Privacy Policy
vip339 — Bangladesh

1 Introduction

vip339 is committed to protecting the privacy and personal data of every individual who uses our online casino and sports betting platform. We recognise that the personal information you share with us is sensitive, and we take our responsibility to handle that information with care, transparency, and respect very seriously.

This Policy applies to all personal data collected via the vip339 website at vip339.app, including data collected during registration, account management, deposits, withdrawals, customer support interactions, bonus participation, and any other activity on the Platform. It applies to all users, whether registered account holders or visitors who browse the site without registering.

We encourage you to read this Policy in full before using the vip339 Platform. If you have any questions about how we handle your data, please contact our team at [email protected] — available 24/7 in Bangladesh Standard Time (BST, UTC+6).

2 Data Controller

For the purposes of this Policy, vip339 acts as the data controller in respect of the personal data it processes about users of the Platform. As data controller, vip339 determines the purposes for which personal data is collected and the manner in which it is processed.

All data controller responsibilities, including responding to data subject rights requests and maintaining records of processing activities, are managed by the vip339 data team. You may contact the data team directly via the support email address provided in Section 14 of this Policy.

3 Data We Collect

vip339 collects the following categories of personal data from users of the Platform:

We do not collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data) unless strictly required by applicable law or regulatory compliance obligations, in which case we will seek your explicit consent before doing so.

4 How We Collect Data

vip339 collects personal data through the following channels and methods:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, server logs, and similar tracking technologies. See Section 7 for full details on our cookie practices.
• Third-party sources: Identity and fraud-check data received from KYC verification partners, payment processors (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard), and anti-money laundering (AML) screening databases when we conduct due diligence checks on your account.
• Game providers: Aggregated game session and transaction data shared by certified game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe) to facilitate game delivery and dispute resolution.

Where we collect data from third-party sources, we ensure that those third parties have a lawful basis for sharing such data with us and that appropriate data sharing agreements are in place.

5 Lawful Basis for Processing

vip339 processes personal data only where a lawful basis for that processing exists. The lawful bases we rely on are as follows:

• Contractual necessity: Processing required to fulfil the contract between vip339 and the player — including account creation, transaction processing, game delivery, and withdrawal handling.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC identity verification, anti-money laundering (AML) checks, and record-keeping requirements.
• Legitimate interests: Processing carried out for vip339's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, provided those interests are not overridden by your own rights and interests.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time by contacting us at [email protected] or updating your account preferences.

6 How We Use Your Data

vip339 uses the personal data we collect for the following specific purposes:

• Creating and managing your vip339 account and verifying your identity at registration and during ongoing account reviews;
• Processing deposits via bKash, Nagad, Rocket, Upay, Visa, Mastercard, USDT, and BTC, and processing withdrawal requests to your verified payment methods;
• Providing access to casino games, sports betting markets, and other entertainment services on the Platform;
• Conducting mandatory KYC, AML, and counter-terrorism financing (CTF) checks as required by applicable compliance obligations;
• Detecting, investigating, and preventing fraud, cheating, money laundering, multi-accounting, and other prohibited activities on the Platform;
• Monitoring gameplay patterns and account activity to support responsible gaming obligations, including identifying players who may be showing signs of problem gambling;
• Responding to customer support enquiries, complaints, and dispute resolutions via email and live chat;
• Sending transactional communications including deposit confirmations, withdrawal notifications, and account security alerts;
• Sending promotional communications, bonus offers, and platform updates where you have given consent or where it falls within our legitimate interests;
• Analysing aggregated usage data to improve Platform performance, game selection, payment processing, and the overall user experience for players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh;
• Maintaining records as required by applicable law for a minimum period specified in Section 10.

7 Cookies & Tracking Technologies

vip339 uses cookies and similar tracking technologies to operate the Platform efficiently, secure your session, and improve the user experience. A cookie is a small text file placed on your device when you visit the Platform. Cookies do not contain executable code and cannot access other files on your device.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. You cannot opt out of these without preventing Platform use.
• Functional cookies: Remember your preferences such as language settings, responsible gaming limits you have set, and display preferences. Disabling these may reduce your experience but will not prevent access.
• Analytics cookies: Collect aggregated, anonymised data about how users interact with the Platform — pages visited, session duration, click paths — to help us improve the product. We use privacy-respecting analytics tools and do not share raw analytics data with third parties.
• Marketing cookies: Used only where you have given explicit consent, to track the effectiveness of promotional campaigns and ensure you receive relevant offers rather than generic advertising.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect Platform functionality. For a full list of cookies used by vip339 and their individual retention periods, please contact us at [email protected].

8 Data Sharing & Disclosure

vip339 does not share your personal data with third parties except in the following circumstances:

• Payment processors: We share necessary financial data with payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and cryptocurrency network processors) to facilitate deposits and withdrawals. These parties act as independent data controllers or processors under their own privacy policies.
• KYC and AML providers: Identity verification and fraud screening data is shared with certified third-party KYC and AML compliance partners to fulfil our legal obligations. These providers are bound by strict data processing agreements.
• Game studios: Minimum necessary session and transaction data is shared with certified game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe) for game delivery, dispute resolution, and regulatory audit purposes.
• IT and infrastructure providers: Trusted cloud hosting, server infrastructure, cybersecurity, and customer support platform providers who process data on our behalf under data processing agreements that require them to maintain at least equivalent levels of data protection to this Policy.
• Legal and regulatory authorities: Where required by applicable law, court order, regulatory instruction, or law enforcement request, vip339 may disclose personal data to competent authorities. We will notify you of any such disclosure unless legally prohibited from doing so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of vip339's assets, personal data held by vip339 may be transferred to the acquiring entity, subject to equivalent data protection commitments.

9 International Data Transfers

vip339 primarily stores and processes your personal data on secure servers. Some of our third-party service providers — including cloud infrastructure partners and game studios — may process data in jurisdictions outside Bangladesh. Where such international transfers occur, vip339 takes appropriate steps to ensure that your data receives an adequate level of protection consistent with this Policy.

These steps include entering into contractual arrangements with data recipients that impose data protection obligations equivalent to those described in this Policy, and where applicable, relying on recognised transfer mechanisms such as standard contractual clauses or adequacy determinations.

If you have questions about specific international transfers or wish to obtain a copy of the safeguards we rely on, please contact us at [email protected].

10 Data Retention

vip339 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The following retention principles apply:

• Active accounts: Personal data is retained for the full duration of your account being active on the vip339 Platform.
• Closed accounts: Following account closure, vip339 retains identity, financial, and transaction data for a minimum period of five (5) years to comply with AML record-keeping obligations and to handle any post-closure disputes or legal claims.
• KYC documents: Identity verification documents (national ID, passport, proof of address) are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support communications: Customer support records are retained for three (3) years from the date of the interaction to support dispute resolution and quality assurance.
• Marketing data: Where consent has been withdrawn or a player has opted out of marketing communications, we will cease processing data for marketing purposes within thirty (30) days of receiving the withdrawal. A suppression record may be retained indefinitely to ensure we do not contact you again.
• Analytics data: Aggregated, anonymised analytics data that cannot be linked back to an individual may be retained indefinitely for product improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

11 Data Security

vip339 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following measures:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the vip339 Platform;
• Encrypted storage for all sensitive personal and financial data at rest, using industry-standard AES-256 encryption;
• Password hashing using bcrypt or equivalent algorithms — vip339 never stores plaintext passwords;
• Two-factor authentication (2FA) available to all players to protect account access;
• Role-based access controls ensuring that vip339 staff can only access personal data to the extent required for their specific job function;
• Regular security audits and penetration testing of the Platform and underlying infrastructure;
• Intrusion detection and monitoring systems operating continuously to identify and respond to suspicious activity;
• Staff training on data protection and information security best practices, conducted on an ongoing basis.

12 Your Rights

As a user of the vip339 Platform, you hold the following rights in respect of your personal data. You may exercise any of these rights by contacting us at [email protected]. We will respond to all valid requests within thirty (30) days of receipt, though complex requests may require up to sixty (60) days with appropriate notification.

• Right of access: You have the right to request a copy of the personal data vip339 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held about you is corrected or updated.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You have the right to request that we temporarily stop processing your personal data in certain circumstances, such as while the accuracy of your data is being verified following a rectification request.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transferred directly to another controller where technically feasible.
• Right to object: You have the right to object to processing of your personal data where vip339 relies on legitimate interests as its lawful basis, or where your data is processed for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

13 Children's Privacy

The vip339 Platform is strictly intended for adults aged 18 and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 18. If you are under 18, you must not use the vip339 Platform or provide us with any personal data.

If vip339 becomes aware that personal data has been collected from a person under the age of 18 — whether through age verification failure or any other means — we will take immediate steps to delete that data from our systems and permanently close the associated account.

Parents and guardians who believe that a minor may have registered on the vip339 Platform are encouraged to contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

14 Changes & Contact

vip339 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. We will notify registered users of material changes via email or in-platform notification at least seven (7) days before the changes take effect, except where immediate updates are required for security or legal reasons.

The "Last Updated" date displayed at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your data. Continued use of the Platform following any update constitutes acceptance of the revised Policy.

If you have any questions, concerns, or complaints about this Privacy Policy or about how vip339 handles your personal data, please contact our team using the details below. We take all privacy enquiries seriously and aim to provide a substantive response within one (1) business day.

For related legal documents, please review the Terms & Conditions and the Responsible Gaming policy, both of which form part of the agreement between you and vip339.