vaptaka Privacy Policy
At vaptaka we take your privacy seriously. This Privacy Policy explains exactly what personal data we collect when you use our platform, why we collect it, how it is stored and protected, who we may share it with, and what rights you hold over your own information. We are committed to handling your data with transparency, care and full respect for your privacy.
Our Privacy Principles
Minimal Data Collection
vaptaka collects only the personal data that is strictly necessary for the operation of its platform, compliance with applicable regulations, and provision of a safe gaming experience. We do not collect data speculatively or for purposes unrelated to our services.
No Unauthorised Sharing
Your personal data is never sold, rented or traded to third-party marketers or data brokers. We share data only where required by law, necessary for payment processing, or essential for delivering platform services — and always under strict data processing agreements.
SSL Encryption at All Times
All data transmitted between your device and the vaptaka platform is encrypted using industry-standard SSL/TLS protocols. Sensitive information such as payment details, identity documents and login credentials are encrypted both in transit and at rest on our secured servers.
Your Rights Are Respected
You have the right to access, correct, export and request deletion of your personal data at any time. Requests are handled by our dedicated support team and processed within the timeframes set out in this policy. Contact support@vaptaka to exercise your rights.
Payment Data Handled Separately
Financial transaction data — including bKash, Nagad and Rocket payment records — is handled through certified payment gateways that operate under their own security and compliance standards. vaptaka stores only the minimum reference data required for transaction reconciliation and dispute resolution.
Policy Change Notifications
If this Privacy Policy is updated in a way that materially affects how your data is used, you will be notified by email at your registered address at least 7 calendar days before the changes take effect. Continued use of vaptaka after the effective date constitutes acceptance of the updated policy.
1. Data We Collect
vaptaka collects personal data through several channels: directly from you when you register an account or interact with the platform, automatically through your use of the site, and from third-party verification and payment service providers where necessary for compliance. The categories of data we collect are described below.
| Data Category | Specific Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID / passport number, selfie photograph | Registration form, KYC verification upload |
| Contact Data | Email address, mobile phone number (Bangladesh), residential address | Registration form, account settings |
| Financial Data | bKash / Nagad / Rocket account numbers, Visa/Mastercard last-4 digits, transaction history, deposit and withdrawal amounts in BDT | Finance / Wallet section, payment gateway callbacks |
| Gaming Data | Bet history, game session logs, win/loss records, bonus usage, wagering progress | Platform game servers, sports trading system |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time-zone (BST UTC+6) | Automatic collection via server logs and cookies |
| Usage Data | Pages visited, features used, click paths, session duration, referral source | Analytics cookies and server logs |
| Communications Data | Live chat transcripts, support email content, complaint records | Customer support channels |
Data We Do Not Collect
vaptaka does not collect full payment card numbers, CVV codes or PIN numbers at any point. Full card data is handled exclusively by our certified payment gateway partners and is never transmitted to or stored on vaptaka servers. We also do not collect biometric data beyond the identity photograph required for KYC verification, and we do not collect information about racial or ethnic origin, political opinions, religious beliefs, or health data unless voluntarily provided in the context of a responsible gaming self-exclusion request.
2. How We Use Your Data
vaptaka processes your personal data on the basis of one or more of the following lawful grounds: performance of a contract (providing you with the services you have requested), compliance with a legal obligation, our legitimate interests in operating a safe and fair platform, and — where required — your explicit consent.
Core Service Delivery
- Creating and maintaining your player account, including account security and password recovery
- Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard and bank transfer services
- Providing access to casino games, sports betting markets, and all other platform features
- Crediting and tracking bonuses, free spins and promotional offers
- Delivering customer support responses via live chat and email
Compliance and Safety
- Verifying your identity and age (18+) as part of the Know Your Customer (KYC) process
- Monitoring for and preventing money laundering, fraud, multi-accounting and other prohibited activity
- Responding to requests from law enforcement, regulatory authorities or courts where legally required
- Enforcing self-exclusion orders and responsible gaming limits set by or for a player
Platform Improvement and Communication
- Analysing usage patterns and gameplay behaviour to improve site features, game selection and performance
- Sending transactional communications such as deposit confirmations, withdrawal approvals and security alerts
- Sending promotional communications (bonuses, seasonal offers, BPL / IPL cricket promotions) where you have not opted out — you may unsubscribe from marketing emails at any time via the link in any email we send
- Conducting internal audits and quality assurance reviews of our customer support processes
3. Data Sharing & Disclosure
vaptaka does not sell, rent or otherwise commercially transfer your personal data to third parties. We share data only in the circumstances described below, and always under appropriate contractual safeguards or legal obligations.
Payment Service Providers
To process deposits and withdrawals, we share the minimum necessary financial and identity data with our payment partners, including bKash, Nagad, Rocket, Upay and card processing gateways. These partners operate under their own privacy policies and are independently certified for data security compliance. vaptaka requires all payment partners to process your data solely for the purpose of completing your requested transaction.
Game Studio Providers
Casino games on vaptaka are delivered by third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming and Spribe. These providers receive your account session token and stake data to operate the game. They do not receive your full identity or financial records. Game session data is governed by each studio's own data processing terms.
Identity Verification Partners
For KYC verification, your identity document images and supporting data may be shared with certified identity verification service providers. These providers process your data solely for the purpose of confirming your identity and age in accordance with anti-money laundering requirements. All verification partners are bound by strict confidentiality obligations.
Law Enforcement and Legal Requests
vaptaka will disclose personal data to law enforcement agencies, regulators or courts when required to do so by applicable law, a valid court order, or in response to a lawful regulatory investigation. We will notify affected players of such disclosures wherever legally permitted to do so.
Business Transfers
In the event of a merger, acquisition, asset sale or corporate restructuring involving vaptaka, player data may be transferred as part of that transaction. Players will be notified of any such transfer and of any changes to data handling that result from it, with a minimum notice period of 30 calendar days before the transfer takes effect.
5. Data Retention
vaptaka retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The table below summarises our standard retention periods by data category.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML compliance, dispute resolution |
| Financial Transaction Data | 7 years from transaction date | Financial record-keeping obligations |
| Gaming Session Logs | 3 years from session date | Dispute resolution, fair play audit |
| KYC Documents | Duration of account + 5 years after closure | Anti-money laundering regulations |
| Support Communications | 3 years from last interaction | Quality assurance, dispute evidence |
| Analytics & Usage Data | 26 months (rolling) | Platform improvement, trend analysis |
| Marketing Preferences | Until opt-out or account closure | Consent-based processing |
When a retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Anonymised, aggregated data may be retained indefinitely for statistical and research purposes, as it no longer constitutes personal data.
Where you request account closure, we will initiate deletion of data that is not subject to a mandatory legal retention period within 30 calendar days of the closure being confirmed. Data subject to legal retention obligations will be held for the applicable period and then deleted.
6. Data Security
vaptaka implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. Our security programme includes the following controls:
- Transport Encryption: All data exchanged between your browser or app and the vaptaka platform is encrypted using TLS 1.2 or higher. HSTS (HTTP Strict Transport Security) is enforced to prevent protocol downgrade attacks.
- Data at Rest Encryption: Databases containing personal and financial data are encrypted at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management service separate from the data stores.
- Access Controls: Access to systems holding personal data is restricted to authorised personnel on a strict need-to-know basis. All administrative access is logged, monitored and subject to multi-factor authentication.
- Intrusion Detection: Our infrastructure is monitored 24 hours a day by automated intrusion detection systems. Anomalous access patterns trigger immediate alerts to our security operations team.
- Penetration Testing: Independent security assessments and penetration tests are conducted on the vaptaka platform on a regular basis. Critical findings are remediated on a priority basis.
- Staff Training: All vaptaka staff who handle personal data receive mandatory data protection and security awareness training at onboarding and annually thereafter.
While vaptaka takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. You also play an important role in keeping your account secure — choose a strong, unique password, enable two-factor authentication where available, and never share your login credentials with any other person.
7. Your Privacy Rights
As a player on vaptaka, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at support@vaptaka. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days.
| Your Right | What It Means |
|---|---|
| Right of Access | You may request a copy of all personal data we hold about you, along with information on how it is processed and on what legal basis. |
| Right to Rectification | If any personal data we hold is inaccurate or incomplete, you may request that it be corrected or updated. You may also update most account details directly via your account dashboard. |
| Right to Erasure | You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal retention obligation applies. |
| Right to Restriction | You may request that we restrict processing of your data while a dispute about its accuracy or lawfulness is being resolved. |
| Right to Data Portability | You may request a machine-readable export of the personal data you have provided to us directly, in a structured and commonly used format (JSON or CSV). |
| Right to Object | You may object to processing of your data based on our legitimate interests, including the sending of marketing communications. Objecting to marketing will not affect your ability to use the platform. |
| Right to Withdraw Consent | Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal. |
Certain rights may be limited where vaptaka has a legal obligation to retain data (for example, AML record-keeping requirements) or where exercising the right would prejudice an ongoing investigation. We will explain any such limitation clearly when responding to your request.
8. Contact & DPO
If you have any questions, concerns or requests relating to this Privacy Policy or to the way vaptaka handles your personal data, please contact our support team using the details below. We are available 24 hours a day, 7 days a week.
- Email: support@vaptaka — plain text, non-clickable
- Live Chat: Available inside your account dashboard after login
- Response Time: We aim to acknowledge all privacy-related queries within 5 business days and provide a full response within 30 calendar days
For complex or sensitive data requests — such as full data subject access requests, erasure requests or data portability exports — please use the subject line "Privacy Request" when contacting us by email so that your message is routed directly to the appropriate team.
vaptaka is committed to maintaining a transparent and respectful relationship with every player on our platform. Your privacy is not a compliance checkbox for us — it is a fundamental part of how we operate and how we earn the trust of players across Dhaka, Chittagong, Sylhet, Khulna and throughout Bangladesh.
Your Privacy Matters to Us
Have questions about your data? Our support team is on hand around the clock. You can also explore our full Terms & Conditions, read our Responsible Gaming guidelines, or head directly to the platform.
18+ only. Play responsibly. For entertainment purposes only.