23viptk Privacy Policy
— Your Data, Protected

23viptk collects personal data through several distinct channels: directly from you when you register an account or contact support, automatically through your use of the platform, and in limited circumstances from trusted third-party sources. The categories of information we collect are described below.

Registration & Identity Data:

• Full legal name as it appears on your government-issued identification document.
• Date of birth — collected to verify that you meet the minimum age requirement of 18 years.
• Residential address, including district, division, and postal code within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
• Email address used for account communication, promotional correspondence (where opted in), and account recovery.
• Mobile number — used for account verification, transaction alerts, and two-factor authentication (2FA).
• Username and encrypted password hash.

Financial & Transaction Data:

• Payment method details — including the mobile wallet numbers associated with bKash, Nagad, Rocket, and Upay accounts, or the masked card details (last four digits, card type) for Visa and Mastercard transactions.
• Bank account details (account name and account number) where bank transfer is used via BRAC Bank, City Bank, Dutch-Bangla Bank, or other supported institutions.
• Full history of deposits, withdrawals, and internal account transfers, denominated in Bangladeshi Taka (৳ / BDT).
• Records of bonus credits received, wagering activity related to bonus funds, and bonus expiry events.

KYC Verification Documents:

• Copies of government-issued photo identification — such as a National Identity Card (NID), passport, or driving licence — submitted during the Know Your Customer (KYC) verification process.
• Proof of address documentation, such as a recent utility bill, bank statement, or government letter.
• In some circumstances, a selfie photograph taken by the account holder alongside their identification document, to confirm that the document belongs to the person submitting it.

Gameplay & Betting Data:

• Complete history of all games played, bets placed, and sports markets wagered on — including game titles, stake amounts, outcomes, and timestamps.
• Session data: login times, logout times, session duration, and responsible gaming tool usage (deposit limits set, session reminders configured, self-exclusion requests submitted).

Technical & Device Data:

• IP address at the time of each login and each transaction.
• Device type, operating system, and browser version.
• Geolocation data derived from IP address (country and city level — not GPS-level precise location).
• Cookies, session tokens, and similar tracking identifiers — see the Cookies & Tracking section below for full details.

Communication Data:

• The content of all support tickets, live chat transcripts, and emails exchanged between you and the 23viptk support team.
• Records of promotional emails sent to you and your engagement with those communications (open rates and click-through events, where tracked).

23viptk uses the personal data it collects solely for legitimate, clearly defined purposes. We do not sell your personal data to third parties, and we do not use it for purposes unrelated to the operation of the 23viptk platform. The specific purposes for which your data is used are as follows:

• Account Registration & Management: To create and maintain your 23viptk account, verify your identity, enforce the single-account policy, and administer your account settings and preferences.
• Age Verification & KYC Compliance: To confirm that all registered players are at least 18 years of age, and to fulfil the identity verification obligations required of an operator offering real-money gaming services.
• Payment Processing: To process deposits and withdrawals via your chosen payment method — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, BRAC Bank, and City Bank — and to maintain accurate financial records for each transaction.
• Game Delivery & Platform Operation: To provide access to casino games (slots, live dealer, table games, fishing games, and sports betting including BPL, IPL, T20 World Cup, and Bangladesh Tigers matches), and to maintain the technical integrity of the platform.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to enforce responsible gaming limits and self-exclusion requests, and to provide appropriate interventions and support resources in line with our Responsible Gaming policy.
• Fraud Prevention & Anti-Money Laundering: To detect and prevent fraudulent activity — including multi-accounting, bonus abuse, payment fraud, and money laundering — and to report suspicious activity as required by applicable financial crime prevention standards.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and deliver the customer support services described in our Terms & Conditions.
• Marketing & Promotions (where consented): To send you information about 23viptk promotions, seasonal offers (such as Eid, Pohela Boishakh, or Victory Day special bonuses), and platform updates — but only where you have explicitly opted in to receive such communications. You may withdraw consent at any time by contacting [email protected].
• Platform Analytics & Improvement: To analyse aggregated, anonymised usage data that helps 23viptk understand how players interact with the platform, identify areas for improvement, and develop new features and game offerings.
• Legal & Regulatory Obligations: To comply with any legal obligations that apply to the operation of the 23viptk platform, including record-keeping requirements, responses to lawful information requests from authorities, and enforcement of our Terms & Conditions.

Every data processing activity conducted by 23viptk rests on one of the following recognised legal bases. We process your personal data only where we have a valid legal justification for doing so:

• Contractual Necessity: The majority of the data processing described in this policy is necessary for 23viptk to fulfil its contractual obligations to you as a registered player — including operating your account, processing your transactions, and delivering gaming services. Without this processing, 23viptk cannot provide the services you have registered to use.
• Legal Obligation: Certain processing activities — particularly KYC verification, age verification, anti-money laundering transaction monitoring, and record-keeping — are required by legal obligations applicable to real-money online gaming operators. 23viptk must perform this processing regardless of individual consent.
• Legitimate Interests: 23viptk processes certain categories of data — including technical device data, IP logs, and aggregated analytics — on the basis of its legitimate interests in operating a secure, fraud-free platform, preventing abuse, and improving its services. Where we rely on legitimate interests, we have assessed that our interests are not overridden by your fundamental rights and freedoms.
• Consent: Where 23viptk processes your data for purposes that are not strictly necessary — most notably the sending of direct marketing communications and the use of non-essential analytics cookies — we will seek your explicit consent before doing so. You may withdraw consent at any time without affecting the lawfulness of processing already carried out on the basis of consent before its withdrawal.

23viptk uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain the security of your session, and — where you have consented — to gather analytics data that helps us improve your experience. The categories of cookies used on the 23viptk platform are as follows:

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies at any time. Please note that disabling strictly necessary or security cookies will affect your ability to log in to and use the 23viptk platform. Disabling analytics cookies will not affect your access to the platform or any of its features.

23viptk does not sell, rent, or commercially transfer your personal data to any third party. However, there are specific, limited circumstances in which your data may be shared with carefully selected parties in order to deliver the services you have requested or to fulfil our legal obligations:

• Payment Processors: When you make a deposit or request a withdrawal, the necessary transaction details are shared with the relevant payment provider — such as bKash, Nagad, Rocket, Upay, Visa, Mastercard, BRAC Bank, or City Bank — solely to execute the payment. These providers process your data under their own privacy policies and are bound by their own regulatory obligations.
• KYC & Identity Verification Partners: Where 23viptk uses a third-party identity verification service to conduct KYC checks, your identity documents and verification data may be processed by that service on our behalf. Such partners are contractually required to handle your data securely and to use it only for the purpose of completing the verification.
• Game Technology Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive the technical data necessary to deliver their games within the 23viptk platform — such as your player session token and stake amounts. They do not receive your full identity or financial profile.
• Fraud Prevention & Security Services: 23viptk may share IP addresses, device fingerprints, and transaction patterns with specialist fraud prevention and cybersecurity partners to identify and block abusive or fraudulent behaviour.
• Legal & Regulatory Authorities: Where required by law or by a valid legal order, 23viptk will disclose the minimum necessary personal data to competent authorities. Where legally permitted to do so, 23viptk will notify affected players of such disclosures.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 23viptk's business, player data may be transferred to the acquiring entity. Affected players will be notified of any such transfer and of any resulting change to their privacy rights.

All third parties with whom 23viptk shares personal data are required to maintain appropriate technical and organisational security measures and to process that data only for the purposes for which it was disclosed.

23viptk retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or financial record-keeping obligations. The following retention periods apply:

Once the applicable retention period has elapsed and there is no further legal obligation requiring us to retain the data, 23viptk will securely delete or irreversibly anonymise the data in question. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

As a player on the 23viptk platform, you hold the following rights in relation to your personal data. 23viptk is committed to responding to all valid rights requests within 30 calendar days of receipt:

To exercise any of the rights above, submit a written request to [email protected] clearly identifying the right you wish to exercise, the data concerned, and your registered account details. 23viptk may ask you to verify your identity before processing a rights request to ensure data is not disclosed to or altered by an unauthorised party.

23viptk implements a layered approach to data security, combining technical controls, organisational policies, and ongoing staff training to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. The key security measures in place include:

• SSL/TLS Encryption: All data transmitted between your device and 23viptk servers is protected by 256-bit SSL/TLS encryption. Any attempt to intercept data in transit will be rendered unreadable by this encryption layer.
• Password Hashing: Account passwords are never stored in plain text. 23viptk uses industry-standard one-way hashing algorithms (with salting) to store password credentials, meaning that even in the unlikely event of a data breach, raw passwords cannot be recovered from stored hashes.
• Two-Factor Authentication (2FA): Players are encouraged to enable two-factor authentication on their accounts. When 2FA is active, a one-time code sent to your registered mobile number is required in addition to your password at each login, significantly reducing the risk of unauthorised account access.
• Access Controls: Access to personal data within 23viptk's internal systems is restricted on a strict need-to-know basis. Customer support agents, compliance officers, and technical staff are granted only the minimum level of data access required for their specific roles. All internal access is logged and subject to periodic audit.
• Firewall & Intrusion Detection: 23viptk's servers are protected by enterprise-grade firewalls and continuously monitored by intrusion detection systems that flag and respond to anomalous access patterns in real time.
• Secure Data Centres: Player data is stored on servers located in secure, access-controlled data centres with physical security measures including biometric access controls, CCTV monitoring, and redundant power systems.
• Regular Security Audits: 23viptk conducts periodic internal and third-party security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to affected players, 23viptk will notify impacted players without undue delay, describing the nature of the breach, the data involved, and the steps being taken to address it.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 23viptk handles your personal data, please contact our Data Protection team using the details below. All privacy-related communications should be sent in writing to ensure they are properly logged and handled within our formal response process.

Privacy & Data Protection Enquiries:

• Email: [email protected] — please include "Privacy Request" in the subject line.
• Response time: We aim to acknowledge all privacy enquiries within 5 business days and provide a substantive response within 30 calendar days of receipt.
• Language: Requests may be submitted in English. Responses will be provided in English.

Policy Updates: 23viptk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes to applicable law, or improvements to the platform. When material changes are made, we will notify registered players by email and by displaying a prominent notice on the platform for a minimum of 14 days prior to the changes taking effect. The "Effective Date" at the top of this policy will always reflect the date of the most recent revision. Continued use of the 23viptk platform after the effective date of a revised policy constitutes acceptance of the updated terms.

Minors: The 23viptk platform is strictly for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has registered an account or provided personal data to 23viptk, please contact us immediately at [email protected] so that we can take appropriate action, including closing the account and deleting the data concerned.