vip1 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how vip1 ("vip1," "we," "us," "our"), the operator of the online gaming platform at vip1.im ("Platform"), collects, processes, stores, and protects personal data relating to registered users, prospective users, and visitors to the Platform ("you," "User").

This Policy applies to all personal data collected through your use of vip1.im, including account registration, deposits, withdrawals, gaming activity, support interactions, and any communication you have with vip1. By using the Platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

2. Data Controller Information

vip1 is the data controller responsible for personal data collected through vip1.im. For all data-related queries, requests, or concerns, Users may contact the vip1 data team via the support channel detailed in Section 14 of this Policy. vip1 is committed to handling personal data in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

3. What Personal Data We Collect

vip1 collects the following categories of personal data from Users:

3.1 Identity Data

• Full legal name as provided at registration or KYC verification
• Date of birth (used for 18+ age verification)
• Copies of government-issued identity documents, including CNIC (Computerised National Identity Card), passport, or national identity document
• Selfie or liveness verification image where required during KYC

3.2 Contact Data

• Email address registered to your account
• Pakistani mobile number registered to your account (03XX format)
• Residential or correspondence address

3.3 Financial Data

• Payment method details used for deposit and withdrawal (e.g., JazzCash wallet number, Easypaisa number, HBL/UBL/Meezan Bank/Bank Alfalah account details)
• Transaction history: deposit amounts, withdrawal requests, bonus credits, and PKR balance records
• Records of any chargebacks, payment disputes, or fraud investigations

3.4 Gaming Activity Data

• Betting history: all wagers placed on cricket, PSL, and other sports markets
• Casino game session data: games played, stakes, outcomes
• Slot and arcade game activity logs
• Session durations, login timestamps, and in-session activity patterns

3.5 Technical Data

• IP address at each login and session
• Device type, operating system, and browser type
• Geolocation data derived from IP address
• Cookie identifiers and session tokens

3.6 Communication Data

• Records of all live chat conversations with vip1 support
• Email correspondence with the vip1 support team
• Records of responsible gaming tool usage (deposit limits set, cool-off periods activated, self-exclusion requests)

4. How We Collect Your Data

vip1 collects personal data through the following means:

• Direct interaction: Data you provide when creating an account, completing KYC verification, making a deposit, contacting support, or updating your account settings.
• Automated collection: Technical data (IP address, device information, session data) collected automatically when you access the Platform, through cookies and server log files.
• Third-party payment processors: Transaction confirmation data received from JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah when you make a deposit or withdrawal.
• Identity verification providers: KYC verification data processed by certified third-party identity verification services on our behalf.
• Fraud prevention tools: Risk assessment signals from fraud detection systems that analyse transaction and behaviour patterns.

5. How We Use Your Personal Data

vip1 uses your personal data for the following purposes:

• To create and manage your account on vip1.im
• To verify your identity and age (18+ requirement) during registration and KYC
• To process deposits, withdrawals, and bonus credits in PKR
• To provide cricket betting, casino, slots, and arcade gaming services
• To comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations
• To detect and prevent fraud, account manipulation, bonus abuse, and prohibited conduct as defined in our Terms and Conditions
• To provide 24/7 English-language customer support via live chat and email
• To send you account-related notifications: security alerts, deposit confirmations, withdrawal updates, and responsible gaming reminders
• To send promotional communications (bonus offers, PSL promotions) where you have consented to marketing, and to honour opt-out requests
• To administer the vip1 VIP loyalty programme and calculate tier status and cashback entitlements
• To improve Platform performance, user experience, and game/market offerings based on aggregated usage analytics
• To comply with applicable regulatory, legal, and audit obligations

6. Legal Basis for Processing

vip1 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the terms of your account agreement with vip1, including account management, payment processing, and gaming services.
• Legal obligation: Processing required to comply with applicable AML, KYC, and regulatory requirements.
• Legitimate interests: Processing for fraud prevention, Platform security, abuse detection, and business analytics, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where you have expressly opted in. You may withdraw consent at any time by updating your communication preferences in account settings or by contacting support.

7. Data Sharing & Third Parties

vip1 does not sell your personal data to third parties. We share personal data only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah receive the minimum necessary data required to process your transactions.
• KYC/identity verification providers: Certified identity verification partners receive document and biometric data solely for the purpose of fulfilling age and identity verification requirements.
• Game providers: Game session data may be shared with licensed game software providers to deliver game services and resolve technical disputes.
• Fraud and risk management services: Transaction and behavioural data may be shared with fraud detection platforms for risk assessment purposes.
• Regulatory and law enforcement authorities: vip1 will disclose personal data to competent authorities where required by applicable law, court order, or regulatory direction, including reports of suspicious financial activity.
• Business transfers: In the event of a merger, acquisition, or sale of Platform assets, your personal data may be transferred to the acquiring entity, subject to this Policy continuing to apply.

All third parties with whom vip1 shares personal data are required to process it in accordance with applicable data protection standards and strictly for the purposes specified.

8. Cookies & Tracking Technologies

vip1 uses cookies and similar tracking technologies on vip1.im to operate the Platform, maintain your session, and analyse usage patterns. The following cookie categories are used:

• Strictly necessary cookies: Required for Platform functionality, including authentication, session management, and security. These cannot be disabled without affecting Platform operation.
• Functional cookies: Used to remember your preferences (such as language settings and account display options) to personalise your experience.
• Analytics cookies: Used to collect aggregated information about Platform usage — page views, session durations, and feature engagement. This data is used solely for Platform improvement and does not identify individual users.
• Security cookies: Used to detect and prevent fraudulent login attempts and session hijacking.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impact Platform functionality, including your ability to log in and maintain a session.

9. Data Retention

vip1 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations. Specific retention periods include:

• Account and identity data: retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Transaction records: retained for a minimum of five (5) years from the date of transaction.
• KYC documentation: retained for a minimum of five (5) years following the completion of the KYC process or account closure, whichever is later.
• Support communication records: retained for a minimum of three (3) years.
• Gaming activity logs: retained for a minimum of three (3) years.

Following the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

10. Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights with respect to your personal data held by vip1:

• Right of access: You may request a copy of the personal data vip1 holds about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right of erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to overriding legal retention obligations (e.g., AML record-keeping).
• Right to restrict processing: You may request that vip1 limit how it processes your personal data in specific circumstances.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request a structured, machine-readable copy of your personal data.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention, subject to overriding legitimate grounds.

To exercise any of the above rights, please contact vip1 support via live chat or email as detailed in Section 14. vip1 will respond to all valid data rights requests within 30 calendar days. Identity verification may be required before processing your request.

11. Data Security

vip1 implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption on all Platform pages, including the login page, cashier, and account settings
• Encrypted storage of sensitive personal and financial data at rest
• Access controls limiting personal data access to authorised personnel on a need-to-know basis
• Two-factor authentication (2FA) available to all users as an additional account protection layer
• Regular security assessments and vulnerability testing of Platform infrastructure
• Incident response procedures for data breach notification in accordance with applicable obligations

You are responsible for maintaining the security of your own account credentials. vip1 will never ask for your password via email, live chat, or any other communication channel.

12. Children's Privacy

The vip1 Platform is strictly intended for persons aged 18 years and above. vip1 does not knowingly collect personal data from individuals under the age of 18. Age verification is performed as part of the KYC process for all registered accounts. If vip1 becomes aware that personal data has been collected from a person under 18, the relevant account will be immediately suspended and the data will be deleted. If you believe a minor has registered on the Platform, please contact support immediately.

13. Amendments to This Policy

vip1 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, regulatory requirements, or Platform features. Material amendments will be communicated to registered Users via email or an on-Platform notification. The revised Policy will be effective from the date of publication on vip1.im. Continued use of the Platform after the effective date constitutes your acceptance of the updated Policy.

14. Contact & Data Queries

For all data protection queries, rights requests, or privacy concerns, please contact the vip1 support team via 24/7 live chat on vip1.im. Alternatively, you may contact us by email at: [email protected] (this address is provided as plain text and is not a clickable link). The support team will acknowledge your query promptly and escalate data-specific requests to the relevant data team within 5 business days.