vip1 Privacy
Policy — How We
Protect Your Data

This Privacy Policy ("Policy") is published by vip1 ("vip1," "we," "us," "our") and applies to all personal data collected, processed, stored, and transmitted in connection with your use of the vip1 online gaming and sports betting platform, accessible at vip1.cam and all associated subdomains, mobile interfaces, and digital services (collectively, "the Platform").

vip1 is committed to handling the personal data of all registered Pakistani players with full transparency, integrity, and in compliance with applicable international data protection standards. We have designed our data practices to align with the principles of the General Data Protection Regulation (GDPR) as a global benchmark for best practice, even where such regulations do not apply directly under Pakistani law.

By registering an account on vip1, accessing the Platform, or using any of our services, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. If you do not agree with any aspect of this Policy, please discontinue use of the vip1 Platform immediately and contact us to request account closure.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the full framework governing your relationship with vip1.

vip1 collects personal data about you through several channels and at various points during your use of the Platform. The categories of data we collect include the following:

2.1 Registration and Identity Data

• Full legal name as it appears on your CNIC or other official identification.
• Date of birth (for mandatory age verification — vip1 operates a strict 21+ policy).
• Pakistani mobile telephone number.
• Email address.
• Residential address.
• Chosen username and encrypted password credentials.

2.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents (CNIC, passport, or equivalent).
• Proof of address documentation (utility bills, bank statements).
• Selfie or biometric photographs for identity matching where required.
• Source of funds documentation where applicable for high-value transactions.

2.3 Financial and Transaction Data

• JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank account identifiers (reference numbers, not full account credentials).
• Deposit and withdrawal transaction history, amounts, timestamps, and payment method references.
• Account balance history and bonus fund records.

2.4 Gaming and Betting Activity Data

• All betting and gaming activity including game type, stake amounts, results, session duration, and timestamps.
• Game preferences, favourite games, and playing patterns.
• Responsible Gaming tool usage and settings configured on your account.

2.5 Technical and Device Data

• IP address, device type, operating system, browser version, and unique device identifiers.
• Geographic location data (city/region level) derived from IP address.
• Session timestamps, login history, and platform navigation data.
• Cookies and similar tracking technologies (see Section 6).

2.6 Communications Data

• Records of live chat conversations, email correspondence, and support ticket history.
• Feedback, complaints, and survey responses submitted to vip1.
• Marketing preferences and communication opt-in/opt-out records.

vip1 uses your personal data only for specified, legitimate purposes. We do not sell your personal data to any third party under any circumstances. The purposes for which your data is used include:

• Account Management: Creating, maintaining, verifying, and managing your vip1 account and associated profile information.
• Service Delivery: Enabling access to all Platform features — casino games, sports betting, cricket markets, slots, live dealer tables, and all associated functions.
• Identity Verification and KYC: Complying with our legal and regulatory obligations to verify the identity and age of all players. This is non-negotiable under our operating licence and responsible gaming commitments.
• Payment Processing: Facilitating deposits, withdrawals, and bonus transactions through supported Pakistani payment methods including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on the vip1 Platform.
• Responsible Gaming: Monitoring gameplay patterns to identify potential indicators of problem gambling and administering responsible gaming tools including deposit limits, session timers, and self-exclusion requests.
• Customer Support: Processing and responding to queries, complaints, technical issues, and account-related requests submitted by Pakistani players via live chat or email.
• Marketing and Promotions: Sending promotional communications, bonus offers, and platform updates to players who have opted in to receive such communications (see Section 12 for opt-out details).
• Platform Improvement: Analysing aggregate usage data to improve Platform performance, game selection, and user experience for the Pakistani market.
• Legal Compliance: Meeting all applicable legal, regulatory, and tax reporting obligations relating to vip1's operation.

vip1 processes your personal data on the following legal bases, in accordance with applicable international data protection principles:

• Contractual Necessity: Processing required to perform the contract between you and vip1 — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing required for vip1 to comply with its legal and regulatory obligations, including KYC verification, anti-money laundering checks, and responsible gaming requirements.
• Legitimate Interests: Processing carried out in pursuit of vip1's legitimate business interests — including fraud detection, platform security, and service improvement — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing of data for marketing communications and non-essential cookies, where we rely on your freely given, informed, and specific consent. You may withdraw consent at any time.

vip1 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, we may share your data with carefully selected third parties in the following specific circumstances:

• Payment Processors: We share necessary transaction data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment providers to facilitate deposits and withdrawals. These providers process data only as required for payment execution and are bound by their own regulatory obligations.
• KYC and Identity Verification Partners: Specialist third-party providers assist vip1 in verifying player identity documents and age. These providers operate under strict data processing agreements and applicable financial regulations.
• Game and Software Providers: Third-party game developers and live casino operators may receive limited technical data (session IDs, bet data) necessary to deliver their games on the vip1 Platform. These providers do not receive your full personal profile.
• Anti-Fraud and Security Services: We share data with specialist anti-fraud service providers to detect and prevent fraudulent account activity, money laundering, and platform abuse.
• Regulatory Authorities: vip1 may be required by law, regulation, or court order to disclose player data to applicable regulatory, law enforcement, or government authorities. We will comply with all lawful disclosure obligations.
• Professional Advisors: Our legal, financial, and compliance advisors may access relevant player data in connection with professional services, subject to applicable professional confidentiality obligations.

All third parties with whom vip1 shares personal data are bound by contractual data processing agreements requiring them to process such data only for specified purposes and to maintain appropriate technical and organisational security measures.

vip1 uses cookies and similar tracking technologies on the Platform to enhance your user experience, enable Platform functionality, and gather analytical data. The categories of cookies we use are as follows:

You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may impair the functionality of the vip1 Platform, including the ability to log in and play games. Withdrawing consent for analytics or marketing cookies will not affect your ability to use the Platform's core gaming services.

vip1 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include but are not limited to:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the vip1 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols, providing the same level of protection used by major Pakistani banking institutions.
• Data Encryption at Rest: Sensitive personal and financial data stored in vip1's systems is encrypted at rest using AES-256 or equivalent encryption standards.
• Password Security: Account passwords are hashed using strong cryptographic algorithms (bcrypt). vip1 does not store or have access to your plaintext password at any time.
• Access Controls: Internal access to player personal data is strictly limited on a need-to-know basis. All staff with data access are subject to background checks, confidentiality agreements, and regular data protection training.
• Two-Factor Authentication: vip1 offers — and strongly recommends — Two-Factor Authentication (2FA) for all accounts, providing an additional security layer beyond password credentials alone.
• Regular Security Audits: vip1 conducts periodic internal and external security assessments, penetration testing, and vulnerability scans of all Platform systems.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, vip1 will notify affected players and relevant authorities within the timeframes required by applicable data protection standards.

vip1 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law, regulation, or licensing conditions. The following general retention periods apply:

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures. Where data is retained beyond account closure for legal or regulatory purposes, access to such data is strictly controlled and limited to compliance functions only.

As a vip1 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact vip1's Data Protection team via the contact details in Section 14.

• Right of Access: You have the right to request a copy of the personal data vip1 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you on the vip1 Platform.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to Restriction of Processing: You have the right to request that vip1 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is contested.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

vip1 will respond to all valid data rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. vip1 does not charge for handling data rights requests unless requests are manifestly unfounded or excessive.

vip1 operates with technology infrastructure, game providers, and service partners that may be located in countries outside Pakistan. In such cases, your personal data may be transferred to and processed in countries that have different data protection frameworks than those that apply in Pakistan.

Where vip1 transfers personal data internationally, we implement appropriate safeguards to ensure that your data receives a comparable level of protection to that which we apply within our own systems. These safeguards may include:

• Contractual clauses that impose data protection obligations on international recipients equivalent to those in this Policy.
• Transfers only to countries or organisations recognised as providing adequate data protection standards.
• Binding corporate rules where applicable within vip1's group of companies.

For further information about international transfer safeguards applicable to your data, please contact vip1's Data Protection team using the details in Section 14.

vip1 operates a strict minimum age policy of 21 years of age. The vip1 Platform is not directed at, and must not be used by, any person under the age of 21.

vip1 does not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted at account registration as a mandatory step, and may be repeated at any time through our KYC process.

If vip1 becomes aware that it has collected personal data from a person under the age of 21 — through misrepresentation or any other means — we will:

• Immediately suspend and close the relevant account.
• Delete or securely anonymise all personal data associated with the underage individual, subject to any mandatory legal retention requirements.
• Withhold any funds in the account pending appropriate regulatory review.
• Take appropriate steps to prevent any future access by the same individual.

Parents and guardians are encouraged to make use of parental control software to prevent minors from accessing online gambling platforms. For recommendations on parental control tools, please contact vip1 support.

With your consent, vip1 may send you promotional communications including bonus offers, game announcements, PSL cricket betting promotions, VIP programme updates, and other platform news. These communications may be delivered via:

• Email to your registered email address.
• SMS to your registered Pakistani mobile number.
• In-platform notifications visible when you are logged in to vip1.

Your consent to receive marketing communications is entirely optional and does not affect your ability to use the vip1 Platform or access any of its core features. You may withdraw your consent and opt out of marketing communications at any time through the following methods:

• Updating your communication preferences in your vip1 account settings.
• Clicking the "Unsubscribe" link included in any vip1 marketing email.
• Contacting vip1 support via live chat or email to request removal from marketing lists.

vip1 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or Platform services.

When material changes are made to this Policy, vip1 will:

• Update the effective date displayed at the top of this page.
• Display a prominent notice on the vip1 Platform homepage and login page for a period of not less than 14 days following any material change.
• Send a notification to your registered email address summarising the nature of the changes, where technically practicable.

Your continued use of the vip1 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the revised practices. If you do not agree with any updated version of this Policy, you may close your vip1 account and request deletion of your personal data in accordance with Section 9 of this Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how vip1 protects your data. The version history of this Policy is available from vip1 support upon request.

For all privacy-related queries, data rights requests, or concerns about how vip1 handles your personal data, please contact us through the following official channels:

• Email: [email protected] — please use the subject line "Privacy / Data Request — [Your Username]" for all data-related correspondence.
• Live Chat: Available 24/7 on the vip1 Platform — for general privacy queries and immediate assistance.

vip1 aims to acknowledge all privacy correspondence within 5 business days and to provide a substantive response within 30 calendar days. For complex requests, we may extend this period by up to a further 30 days, with notification provided.

This Privacy Policy was last reviewed and updated on January 1, 2026. The governing language is English. In the event of any inconsistency between this Policy and any translated version, the English-language version shall prevail in all cases.