heyvip Privacy Policy

heyvip ("heyvip", "we", "us", "our") operates the online casino and sports betting platform accessible at heyvip.lat. We understand that your personal data is important to you, and we take our responsibility as custodians of that data seriously. This Privacy Policy ("Policy") sets out in clear terms what personal information heyvip collects from users of the platform ("you", "your", "Player"), why we collect it, how we use it, with whom we share it, and what rights you have in relation to it.

By registering a heyvip account, completing the heyvip Login process, using any service on the heyvip platform, or simply browsing the heyvip website, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the heyvip platform and may request account closure by contacting [email protected].

This Policy should be read alongside heyvip's Terms & Conditions and Responsible Gaming policy, both of which form part of the overall framework governing your relationship with heyvip. In the event of any conflict between this Policy and those documents on a data protection matter, this Policy shall prevail.

For the purposes of applicable data protection law, heyvip is the data controller in respect of the personal data it collects and processes from players using the heyvip platform. As data controller, heyvip determines the purposes for which and the means by which personal data is processed, and bears responsibility for ensuring that such processing is conducted lawfully, fairly, and transparently.

If you have any questions regarding heyvip's role as data controller, the lawful basis on which your data is processed, or any other data protection matter, please contact the heyvip data protection team at [email protected]. All data protection enquiries are handled in English and will receive a substantive response within 30 calendar days.

heyvip collects personal data across several categories depending on the nature of your interaction with the platform. The following table summarises the main categories of personal data collected and the context in which each category arises:

heyvip does not knowingly collect special categories of sensitive personal data (such as health data, biometric data, or political opinions) unless this is strictly necessary for responsible gaming obligations — for example, where a player self-discloses a gambling-related health concern when requesting a self-exclusion. In such cases, the data is processed solely to fulfil the responsible gaming request and is retained only for as long as necessary.

heyvip collects personal data through the following primary channels:

• Direct collection: Information you provide when creating your account, completing identity verification, making deposits or withdrawals, contacting our support team, or updating your account profile after heyvip Login.
• Automated collection: Technical and usage data collected automatically as you navigate the heyvip platform, including via cookies, web beacons, pixel tags, server logs, and session-tracking technologies.
• Third-party sources: Identity and address verification data obtained from third-party KYC and anti-fraud service providers; payment transaction data passed to heyvip by payment processors such as bKash, Nagad, Rocket, and banking partners; fraud-screening data from specialist fraud prevention agencies.
• Publicly available sources: Sanction lists, politically exposed persons (PEP) databases, and adverse media screening tools used for anti-money laundering compliance purposes.

heyvip uses the personal data it collects for the following purposes. Each purpose is matched to one or more lawful bases for processing as described in Section 6:

• Account management: Creating and maintaining your heyvip account, authenticating your identity during heyvip Login, and administering your account profile and preferences.
• Service delivery: Enabling access to casino games, sports betting markets, live dealer tables, and all other products available on the heyvip platform.
• Payment processing: Processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, SureCash, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard; reconciling transactions; and resolving payment disputes.
• Identity verification and fraud prevention: Verifying your identity in accordance with know-your-customer (KYC) requirements; detecting and preventing fraud, bonus abuse, money laundering, and other prohibited activities.
• Responsible gaming: Monitoring wagering patterns for indicators of problem gambling; implementing and enforcing deposit limits, loss limits, session reminders, cool-off periods, and self-exclusion requests.
• Customer support: Responding to your enquiries, complaints, and dispute submissions; maintaining records of support interactions for quality assurance and training purposes.
• Legal and regulatory compliance: Fulfilling obligations under applicable anti-money laundering (AML) legislation, responding to lawful orders from competent authorities, and maintaining records required by law.
• Marketing and promotions: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time through your account settings or by emailing [email protected].
• Platform improvement: Analysing aggregated usage data to improve platform performance, game offerings, user experience, and customer service quality.

heyvip relies on the following lawful bases to process your personal data, in accordance with applicable data protection principles:

Where heyvip relies on legitimate interests as the lawful basis, we have assessed that our interests do not override your fundamental rights and freedoms. You may request further details of this balancing assessment by contacting [email protected].

heyvip does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, SureCash, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard — solely for the purpose of processing your financial transactions.
• Identity verification and KYC partners: Third-party KYC and document verification providers engaged by heyvip to verify player identities and screen against fraud and AML watchlists.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game suppliers may receive anonymised session data required to render game content correctly within the heyvip platform environment.
• IT and infrastructure service providers: Cloud hosting, cybersecurity, and platform maintenance partners who process data strictly as data processors under contractual obligations that meet applicable data protection standards.
• Legal and regulatory authorities: Competent courts, law enforcement agencies, financial intelligence units, or regulatory bodies where heyvip is required by law or lawful order to disclose personal data.
• Business transfers: In the event that heyvip undergoes a merger, acquisition, or sale of all or substantially all of its assets, player data may be transferred as part of that transaction, subject to equivalent privacy protections being maintained.

heyvip's primary user base is located in Bangladesh. However, some of the third-party service providers engaged by heyvip — including certain game content suppliers and cloud infrastructure partners — may process personal data in jurisdictions outside Bangladesh. Where such transfers occur, heyvip takes steps to ensure that an adequate level of data protection is maintained, including by requiring contractual data protection commitments from all data recipients and, where applicable, implementing standard contractual clauses or equivalent safeguards recognised under applicable law.

You may request further information about the safeguards heyvip has in place for specific international transfers by contacting [email protected].

heyvip retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or reporting obligations. The primary retention periods that apply to player data are set out below:

Once the applicable retention period expires, heyvip will securely delete or anonymise the personal data so that it can no longer be attributed to any identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes without restriction.

heyvip uses cookies and similar tracking technologies to operate the platform, personalise your experience, analyse platform performance, and deliver relevant promotional content. Cookies are small text files stored on your device when you access the heyvip website. The following categories of cookies are used:

• Essential cookies: Required for core platform functionality including heyvip Login session management, security token validation, and shopping basket state. These cannot be disabled without materially impairing your use of the platform.
• Functional cookies: Remember your preferences such as language settings, preferred game lobby view, and notification preferences to personalise your experience across sessions.
• Analytical cookies: Collect anonymised information about how players navigate the heyvip platform, which games are most popular, and where technical errors occur — enabling heyvip to continuously improve the service. Provided by analytics tools operating under data processing agreements.
• Marketing cookies: Used to track the effectiveness of heyvip's promotional campaigns and to serve relevant bonus offers to players based on their interaction history. Only deployed with your consent.

You may control non-essential cookie categories through your browser settings at any time. Please note that disabling functional or analytical cookies may limit certain personalisation features within the heyvip platform. Disabling essential cookies will prevent you from accessing authenticated areas of the platform after heyvip Login.

Subject to applicable data protection law, you have the following rights in relation to the personal data heyvip holds about you. To exercise any of these rights, please submit a written request to [email protected]. heyvip will respond to all verifiable rights requests within 30 calendar days, or notify you if a longer period is required:

• Right of access: You may request a copy of the personal data heyvip holds about you, along with information about how it is used, who it is shared with, and how long it is retained.
• Right to rectification: You may request that heyvip correct any inaccurate or incomplete personal data held about you. Certain data corrections may require supporting documentary evidence.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to heyvip's legal retention obligations — data required for AML compliance cannot be erased before the statutory retention period expires.
• Right to restriction: You may request that heyvip restrict the processing of your personal data in certain circumstances, such as while the accuracy of your data is being contested.
• Right to data portability: Where processing is based on your consent or the performance of a contract and carried out by automated means, you may request that heyvip provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on heyvip's legitimate interests, and heyvip will cease such processing unless it has compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

heyvip implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption applied to all data transmissions between your device and the heyvip platform, including the heyvip Login process and all payment transactions.
• Encryption of sensitive data fields at rest within heyvip's database infrastructure, including payment method identifiers and identity document data.
• Role-based access controls ensuring that heyvip staff can only access personal data strictly necessary for their job function. Access to player financial data is restricted to a minimum number of authorised personnel.
• Regular security audits, vulnerability assessments, and penetration testing of the heyvip platform and underlying infrastructure.
• Comprehensive logging and monitoring of access to personal data systems, with automated alerts for anomalous access patterns.
• Employee training and awareness programmes covering data protection obligations, phishing awareness, and secure data handling procedures.
• A documented data breach response procedure, including notification protocols for affected players and relevant authorities where required by law.

While heyvip maintains robust security practices, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your heyvip account, to enable any available two-factor authentication, and to notify [email protected] immediately if you suspect that your heyvip Login credentials have been compromised.

The heyvip platform is strictly intended for adults aged 18 years and over. heyvip does not knowingly collect, process, or store personal data from any individual under the age of 18. If heyvip becomes aware that personal data has been collected from a minor, that data will be deleted immediately, the associated account will be closed, and any deposits will be returned to the verified payment source where technically possible.

If you are a parent or guardian and believe that a minor in your care has registered a heyvip account or provided personal data to heyvip, please contact [email protected] immediately so that heyvip can take appropriate action without delay.

heyvip reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform services. Where changes are material, heyvip will notify registered players by email or by displaying a prominent notice on the heyvip platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy will always reflect when the most recent revision was made.

Your continued use of the heyvip platform following notification of any changes to this Policy constitutes your acceptance of the revised terms. If you do not agree with the revised Policy, you must discontinue use of the platform and may request account closure by emailing [email protected].

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which heyvip handles your personal data, please contact our data protection team. All communications should be submitted in English and directed to the contact details below. heyvip aims to acknowledge all data protection enquiries within 5 business days and to provide a substantive response within 30 calendar days (Bangladesh Standard Time, UTC+6):

This Privacy Policy was last reviewed and updated in January 2026. heyvip thanks you for taking the time to understand how your personal data is collected and used. Protecting your privacy is not just a legal obligation for heyvip — it is a core part of building a platform that Bangladeshi players can trust.