vippkr Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how vippkr ("vippkr", "we", "us", or "our") collects, processes, stores, and protects personal information provided by users ("you", "your") who register for or use the vippkr online casino and cricket betting platform, accessible at vippkr.club ("the Platform").

vippkr operates this Platform for users in Pakistan and processes personal data in the context of providing online gambling and sports betting services, including PSL cricket betting, live casino games, slot games, and associated PKR payment services via JazzCash, Easypaisa, and partner banking institutions.

By accessing the vippkr Platform, creating an account, or making a deposit, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the vippkr Platform.

2. Data Controller

vippkr is the data controller responsible for the personal data of its registered users. As data controller, vippkr determines the purposes and means of processing your personal data. Inquiries relating to this Privacy Policy or the exercise of data rights may be directed to the contact details set out in Section 14 of this Policy.

3. Personal Data We Collect

vippkr collects the following categories of personal data from users of the Platform:

vippkr does not collect special category data (such as religious or political affiliation) except where required for identity verification or responsible gaming purposes. vippkr does not collect data from users known to be under 18 years of age.

4. How vippkr Uses Your Personal Data

vippkr processes your personal data for the following purposes:

• Account creation and management: To register your vippkr account, verify your identity, and manage your login credentials;
• Service delivery: To operate the betting and casino platform, process deposits and withdrawals in PKR, and settle wagers;
• KYC and fraud prevention: To verify your identity, age (18+), and payment details in compliance with anti-money laundering obligations;
• Responsible gaming: To monitor gambling activity, apply account-level deposit limits, and process self-exclusion requests;
• Customer support: To respond to queries, investigate complaints, and resolve disputes relating to your vippkr account;
• Security: To detect, investigate, and prevent fraudulent transactions, unauthorised access, and other abusive activity;
• Legal compliance: To meet obligations under applicable law, including anti-money laundering regulations and gaming licensing requirements;
• Service communications: To send you transactional notifications (deposit confirmations, withdrawal status, security alerts) relating to your vippkr account.

vippkr does not use your personal data to make fully automated decisions that have a legal or similarly significant effect on you without human review.

5. Legal Basis for Processing

vippkr processes your personal data on the following legal bases:

• Contract performance: Processing necessary to deliver the vippkr service you have contracted for, including account operation, payment processing, and bet settlement;
• Legal obligation: Processing required to comply with applicable law, including KYC and anti-money laundering regulations;
• Legitimate interests: Processing necessary for vippkr's legitimate interests in fraud prevention, platform security, and service improvement, provided such interests are not overridden by your fundamental rights;
• Consent: For marketing communications where your express consent has been obtained. You may withdraw this consent at any time by contacting vippkr support.

6. Data Sharing & Third Parties

vippkr does not sell your personal data to third parties. vippkr may share your personal data with the following categories of recipients where necessary:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah require your payment details to process deposits and withdrawals in PKR;
• KYC providers: Third-party identity verification services used to process CNIC verification and document checks;
• Gaming software providers: Providers of casino games and sports data (for PSL odds and settlement) who may process usage data in connection with service delivery;
• Regulatory authorities: Law enforcement or regulatory bodies where disclosure is required by applicable law, a court order, or regulatory direction;
• IT and security service providers: Infrastructure, hosting, and cybersecurity vendors who process data on behalf of vippkr under contractual data protection obligations.

All third parties with whom vippkr shares personal data are required to handle that data in accordance with applicable data protection standards and the terms of their agreements with vippkr.

7. Cookies & Tracking Technologies

The vippkr platform uses cookies and similar tracking technologies to operate the Platform, maintain your login session, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function, including session management and login state. These cannot be disabled;
• Functional cookies: Used to remember your preferences (for example, preferred language or game lobby layout);
• Analytics cookies: Used to collect aggregated data on how users interact with the vippkr Platform to improve performance and user experience. Data collected is anonymised where possible.

You may control non-essential cookies through your browser settings. Note that disabling functional cookies may affect certain features of the vippkr Platform.

8. Data Retention

vippkr retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law or legitimate business need. In particular:

• Identity and KYC documents are retained for a minimum of five years following account closure, in compliance with anti-money laundering regulations;
• Financial transaction records are retained for a minimum of five years for accounting and regulatory purposes;
• Responsible gaming records (including self-exclusion history) are retained indefinitely to prevent re-registration during active exclusion periods;
• Technical and usage data is retained for up to two years for security and fraud prevention purposes.

Following the applicable retention period, personal data is securely deleted or anonymised in accordance with vippkr's data disposal procedures.

9. Security Measures

vippkr implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the vippkr Platform;
• Encrypted storage of passwords using industry-standard hashing algorithms;
• Two-factor authentication available to all vippkr account holders;
• Access controls limiting employee access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of the vippkr Platform infrastructure.

While vippkr takes reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your vippkr login credentials confidential and notifying vippkr immediately of any suspected unauthorised access.

10. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by vippkr:

• Right of access: You may request a copy of the personal data vippkr holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data, subject to vippkr's legal retention obligations;
• Right to restriction: You may request that vippkr restrict processing of your personal data in certain circumstances;
• Right to portability: You may request your personal data in a structured, machine-readable format where technically feasible;
• Right to object: You may object to processing based on legitimate interests or for marketing purposes;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact vippkr support using the details in Section 14. vippkr will respond within a reasonable timeframe in compliance with applicable law.

11. Minors

The vippkr Platform is strictly for users aged 18 and above. vippkr does not knowingly collect or process personal data of persons under 18 years of age. If vippkr becomes aware that personal data has been collected from a minor, that account will be closed immediately, all data will be deleted (subject to any mandatory legal retention obligations), and any deposited funds will be returned to the payment source.

Parents and guardians who believe their minor child has registered on vippkr are encouraged to contact support immediately.

12. International Data Transfers

Some of the third-party service providers used by vippkr — including gaming software providers and cloud infrastructure partners — may process personal data in jurisdictions outside Pakistan. Where such transfers occur, vippkr takes steps to ensure that appropriate safeguards are in place, including contractual data protection clauses consistent with applicable standards.

13. Changes to This Privacy Policy

vippkr may update this Privacy Policy from time to time. When material changes are made, vippkr will notify registered users via email or a prominent notice on the Platform before the revised Policy takes effect. The "Last updated" date at the top of this page reflects the date of the most recent revision. Continued use of the vippkr Platform following any amendment constitutes acceptance of the revised Privacy Policy.

14. Contact

For questions about this Privacy Policy, to exercise your data rights, or to report a privacy concern, please contact the vippkr data team in English. Contact email: [email protected] (plain text — not a clickable link). Response times may vary but vippkr aims to acknowledge all privacy-related inquiries within 5 business days.