At viralop, protecting the personal data of our players across Bangladesh is a core operational commitment, not an afterthought. This Privacy Policy explains in plain, formal English exactly what information we collect, why we collect it, how it is stored and processed, who it may be shared with, and what rights you hold over your own data. We encourage every player to read this document carefully before registering an account.
viralop collects personal data only to the extent necessary to operate a safe, compliant, and high-quality online betting and casino platform for players in Bangladesh. We do not collect data speculatively or beyond what is required for the purposes set out in this policy. The categories of personal data we collect are described below.
Registration Data. When you create a viralop account, we collect your full legal name, date of birth, residential address in Bangladesh, email address, and the mobile number linked to your preferred payment method (bKash, Nagad, Rocket, or Upay). This data is mandatory — without it, we cannot create or verify your account.
Identity Verification (KYC) Data. As part of our Know Your Customer process, we collect copies of government-issued identity documents such as your National ID Card (NID), passport, or driving licence. We may also collect proof-of-address documents such as a recent utility bill or mobile money statement. KYC data is processed by our compliance team and, where applicable, by a regulated third-party identity verification provider operating under a data processing agreement with viralop.
Financial Data. We collect records of all deposits and withdrawals made through your account, including the payment method used, transaction amounts in Bangladeshi Taka (BDT), timestamps, and transaction reference numbers. We do not store full card numbers or full mobile banking PINs — payment processing is handled by regulated payment gateways and mobile money operators (bKash, Nagad, Rocket, Upay) under their own security infrastructure.
Behavioural and Activity Data. We collect data about how you interact with the viralop platform, including pages visited, games played, bets placed, session duration, device type, operating system, browser type, and IP address. This data is used for fraud detection, responsible gaming monitoring, platform performance optimisation, and aggregated analytics. It is not used to build individual advertising profiles.
Communications Data. If you contact our support team via live chat, email (support@viralop.app), or WhatsApp, we retain a record of that communication. This includes the content of your messages, the date and time of contact, and the resolution outcome. These records are used for quality assurance and dispute resolution purposes.
Sensitive Data: viralop does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where such data is voluntarily disclosed in the context of a responsible gaming self-assessment or a legal dispute. Any such disclosure is treated with the highest level of confidentiality and access is restricted to authorised personnel only.
viralop processes your personal data only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes stated at the time of collection. The primary purposes for which we process personal data are as follows:
We do not use automated decision-making systems that produce legal or similarly significant effects on players without human review. Where automated tools are used for initial fraud flagging or responsible gaming alerts, final decisions affecting account status are reviewed by a member of our compliance or player protection team.
Legal Basis for Processing: Depending on the nature of the processing activity, our legal basis is one of the following: (a) contract performance — processing necessary to deliver the services you have registered for; (b) legal obligation — processing required to comply with applicable law; (c) legitimate interests — processing for fraud prevention, security, and platform improvement where those interests are not overridden by your rights; or (d) consent — processing for optional marketing communications, which you may withdraw at any time.
viralop does not sell, rent, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes. We share personal data with third parties only in the specific, limited circumstances described below, and only to the extent necessary for the stated purpose.
| Recipient Category | Purpose | Basis |
|---|---|---|
| Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) | Processing deposits and withdrawals in BDT | Contract performance |
| KYC / identity verification providers | Document authentication and age verification | Legal obligation & contract |
| Fraud prevention services | Risk scoring, duplicate account detection, AML screening | Legitimate interests |
| Cloud infrastructure providers | Secure hosting of platform data and databases | Contract performance |
| Customer support platform | Delivery of live chat and ticket-based support | Contract performance |
| Regulatory or law enforcement authorities | Compliance with legal orders, AML/CTF reporting | Legal obligation |
All third-party service providers who process personal data on behalf of viralop are required to operate under a data processing agreement that binds them to process data only according to our documented instructions, to maintain appropriate technical and organisational security measures, and to delete or return data upon termination of the service relationship. We conduct periodic reviews of our third-party processors to ensure ongoing compliance.
International Data Transfers: Because viralop is an internationally operated platform, some personal data may be transferred to, stored, or processed in countries outside Bangladesh. Where such transfers occur, viralop ensures that appropriate safeguards are in place, including contractual clauses that require the recipient to provide a level of data protection equivalent to the standards applied within Bangladesh and under the international frameworks applicable to our operations. You consent to such transfers by registering an account on viralop.
viralop may also share data with a successor entity in the event of a merger, acquisition, or business restructuring, subject to the successor entity honouring the terms of this Privacy Policy or providing players with notice of any material changes to the way their data will be handled.
viralop uses cookies and similar tracking technologies (such as web beacons and local storage objects) to operate the platform effectively and to understand how players interact with the site. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot access other information stored on your device beyond what the server that issued them can read.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, CSRF protection | No — platform will not function without these |
| Functional | Remembering language preferences, game display settings, notification preferences | Yes — with reduced functionality |
| Analytics | Aggregated page view counts, traffic source analysis, feature engagement metrics (no individual profiling) | Yes — analytics data will not be collected |
| Fraud Prevention | Device fingerprinting for duplicate account detection and suspicious activity monitoring | No — required for platform security |
viralop does not use third-party advertising cookies or cross-site tracking pixels that share your browsing behaviour with external advertisers. Our analytics cookies are configured to anonymise IP addresses and do not create individual user profiles that are shared with third parties.
You may control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, and instructions for doing so are available in your browser's help documentation. Please note that disabling strictly necessary or fraud prevention cookies will significantly impair your ability to use the viralop platform, including logging in and making transactions.
Session Cookies vs. Persistent Cookies: Session cookies are temporary and expire when you close your browser. viralop uses session cookies for login and game session management. Persistent cookies remain on your device for a defined period (typically 30–365 days) and are used for functional preferences and aggregated analytics. You can delete persistent cookies at any time via your browser settings without affecting your viralop account data.
Manage cookie settings via your browser preferences. Contact support@viralop.app for cookie-related queries.
viralop implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated on a regular basis to address emerging security threats and to reflect changes in best practice for online platform security.
Technical measures include 256-bit SSL/TLS encryption for all data in transit; AES-256 encryption for sensitive data fields stored in our databases (including identity document data and payment reference numbers); role-based access controls that restrict database and system access to authorised personnel only; multi-factor authentication (MFA) required for all viralop staff accessing production systems; regular penetration testing and vulnerability scanning; and automated intrusion detection systems that monitor for abnormal access patterns.
Organisational measures include mandatory data protection training for all staff who handle player personal data; a documented incident response plan that defines procedures for identifying, containing, and notifying affected parties in the event of a data breach; contractual data processing obligations imposed on all third-party service providers; and a designated data protection contact responsible for overseeing compliance with this Privacy Policy.
Data Breach Notification: In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, viralop will notify affected players without undue delay and, in any case, within 72 hours of becoming aware of the breach (where technically and operationally feasible). The notification will describe the nature of the breach, the categories of data involved, the likely consequences, and the steps viralop has taken or intends to take to address the breach. Notifications will be sent to the email address registered on your viralop account.
Data Retention. viralop retains your personal data for as long as your account remains active and for a defined period thereafter. Account data (including transaction records and KYC documents) is retained for a minimum of five (5) years following account closure in order to comply with anti-money laundering (AML) obligations and to resolve any disputes or legal claims that may arise. After the retention period expires, data is securely deleted or anonymised. Support communication records are retained for two (2) years from the date of the most recent interaction. Aggregated, anonymised analytics data is retained indefinitely as it cannot be used to identify any individual.
As a viralop player, you have a set of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team at support@viralop.app with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and complete the action within 30 days. In cases of complexity or high volume, we may extend this period by a further 30 days, in which case we will notify you of the extension.
| Right | What It Means |
|---|---|
| Right of Access | You may request a copy of all personal data we hold about you, along with information about how it is used and with whom it has been shared. |
| Right to Rectification | You may ask us to correct any inaccurate or incomplete personal data we hold about you. Account details (name, address) can often be updated directly in your account dashboard. |
| Right to Erasure | You may request deletion of your personal data. This right is subject to legal retention obligations — we cannot delete data we are required by law to retain (e.g., AML records for 5 years post-closure). |
| Right to Restriction | You may ask us to restrict the processing of your data in certain circumstances, such as while the accuracy of data is being verified or a legitimate interest objection is being assessed. |
| Right to Portability | You may request a structured, machine-readable copy of the personal data you provided to us directly (e.g., registration data, account preferences), which you may transfer to another service provider. |
| Right to Object | You may object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention. We will assess the objection and cease processing unless we can demonstrate compelling legitimate grounds that override your rights. |
| Right to Withdraw Consent | Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. |
viralop will not charge a fee for processing data rights requests unless they are manifestly unfounded, excessive, or repetitive in nature. In such cases, we reserve the right to charge a reasonable administrative fee or to decline the request, providing written reasons for that decision. We will never discriminate against a player for exercising their data rights — your account access and service quality will not be affected by a data rights request.
Identity Verification for Rights Requests: To protect your privacy, viralop requires that all data rights requests be submitted from the email address registered on your account, or accompanied by sufficient identifying information to confirm that the request is made by or on behalf of the data subject. We will not disclose personal data to a third party without adequate verification that the requester is authorised to receive it.
You may also update basic account details (name, address) directly through your viralop account dashboard without contacting support.
viralop may send you marketing communications about promotions, bonuses, new game releases, cricket betting markets, tournament events, and other platform updates. These communications are sent only where you have provided explicit consent at the time of registration or have subsequently opted in through your account notification preferences. We do not send unsolicited marketing communications to players who have not opted in.
Marketing communications may be delivered via email, SMS to your registered mobile number, or push notifications if you have enabled them through the viralop platform. Each marketing communication will include a clear and easy mechanism to opt out of future messages of that type. You may also manage all marketing preferences centrally through the notifications section of your account dashboard.
If you opt out of marketing communications, viralop will cease sending promotional messages within 5 business days of receiving your opt-out request. Opting out of marketing does not affect transactional communications — we will continue to send you account-related notifications such as deposit confirmations, withdrawal processing updates, security alerts, and responsible gaming reminders, as these are necessary for the operation of your account.
Responsible Marketing: viralop is committed to responsible marketing practices. We do not target marketing communications at players who have active self-exclusion settings, players who have set deposit limits and are close to or at their limit, or players whose account activity has triggered responsible gaming monitoring flags. Players identified as potentially vulnerable are removed from marketing lists regardless of their stated marketing preferences.
We do not share your contact information with third-party marketers or affiliate networks for the purpose of sending you marketing messages from those third parties. Any promotional communications you receive will originate from viralop directly, using the domain viralop.app.
Opting out of marketing will not stop transactional account notifications such as deposit confirmations and security alerts.
viralop reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, changes in our data processing practices, or changes to the technical architecture of the platform. When material changes are made to this policy, we will notify registered players by email to the address associated with their account at least 14 days before the changes take effect.
Non-material changes — such as corrections to typographical errors, clarifications that do not alter the substance of the policy, or updates to contact information — may be made without prior notice, though the updated effective date will always be displayed at the top of this page. We encourage players to review this Privacy Policy periodically to remain informed of how viralop handles their personal data.
Continued use of the viralop platform following the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with any changes made to this policy, you should cease using the platform and contact our support team to request account closure and the return of any real-money balance held on your account.
Contact Our Data Protection Team: For any question, concern, or request relating to this Privacy Policy or the handling of your personal data by viralop, please contact us at:
Email: support@viralop.app (Subject: "Privacy Enquiry")
Live Chat: Available 24/7 via your viralop account dashboard
Response Time: All privacy-related enquiries are acknowledged within 2 business days and resolved within 14 business days where possible.
If you are dissatisfied with our response to a data rights request or a privacy complaint, you have the right to escalate your concern to the relevant data protection authority or to seek independent legal advice. viralop will cooperate fully with any lawful investigation by a competent regulatory authority.
Use subject line "Privacy Enquiry" for all data protection correspondence to ensure your message reaches the correct team without delay.
Our team is available 24/7 to help with any data protection query. You can also explore our full FAQ or visit our Responsible Gaming page for additional guidance on safe play.