Privacy Policy

1. Introduction

vippkr ("we", "us", "our") operates the online gaming platform accessible at https://vippkr.bet (the "Platform"). We are committed to protecting the privacy and personal data of all users who interact with our Platform, whether as registered account holders or casual visitors.

This Privacy Policy explains what personal data vippkr collects from users in Pakistan and elsewhere, the purposes for which that data is processed, the legal bases we rely on, how long we retain data, and the rights available to you as a data subject.

This Privacy Policy applies to all data processing activities carried out by vippkr in connection with the Platform, including account registration, financial transactions processed in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT, customer support interactions, and marketing communications.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, all of which form part of your agreement with vippkr.

2. Data Controller

vippkr is the data controller responsible for personal data collected and processed through the Platform. As data controller, vippkr determines the purposes and means by which your personal data is processed and is accountable for ensuring that such processing complies with applicable data protection laws and international gaming compliance standards.

For all data-related enquiries, requests, or complaints, users may contact vippkr's data team through the support channels listed in Section 15 of this Policy. vippkr aims to respond to all data-related requests within 30 calendar days of receipt.

3. Data We Collect

vippkr collects personal data across several categories depending on how you interact with the Platform. The table below outlines the main categories of data we collect and specific examples within each:

We do not collect any special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required for identity verification purposes under applicable KYC regulations, in which case such data is processed with heightened security controls and retained only for the legally required period.

4. How We Collect Data

vippkr collects personal data through the following channels and mechanisms:

4.1 Direct Collection

• Account registration forms, where you provide your name, contact details, and date of birth.
• KYC verification submissions, where you upload identity documents such as a CNIC or passport.
• Deposit and withdrawal requests processed through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT channels.
• Communications with our customer support team via live chat or email at [email protected].
• Participation in promotions, surveys, or bonus offers.
• Voluntary updates to your account profile or preferences.

4.2 Automated Collection

• Cookies, web beacons, and similar tracking technologies placed on your device when you access the Platform.
• Server logs that automatically record your IP address, device information, browser type, and pages accessed.
• Game engine logs that record session activity, wager amounts, outcomes, and timing.
• Geolocation data collected at the IP address level to enforce jurisdictional access controls.

4.3 Third-Party Sources

• Identity verification and KYC service providers who confirm the authenticity of the documents you submit.
• Payment processors and financial institutions that confirm transaction status and flag anomalies.
• Fraud prevention and AML screening databases that cross-reference your details against sanctions and politically exposed persons (PEP) lists.
• Advertising and analytics partners, where permitted under applicable data protection law and subject to your consent where required.

5. Legal Basis for Processing

vippkr processes personal data only where there is a valid legal basis to do so. The following legal bases apply to our key processing activities:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you as a registered user — including account management, payment processing, and the provision of gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, age verification (21+ requirement), regulatory reporting, and responses to lawful requests from government or law enforcement authorities.
• Legitimate Interests: Processing carried out for vippkr's legitimate business interests where these are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics for service improvement.
• Consent: Where we rely on your consent — for example, for marketing communications or the placement of non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact us via live chat or the support email.

6. How We Use Your Data

vippkr uses the personal data we hold about you for the following specific purposes:

• Account Creation and Management: To register your vippkr account, verify your identity, and maintain your account profile throughout our relationship.
• Payment Processing: To facilitate deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT, and to maintain accurate transaction records.
• KYC and AML Compliance: To verify your identity, confirm your age (21+), and conduct ongoing monitoring of account activity to detect and prevent money laundering, fraud, and terrorist financing.
• Provision of Gaming Services: To deliver cricket betting markets, PSL live wagering, online slots, live casino products, and other gaming services accessible through the Platform.
• Customer Support: To respond to your enquiries, resolve complaints, and communicate important account-related information.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour, enforce self-exclusion and cooling-off periods you have requested, and send responsible gaming reminders where appropriate.
• Security and Fraud Prevention: To detect and investigate suspicious activity, protect against account compromise, and enforce the single-account-per-user policy.
• Platform Improvement: To analyse usage patterns, fix technical issues, and develop new features that improve your experience on vippkr.
• Marketing Communications: Where you have opted in, to send you promotions, bonus offers, PSL season updates, and other gaming-related content. You may opt out at any time.
• Legal and Regulatory Reporting: To fulfil reporting obligations to regulatory authorities, courts, or law enforcement agencies where legally required.

7. Data Sharing & Third Parties

vippkr does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT processing partners receive the transaction data necessary to execute deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulations.
• KYC and Identity Verification Providers: Third-party identity verification services receive copies of identity documents and supporting data to perform age and identity checks required by our compliance obligations.
• Game Content Providers: Licensed game suppliers whose products are accessible via the Platform may receive session and transaction data to the extent necessary to deliver gameplay, calculate results, and settle wagers. All providers are contractually bound by data protection standards.
• Fraud and AML Screening Services: Specialised providers screen account data against international sanctions lists, PEP databases, and fraud registries. Data shared for this purpose is subject to strict contractual controls.
• Regulatory Authorities: We may share personal data with government bodies, financial intelligence units, or law enforcement agencies where we are legally obliged to do so or where we have a good-faith belief that disclosure is necessary to protect the safety of our users or the integrity of the Platform.
• Professional Advisers: Lawyers, auditors, and accountants engaged by vippkr may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of vippkr's assets, personal data held by us may be transferred to the acquiring entity as part of that transaction. Affected users will be notified of any such transfer and any material change to data processing terms.

8. International Data Transfers

vippkr operates in a global digital environment, and some of the third-party service providers we work with — including game content providers, KYC platforms, and cloud infrastructure partners — may process data in jurisdictions outside Pakistan. Where such international transfers occur, vippkr takes the following steps to ensure your data remains protected:

• We transfer data only to countries or organisations that provide an adequate level of data protection, or where appropriate safeguards are in place.
• Where transfers occur to processors in jurisdictions without an equivalent level of data protection, we implement contractual safeguards including standard data protection clauses that impose binding obligations on the recipient.
• Cloud storage and server infrastructure providers used by vippkr are selected based on their security certifications and compliance with internationally recognised data protection frameworks.

If you have questions about the safeguards in place for any specific international transfer of your data, please contact us via the details in Section 15.

9. Data Retention

vippkr retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, or contractual retention obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account relationship with vippkr and for a minimum of 5 years following account closure, as required by AML and financial record-keeping regulations.
• Transaction and Financial Data: Retained for a minimum of 5 years following each transaction, in line with standard financial compliance requirements.
• KYC Documents: Retained for the period required by the applicable regulatory framework governing our gaming licence, typically a minimum of 5 years from the date of verification.
• Support and Communications Data: Retained for up to 3 years from the date of the interaction, or longer if the communication relates to an unresolved dispute or regulatory enquiry.
• Technical and Usage Data: Log data and session records are typically retained for 12 months for security and fraud prevention purposes, after which they are anonymised or deleted.
• Marketing Preferences: Retained until you withdraw consent or opt out of marketing communications, plus a short period to ensure opt-out requests are fully processed across all systems.

When personal data is no longer required, vippkr will securely delete or anonymise it in accordance with our internal data destruction procedures. Anonymised data — which cannot be used to identify you — may be retained indefinitely for analytical and statistical purposes.

10. Cookies Policy

vippkr uses cookies and similar tracking technologies (collectively, "Cookies") on the Platform. Cookies are small text files stored on your device that help us recognise you between visits, maintain your session, remember your preferences, and understand how you use our Platform.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. They enable you to log in, navigate between pages, and use core features. These cannot be disabled without breaking Platform functionality.
• Performance and Analytics Cookies: Collect anonymised data about how users interact with the Platform — which pages are visited most, how long sessions last, and where errors occur. This helps us improve the Platform over time.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and last-visited game category, so you don't need to re-enter them on each visit.
• Targeting and Marketing Cookies: Used, with your consent, to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. These may be set by vippkr or by approved third-party marketing partners.

10.2 Managing Cookies

You can control and manage cookies through your browser settings at any time. Most browsers allow you to view, block, or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use core Platform features including logging in and placing wagers. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

11. Security Measures

vippkr takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• Encryption: All data transmitted between your device and the vippkr Platform is encrypted using TLS (Transport Layer Security). Sensitive stored data, including financial information and identity documents, is encrypted at rest.
• Access Controls: Access to personal data within vippkr's systems is strictly role-based. Only personnel with a legitimate need to access specific categories of data are authorised to do so, and all access is logged.
• Payment Security: Payment processing through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT channels is handled via PCI-DSS compliant infrastructure. vippkr does not store full card numbers or complete banking credentials on its own servers.
• Infrastructure Security: vippkr's hosting infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability scanning. Servers are maintained in access-controlled environments.
• Security Audits: We conduct periodic internal and third-party security audits to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: vippkr maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights, we will notify affected users and relevant authorities within the timeframes required by applicable law.

While vippkr takes all reasonable steps to protect your data, no system is completely immune from security risks. You also play a role in keeping your account secure — please use a strong, unique password for your vippkr account and notify us immediately if you suspect any unauthorised access.

12. Your Rights

As a data subject, you hold the following rights with respect to the personal data vippkr holds about you. These rights are subject to certain limitations and conditions under applicable data protection law, but vippkr will always handle requests in good faith and respond promptly.