Privacy Policy — How vip kaka Protects Your Data

1 Data We Collect

vip kaka collects personal data from you in several ways: directly when you register an account or interact with the Platform, automatically through your use of the Platform, and occasionally from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect are set out below.

1.1 Registration and Account Data

• Identity Data: Your full legal name, date of birth, gender, and national identification number (NID) or passport number provided during account registration or identity verification (KYC).
• Contact Data: Your email address, Bangladeshi mobile phone number, and residential address (city, district, and postcode as applicable).
• Login Credentials: Your chosen username and a hashed (non-readable) version of your password. vip kaka never stores passwords in plain text.
• Profile Preferences: Language preference, notification settings, responsible gaming limits, and any other account configuration options you set within the Platform.

1.2 Financial and Transaction Data

• Payment Method Details: Your bKash, Nagad, Rocket, or Upay wallet number; the last four digits of any Visa or Mastercard used; and the associated account holder name. Full card numbers are never stored on vip kaka servers — card payments are tokenised by our payment processing partners.
• Transaction History: Records of all deposits, withdrawals, bonus credits, wagers placed, game outcomes, and balance adjustments associated with your account.
• Withdrawal Records: Destination wallet or card details, requested amounts, processing timestamps, and approval or rejection status.

1.3 Technical and Usage Data

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Log Data: IP address, access timestamps, pages visited, session duration, referring URLs, and error logs generated during your use of the Platform.
• Geolocation Data: Approximate geographic location derived from your IP address, used to detect access from restricted jurisdictions and to comply with responsible gaming obligations.
• Gameplay Data: Game titles accessed, bet amounts, spin or round counts, win/loss results, and session lengths across casino and sportsbook products.

1.4 Identity Verification Data

Where we are required to verify your identity (KYC), we may collect scanned or photographed copies of your National ID Card, passport, driving licence, or proof-of-address documents such as a utility bill or bank statement. This data is processed solely for verification purposes and is handled in accordance with strict data minimisation principles.

1.5 Communications Data

Records of your communications with our support team, including live chat transcripts, email correspondence, and any feedback, complaints, or dispute submissions you submit to vip kaka. These records are retained to document the history of your support interactions and to improve our service quality.

2 How We Use Your Data

vip kaka uses the personal data we collect only for clearly defined, legitimate purposes. We do not sell your personal data to third parties for their own marketing use. The principal purposes for which we process your data are as follows:

• Account Management: To create, maintain, and administer your player account, including processing registrations, authenticating logins, managing account settings, and communicating account-related information to you.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, to reconcile transaction records, and to resolve payment disputes or errors.
• Identity Verification: To verify your age (18+ requirement), confirm your identity against the details you provided at registration, and satisfy our anti-money laundering (AML) and Know Your Customer (KYC) obligations.
• Platform Delivery: To provide access to casino games, sports betting markets, live dealer tables, and all other Platform features you use, and to maintain the technical performance and uptime of those services.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour, enforce deposit limits and self-exclusion periods you have set, and to proactively contact players who may require support.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, money laundering, match-fixing, and other prohibited activities on the Platform.
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from competent authorities, and enforce the vip kaka Terms & Conditions.
• Customer Support: To respond to your support enquiries, resolve complaints, and document the history of your interactions with our team for quality assurance purposes.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and news about new games or features via email or SMS. You may withdraw consent for marketing communications at any time through your account settings or by contacting support.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the Platform's design, performance, and game selection. This analysis does not involve the use of identifiable personal data.

We process your personal data on one or more of the following legal bases: performance of the contract between you and vip kaka; compliance with a legal obligation; your explicit consent (where required); and our legitimate interests, where those interests are not overridden by your rights and freedoms.

3 Data Sharing & Disclosure

vip kaka does not sell, rent, or trade your personal data. We share personal data only with carefully selected third parties where necessary to operate the Platform, comply with legal obligations, or protect the integrity of our services. All third-party processors are contractually bound to handle your data securely and only for the specific purpose for which it is disclosed.

• Payment Processors: bKash, Nagad, Rocket, Upay, and our card payment gateway partners receive the minimum necessary financial data to process your transactions. These providers operate under their own privacy policies and regulatory frameworks.
• Identity Verification Providers: Third-party KYC and AML screening services receive identity documents and personal details solely to verify your age and identity. Verification data is not used for any other purpose by these providers.
• Game Software Providers: Casino and sportsbook software providers (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and others) may receive a pseudonymous player identifier and gameplay session tokens to deliver their games. These providers do not receive your full name, contact details, or financial data.
• IT and Hosting Providers: Our cloud infrastructure, database, and security service providers have access to Platform data solely to provide technical hosting and support services and are bound by strict data processing agreements.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, a valid court order, or to protect the rights, property, or safety of vip kaka, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a material part of vip kaka's business assets, player data may be transferred to the acquiring entity. You will be notified of any such transfer and of any change to the applicable privacy practices prior to the transfer taking effect.

4 Cookies & Tracking Technologies

vip kaka uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) on the Platform. These technologies help us deliver a functional, personalised, and secure experience for every player.

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your account state across pages, and protect against cross-site request forgery (CSRF). Without these cookies, the Platform cannot operate. No consent is required for strictly necessary cookies.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players navigate the Platform — which pages are visited most frequently, where users encounter errors, and how long sessions last. This information is used exclusively to improve Platform performance and is not linked to any identifiable individual.
• Functional Cookies: These cookies remember your preferences, such as your last-used payment method, preferred game category, responsible gaming settings, and notification preferences, so that you do not have to re-enter them on every visit.
• Security Cookies: These cookies are used by our fraud detection and bot-prevention systems to distinguish between legitimate players and automated or malicious traffic. They are strictly necessary for Platform security and cannot be disabled.

You can manage or disable non-essential cookies through your browser settings. Note that disabling functional or performance cookies may affect your experience on the Platform, including the loss of saved preferences. Strictly necessary and security cookies cannot be disabled as they are required for core Platform functionality and player account security.

vip kaka does not use third-party advertising or retargeting cookies. We do not permit ad networks to set cookies on the Platform or to track our players across other websites for advertising purposes.

5 Data Retention

vip kaka retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, accounting, or reporting obligations. Our standard retention periods are as follows:

• Active Account Data: Personal data associated with an active player account is retained for the full duration of the account's active status, plus a minimum of five (5) years following account closure, to meet our AML record-keeping and dispute resolution obligations.
• Transaction Records: Full financial transaction records, including deposits, withdrawals, and wager histories, are retained for a minimum of five (5) years from the date of each transaction.
• KYC and Identity Documents: Identity verification documents (NID scans, passport copies, proof of address) are retained for five (5) years following account closure or the completion of the verification process, whichever is later.
• Support Communications: Live chat transcripts, email threads, and complaint records are retained for three (3) years from the date of the last communication in a given support thread.
• Technical Logs: Server log files, IP address records, and device fingerprint data are retained for twelve (12) months from the date of collection, after which they are automatically purged.
• Marketing Consent Records: Records of your consent to receive marketing communications, including the date, time, and method of consent, are retained for the full duration of your account and for three (3) years following account closure.

At the end of each applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised, the resulting anonymised dataset may be retained indefinitely for statistical analysis, as it no longer constitutes personal data and cannot be linked to any individual.

6 Your Privacy Rights

vip kaka respects your right to control your personal data. Subject to applicable law and certain legitimate exceptions (such as our legal obligation to retain AML records), you hold the following rights in respect of the personal data we hold about you:

• Right of Access: You may request a copy of all personal data vip kaka holds about you, together with information about how it is being used. We will provide this information within 30 calendar days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. You can update many details directly in your account settings; for changes to KYC-verified fields, please contact support.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis exists), or where the data has been processed unlawfully. This right is subject to our legal obligation to retain certain records for AML, fraud prevention, and dispute resolution purposes.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while we investigate a complaint about data accuracy, or where you object to processing based on our legitimate interests.
• Right to Data Portability: Where data is processed based on your consent or for the performance of our contract with you, and the processing is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on our legitimate interests, in which case we will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the rights listed above, please contact our support team via 24/7 live chat or email [email protected]. We may need to verify your identity before processing your request. We will respond to all verified requests within 30 calendar days. If we are unable to fulfil your request (for example, due to a conflicting legal obligation), we will explain the reason in writing.

7 Data Security

vip kaka implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes, but is not limited to, the following measures:

• SSL/TLS Encryption: All data transmitted between your browser or device and the vip kaka Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. This protects your login credentials, financial data, and personal information in transit.
• Password Hashing: Passwords are never stored in plain text. We use strong, salted cryptographic hashing algorithms so that even in the unlikely event of a data breach, your password cannot be recovered from stored data.
• Access Controls: Access to personal data within vip kaka's internal systems is restricted on a strict need-to-know basis. Staff access is role-based, logged, and reviewed regularly. No employee has unrestricted access to the full player data set.
• Two-Factor Authentication: vip kaka supports two-factor authentication (2FA) for player accounts. We strongly encourage all players to enable 2FA through their account settings to add an additional layer of protection against unauthorised login.
• Payment Tokenisation: Card payment details are never stored on vip kaka servers. All card transactions are handled by PCI-DSS compliant payment gateways that tokenise sensitive card data before transmission.
• Penetration Testing: Our Platform undergoes regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: vip kaka maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay and in accordance with applicable notification obligations.

While we apply all reasonable measures to protect your data, no online platform can guarantee absolute security against all threats. You also play an important role in keeping your account secure: use a strong, unique password, enable 2FA, never share your login credentials, and contact support immediately if you suspect unauthorised access to your account.

8 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way vip kaka handles your personal data, please contact our dedicated data protection team using the details below. We are committed to addressing all privacy-related enquiries thoroughly and within the timeframes stated in this Policy.

• Support Team (General Enquiries): 24/7 Live Chat, available on every page of the Platform.
• Email: [email protected] — please include "Privacy Request" in the subject line so your message is routed directly to the data protection team.
• Response Time: We aim to acknowledge all privacy-related requests within 3 business days and provide a substantive response within 30 calendar days of receiving a verified request.
• Support Hours: Bangladesh Standard Time (BST, UTC+6), 24 hours a day, 7 days a week.

vip kaka takes every privacy concern seriously. Where we are unable to resolve a concern to your satisfaction through direct contact, you may seek further recourse through an independent third-party dispute resolution mechanism. Details of available mechanisms will be provided at the point of any formal escalation.

This Privacy Policy was last reviewed and updated on 1 January 2026. We may update this Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. Where material changes are made, we will notify registered players via email or in-platform notification. The most current version of this Policy is always published at vip-kaka.com/privacy-policy. Continued use of the Platform following notification of any update constitutes acceptance of the revised Policy.