vip7 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how vip7 ("the Company", "we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("Player", "you", "your") who access or use the vip7 platform at vip7.bar, including all associated subdomains, mobile-optimised interfaces, and digital services.

vip7 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

This Policy is written in English and is effective as of 1 January 2026. The English version of this Policy shall prevail in the event of any translation discrepancy. Where we refer to "personal data" throughout this Policy, we mean any information that identifies or could reasonably be used to identify a living individual, either alone or in combination with other available information.

2. Data We Collect

vip7 collects the following categories of personal data from players and prospective players:

2.1 Identity & Registration Data

• Full legal name
• Date of birth (for mandatory age verification — players must be 21 or over)
• Gender (optional)
• Username and password (password stored in hashed, non-reversible form)
• National Identity Card (NID) number or passport number (for KYC)
• Photograph or selfie holding identity document (for liveness verification)

2.2 Contact Data

• Email address
• Mobile phone number (including bKash, Nagad, or Rocket-registered number)
• Residential address (district, city, postcode — Bangladesh)

2.3 Financial & Payment Data

• Payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank)
• Mobile wallet number or bank account reference (used for deposit/withdrawal routing)
• Transaction history (deposits, withdrawals, bonus credits, wager amounts)
• Account balance at each transaction point

Important: vip7 does not store full card numbers, CVV codes, or full bank account numbers. Payment card data is tokenised by our payment processor and is never held on vip7 servers in its raw form.

2.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session logs (login time, logout time, duration)
• Pages visited, games played, bets placed, and navigation path on the vip7 platform
• Referring URL (the page that directed you to vip7)

2.5 Communications Data

• Content of messages exchanged with vip7 customer support
• Records of promotional communications sent to you and your interaction with them (open rates, click events)
• Responses to voluntary surveys or feedback requests

3. How We Collect Personal Data

vip7 collects personal data through the following means:

• Direct collection: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or interact with any form on the vip7 platform.
• Automated collection: Through cookies, server logs, and analytics tools that record technical and behavioural data as you use the platform (see Section 9 — Cookies).
• Third-party sources: From identity verification and KYC service providers who confirm the authenticity of documents you submit. From payment processors who confirm the successful execution of transactions. From fraud detection services that cross-reference account data against known risk indicators.

4. How We Use Your Personal Data

vip7 uses personal data collected from players for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity, Contact
Age verification (21+ compliance)	Identity (date of birth, NID)
KYC identity verification	Identity, Contact, Document images
Processing deposits and withdrawals	Financial, Identity
Fraud prevention and anti-money laundering checks	Identity, Financial, Technical
Delivering customer support	Identity, Contact, Communications
Responsible gaming monitoring and intervention	Usage, Financial, Identity
Sending transactional notifications (deposits, withdrawals, security alerts)	Contact
Sending promotional communications (where you have opted in)	Contact, Communications
Platform analytics and performance improvement	Technical, Usage
Legal compliance and record-keeping obligations	Identity, Financial, Communications

5. Legal Basis for Processing

vip7 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered vip7 player, including account management, payment processing, and delivering gameplay services.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering (AML) obligations, KYC verification requirements, and responsible gaming mandates.
• Legitimate interests: Processing carried out in pursuit of vip7's legitimate business interests — including fraud prevention, platform security, and general analytics — where those interests are not overridden by your rights and interests.
• Consent: Where processing is based on your freely given, specific, and informed consent — for example, receiving marketing communications or participating in optional personalisation features. You may withdraw consent at any time by contacting support or updating your account communication preferences.

6. Data Sharing & Third-Party Disclosure

vip7 does not sell, rent, or trade your personal data to any third party for that party's own commercial or marketing purposes. Personal data is shared only in the following limited and controlled circumstances:

6.1 Payment Processors

To process deposits and withdrawals, vip7 shares necessary financial and identity data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. Each provider operates under its own privacy terms and applicable financial regulation. vip7 shares only the minimum data required to execute and verify each transaction.

6.2 KYC & Identity Verification Services

vip7 uses certified third-party identity verification services to perform KYC checks. These services receive identity documents and biometric data (selfie images) submitted during the verification process. All such providers are bound by strict contractual data processing agreements and are prohibited from using your data for any purpose beyond completing the verification task.

6.3 Game Studio Providers

Games on the vip7 platform are delivered by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe. These studios may receive a player session token and anonymised gameplay data required to deliver the game. Personally identifiable information is not shared with game studios beyond what is technically necessary to authenticate the game session.

6.4 Fraud & Security Services

To protect players and the integrity of the vip7 platform, technical data (including IP addresses, device fingerprints, and behavioural signals) may be shared with fraud detection and cybersecurity service providers. These providers assist in identifying suspicious activity, bot usage, and potential money laundering patterns.

6.5 Legal & Regulatory Disclosure

vip7 may be required to disclose personal data to law enforcement agencies, courts, or regulatory bodies where mandated by applicable law, court order, or legal process. vip7 will, to the extent permitted by law, notify affected players of any such disclosure.

7. Data Retention

vip7 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or legitimate business necessity. The following general retention guidelines apply:

• Active account data: Retained for the duration of the player's account and for a period of five years following account closure, to meet anti-money laundering record-keeping obligations.
• KYC documents: Retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for two years from the date of the last communication in each support thread.
• Technical logs (IP, session data): Retained for 12 months from the date of generation, after which they are aggregated or deleted.
• Marketing consent records: Retained until consent is withdrawn, plus 12 months thereafter to evidence the withdrawal.

When personal data is no longer required and no retention obligation applies, vip7 will securely delete or anonymise the data so that it can no longer be attributed to an identifiable individual.

8. Security Measures

vip7 implements a layered approach to data security, combining technical and organisational safeguards to protect personal data against unauthorised access, disclosure, alteration, or destruction.

Despite these measures, no digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, vip7 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach. You are encouraged to use a strong, unique password for your vip7 account and to enable 2FA to maximise your own account security.

9. Cookies & Tracking Technologies

vip7 uses cookies and similar tracking technologies on the vip7.bar website to deliver a functional, personalised, and secure experience. A cookie is a small text file stored on your device by your web browser when you visit a website. vip7 uses the following categories of cookies:

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Session management, login authentication, security tokens, fraud prevention	No — required for platform function
Functional	Remembering user preferences (language, currency display, game layout)	Yes — disabling may affect platform experience
Analytics	Aggregated usage statistics to improve platform performance (page load times, navigation patterns)	Yes
Marketing	Tracking interaction with promotional content to measure campaign effectiveness (only where consent has been given)	Yes — via account preferences

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent the vip7 platform from functioning correctly and you will not be able to log in or play games.

10. Your Data Protection Rights

As a vip7 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact vip7 support at [email protected] with the subject line "Data Rights Request" and include your registered username and a description of your request.

vip7 aims to respond to all data rights requests within 30 days of receipt. In complex cases this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it. There is no charge for making a data rights request unless the request is manifestly unfounded or repetitive.

11. Minors & Age Restrictions

The vip7 platform is strictly intended for individuals who are 21 years of age or older. vip7 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If vip7 discovers or has reason to believe that a registered account belongs to a person under 21, that account will be immediately suspended, all associated gameplay voided, and any deposited funds will be returned to the verified payment method after appropriate review. If you believe that a person under 21 has registered a vip7 account, please notify us immediately at [email protected].

12. Third-Party Links & External Services

The vip7 platform may contain references to third-party payment services (bKash, Nagad, Rocket) and game studio providers whose own privacy policies govern how they handle data within their respective services. vip7 is not responsible for the privacy practices of these third parties, and this Policy does not extend to cover them.

Players should review the privacy policies of any third-party service they interact with as part of their vip7 experience — in particular, the mobile wallet apps of their chosen payment provider. vip7 will always provide a link to the relevant third-party privacy information where it is within our control to do so.

13. Changes to This Privacy Policy

vip7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. When material changes are made, vip7 will:

• Update the "Last Updated" date at the top of this Policy.
• Send an email notification to all registered players at their account email address.
• Display a prominent notice on the vip7 platform for a minimum of seven days prior to the changes taking effect.

Your continued use of the vip7 platform after the effective date of any amended Policy constitutes your acceptance of those changes. If you do not agree with an updated Policy, you should cease using the platform and request account closure before the changes take effect.

14. Contact & Complaints

For any questions, concerns, or formal requests relating to this Privacy Policy or vip7's handling of your personal data, please contact our Data Support team using the details below:

If you are not satisfied with vip7's response to a privacy complaint or data rights request, you may have the right to lodge a complaint with a relevant supervisory authority or seek a legal remedy through the courts. vip7 encourages players to contact us directly in the first instance so that we have the opportunity to resolve any concern before it escalates.

vip7 — vip7.bar — Effective Date: 1 January 2026. This Policy supersedes all previous versions of the vip7 Privacy Policy. For archived versions, contact [email protected].