Privacy Policy — vb8009

vb8009 collects personal data from players registered on the platform through several channels, including the account registration process, identity verification procedures, payment transactions, platform usage activity, and direct communications with our support team. The categories of personal data we may collect are described below.

Account Registration Data:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you meet the minimum age requirement of 18 years)
• Email address (used for account notifications, support communications, and promotional messages where consent has been given)
• Mobile phone number (used for account security, two-factor authentication, and payment method linkage via bKash, Nagad, Rocket, or Upay)
• Residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh) and postal code
• Username and encrypted password (passwords are stored using one-way hashing and are never accessible in plain text by vb8009 staff)

Identity Verification (KYC) Data:

As part of our Know Your Customer (KYC) obligations and to prevent underage gambling, fraud, and money laundering, we collect the following documentation when required:

• Scanned copy or photograph of a valid Bangladesh National Identity Card (NID), current passport, or Bangladesh driving licence
• Proof of address document (e.g., utility bill, bank statement) dated within the last three months
• Where required by enhanced due diligence procedures, a selfie photograph holding the submitted identity document alongside a handwritten date
• Source of funds documentation for players in higher deposit tiers or VIP categories

Transaction and Payment Data:

• Deposit and withdrawal amounts, dates, and transaction reference identifiers
• Payment method type (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, bank transfer)
• Partial mobile number or masked card number associated with payment transactions (full card numbers and full mobile banking credentials are never stored by vb8009)
• Transaction status, processing timestamps, and currency denomination (Bangladeshi Taka, BDT)

Platform Usage Data:

• IP address and approximate geolocation derived from it
• Device type, operating system, and browser version
• Game session logs, bet history, wagering patterns, and session duration
• Login timestamps and frequency of access
• Bonus claims, wagering progress, and promotional participation history
• Customer support conversation transcripts and any attachments submitted to our support team

vb8009 processes your personal data only where we have a lawful basis for doing so. The primary purposes for which we use your data are set out in the table below, along with the corresponding legal basis for each processing activity.

vb8009 does not use your personal data to make fully automated decisions that produce significant legal effects without human oversight. Where automated processes are used — such as initial flagging of suspicious account behaviour — final decisions involving account restriction or closure are reviewed by a member of the vb8009 compliance or risk management team before action is taken.

vb8009 does not sell, rent, or otherwise commercially transfer your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Categories of Third Parties Who May Receive Your Data:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and international card processors (Visa, Mastercard network acquirers) receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are subject to applicable financial regulation.
• Identity Verification Providers: Third-party KYC and identity verification services may receive your identity documents and personal details to perform age verification, document authentication, and screening against financial watchlists.
• Game Studio Providers: Platform providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and bet data necessary to deliver their games and settle results. These providers do not receive your full personal profile.
• Fraud Prevention and Security Services: Third-party fraud detection platforms may receive anonymised or pseudonymised behavioural data (such as IP address, device fingerprint, and session patterns) to help identify suspicious activity and protect your account.
• IT Infrastructure and Cloud Services: vb8009 uses secure cloud infrastructure providers to host platform data. These providers act as data processors under contractual terms that require them to apply equivalent data security standards.
• Legal and Regulatory Authorities: vb8009 may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required by law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

Where vb8009 engages third-party processors to handle personal data on our behalf, we require them to process that data only for the specified purpose, to maintain appropriate technical and organisational security measures, and to delete or return the data upon termination of the service agreement. Third-party processors are not permitted to use your data for their own independent purposes.

International Data Transfers:

Some of vb8009's third-party service providers — including certain game studios and cloud infrastructure providers — may be located outside Bangladesh. Where personal data is transferred internationally, vb8009 ensures that appropriate contractual safeguards are in place to maintain the same level of data protection that applies within Bangladesh. If you have questions about specific international data transfers, you may contact our support team for further information.

vb8009 uses cookies and similar tracking technologies on its website and mobile platform to deliver core functionality, maintain session security, and analyse platform performance. This section explains what cookies are, what types vb8009 uses, and how you can manage your cookie preferences.

A cookie is a small text file placed on your device by a web server when you visit a website. Cookies allow the website to recognise your device on subsequent visits and store preferences or session information. vb8009 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period unless deleted).

Managing Your Cookie Preferences:

You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block or delete cookies from specific sites, or to block all third-party cookies globally. Please note that disabling strictly necessary cookies will impair or prevent access to core vb8009 platform features, including login and the cashier. For specific guidance on managing cookies in your browser, refer to the help documentation of your browser provider (e.g., Chrome, Firefox, Safari, or Samsung Internet on Android).

vb8009 does not currently respond to browser-level "Do Not Track" (DNT) signals, as there is no industry-wide standard for interpreting them. If you have specific concerns about tracking, you are encouraged to manage preferences directly through your browser settings as described above.

vb8009 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• SSL/TLS Encryption: All data transmitted between your browser or app and vb8009 servers is encrypted using current industry-standard TLS protocols. The vb8009 platform operates exclusively over HTTPS.
• Password Hashing: Account passwords are stored using a one-way cryptographic hashing algorithm with a unique salt per user. This means that plain-text passwords are never stored and cannot be recovered by vb8009 staff even if required.
• Access Controls: Internal access to personal data is restricted on a need-to-know basis. Only authorised vb8009 staff whose roles require access to player data — such as KYC compliance officers and payment processing staff — are permitted to view personal information, and all such access is logged for audit purposes.
• Two-Factor Authentication (2FA): vb8009 supports SMS-based 2FA for player accounts, providing an additional layer of protection against unauthorised access even where a password has been compromised.
• Secure Infrastructure: vb8009 platform data is hosted on secure cloud infrastructure with encrypted storage at rest, automated backup systems, and continuous security monitoring.
• Penetration Testing and Security Audits: vb8009 conducts periodic security assessments including penetration tests and vulnerability scans to identify and remediate potential weaknesses before they can be exploited.

Despite these measures, no data transmission over the internet and no method of electronic storage can be guaranteed to be 100% secure. vb8009 cannot provide an absolute warranty of security; however, we commit to implementing and maintaining best-practice security standards and to notifying affected players promptly in the event of a data breach that is likely to result in a risk to their rights and interests.

Data Retention:

vb8009 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. The general retention periods applied are as follows:

• Active account data: Retained for the full duration of your account and for a period of 5 years following account closure, in line with standard anti-money laundering record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of submission or from account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for up to 3 years from the date of the last communication, unless the record relates to an ongoing dispute or legal matter.
• Marketing consent records: Retained for the duration of your consent and for 1 year following withdrawal of consent, to evidence compliance with consent-based marketing obligations.
• Analytics data: Aggregated and anonymised analytics data may be retained indefinitely, as it cannot be used to identify individual players.

As a vb8009 player, you hold a number of rights in relation to the personal data we hold about you. vb8009 is committed to facilitating the exercise of these rights in a timely and transparent manner. The rights available to you are described below.

• Right of Access: You have the right to request a copy of the personal data that vb8009 holds about you. Upon receipt of a verified access request, vb8009 will provide a summary of your personal data in a readable format within a reasonable timeframe. We may ask you to verify your identity before processing an access request to prevent unauthorised disclosure.
• Right to Rectification: If any personal data vb8009 holds about you is inaccurate or incomplete, you have the right to request that we correct it. You may update certain details — such as your contact email or mobile number — directly within your account settings. For corrections to identity documents or legal name, you will need to contact our support team and provide updated documentation.
• Right to Erasure: You have the right to request that vb8009 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. Note that vb8009 may be unable to fulfil an erasure request in full where retention is required by law — for example, transaction records and KYC documents that must be retained for anti-money laundering compliance purposes cannot be deleted on request during the mandatory retention period.
• Right to Restriction: You have the right to request that vb8009 restricts the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved, or where processing is unlawful but you prefer restriction to deletion.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. vb8009 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests. You have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where vb8009 processes your data on the basis of your consent — primarily for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal. To withdraw marketing consent, update your preferences in account settings or contact [email protected].

vb8009 processes financial transactions in Bangladeshi Taka (BDT) via a range of payment methods specifically chosen for Bangladesh players. The handling of payment data is subject to additional safeguards given its sensitive financial nature.

Mobile Financial Services (bKash, Nagad, Rocket, Upay):

When you initiate a deposit or withdrawal via a mobile financial service, you are redirected to or interact with the payment provider's own secure interface. vb8009 receives a transaction confirmation reference and the masked mobile number associated with the transaction — it does not receive or store your mobile banking PIN, one-time password (OTP), or full account credentials for these services. Security of your mobile financial service account is governed by the respective provider's terms.

Card Payments (Visa, Mastercard):

Card transactions processed via Visa and Mastercard networks are handled through a PCI DSS compliant payment gateway. vb8009 does not store your full card number, card verification value (CVV), or card expiry date on its own servers. Card data is tokenised at the point of entry by the payment gateway and vb8009 retains only a masked card reference (e.g., the last four digits) for transaction record purposes.

Bank Transfers (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank):

Bank transfer transactions may require you to provide your bank account number and account holder name to facilitate the transfer. This information is processed solely for the purpose of completing the requested transaction and is not used for any secondary purpose. Bank transfer details are retained as part of your transaction record in accordance with the data retention schedule described in Section 5.

vb8009 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable legal requirements, or platform features. When material changes are made to this policy, we will notify registered players via their registered email address and display a prominent notice on the vb8009 platform for a minimum of 30 days following the update. The effective date at the top of this document will be revised accordingly.

Your continued use of the vb8009 platform following the notification of a material policy update constitutes your acknowledgement of the revised terms. Where a change requires fresh consent — for example, a new category of marketing communication — we will seek that consent explicitly and will not rely on your continued use as implied consent.

Previous Versions:

Archived versions of this Privacy Policy are available on request. If you wish to review a previous version to understand what terms applied at a specific point in time — for example, in the context of a historical data processing query — please contact our support team with the specific date range you are interested in.

Contacting vb8009 About Privacy Matters:

If you have any questions, concerns, or complaints about this Privacy Policy or about the way vb8009 handles your personal data, you are encouraged to contact our support team in the first instance. We are committed to resolving privacy queries fairly and promptly.

If you are not satisfied with the response you receive from vb8009 following a privacy complaint, you may have the right to escalate the matter to a relevant data protection or consumer protection authority in Bangladesh. vb8009 will cooperate fully with any such regulatory inquiry.

Children and Minors:

vb8009 is strictly an 18+ platform. We do not knowingly collect personal data from any person under the age of 18. If we discover that personal data has been collected from a minor, we will immediately close the associated account, refund any deposits in accordance with our terms, delete the data to the extent permitted by law, and retain only those records required to document the incident for compliance purposes. If you believe a minor has registered an account on vb8009, please contact [email protected] immediately.

Responsible Gaming and Data:

Data collected through vb8009's responsible gaming tools — including self-exclusion requests, deposit limit settings, and time-out activations — is treated with the highest level of confidentiality. This data is used solely to enforce the player's chosen restrictions and is never used for marketing profiling or shared with third parties except where required by law. For more information on responsible gaming tools available to vb8009 players, please visit our Responsible Gaming page.