vd99 Privacy Policy

This Privacy Policy is published by vd99 ("vd99", "we", "us", "our"), the operator of the online betting and casino platform accessible at vd99.io. vd99 serves the Bangladesh market and provides sports betting, live casino games, slots, and related entertainment products to eligible adult players.

For the purposes of this Privacy Policy, vd99 acts as the data controller in respect of personal data collected from players who register accounts and use the vd99 Platform. As data controller, vd99 determines the purposes for which and the means by which personal data is processed.

vd99 collects the following categories of personal data from players and prospective players. The specific data points collected from any individual depend on the features and services they choose to use.

vd99 does not collect or store sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health records, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request.

vd99 collects personal data through several channels depending on the stage of your interaction with the Platform:

• Direct submission: When you complete the registration form on vd99.io, you provide identity and contact data directly. When you submit KYC documents, you provide verification data directly.
• Payment processing: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, or a bank transfer, the relevant financial reference data is passed to vd99 by the payment provider.
• Platform interaction: When you navigate vd99.io, place bets, play casino games, or interact with any feature on the site, usage and technical data is automatically collected by our servers and analytics systems.
• Cookies and tracking technologies: Session cookies, analytics cookies, and security tokens collect technical and usage data automatically when you browse vd99.io. See Section 8 for full details.
• Support communications: When you contact our support team by email or live chat, the content of those communications and any personal data contained within them is collected and stored.
• Third-party identity verification services: Where vd99 uses third-party KYC or AML screening services to verify player identity, those services may provide additional data points to confirm or supplement the information you have submitted directly.

vd99 uses the personal data it collects for the following specific, documented purposes:

• Account management: To create, maintain, and administer your vd99 player account, including processing login requests and managing account settings.
• Identity and age verification: To verify that you are who you say you are and that you are 21 years of age or older, in compliance with responsible gaming obligations.
• Payment processing: To process deposits in Bangladeshi Taka (৳) and to make withdrawal payments to your verified bKash, Nagad, or Rocket account or bank account.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering activity, and other security threats.
• Regulatory compliance: To meet applicable anti-money laundering (AML), know your customer (KYC), and responsible gaming requirements.
• Customer support: To respond to your questions, resolve disputes, and provide assistance with your account.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the design and performance of vd99.io for all players.
• Responsible gaming: To monitor betting patterns for signs of problem gambling and to administer deposit limits, cooling-off periods, and self-exclusion requests.
• Marketing communications: Where you have explicitly opted in, to send you information about promotions, bonuses, and offers relevant to you on vd99. You may opt out at any time.

For each category of data processing described in this Privacy Policy, vd99 relies on one of the following legal bases:

• Contract performance: Processing necessary to deliver the services described in the vd99 Terms & Conditions that you accepted upon registration — including account management, bet processing, and payment handling.
• Legal obligation: Processing necessary for vd99 to comply with applicable AML, KYC, and responsible gaming legal requirements — including identity verification and transaction monitoring.
• Legitimate interests: Processing carried out for vd99's legitimate business interests — including fraud detection, platform security, and internal analytics — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional activities such as marketing communications, where you have given clear, specific, and freely given consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

vd99 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following defined circumstances:

• Payment service providers: bKash, Nagad, Rocket, Visa, Mastercard, and domestic bank partners receive the financial reference data necessary to process your deposits and withdrawals. These providers operate under their own data protection frameworks.
• Identity verification providers: Third-party KYC and AML screening services receive identity and document data necessary to complete required verification checks. All such providers are contractually bound to process data only for verification purposes.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player session identifier to deliver their game content within the vd99 Platform. These providers do not receive your full personal profile.
• Technology infrastructure providers: Cloud hosting, content delivery, and security service providers may process data in the course of delivering technical infrastructure. All such providers are subject to strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or a request from a competent authority in Bangladesh or another relevant jurisdiction, vd99 may disclose personal data to law enforcement agencies or regulatory bodies.

All third-party service providers engaged by vd99 are required to handle personal data in a manner consistent with this Privacy Policy and to implement appropriate technical and organisational security measures.

vd99 takes the security of your financial data particularly seriously. The following specific safeguards apply to payment-related information:

• vd99 does not store full mobile banking PINs, full card numbers (PAN), or card CVV codes. These are processed directly by the relevant payment provider's secure gateway.
• Withdrawal requests are processed only to the same verified payment method used for the player's deposit — bKash number, Nagad number, Rocket number, or bank account reference. This policy prevents fraudulent redirection of funds.
• All financial data transmitted between your browser and vd99.io is protected by SSL 256-bit encryption.
• Transaction records — including deposit and withdrawal history — are retained for a period of five years from the date of each transaction in compliance with applicable financial record-keeping obligations.
• vd99 conducts routine AML monitoring on all financial transactions. Unusual patterns may trigger additional review, which can delay withdrawal processing while checks are conducted.

vd99 uses cookies and similar tracking technologies to operate the Platform, maintain your session, prevent fraud, and analyse how players use the site. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function correctly. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without impairing the use of the Platform.
• Functional cookies: Store your preferences such as language settings and remembered username. These improve your experience but are not strictly required for core functionality.
• Analytics cookies: Allow vd99 to understand how players navigate the site — which pages are visited, how long sessions last, and where technical errors occur. This data is aggregated and used solely for internal improvement purposes.
• Security cookies: Help vd99 detect unusual access patterns, potential account takeover attempts, and suspicious device behaviour. These cookies are a component of the Platform's fraud prevention infrastructure.

Most modern browsers allow you to control cookie settings through the browser's privacy or settings menu. Disabling essential cookies will prevent you from logging in to your vd99 account and using core Platform features. Disabling analytics or functional cookies will not affect your ability to place bets or make transactions.

vd99 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data (active accounts): Retained for the duration of the account relationship plus five years following account closure.
• KYC and identity documents: Retained for five years from the date of submission or from the date of account closure, whichever is later, in compliance with AML obligations.
• Transaction records: Retained for five years from the date of each transaction.
• Support communications: Retained for two years from the date of the relevant interaction.
• Technical and usage data (analytics): Retained for twelve months in identifiable form, then anonymised for longer-term trend analysis.
• Marketing consent records: Retained for the duration of the consent period plus one year to evidence compliance.

When a retention period expires, the relevant data is securely deleted from vd99's systems or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical purposes.

As a player whose personal data is processed by vd99, you hold the following rights. To exercise any of these rights, contact us at [email protected] with a clear description of your request. We will respond within a reasonable timeframe and in any case within 30 days.

vd99 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL 256-bit encryption on all pages and API connections across vd99.io, ensuring that all data transmitted between your device and our servers is encrypted in transit.
• Access controls: Personal data is accessible only to vd99 staff and contractors who have a documented operational need to access it. Access is role-based and reviewed periodically.
• Firewalls and intrusion detection: Network-level security systems monitor for unauthorised access attempts and automatically block known malicious traffic patterns.
• Data pseudonymisation: Where possible, vd99 uses pseudonymisation techniques to separate identifying information from operational data, reducing the risk to players in the event of any security incident.
• Regular security auditing: vd99's platform infrastructure undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response plan: In the event of a confirmed data breach affecting player personal data, vd99 will notify affected players and take immediate containment and remediation action.

Despite these measures, no system connected to the internet can be guaranteed completely secure. Players are encouraged to use strong, unique passwords for their vd99 accounts and to contact [email protected] immediately if they suspect unauthorised access to their account.

vd99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or the services we offer. When material changes are made, we will:

• Update the effective date displayed at the top of this document.
• Post a notice on the vd99 Platform homepage informing players that the Privacy Policy has been updated.
• Where the change is significant, send a notification to the email address registered on your account at least seven days before the change takes effect.

Continued use of the vd99 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of that revision. If you do not agree with changes to this Privacy Policy, you should stop using the Platform and request account closure by contacting [email protected].

The current version of this Privacy Policy is always accessible at vd99.io/privacy-policy. We recommend reviewing it periodically to stay informed of how we protect your data.