ggvip Privacy Policy — Your Data, Protected and Respected

01 About This Policy

This Privacy Policy ("Policy") describes how ggvip ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "the Player") who access or use the ggvip website at https://ggvip.io and all related services, features, and functionality offered through that platform.

ggvip is committed to handling personal data responsibly and in accordance with applicable data protection principles. This Policy is designed to be transparent, clear, and accessible so that every player understands exactly how their information is treated from the moment they first visit the site to the point at which their account is eventually closed.

This Policy must be read alongside our Terms & Conditions and our Responsible Gaming Policy, all of which form part of the overall agreement between you and ggvip. By registering an account or continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood its contents.

02 Data We Collect

2.1 Registration and Account Data

When you create a ggvip account, we collect the personal information you provide during the registration process. This includes:

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other Bangladeshi location);
• Email address;
• Mobile phone number;
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process — required before processing withdrawals — we may collect copies of:

• Government-issued photo identification (National ID card, passport, or driving licence);
• Proof of residential address (utility bill, bank statement, or official correspondence);
• Proof of payment method ownership (mobile banking screenshot, bank statement, or equivalent documentation for bKash, Nagad, Rocket, Upay, or bank accounts).

2.3 Transaction and Financial Data

We record information about all financial transactions conducted through your ggvip account, including deposit amounts, withdrawal requests, payment methods used (bKash, Nagad, Rocket, Upay, bank transfer), transaction timestamps, and transaction reference numbers. We do not store full payment card numbers or full mobile financial account credentials — only tokenised or partial references as required for transaction matching.

2.4 Gameplay and Betting Activity Data

We collect records of your activity on the platform, including games played, bets placed, bet amounts, game results, session durations, and responsible gaming tool usage (e.g., deposit limit activations, cool-off requests, self-exclusion requests). This data is essential for account management, dispute resolution, and responsible gaming monitoring.

2.5 Technical and Device Data

When you visit the ggvip website, our servers automatically collect certain technical data, including:

• IP address;
• Browser type and version;
• Device type (desktop, mobile, tablet);
• Operating system;
• Referring URL and page navigation path;
• Session timestamps and duration.

This technical data is used for security monitoring, fraud detection, platform performance analysis, and geographic eligibility checks.

2.6 Communications Data

If you contact us via live chat, email, or any other support channel, we retain records of those communications for quality assurance, training, and dispute resolution purposes. This includes the content of your messages and the timestamps of each interaction.

03 How We Use Your Data

The following table summarises the primary purposes for which ggvip processes your personal data and the data categories involved in each purpose:

We do not use your personal data for automated decision-making that produces legal effects without human review. Where automated systems flag an account for review (e.g., for suspected fraud or bonus abuse), a qualified member of the ggvip compliance team reviews the case before any action is taken against the account.

04 Legal Basis for Processing

ggvip processes your personal data on the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing that is required to fulfil the agreement between you and ggvip — for example, verifying your identity before processing a withdrawal, or recording bets placed through your account.
• Legal obligation: Processing that is required to comply with applicable laws and regulations — for example, retaining transaction records for the minimum period required by applicable financial regulations, or reporting suspected fraud to authorities.
• Legitimate interests: Processing that is necessary for ggvip's legitimate operational interests where those interests are not overridden by your privacy rights — for example, fraud prevention, platform security, and performance analytics.
• Consent: Processing that is based on your freely given, specific, and informed consent — primarily the sending of marketing and promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

05 Sharing Your Data

5.1 Third-Party Service Providers

ggvip engages a limited number of trusted third-party service providers who assist in operating the platform. These providers may process your personal data as data processors acting on ggvip's behalf. Categories of third-party processors include:

• Payment processors: bKash, Nagad, Rocket, Upay, and partner banking institutions — for the purpose of processing deposits and withdrawals;
• KYC and identity verification services: Third-party providers who assist in verifying the authenticity of identity documents submitted by players;
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studio partners — who may process game session data as part of delivering their certified game content;
• Cloud and hosting infrastructure providers: Who provide the secure server infrastructure on which ggvip operates;
• Customer support platforms: Who provide the live chat and ticketing systems used by our support team.

All third-party processors are subject to contractual data processing agreements that require them to process personal data only on ggvip's documented instructions and to maintain appropriate technical and organisational security measures.

5.2 Legal Disclosure

ggvip may disclose your personal data to governmental, regulatory, or law enforcement authorities where required to do so by applicable law or in response to a valid legal process. Such disclosures will be made only to the extent strictly required and will be documented internally.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of ggvip's assets, player personal data may be transferred to the acquiring entity as part of that transaction. In such cases, we will notify affected players via the email address on file and will ensure that the acquiring entity provides an equivalent level of data protection under a revised privacy policy.

5.4 What We Never Do

For absolute clarity: ggvip does not sell, rent, lease, or otherwise transfer your personal data to third parties for those parties' own marketing or commercial purposes. We do not share personal data with advertising networks, data brokers, or any third party whose primary business involves the commercialisation of personal information.

06 Cookies and Tracking

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. ggvip uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform efficiently, maintain your login session, remember your preferences, and analyse aggregate usage patterns.

6.2 Categories of Cookies Used by ggvip

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without preventing you from using the platform.
• Functional cookies: Store your preferences such as language, display settings, and responsible gaming tool configurations so that you do not need to reconfigure them on every visit.
• Analytics cookies: Collect anonymised, aggregated data about how players navigate the platform — which pages are visited most frequently, average session durations, and similar metrics. This data is used solely to improve the platform experience.
• Marketing cookies: Used only with your consent to track engagement with promotional campaigns and to ensure that you do not see the same promotional communication repeatedly. You may opt out of marketing cookies at any time.

6.3 Managing Cookies

You may control cookies through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling strictly necessary cookies will prevent you from logging in and using the ggvip platform. Disabling analytics or marketing cookies will not affect your ability to play games or make transactions.

07 Data Retention

ggvip retains personal data only for as long as it is necessary for the purposes for which it was collected, or for as long as required by applicable legal or regulatory obligations. The following general retention periods apply:

Once the applicable retention period has elapsed, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Anonymous, aggregated statistical data may be retained indefinitely for platform analytics and business reporting purposes.

08 Data Security

ggvip maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all pages and all data in transit between your device and our servers;
• Encryption at rest for all sensitive personal data fields stored in our databases, including identity document files and payment reference data;
• Role-based access control ensuring that only staff members with a documented operational need are granted access to personal account records;
• Multi-factor authentication required for all internal staff accounts with access to player data systems;
• Automated intrusion detection systems that monitor for unusual access patterns and trigger alerts for manual review;
• Regular security assessments of our hosting infrastructure and application code conducted by qualified security professionals;
• Staff data protection training conducted on an ongoing basis for all personnel who handle personal data as part of their role.

8.1 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, ggvip will take immediate steps to contain the breach, assess its scope, and implement remediation measures. Affected players will be notified directly at the email address registered on their account within a reasonable timeframe, and will be provided with clear guidance on the steps they should take to protect themselves.

09 Your Rights

As a player whose personal data is processed by ggvip, you hold the following rights with respect to your information. To exercise any of these rights, contact our support team at [email protected]. We aim to respond to all rights requests within 14 calendar days.

• Right of Access: You may request a copy of the personal data that ggvip holds about you, along with information about the purposes for which it is processed and the categories of data involved.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without undue delay.
• Right to Erasure: You may request that ggvip delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where it has been unlawfully processed. This right is subject to our legal obligations to retain certain records for defined periods (see Section 7).
• Right to Restriction of Processing: In certain circumstances, you may request that ggvip restrict the processing of your personal data — for example, while a rectification request is being evaluated, or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing carried out on the basis of ggvip's legitimate interests, including profiling for fraud detection. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time by contacting support or using the unsubscribe link in any marketing email.

10 Children and Minors

The ggvip platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 21. The registration process includes a date-of-birth verification step specifically designed to enforce this age restriction.

If ggvip becomes aware that personal data has been collected from an individual who is under 21 years of age, that account will be immediately closed, all associated personal data will be deleted from our systems, and any deposited funds will be returned to the verified payment source used for the original deposit, subject to identity verification of the account holder's guardian.

Parents and guardians who believe that a minor in their care has registered an account with ggvip are encouraged to contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

11 Changes to This Policy

ggvip reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The effective date displayed at the top of this page will be updated whenever a new version is published.

Where changes are material — meaning they significantly alter the way we collect, use, or share your personal data, or change your rights in a meaningful way — we will notify registered players via email to the address on file and/or via a prominent notice on the platform prior to the changes taking effect. For minor clarifications and non-material updates, we may update the Policy without advance notice.

Your continued use of the ggvip platform following the publication of an updated Privacy Policy constitutes your acknowledgement of and acceptance of the revised terms. If you do not agree with a material change, you may close your account in accordance with Section 3.4 of our Terms & Conditions before the change takes effect.

12 Contact and Complaints

12.1 Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ggvip processes your personal data, please contact our support team. Support is available 24 hours a day, 7 days a week, via live chat on the platform or by email at [email protected]. Our agents are available in both English and Bengali.

12.2 Data Rights Requests

To exercise any of the rights described in Section 9 of this Policy — including access, rectification, erasure, restriction, portability, or objection — please submit a written request by email to [email protected] with the subject line "Data Rights Request" and your full registered name and account email address in the body of the message. We will acknowledge receipt within 2 business days and aim to resolve the request within 14 calendar days.

12.3 Complaints

If you are not satisfied with our response to a privacy concern or data rights request, you have the right to escalate the matter. ggvip takes all privacy complaints seriously and will escalate unresolved concerns to our senior compliance team for independent review. We are committed to resolving all privacy-related complaints fairly, transparently, and within a reasonable timeframe.