vexpi Privacy Policy — How We Protect Your Personal Data

vexpi collects personal information from players in order to operate the platform, process transactions, verify identities, and comply with applicable legal and regulatory obligations. The categories of personal data we collect are described below.

Registration and Account Data

When you create a vexpi account, we collect the information you provide directly, including your full legal name, date of birth, Bangladesh mobile number, email address, and a username and password of your choosing. This information is necessary to establish your account, verify your age, and provide you with access to the vexpi platform.

Identity Verification Data

To comply with Know Your Customer (KYC) requirements and to process withdrawal requests above applicable thresholds, vexpi may request additional identity documents. These may include a copy of your National Identity Card (NID), passport, or birth certificate, and in some cases a selfie photograph for biometric comparison. This data is processed solely for identity verification purposes.

Financial and Transaction Data

vexpi records all deposit and withdrawal transactions associated with your account, including the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard), the transaction amount in Bangladeshi Taka (৳ BDT), and associated timestamps. Full payment card numbers and mobile banking PINs are never stored by vexpi; these are handled exclusively by our certified payment processing partners.

Device and Technical Data

When you access vexpi, we automatically collect certain technical information about your device and connection. This includes your IP address, browser type and version, device type (mobile or desktop), operating system, time zone, and pages visited on the vexpi platform. This data is used for fraud prevention, platform security, and performance optimisation.

Gaming Activity Data

We record your activity on the vexpi platform, including games played, bets placed, wagers, outcomes, session durations, bonus activations, and wagering history. This data is used to operate the platform, settle bets, administer bonuses, and, where relevant, to support responsible gaming monitoring.

Communications Data

If you contact our support team at [email protected], we retain records of that correspondence including the content of messages, timestamps, and any documentation shared. This data is retained to maintain accurate records of support interactions and for quality assurance purposes.

vexpi uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with those described below without first notifying you and, where required, obtaining your consent.

vexpi will never use your personal data to make automated decisions that produce significant legal or similarly significant effects on you without providing an appropriate mechanism for human review and appeal.

vexpi processes your personal data on one or more of the following legal grounds, depending on the specific purpose for which the data is being used:

• Contractual Necessity: Much of the data we process is necessary to fulfil our contractual obligations to you as a registered vexpi player. This includes processing deposits, settling bets, and managing your account. Without this processing, we cannot provide the services you have signed up for.
• Legal Obligation: Certain data processing activities — particularly identity verification (KYC), financial record-keeping, and anti-money-laundering checks — are required by applicable law. vexpi processes this data to comply with its legal obligations.
• Legitimate Interests: vexpi processes some data on the basis of its legitimate business interests, including fraud prevention, platform security monitoring, and analysis for service improvement. In each case, we have assessed that our legitimate interests are not overridden by your privacy rights.
• Consent: Where vexpi sends you marketing communications or uses non-essential cookies, we do so on the basis of your consent. You have the right to withdraw your consent at any time by contacting [email protected] or managing your account communication preferences.

vexpi does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. We share personal data only in the following circumstances and only to the minimum extent necessary for the specified purpose.

Payment Processing Partners

To process deposits and withdrawals, vexpi shares relevant transaction data with licensed payment processors operating the bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard payment channels. These partners are contractually bound to process your data solely for the purpose of completing the requested financial transaction and to maintain appropriate security standards.

Game Content Providers

Where you play games provided by third-party studios (including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, or Play'n GO), limited session and wagering data may be passed to the relevant game provider solely for the purpose of delivering the game, maintaining RNG integrity, and resolving technical disputes. These providers operate under data processing agreements with vexpi.

Identity Verification Services

To complete KYC verification, vexpi may share identity document data with certified third-party identity verification service providers. These providers process your data exclusively for the verification purpose and are prohibited from using it for any other purpose.

Legal and Regulatory Disclosure

vexpi may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, by a lawful court order, or where we reasonably believe that disclosure is necessary to prevent fraud, money laundering, or other criminal activity. In such cases, we will disclose only the minimum data required to fulfil the legal obligation.

Business Transfers

In the event that vexpi undergoes a merger, acquisition, or transfer of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players of any such transfer and the privacy terms that will apply going forward, providing adequate notice before any change takes effect.

vexpi uses cookies and similar tracking technologies on its platform for specific, limited purposes. A cookie is a small text file placed on your device when you visit the vexpi website. The following types of cookies are used on vexpi:

vexpi does not use advertising cookies, retargeting pixels, or third-party social media tracking scripts on the vexpi platform. You can control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the vexpi platform, including the ability to log in to your account.

vexpi retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, to meet our legal and regulatory obligations, and to resolve any disputes that may arise. The following retention periods apply:

• Account Data: Retained for the duration of your active account, plus a minimum of 5 years following account closure to meet financial record-keeping and anti-money-laundering requirements.
• Identity Verification Documents: Retained for a minimum of 5 years following the completion of the KYC process or account closure, whichever is later, in accordance with applicable compliance requirements.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction.
• Gaming Activity Logs: Betting and gaming history logs are retained for a minimum of 3 years from the date of each session, for dispute resolution and responsible gaming monitoring purposes.
• Support Correspondence: Records of customer support interactions are retained for 2 years from the date of the last communication in the relevant ticket or case.
• Marketing Consent Records: Records of your marketing consent or opt-out status are retained for the duration of your account and for 3 years thereafter.

At the end of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where anonymised data is retained for analytics or platform improvement purposes, it is no longer considered personal data and falls outside the scope of this Privacy Policy.

As a vexpi player, you hold a range of rights over your personal data. vexpi is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact us at [email protected] with your account username, registered mobile number, and a description of your request.

• Right of Access: You have the right to request a copy of the personal data vexpi holds about you. We will provide this information within 30 days of receiving a valid request.
• Right to Rectification: If any personal data vexpi holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Account holders may also update certain details directly through their account settings.
• Right to Erasure: You may request that vexpi delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing was unlawful. Note that this right is subject to overriding legal obligations — for example, we cannot delete transaction records that we are required to retain under financial compliance law.
• Right to Restrict Processing: You may request that vexpi restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where the processing is unlawful but you prefer restriction over deletion.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where vexpi relies on legitimate interests as its legal basis. vexpi will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time by contacting [email protected].

vexpi will respond to all valid data rights requests within 30 days. Where a request is particularly complex or where a large volume of requests has been received, this period may be extended by a further 30 days, with prior notice provided to the requester. There is no charge for exercising your data rights under normal circumstances.

vexpi takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.

• SSL Encryption: All data transmitted between your device and the vexpi platform is protected by 256-bit SSL (Secure Socket Layer) encryption. This ensures that your login credentials, personal details, and payment information cannot be intercepted during transit.
• Password Hashing: Account passwords are stored in a cryptographically hashed format using industry-standard algorithms. vexpi staff cannot view or retrieve your plaintext password.
• Access Controls: Access to personal data within vexpi's internal systems is restricted on a strict need-to-know basis. Only personnel whose role requires access to specific categories of data are authorised to view it, and all access is logged.
• Fraud Monitoring: vexpi employs automated and manual fraud detection systems that continuously monitor platform activity for signs of account compromise, suspicious login attempts, and unusual transaction patterns.
• Infrastructure Security: vexpi's platform infrastructure is hosted in secure data centre environments with physical access controls, network firewall protection, and regular security assessments.
• Incident Response: In the event of a personal data breach that poses a risk to player rights, vexpi maintains an incident response procedure to contain the breach, assess its scope, and notify affected players as appropriate and within required timeframes.

While vexpi employs robust security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect that your account has been accessed without your authorisation, you must notify vexpi immediately at [email protected].

The vexpi platform is strictly for adults aged 18 years and above. vexpi does not knowingly collect personal data from any individual under the age of 18. Age verification is a mandatory step in the vexpi account registration and KYC process.

Where vexpi has reasonable grounds to believe that a player is under the age of 18, the account will be suspended immediately pending age verification. If it is confirmed that a player under 18 has registered on vexpi:

• The account will be permanently closed.
• Any deposits made will be returned to the source payment method.
• Any winnings accrued will be voided.
• All personal data associated with the underage account will be securely deleted, subject to any overriding legal retention obligations.

If you are a parent or guardian and have reason to believe that a minor in your care has registered on vexpi, please contact our support team immediately at [email protected]. We will investigate the matter promptly and take appropriate action.

vexpi reserves the right to update this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data we collect, the purposes for which it is used, or the third parties with whom it is shared — we will provide advance notice to registered players via their registered mobile number or by posting a prominent notice on the vexpi platform.

The effective date at the top of this policy indicates when the current version came into force. Your continued use of the vexpi platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We recommend reviewing this page periodically to stay informed of how your data is being managed.

Contact for Privacy Matters

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by vexpi, please contact us using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Privacy Policy Enquiry
• Response Time: Within 48 hours (Bangladesh Standard Time, UTC+6), 7 days a week