will not be repurposed for an unrelated activity without fresh notification to the player.

The specific purposes for which vp77 processes player data are as follows:

• Account creation and management: To register your account, verify your identity, and maintain your player profile throughout the lifetime of the account.
• Transaction processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported local bank channels, and to maintain an accurate record of all financial movements in your vp77 wallet.
• Platform security and fraud prevention: To monitor login activity, detect unusual transaction patterns, prevent multi-accounting, and protect all players on the platform from fraudulent conduct.
• Regulatory compliance and anti-money laundering (AML): To meet our obligations under applicable anti-money laundering frameworks, including customer due diligence, ongoing monitoring, and suspicious activity reporting where legally required.
• Responsible gaming: To identify signs of problem gambling behaviour — such as rapid escalation of bet frequency, deposit volume, or session duration — and to enable intervention through deposit limits, time-out periods, and self-exclusion tools.
• Customer support: To respond to player queries, resolve disputes, and process account-related requests submitted via live chat or email.
• Platform improvement: To analyse aggregate, anonymised usage data for the purpose of improving the vp77 user experience, identifying technical issues, and planning new features. This analysis is conducted on anonymised datasets only.
• Service communications: To send transactional messages such as deposit confirmations, withdrawal status notifications, and security alerts. These communications are not marketing messages and cannot be opted out of, as they form part of the core account service.
• Promotional communications: With your prior consent, to notify you of bonuses, seasonal promotions (such as Eid specials, BPL season offers, and Pohela Boishakh campaigns), and new game launches. You may withdraw consent for promotional communications at any time.

Data Sharing and Disclosure

vp77 does not sell, rent, or otherwise transfer personal data to third parties for their own commercial or marketing purposes. Data is shared externally only in the limited and specific circumstances described below.

3.1 Service Providers and Technology Partners

To operate the platform, vp77 works with a controlled set of third-party service providers who process data strictly on our behalf and under our instructions. These include:

• Payment processors: Including integrations with bKash, Nagad, Rocket, and Upay APIs, and partner bank systems (Dutch-Bangla Bank, BRAC Bank, City Bank, and others) for the purpose of executing deposit and withdrawal transactions.
• Game software providers: Including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. These providers receive only the minimum session-level data required to authenticate and operate game rounds. They do not receive your full identity or financial data.
• Identity verification providers: Third-party KYC service providers who assist with document authentication and identity cross-checking during the verification process.
• IT infrastructure and cloud hosting providers: Servers and infrastructure partners who provide the hosting environment in which vp77 operates. All such providers are bound by data processing agreements that prohibit unauthorised access or use of player data.

All third-party service providers engaged by vp77 are subject to contractual data protection obligations and are permitted to use player data only to the extent required to deliver the specific service for which they were engaged.

3.2 Legal and Regulatory Disclosure

vp77 may be required to disclose personal data to law enforcement agencies, financial intelligence units, regulatory authorities, or courts where such disclosure is mandated by applicable law or a lawful order. In such cases, vp77 will disclose only the data strictly required to satisfy the legal obligation and will notify the affected player of the disclosure where permitted by law to do so.

3.3 Business Transfers

In the event that vp77 undergoes a merger, acquisition, restructuring, or sale of assets, player data may be transferred as part of that transaction. In such circumstances, players will be notified in advance by email, and the acquiring entity will be required to honour the commitments set out in this Privacy Policy in relation to previously collected personal data.

3.4 What We Never Do

• We do not sell or license your personal data to data brokers, advertisers, or marketing agencies.
• We do not share your data with other gambling operators or affiliate networks for their own use.
• We do not transfer your data to any jurisdiction with materially weaker data protection standards without implementing appropriate safeguards.

Cookies and Tracking

vp77 uses cookies and similar tracking technologies to ensure the platform functions correctly and to understand how players use the site in aggregate. Cookies are small text files stored on your device by your browser when you visit the platform.

4.1 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable you to log in, maintain your session, navigate between pages, and use the cashier. Without these cookies, the platform cannot operate. They cannot be disabled.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players navigate the platform — for example, which pages are visited most frequently and whether any error messages were encountered. This data is used to improve the platform experience. No personally identifiable data is included in analytics reports.
• Functional Cookies: These cookies remember your preferences, such as your selected language, display settings, and whether you have previously accepted a terms notice. They improve your experience by reducing repetitive prompts.
• Security Cookies: These cookies support the platform's fraud detection and account protection systems. They help identify unusual login patterns and distinguish legitimate player sessions from automated bot activity.

4.2 Third-Party Cookies

Game providers embedded within the vp77 platform (such as Evolution Gaming and Pragmatic Play) may set their own functional cookies limited to the operation of the game session. These cookies expire at the end of your game session. vp77 does not permit third-party advertising cookies or social media tracking pixels on the platform.

4.3 Managing Cookies

You may configure your browser to refuse all cookies or to alert you when cookies are being set. Please note that disabling strictly necessary cookies will impair your ability to use the platform — in particular, you will not be able to maintain a logged-in session. Detailed instructions for managing cookies are available in the help documentation of all major browsers (Chrome, Firefox, Edge, Safari).

Data Security Measures

vp77 applies a layered approach to data security, combining technical controls, operational procedures, and staff training to protect the personal data of all players. While no system can offer absolute guarantees, the measures in place are designed to reflect industry best practice for online gaming platforms.

5.1 Technical Controls

• Transport Layer Security (TLS 1.3): All data transmitted between your browser or mobile device and the vp77 platform is encrypted using TLS 1.3, the current industry standard. The platform's SSL certificate is maintained and renewed continuously.
• Password hashing: Player passwords are never stored in plaintext. They are processed using a strong one-way cryptographic hashing algorithm with a unique salt, so that even in the event of a data incident, passwords cannot be recovered.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts via the security settings panel. When 2FA is active, a second verification step is required at login, providing meaningful protection against unauthorised access even if credentials are compromised.
• Access controls: Internal systems operate on a principle of least privilege. Staff members are granted access only to the data and systems required for their specific role. Privileged access is reviewed quarterly and revoked immediately upon change of role or departure.
• Intrusion detection and monitoring: The platform is monitored continuously for anomalous activity, including unusual login geography, atypical transaction volumes, and patterns consistent with automated attacks.

5.2 Operational Procedures

All staff with access to personal data undergo data protection training at the time of onboarding and at regular intervals thereafter. Access to player financial data is subject to additional authorisation controls and dual-approval for high-value queries. vp77 conducts periodic internal security reviews and responds to identified vulnerabilities on a defined remediation timeline.

5.3 Data Incident Response

In the event of a personal data breach that poses a risk to the rights or interests of affected players, vp77 will notify affected players without undue delay — and in any event within 72 hours of becoming aware of the breach — via the email address registered to their account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps vp77 has taken or intends to take in response.

Data Retention

vp77 retains personal data only for as long as is necessary for the stated purpose and, where applicable, for as long as required by law. The following retention schedule applies to the primary categories of player data held by the platform.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised using industry-standard methods. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and analytical purposes.

Players who close their vp77 accounts should be aware that regulatory obligations require retention of certain categories of data beyond the account closure date, as indicated in the table above. Deletion requests for data within a mandatory retention period will be refused, with a clear explanation provided to the requesting player.

Your Privacy Rights

As a registered player on vp77, you hold a range of rights in relation to the personal data we hold about you. vp77 is committed to honouring these rights promptly and without unnecessary obstacles. All rights requests should be submitted to [email protected] with the subject line "Privacy Rights Request" and will be actioned within 30 calendar days of receipt and identity verification.

7.1 Right of Access

You have the right to request a copy of the personal data that vp77 holds about you. We will provide this in a structured, readable format. Your account transaction history and game records are available directly within your account dashboard without the need to submit a formal request.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Many data fields — including your contact email and residential address — can be updated directly in your account settings. For data that cannot be self-edited (such as your registered name or date of birth), please contact support and provide the corrected information along with supporting documentation.

7.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis applies), or where you object to processing and there are no overriding legitimate grounds. Erasure requests will be fulfilled to the extent permitted by applicable law — where a legal retention obligation applies (for example, AML record-keeping), the relevant data cannot be deleted until the retention period has elapsed.

7.4 Right to Restrict Processing

You may request that vp77 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is under dispute, or while an objection to processing is being assessed. During a restriction period, vp77 will store the data but will not use it for any active processing purpose.

7.5 Right to Data Portability

Where vp77 processes your personal data by automated means on the basis of your consent or for the performance of a contract, you have the right to receive a copy of that data in a structured, commonly used, and machine-readable format (such as JSON or CSV) for your own use or for transfer to another service provider.

7.6 Right to Object to Marketing

You may withdraw your consent to receive promotional communications from vp77 at any time. You may do so by updating your notification preferences in your account settings, by clicking the unsubscribe link in any marketing email, or by contacting support directly. Withdrawal of marketing consent does not affect the lawfulness of communications sent before the withdrawal.

Policy Updates and Contact

8.1 Changes to This Policy

vp77 reviews this Privacy Policy at regular intervals and whenever material changes to our data processing activities occur. When we make substantive changes — meaning changes that affect your rights or that alter how we use your data in a meaningful way — we will notify registered players by email at least 14 days before the revised policy takes effect. The updated policy will also be published on this page with a revised effective date.

Minor or clarificatory changes (such as formatting corrections or rewording that does not affect meaning) may be made without advance notification, though the updated effective date will always reflect when the most recent revision was published. Your continued use of the vp77 platform after a revised policy takes effect constitutes your acceptance of the updated terms.

8.2 Links to Other Policies

This Privacy Policy should be read alongside the vp77 Terms & Conditions and Responsible Gaming page, which together form the complete framework governing your use of the platform and the rights and obligations of both parties.

8.3 Contacting vp77 on Privacy Matters

For all privacy-related enquiries — including data-rights requests, questions about how a specific piece of your data is being used, or concerns about a potential data incident — please contact the vp77 Data Support team using the details below. The email address is displayed as plain text and is not a clickable link.

Email: [email protected]
Response time: within 2 business days. All times Bangladesh Standard Time (BST, UTC+6).

18+ vp77 is strictly for adults aged 18 and above. Gambling can be addictive — please visit our Responsible Gaming page if you need support.