vb99 Privacy Policy

1 Overview & Scope

vb99 operates vb99.io, an English-language online betting and casino platform serving players in Bangladesh. As part of delivering our services — including sports betting, live casino games, slots, and payment processing — we necessarily collect and process certain categories of personal data relating to our registered players and visitors.

This Privacy Policy governs all personal data processing activities carried out by vb99 in connection with the platform. It applies to:

• Registered account holders accessing vb99 services from Bangladesh.
• Visitors who browse vb99.io without registering an account.
• Individuals who contact vb99 via email or live chat support.
• Any person whose personal data is submitted to vb99 in connection with account registration, KYC verification, or payment processing.

This policy should be read alongside the vb99 Terms & Conditions and the Responsible Gaming Policy, both of which incorporate this Privacy Policy by reference. In the event of any conflict between this policy and a separate written agreement with vb99, the separate agreement will take precedence to the extent of the conflict.

vb99 is committed to handling all personal data with transparency, integrity, and in accordance with recognised data protection principles. We do not sell personal data to third parties and we do not use your information for any purpose incompatible with the purposes set out in this document.

2 Data We Collect

The categories of personal data that vb99 may collect and process are set out in the table below. The specific data collected in any given interaction depends on how you use the platform.

vb99 applies the principle of data minimisation: we collect only the personal data that is necessary for the specific purposes described in this policy. We do not collect sensitive categories of personal data (such as health data, biometric data, or political opinions) unless explicitly required for responsible gaming assessments, and only with your prior consent where applicable.

3 How We Collect Your Data

vb99 collects personal data through the following primary channels:

• Direct Submission: Data you provide when registering an account, completing the KYC verification process, making deposits or withdrawals, submitting support requests, or responding to surveys or promotions.
• Automated Technologies: Data collected automatically when you access and interact with vb99.io, including through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, browser characteristics, pages visited, session duration, and clickstream data.
• Payment Processors: Transaction confirmation data and reference numbers received from payment service providers such as bKash, Nagad, Rocket, and Upay when you process deposits or withdrawals.
• Identity Verification Services: Data received from third-party KYC and identity verification service providers when we conduct document checks on your submitted identification materials.
• Fraud Detection Systems: Data generated by automated fraud and AML detection systems that analyse account behaviour patterns and transaction activity against risk models.
• Public Sources: In limited circumstances relating to AML compliance, we may cross-reference your data against publicly available sanctions lists and politically exposed persons (PEP) databases.

4 How We Use Your Data

vb99 uses the personal data we collect for the following specific purposes. Each use is tied to a legal basis described in Section 5.

• Account Registration and Management: Creating and maintaining your vb99 account, verifying your identity and age, and providing you with access to the platform's services.
• Service Delivery: Processing bets, settling winnings, facilitating deposits and withdrawals via bKash, Nagad, Rocket, and other supported methods, and providing access to cricket betting, slots, live casino, and other games.
• Customer Support: Responding to your enquiries and support requests submitted via live chat or email, maintaining records of communications for quality assurance and dispute resolution purposes.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeovers, and other illegal or prohibited conduct on the platform.
• Regulatory Compliance: Fulfilling our AML and KYC obligations, maintaining transaction records as required by applicable financial regulations, and cooperating with lawful requests from competent authorities.
• Responsible Gaming: Monitoring account behaviour for indicators of problem gambling, enforcing self-exclusion requests, applying deposit limits, and delivering responsible gaming notifications and communications.
• Platform Improvement: Analysing aggregated and anonymised usage data to understand how players interact with the platform, identify technical issues, and develop new features and service improvements.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates where you have provided consent or where we have a legitimate interest in keeping you informed of relevant services. You may opt out of marketing communications at any time by contacting [email protected].

vb99 does not use your personal data for automated decision-making that produces legal or similarly significant effects without providing you with an opportunity to seek human review, except where automated decisions are required for real-time fraud prevention or AML screening purposes.

5 Legal Basis for Processing

vb99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between vb99 and you (the Terms & Conditions), including account registration, payment processing, and service delivery.
• Legal Obligation: Processing that is necessary to comply with applicable legal requirements, including AML screening, KYC verification, record-keeping obligations, and cooperation with regulatory authorities.
• Legitimate Interests: Processing carried out for vb99's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services, provided that these interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, informed, and specific consent, primarily relating to direct marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.

6 Data Sharing & Disclosure

vb99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for each specific purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and other payment processors receive transaction-relevant data (such as your wallet reference and transaction amounts) solely to facilitate the processing of deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers receive copies of identification documents you submit, solely to conduct identity and age verification checks on behalf of vb99.
• Fraud and AML Detection Partners: Specialist fraud prevention and AML screening providers may receive account activity data and identity data to support real-time risk assessments and sanctions screening.
• Technology and Infrastructure Providers: Cloud hosting, database, and security infrastructure providers that process data on behalf of vb99 under strict data processing agreements that prohibit independent use of the data.
• Game Content Providers: Game software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data (such as session tokens and game results) to facilitate gameplay. These providers do not receive your identity or financial data beyond what is technically necessary for game operation.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or a valid legal order. We will notify you of any such disclosure where permitted to do so by law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of vb99's business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

All third parties with whom vb99 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using the data for any purpose other than that for which it was shared.

7 Data Retention

vb99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active Account Data: Personal data associated with an active account is retained for the lifetime of the account and for a period of at least five years following account closure, in order to meet our AML record-keeping obligations.
• Transaction Records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of five years following the date of the transaction.
• KYC Documents: Identity verification documents are retained for a minimum of five years following account closure or the date of submission, whichever is later.
• Support Communications: Live chat transcripts and email correspondence are retained for a period of three years from the date of the communication, unless a longer period is required for dispute resolution purposes.
• Technical and Log Data: Server logs, IP address records, and session data are retained for a maximum of 12 months from the date of collection, unless a specific security investigation requires longer retention.
• Marketing Consent Records: Records of your marketing consent (or withdrawal of consent) are retained for the duration of your account relationship and for three years thereafter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with vb99's internal data disposal procedures. Anonymised and aggregated data that can no longer be linked to any individual may be retained indefinitely for analytical purposes.

8 Security Measures

vb99 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and vb99.io is protected using 256-bit SSL/TLS encryption. This ensures that your login credentials, payment details, and personal information cannot be intercepted during transmission.
• Encryption at Rest: Sensitive personal data stored on vb99's servers, including identity documents and financial records, is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data held by vb99 is restricted to authorised personnel who require the data to perform their specific job functions. All staff with access to personal data are subject to confidentiality obligations.
• Intrusion Detection: vb99 deploys automated intrusion detection and prevention systems that continuously monitor platform infrastructure for signs of unauthorised access or anomalous activity.
• Vulnerability Management: The platform undergoes regular security assessments and penetration testing. Identified vulnerabilities are remediated in accordance with a risk-based prioritisation framework.
• Data Breach Response: vb99 maintains an internal data breach response procedure. In the event of a confirmed data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

While vb99 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You also have an important role in keeping your account secure: use a strong, unique password, do not share your login credentials with anyone, and notify us immediately at [email protected] if you suspect unauthorised access to your account.

9 Cookies & Tracking Technologies

vb99 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by a web server. The following categories of cookies are used on vb99.io:

• Essential Cookies: These cookies are strictly necessary for the platform to function. They enable core features such as user authentication, session management, and security controls. Essential cookies cannot be disabled without impairing the operation of the platform.
• Functional Cookies: These cookies remember your preferences and settings (such as your preferred language and display settings) to provide a more personalised experience. Disabling functional cookies may affect the quality of your experience on the platform.
• Analytical Cookies: These cookies collect anonymised or aggregated data about how visitors use the platform, including pages visited, session duration, and navigation paths. This data is used to identify usability issues and inform platform improvements. vb99 uses analytics tools that process this data in aggregate form only.
• Security Cookies: These cookies support vb99's fraud detection and abuse prevention systems by helping identify unusual patterns of account activity or access from unfamiliar devices and locations.

You may control your cookie preferences through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or receive notifications when cookies are set. Please note that disabling essential cookies will affect your ability to use key platform features, including logging in to your account.

vb99 does not use third-party advertising cookies or behavioural targeting cookies that track your activity across other websites for advertising purposes.

10 Your Data Rights

As a vb99 player, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a request to [email protected] with your registered account details and a clear description of your request. vb99 will respond within a reasonable timeframe, typically within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data that vb99 holds about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to limitations where we are required by law to retain your data (for example, AML transaction records).
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while we are investigating a dispute about the accuracy of your data.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to direct marketing, we will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

vb99 will not charge a fee for handling data rights requests unless a request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may apply. We may ask you to verify your identity before processing a rights request to ensure we are responding to the correct person.

11 Minors & Age Policy

vb99 is strictly an adult platform. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Our registration process includes age verification steps designed to identify and prevent underage access.

If vb99 discovers or has reason to believe that an account has been registered by an individual under 21 years of age, we will immediately suspend the account, delete all associated personal data to the extent permitted by our legal retention obligations, and return any real-money deposits to the extent recoverable. Any winnings accumulated by an underage account will be forfeited.

If you are a parent or guardian and believe that a minor in your care has registered an account on vb99, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay. vb99 takes underage gambling extremely seriously and invests continuously in detection and prevention measures.

12 International Data Transfers

vb99 operates globally distributed infrastructure to deliver a reliable, low-latency experience to players in Bangladesh. As a result, your personal data may be processed on servers located outside of Bangladesh. In all cases where personal data is transferred internationally, vb99 ensures that appropriate safeguards are in place to protect your information, including:

• Binding contractual clauses with data processors and sub-processors that impose equivalent data protection obligations to those set out in this policy.
• Transfers only to countries or service providers that maintain an adequate level of data protection as assessed by vb99's internal data governance framework.
• Technical measures (including encryption) that protect data in transit and at rest regardless of the jurisdiction in which it is stored.

vb99 does not transfer personal data to jurisdictions that are known to present an unacceptably high risk to data subject rights, and we require all international data processors to comply with the same data protection standards that apply within our platform operations.

13 Changes to This Privacy Policy

vb99 reserves the right to update or revise this Privacy Policy at any time. The updated policy will be published at vb99.io/privacy-policy with a revised effective date. Where changes are material — for example, where we introduce a new category of data collection or a new purpose for processing — we will make reasonable efforts to notify registered players via their registered email address or through an on-platform notification prior to the changes taking effect.

Your continued use of the vb99 platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised policy, you should cease using the platform and may request account closure in accordance with the Terms & Conditions.

We recommend reviewing this page periodically to remain informed of how vb99 handles your personal data. The effective date displayed at the top of this page indicates when the current version was last updated.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vb99 handles your personal data, please reach out to our support team. All data-related communications are handled in English.

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available from your account dashboard, 24 hours a day, 7 days a week
• Response Time: Data rights requests are typically acknowledged within 3 business days and resolved within 30 days
• Operating Hours: 24/7 support in English, Bangladesh Standard Time (BST, UTC+6)

For questions about the Terms & Conditions, please visit vb99.io/terms-conditions. For responsible gaming support, please visit our Responsible Gaming page.