96vip Privacy Policy — Your Data, Your Rights

96vip collects personal information through a number of channels: directly from you when you register an account or contact support, automatically when you use the platform, and in limited circumstances from trusted third-party sources such as payment processors and identity verification providers.

Information you provide directly:

• Registration data: Full legal name, date of birth, email address, mobile phone number, and preferred currency (Bangladeshi Taka, ৳).
• KYC verification documents: National Identity Card (NID), passport, driving licence, or other government-issued photo ID; proof of address documents such as utility bills or bank statements.
• Payment information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details (DBBL, City Bank, BRAC Bank), and transaction records. We do not store full card numbers or mobile banking PINs.
• Communications: Messages sent to our support team via live chat, email, or any feedback forms on the platform.
• Responsible gaming submissions: Self-exclusion requests, deposit limit preferences, and session time-out configurations.

Information collected automatically:

• Device and browser data: IP address, device type, operating system, browser version, and screen resolution.
• Usage data: Pages visited, games played, bets placed (including stake amounts, odds selected, and outcomes), session duration, and navigation path through the platform.
• Geolocation data: Approximate geographic location derived from your IP address, used to deliver locally relevant content (e.g., BPL cricket markets for Dhaka-based players) and to comply with access restriction requirements.
• Cookie and tracking data: See the Cookies & Tracking section below for full details.

Information from third parties: We may receive identity verification results from KYC partners, fraud signals from payment processors, and age verification confirmations from trusted third-party services. This data is used solely for compliance and security purposes and is handled with the same level of protection as data you provide directly.

96vip processes your personal data only for legitimate, specified purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which we use your data are set out below, together with the legal basis for each:

Where 96vip relies on consent as the legal basis for processing — for example, to send you promotional emails about new bonuses or seasonal offers — you have the right to withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

We do not use automated decision-making or profiling in a way that produces legal or similarly significant effects on any individual player, except where required by our fraud prevention and responsible gaming obligations. Where such automated processing does occur, you have the right to request human review of any decision that affects you.

96vip does not sell, lease, or trade your personal information to any third party for commercial marketing purposes. We share personal data with external parties only in the following limited circumstances, and only to the minimum extent necessary for each specific purpose:

• Payment processors: Mobile wallet providers (bKash, Nagad, Rocket, Upay) and banking partners (DBBL, City Bank, BRAC Bank) receive the transaction data required to process your deposits and withdrawals. These partners operate under their own privacy policies and are bound by applicable financial regulations.
• Identity verification (KYC) providers: We engage trusted third-party KYC service providers to verify the authenticity of identity documents submitted by players. These providers are contractually restricted from using your data for any purpose beyond the verification service.
• Game content providers: When you play games supplied by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, a session token and anonymised player identifier are shared with the relevant provider to load and operate the game. Your full name and contact details are not shared with game providers.
• Analytics and performance platforms: We use anonymised, aggregated usage data with analytics tools to understand platform performance. No personally identifiable information is included in these data sets.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, courts, or financial regulators where we are required to do so by applicable law, legal process, or where we believe disclosure is necessary to prevent fraud or protect the rights and safety of users or third parties.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the 96vip business, personal data held by the platform may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the new controller.

96vip uses cookies and similar tracking technologies to provide a reliable, personalised, and secure browsing experience. A cookie is a small text file placed on your device when you visit the platform. The categories of cookies we use are as follows:

Strictly necessary cookies cannot be disabled, as they are essential to the secure and functional operation of the platform — including maintaining your logged-in session and preventing cross-site request forgery. All other cookie categories may be managed through your browser settings. Most modern browsers allow you to block, delete, or receive notifications about cookies; please refer to your browser's help documentation for specific instructions.

Please be aware that disabling functional or analytics cookies may affect the performance and personalisation of your 96vip experience. It will not prevent you from accessing the core betting and casino features of the platform.

96vip does not use cross-site tracking cookies or share browsing data with advertising networks. We do not serve third-party targeted advertisements on the platform.

96vip retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account and for a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC verification documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of each transaction to satisfy financial record-keeping obligations.
• Support communications: Retained for up to three years from the date of the interaction, or longer if the communication relates to an ongoing dispute, investigation, or legal claim.
• Analytics and usage data: Anonymised aggregated data may be retained indefinitely for platform development purposes. Individually identifiable usage logs are retained for up to 24 months.
• Marketing preferences and consent records: Retained for the lifetime of the account and for two years after account closure to demonstrate compliance with consent obligations.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction. Where deletion is not immediately possible due to backup systems or archival processes, the data is isolated and protected from further active processing until deletion can be completed.

96vip employs a layered approach to data security, combining technical controls, organisational procedures, and physical safeguards to protect your personal information against unauthorised access, loss, alteration, or disclosure. Key security measures in place include:

• TLS/SSL encryption: All data in transit between your device and our servers is encrypted using Transport Layer Security (TLS 1.2 or higher). You can verify this by the padlock symbol in your browser's address bar when visiting 96vip.app.
• Encrypted storage: Sensitive data at rest — including KYC documents, payment details, and account credentials — is stored using AES-256 encryption on hardened servers.
• Access controls: Access to personal data is strictly limited to authorised personnel who require it to perform their job functions. All staff with access to personal data undergo privacy and security training and are bound by confidentiality obligations.
• Intrusion detection: Our infrastructure is monitored continuously for suspicious activity. Anomalous access patterns trigger automated alerts and human review.
• Regular security assessments: We conduct periodic internal security reviews and engage qualified third-party professionals to perform independent assessments of our data security posture.
• Password security: Account passwords are stored as salted cryptographic hashes. We never store passwords in plain text and cannot retrieve them — only a reset is possible.

While 96vip takes all reasonable precautions to protect your data, no system connected to the internet can guarantee absolute security. You also play an important role in keeping your account secure: use a strong, unique password for your 96vip account, do not share your login credentials, and contact our support team immediately if you suspect unauthorised access to your account.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, 96vip will notify affected individuals without undue delay and will take all necessary steps to contain and remediate the breach.

As a data subject, you hold a number of rights in relation to the personal information that 96vip holds about you. We are committed to honouring these rights promptly and transparently. Your rights include:

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being processed. We will provide this within 30 days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update most basic account information directly from your account profile settings.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing based on legitimate interests. Erasure requests are subject to our legal retention obligations.
• Right to restrict processing: In certain circumstances, you may request that we suspend the processing of your personal data — for example, while the accuracy of the data is being contested, or while an objection is being considered.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where that processing is based on legitimate interests or is carried out for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Rights related to automated decision-making: You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you, unless such processing is necessary for a contract or is permitted by applicable law.

To exercise any of the above rights, please contact our support team via live chat or by emailing [email protected]. We will verify your identity before processing any request and will respond within 30 days. If a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will inform you accordingly.

If you are not satisfied with our response to a privacy request or believe that we are processing your data in violation of applicable law, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

96vip reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal and regulatory requirements. When we make material changes to this policy, we will notify registered players via email or a prominent in-platform notification at least 14 days before the changes take effect.

The "Last updated" date at the top of this page will always reflect the date on which the most recent revision was published. We encourage you to review this Privacy Policy periodically to stay informed about how 96vip protects your personal information. Your continued use of the platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 96vip handles your personal data, please contact us through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live chat: Available 24/7 through the support widget on the 96vip platform
• Response time: We aim to respond to all privacy-related enquiries within two business days (Bangladesh Standard Time, UTC+6)

This Privacy Policy is written in English. It governs the 96vip platform at 96vip.app and applies to all players regardless of geographic location who access the platform. For the avoidance of doubt, where this policy refers to "personal data" or "personal information", these terms are used interchangeably to mean any information that identifies or could be used to identify a living individual.