Data Protection Policy
Privacy Policy for
vlptaka
At vlptaka, your privacy is a foundation of how we operate. This Privacy Policy explains what personal data we collect, why we collect it, how it is used and stored, and what rights you hold over your information as a player on our Bangladesh gaming platform.
Section 01
Information We Collect
vlptaka collects personal data in order to provide a safe, personalised, and legally compliant gaming experience. We collect only what is necessary for the purposes described in this Privacy Policy.
Registration Data
When you create an account, we collect your full legal name, date of birth, email address, mobile phone number, and preferred payment method. This information is required to verify your identity and maintain your account.
Financial Data
We collect transaction records including deposit amounts, withdrawal requests, payment method identifiers (bKash wallet numbers, Nagad account references, Rocket account details), and transaction timestamps. We do not store full card or PIN data.
Gaming Activity
We record all bets placed, games played, wager amounts, win/loss outcomes, session durations, and bonus interactions. This data is used for account management, dispute resolution, and responsible gaming monitoring.
Technical and Device Data
We automatically collect IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and session tokens when you access the Platform. This data helps us secure your account and detect fraud.
Communications Data
When you contact our support team via live chat or email, we retain records of your messages, support tickets, and any documents you submit (such as KYC identity documents). This allows us to resolve disputes and maintain service quality.
Location Data
We derive approximate geographic location from your IP address to ensure compliance with our geographic eligibility requirements and to personalise promotional content where appropriate. We do not collect precise GPS location data.
vlptaka does not purchase or acquire personal data from third-party data brokers. All personal data we hold is provided directly by you during registration, account use, or support interactions, or collected automatically from your interaction with the Platform.
Section 02
How We Use Your Data
We use personal data for clearly defined operational and legal purposes. We do not sell your personal data to third parties for their own marketing use.
2.1 Account Management and Service Delivery
Your registration data is used to create and maintain your player account, verify your identity, process deposits and withdrawals, deliver game content, calculate and credit bonus offers, and communicate account-related notices. Without this processing, we cannot operate your account or provide the Platform services.
2.2 Identity Verification and KYC Compliance
vlptaka is required to verify the identity of all players before processing withdrawal requests and at other key stages of the account lifecycle. We use registration data and any KYC documentation you submit — such as a National ID card, passport, or utility bill — to confirm your identity, age, and address. KYC verification helps us prevent fraud, underage gambling, and financial crime on the Platform.
2.3 Financial Transaction Processing
We share the minimum necessary financial data with our payment processing partners — bKash, Nagad, Rocket, Upay, and our bank transfer partners — to execute deposits and withdrawals. These partners act as data processors under our instruction and are contractually prohibited from using your financial data for any purpose other than completing the relevant transaction.
2.4 Fraud Prevention and Security
Technical and device data, combined with gaming activity and financial transaction records, is analysed by our automated fraud detection systems. Patterns that suggest account compromise, unauthorised access, bonus abuse, money laundering, or other security threats trigger additional review processes. This processing is essential to protect both our players and the integrity of the Platform.
2.5 Responsible Gaming Monitoring
We monitor gaming activity data — including session frequency, average wager size, deposit patterns, and use of responsible gaming tools — to identify players who may be exhibiting signs of problematic gambling behaviour. Where our monitoring raises concern, we may proactively contact the player with information about responsible gaming resources, or apply account restrictions in line with our Responsible Gaming Policy.
2.6 Marketing Communications
With your explicit consent, we may send you promotional emails, SMS notifications, and in-platform messages about new games, seasonal bonuses, and platform updates. You may withdraw consent to marketing communications at any time by contacting us at support@vlptaka or by using the unsubscribe function in any marketing email. Withdrawing marketing consent does not affect your ability to use the Platform.
2.7 Analytics and Platform Improvement
Aggregated and anonymised usage data is used to understand how players interact with the Platform — which games are most popular, where technical issues arise, how navigation flows are used — in order to improve the Platform experience. This analytics processing uses data stripped of directly identifying information wherever possible.
Processing Purposes
vlptaka does not sell, rent, or license your personal data to third-party advertisers, data brokers, or marketing companies. Your data is used solely for the purposes described in this Privacy Policy.
Section 03
Legal Basis for Processing
Every processing activity carried out by vlptaka rests on one of four recognised legal bases. The table below maps each key processing activity to its legal justification.
| Processing Activity | Legal Basis | Notes |
|---|---|---|
| Account registration and management | Contractual necessity | Required to perform the service contract with you |
| Identity verification (KYC) | Legal obligation | Required to comply with anti-money laundering obligations |
| Payment processing | Contractual necessity | Required to execute deposit and withdrawal transactions |
| Fraud detection and security | Legitimate interests | Protecting Platform integrity and player account security |
| Responsible gaming monitoring | Legal obligation / Legitimate interests | Duty of care to players and regulatory compliance |
| Marketing communications | Consent | Opt-in only; withdrawable at any time |
| Analytics and improvement | Legitimate interests | Processed on anonymised / aggregated data where possible |
| Record keeping for dispute resolution | Legal obligation / Legitimate interests | Supporting evidence for account and game-result disputes |
Section 04
Data Sharing and Disclosure
We share personal data only where necessary to operate the Platform, comply with legal obligations, or protect the rights of vlptaka and its players. We do not share data for third-party commercial gain.
4.1 Payment Service Providers
To process deposits and withdrawals, we share transaction details with our MFS payment partners including bKash, Nagad, Rocket, and Upay, as well as with Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank where bank transfers are used. Only the minimum data required to identify and authorise the specific transaction is shared. These partners are bound by data processing agreements and applicable financial services regulations.
4.2 Game Content Providers
Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and player identifier when you launch a game. This allows them to deliver game content and record your wager and outcome data within their systems. These providers operate under their own data protection frameworks. We recommend reviewing their respective privacy policies for details of their processing activities.
4.3 Identity Verification and KYC Partners
To fulfil our KYC obligations, we may share identity document data with third-party identity verification service providers. These providers are appointed as data processors and are contractually restricted to using your data solely for the purpose of completing the requested identity check on our behalf.
4.4 Legal and Regulatory Disclosure
We may be required to disclose personal data to law enforcement authorities, regulatory bodies, or courts where we receive a lawfully issued request, court order, or legal obligation to do so. In cases of suspected serious financial crime, we may also share data proactively with relevant authorities without prior notice to the account holder, in line with our anti-money laundering obligations.
4.5 Business Transfers
In the event of a merger, acquisition, sale of assets, or other corporate restructuring involving vlptaka, player data may be transferred to the acquiring entity as part of the transaction. Any such transfer will be subject to continuity of the data protection commitments set out in this Privacy Policy, and affected players will be notified via their registered email address.
Data Recipients
- bKash, Nagad, Rocket, Upay (payment processing)
- Dutch-Bangla Bank, BRAC Bank, City Bank (bank transfer)
- Pragmatic Play, Evolution, NetEnt, Microgaming, Spribe, Ezugi (game delivery)
- KYC / identity verification service provider
- Fraud analytics and security tooling providers
- Law enforcement and regulatory authorities (where legally required)
vlptaka never sells your personal data to third-party marketers or data brokers. Any sharing is strictly limited to the operational and legal purposes described in this section.
Section 05
Cookies and Tracking Technologies
vlptaka uses cookies and similar technologies to operate the Platform, remember your preferences, maintain session security, and understand how the Platform is used. This section explains what we use and how you can manage it.
Strictly Necessary
Essential for the Platform to function — session authentication tokens, CSRF protection, load balancer routing, and security identifiers. These cannot be disabled without breaking the Platform.
Functional
Remember your language preferences, display settings, responsible gaming tool selections, and last-visited game category. These improve your experience but are not strictly required for the Platform to operate.
Analytics
Collect aggregated, anonymised data on page visits, navigation paths, session durations, and error rates to help us understand performance and identify areas for improvement. Individual users are not identified in analytics reports.
Affiliate Tracking
Where you arrive at vlptaka via a partner referral link, we set a cookie to record the affiliate source for commission tracking purposes. This cookie does not track your activity on external sites.
Managing Your Cookie Preferences
You can manage cookie preferences directly through your browser settings. Most modern browsers allow you to view, block, or delete cookies on a per-site basis. Please note that disabling strictly necessary cookies will prevent you from logging into your account and using the Platform. Disabling functional cookies may result in a degraded user experience where your preferences are not retained between sessions.
To manage cookies in common browsers: in Google Chrome, navigate to Settings → Privacy and Security → Cookies and Other Site Data. In Mozilla Firefox, navigate to Settings → Privacy & Security → Cookies and Site Data. In Microsoft Edge, navigate to Settings → Cookies and Site Permissions. Consult your browser's help documentation for specific instructions.
We do not currently honour Do Not Track (DNT) browser signals, as there is no universally accepted standard for what this signal should mean in practice. This position may be reviewed as standards develop.
Section 06
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations.
Retention Periods by Data Type
Why We Retain Data After Account Closure
Financial transaction records are retained for seven years following the relevant transaction to comply with anti-money laundering record-keeping requirements. Account registration and KYC data is retained for five years following account closure to enable us to respond to any regulatory inquiries, formal complaints, or legal claims that may arise after the account has been closed.
Gaming activity logs are retained for three years post-closure primarily to support dispute resolution. If a player raises a dispute about a historical game result or transaction after their account has been closed, these records allow us to investigate fairly. Support correspondence is retained for three years following resolution of the relevant ticket for the same reason.
At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. We do not retain data in identifiable form beyond what is legally required or operationally necessary.
Section 07
Your Rights Over Your Data
As a data subject, you hold a number of rights regarding the personal data vlptaka holds about you. We are committed to facilitating these rights promptly and transparently.
Right of Access
You may request a copy of the personal data we hold about you at any time. We will provide a structured summary of your data within 30 days of receiving a verified access request via support@vlptaka.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For account details, many fields can be updated directly through your account settings panel.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, and where no legal retention obligation overrides the request. Financial and KYC records are subject to mandatory retention periods and cannot be deleted on request during those periods.
Right to Restrict Processing
You may request that we restrict the processing of your data — for example, while the accuracy of data is being disputed or while an objection to processing is being evaluated. During a restriction period, data may be stored but not actively processed.
Right to Data Portability
Where data is processed on the basis of your consent or a contract, and the processing is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format suitable for transfer to another service provider.
Right to Object
You may object to the processing of your data where it is based on our legitimate interests — including automated profiling and analytics activities. We will cease the processing unless we can demonstrate compelling legitimate grounds that override your interests.
To exercise any of the rights listed above, submit a written request to support@vlptaka from the email address registered to your account. We will acknowledge your request within 3 business days and aim to fulfil it within 30 calendar days. Identity verification may be required before your request is processed to prevent unauthorised access to your data by third parties.
Section 08
Data Security
vlptaka implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
Technical Security Measures
All data transmitted between your browser or device and the vlptaka Platform is protected using 256-bit SSL/TLS encryption. Data stored in our systems is encrypted at rest using AES-256 encryption. Player passwords are stored as salted cryptographic hashes and are never stored or transmitted in plaintext.
Access to production systems and databases is restricted to authorised personnel only, using role-based access control and multi-factor authentication. All administrative access events are logged and subject to periodic review. Our infrastructure is protected by automated intrusion detection systems and undergoes regular vulnerability assessments.
Organisational Security Measures
All vlptaka staff who handle personal data undergo data protection training as part of their onboarding and refresher programmes. Access to personal data is granted on a strict need-to-know basis. Employees who handle sensitive player data are subject to confidentiality obligations as part of their employment contracts.
Payment Data Security
vlptaka does not store full payment card numbers, CVV codes, or mobile banking PINs on its own servers. Payment transactions processed via bKash, Nagad, Rocket, and Upay are handled directly by those providers' secure systems. We retain only the minimum transaction reference data necessary for reconciliation and dispute resolution purposes.
Breach Response
In the event of a personal data breach that poses a risk to your rights and freedoms, vlptaka will notify affected players via their registered email address without undue delay, and no later than 72 hours after becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, likely consequences, and the steps we have taken or propose to take to address it. We maintain an internal incident response plan that is tested and reviewed regularly.
Your Role in Security
While we take extensive steps to protect your data, account security also depends on the choices you make. We strongly recommend using a unique, strong password for your vlptaka account, enabling any available two-factor authentication options, logging out after each session when using a shared device, and notifying us immediately at support@vlptaka if you suspect unauthorised access to your account.
Security Standards
No security system is entirely infallible. However, vlptaka's layered defence strategy — encryption, access controls, monitoring, and staff training — ensures that your personal data is protected to the highest practicable standard.
Section 09
Children's Privacy
vlptaka is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18.
18+ Only Policy
Access to vlptaka is restricted to individuals who are 18 years of age or older. During the registration process, all players are required to confirm that they meet this age requirement. This declaration is a binding representation made by the player, and any player who provides a false declaration regarding their age accepts full responsibility for any consequences arising from that misrepresentation.
Age Verification
As part of our KYC process, vlptaka verifies the age of all players before activating withdrawal functionality on their accounts. Players who cannot provide satisfactory proof of age will have their accounts suspended pending verification or permanently closed if satisfactory documentation cannot be provided. Any funds deposited by an underage player will be returned via the original payment method, less any bonuses claimed, in accordance with our Terms & Conditions.
Discovery of Underage Accounts
If vlptaka becomes aware — through our KYC process, a report from a third party, or any other means — that an account is being operated by an individual under the age of 18, we will immediately suspend the account, reverse any open bets, void any pending bonuses, and initiate a refund of deposited funds. All personal data collected in connection with the underage account will be handled in accordance with applicable law and securely deleted once the matter is resolved.
Parental Controls
If you are a parent or guardian and believe that a minor in your care has registered on the vlptaka Platform, please contact us immediately at support@vlptaka. We will investigate the matter promptly and take all necessary action to close the account and return any deposited funds. We also recommend that parents and guardians make use of third-party parental control software to restrict access to gambling platforms on shared devices.
Age Restriction Summary
Section 10
Contact and Complaints
If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a complaint about how vlptaka handles your personal data, please use the contact details below.
How to Contact Us
For all privacy-related enquiries, data subject rights requests, and data protection complaints, please contact the vlptaka support team via email at support@vlptaka. Please include "Privacy Request" or "Data Protection" in the subject line of your email, along with your registered username and a brief description of your query. This helps us route your enquiry to the appropriate team member promptly.
Response Timelines
We aim to acknowledge all privacy enquiries within 3 business days of receipt. For data subject rights requests — such as access requests, erasure requests, or portability requests — we will fulfil the request within 30 calendar days of receiving a verified request. In cases of particular complexity, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.
Raising a Complaint
If you believe that vlptaka has handled your personal data in a manner that violates this Privacy Policy or applicable data protection law, we encourage you to contact us in the first instance so that we have the opportunity to investigate and resolve your concern directly. We take all privacy complaints seriously and will provide a written response to every formal complaint received.
Changes to This Privacy Policy
vlptaka may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. When we make material changes to this Policy, we will notify registered players via their registered email address and update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Continued use of the Platform following notification of a material change constitutes acceptance of the revised Privacy Policy.
Contact Details
When submitting a data rights request, please use the email address registered to your vlptaka account. We may ask you to verify your identity before processing your request to protect against fraudulent data access attempts.
Have Questions?
Need Help or Have Privacy Concerns?
Our 24/7 support team is here to help with any questions about your data, account security, or responsible gaming. You can also explore our FAQ for quick answers or visit our Responsible Gaming page for player protection tools.