Privacy Policy —
yesvip Data Protection

yesvip operates as the data controller in respect of personal data collected through the yesvip platform. As the data controller, yesvip determines the purposes and means by which your personal data is processed. yesvip is responsible for ensuring that all personal data handling on this platform complies with applicable data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality.

All data protection enquiries, subject access requests, erasure requests, and privacy-related complaints should be directed to our support team at [email protected]. We aim to acknowledge all formal privacy enquiries within 2 business days and to respond substantively within 5 business days (Bangladesh Standard Time, UTC+6).

This Privacy Policy applies to all personal data collected through the yesvip website at yesvip.app, any associated mobile interfaces, and any communications between you and yesvip (including live chat, email, and support ticket interactions).

yesvip collects personal data through a number of channels during the course of your registration and use of the platform. The categories of data collected are described below.

Registration Data

When you create a yesvip account, we collect the information you provide during the registration process, including:

• Full legal name;
• Date of birth (for age verification purposes);
• Email address;
• Mobile phone number (including country code);
• Preferred username and password (stored in encrypted form);
• City or district of residence (e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna).

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) programme, we may collect:

• Copies of government-issued identity documents (National ID card, passport, or driving licence);
• Proof of address documentation (utility bill, bank statement, or similar);
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account);
• Selfie or live photo for identity matching purposes.

Transaction Data

We collect records of all financial transactions conducted through your account, including:

• Deposit amounts, timestamps, and payment method used;
• Withdrawal amounts, timestamps, and destination payment method;
• Payment method identifiers (e.g., bKash mobile number, wallet address for USDT/Bitcoin);
• Currency and conversion rates applicable at the time of transaction.

Gameplay & Activity Data

yesvip logs your activity on the platform for the purposes of game integrity, fraud prevention, and service improvement:

• Games played, bet amounts, and game outcomes;
• Sports betting history, including markets selected and stakes placed;
• Session start and end times, session duration;
• Bonus claims, wagering progress, and promotional participation records.

Technical & Device Data

When you access yesvip, we automatically collect certain technical data about your device and connection:

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Referring URL and on-site navigation paths;
• Cookie identifiers and session tokens (see Section 4 — Cookies).

Communications Data

If you contact yesvip via live chat, email, or support ticket, we retain records of that correspondence including the content of messages, timestamps, and any files or screenshots shared with our team.

yesvip processes your personal data for the following specific purposes. We process data only where a lawful basis exists, as indicated for each purpose below.

• Account creation and management: To register your account, verify your identity, manage your profile, and facilitate account-related communications. Basis: contractual necessity.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, USDT, Bitcoin, Visa, and Mastercard, and to maintain accurate financial records. Basis: contractual necessity and legal obligation.
• Age and identity verification: To confirm that you meet the minimum age requirement of 18 years and that your identity matches the registration information provided. Basis: legal obligation.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other prohibited conduct. Basis: legitimate interest and legal obligation.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling, to enforce self-exclusion requests, and to apply responsible gaming tools and limits. Basis: legal obligation and legitimate interest.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance. Basis: contractual necessity.
• Platform improvement: To analyse usage patterns, test new features, and optimise the performance and user experience of the yesvip platform. Basis: legitimate interest.
• Marketing communications: To send you promotional offers, bonus notifications, and tournament alerts — but only where you have given explicit consent. You may withdraw marketing consent at any time by contacting [email protected]. Basis: consent.
• Legal compliance: To comply with applicable laws, regulations, court orders, and lawful requests from regulatory or law enforcement authorities. Basis: legal obligation.

yesvip uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate the platform, remember your preferences, maintain your login session, and analyse how the site is used. This section explains what types of cookies we use and for what purposes.

Strictly Necessary Cookies

These cookies are essential for the platform to function. Without them, core features such as account login, session management, and security checks would not work. These cookies cannot be disabled without significantly impairing your ability to use yesvip.

• Session authentication tokens (to keep you logged in);
• CSRF protection tokens (to prevent cross-site request forgery attacks);
• Load balancing cookies (to route requests to the correct server).

Functional Cookies

Functional cookies allow yesvip to remember choices you have made — such as your preferred language, display preferences, or last-visited game category — in order to provide a more personalised experience on your next visit.

Analytics Cookies

yesvip uses analytics tools to understand how players interact with the platform. Analytics cookies collect aggregated, anonymised data about page views, time on page, navigation paths, and device types. This information helps us identify areas for improvement and measure the effectiveness of new features. Individual players cannot be identified from analytics data alone.

Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse non-essential cookies, delete existing cookies, and receive alerts when new cookies are set. Please note that disabling strictly necessary cookies will prevent you from using core platform features, including account login.

yesvip does not sell, rent, or share your personal data with third parties for their own marketing purposes. We may, however, disclose your personal data to the following categories of third parties in the circumstances described below:

Payment Processors

To process your deposits and withdrawals, we share necessary transaction data with our payment partners including bKash, Nagad, Rocket, Upay, and cryptocurrency processing services. These partners receive only the data required to execute and verify the specific transaction.

Identity Verification Providers

To fulfil our KYC and age-verification obligations, we may share identity document data with specialist third-party verification providers. These providers are contractually bound to process data solely for the purpose of identity verification and to maintain appropriate security standards.

Fraud Prevention & Security Services

yesvip works with fraud detection and cybersecurity service providers who analyse platform traffic and account activity to identify and prevent fraudulent behaviour. These providers process data on our behalf under strict data processing agreements.

Game Providers

Certain game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited session data (such as a pseudonymous player identifier and current balance) necessary to run the game within the yesvip environment. Game providers do not receive your full name, contact details, or payment information.

Legal & Regulatory Authorities

yesvip may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other public authorities when required to do so by applicable law, court order, or in response to a lawful request. We will notify you of any such disclosure where we are legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of yesvip's assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players via their registered email address prior to any such transfer, and the acquiring entity will be bound by this Privacy Policy.

yesvip retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The standard retention periods applicable to each category of data are set out in the table in Section 2 of this Policy.

As a general principle, yesvip retains account and transaction data for a minimum of five years following the date of account closure. This retention period is determined by financial record-keeping obligations applicable to payment service operations.

Once the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Anonymised or aggregated data that cannot identify any individual may be retained indefinitely for statistical and analytical purposes.

Dormant Account Data

If your yesvip account becomes dormant (no login activity for 12 consecutive months), we will retain your data in line with the standard retention periods described above. Dormancy does not trigger early deletion of your data. You can reactivate a dormant account at any time by logging in and completing any outstanding verification requirements.

As a registered player on yesvip, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within 5 business days (BST, UTC+6).

• Right of Access: You have the right to request a copy of the personal data yesvip holds about you, along with information about how it is processed and for what purposes.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: In certain circumstances — such as where data is no longer necessary for the purpose for which it was collected, or where you withdraw consent — you may request deletion of your personal data. Note that this right is subject to overriding legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you have the right to receive a copy of your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interest, including profiling. If you object, we will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

yesvip implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following measures:

• Transport Layer Security (TLS): All data transmitted between your browser or device and the yesvip platform is encrypted using TLS 1.2 or higher. This ensures that your login credentials, payment data, and personal information cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive personal data — including identity documents, payment identifiers, and password hashes — is encrypted when stored in our databases using strong encryption standards.
• Access Controls: Access to personal data within yesvip's internal systems is restricted to authorised personnel who require access to perform their specific job function. Role-based access controls are enforced and reviewed regularly.
• Two-Factor Authentication (2FA): yesvip encourages all players to enable 2FA on their accounts for an additional layer of login security. Internal system access for yesvip staff requires multi-factor authentication.
• Security Monitoring: yesvip maintains continuous security monitoring of its platform infrastructure to detect and respond to suspicious activity, intrusion attempts, and anomalous data access patterns.
• Penetration Testing: yesvip engages independent security specialists to conduct periodic penetration testing and vulnerability assessments of the platform.
• Incident Response: In the event of a personal data breach that poses a risk to affected individuals, yesvip will notify impacted players via their registered email address without undue delay and will take immediate remedial action to contain and investigate the breach.

yesvip is an online gambling platform intended exclusively for adults aged 18 years and above. We do not knowingly collect, store, or process personal data from any individual under the age of 18. The yesvip platform is not designed for, directed at, or marketed to minors.

Age verification is a mandatory step of the yesvip account registration process. We use a combination of self-declaration and documentary verification (via KYC processes) to confirm that all registered players meet the minimum age requirement. Where we have reasonable grounds to suspect that a user is under 18 years of age, we will suspend the account pending age verification and may permanently close the account if the suspicion is confirmed.

If you are a parent or guardian and believe that a minor in your care has registered an account on yesvip without your knowledge, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action, including account closure and return of any deposits, in accordance with our minor protection policy.

yesvip supports responsible gaming education and encourages parents and guardians to use parental control software to restrict minors' access to online gambling platforms. Resources on responsible gaming and tools to help manage gambling behaviour are available on our Responsible Gaming page.

yesvip reserves the right to update or amend this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data we collect, new purposes for which we use data, or new third parties to whom data is disclosed — we will notify registered players by sending an email to the address associated with their account and/or by displaying a prominent notice on the yesvip platform. The notification will clearly state the effective date of the updated Policy.

Minor changes — such as typographical corrections, formatting updates, or clarifications that do not substantively alter the rights or obligations of either party — may be made without prior notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the yesvip platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should stop using the Platform and may request account closure by contacting [email protected]. Closure requests submitted on the basis of a Privacy Policy change will be processed on a priority basis.

We encourage all players to review this Privacy Policy periodically to stay informed about how yesvip collects, uses, and protects your personal data. The version of this Policy currently published at yesvip.app/privacy-policy is always the version that applies to your use of the Platform.