vd99 Privacy Policy

This Privacy Policy ("Policy") describes how vd99 ("vd99", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "your", "the Player") who access or use the vd99 website at vd99.vip and any associated services. By creating a vd99 account or using any part of our platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside the vd99 Terms & Conditions, which govern the overall legal relationship between you and vd99. In the event of any conflict between this Policy and the Terms & Conditions on matters of data handling, this Policy shall take precedence.

1. Information We Collect

1.1 Information You Provide Directly

When you register a vd99 account, complete identity verification, make a deposit or withdrawal, contact support, or participate in any promotion, you provide us with personal data. The categories of data collected through these interactions include:

• Identity data: Full legal name, date of birth, gender, nationality, and government-issued identification document details (National Identity Card number, passport number, or driving licence number).
• Contact data: Residential address (including district, city, and postal code within Bangladesh), email address, and mobile phone number.
• Financial data: Payment method details including bKash account number, Nagad account number, Rocket account number, Upay account number, and masked card details for Visa and Mastercard transactions. Full card numbers are never stored by vd99 — they are handled exclusively by our PCI-DSS compliant payment processors.
• Account credentials: Username and hashed password. Passwords are never stored in plain text.
• Communications data: Records of your correspondence with our support team, including email content, chat logs, and call records where applicable.

1.2 Information Collected Automatically

When you access the vd99 platform, certain technical and behavioural data is collected automatically by our systems. This includes:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, features used, games played, bets placed, session duration, click-stream data, and navigation paths within the platform.
• Geolocation data: Approximate geographic location derived from your IP address, used for fraud detection and compliance purposes. vd99 does not collect precise GPS coordinates unless explicitly required for a specific feature and with your express consent.
• Cookie data: Information collected via cookies and similar tracking technologies, as described in Section 4 of this Policy.

1.3 Information from Third Parties

vd99 may receive additional personal data about you from trusted third-party sources in the following circumstances:

• Identity verification providers who confirm the authenticity of your identification documents.
• Payment processors who confirm transaction status, flag potentially fraudulent transactions, or provide chargeback-related information.
• Fraud prevention and anti-money laundering screening services.
• Publicly available sources, such as sanctions lists or politically exposed persons (PEP) databases, where required by applicable law.

2. How We Use Your Data

vd99 processes your personal data for the following purposes, each of which is supported by an appropriate legal basis:

Purpose	Data Used	Legal Basis
Account registration and management	Identity, contact, credentials	Contract performance
Identity verification (KYC)	Identity, document data	Legal obligation
Processing deposits and withdrawals	Financial, identity data	Contract performance
Fraud detection and prevention	Technical, financial, usage data	Legitimate interests
Anti-money laundering compliance	Identity, financial, transaction data	Legal obligation
Customer support delivery	Contact, communications data	Contract performance
Responsible gaming monitoring	Usage, betting behaviour data	Legal obligation / legitimate interests
Platform analytics and improvement	Usage, technical, cookie data	Legitimate interests
Promotional communications (opt-in)	Contact, preferences data	Consent

vd99 does not use your personal data for automated individual decision-making that produces significant legal effects without human review. Where automated tools are used in fraud detection or responsible gaming monitoring, any resulting action that materially affects your account will be reviewed by a human agent before being finalised.

3. Data Sharing & Disclosure

3.1 Service Providers

vd99 engages a limited number of carefully selected third-party service providers who process personal data on our behalf in order to deliver core platform functions. These providers include payment processors (for bKash, Nagad, Rocket, Upay, Visa, and Mastercard transactions), identity verification services, fraud screening tools, and cloud hosting infrastructure providers. All such providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to vd99.

3.2 Legal and Regulatory Disclosure

vd99 may disclose your personal data to law enforcement agencies, regulatory authorities, financial intelligence units, or courts of competent jurisdiction where we are legally required to do so. Such disclosures are made strictly in accordance with applicable legal obligations and only to the extent necessary to satisfy the relevant legal requirement. Where permitted by law, vd99 will notify affected players of such disclosures.

3.3 Business Transfers

In the event that vd99 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, vd99 will take reasonable steps to ensure that the acquiring entity agrees to treat your data in a manner consistent with this Privacy Policy, and players will be notified of any material change to data controller identity before it takes effect.

3.4 No Sale of Personal Data

vd99 does not sell, rent, lease, or otherwise transfer your personal data to any third party for commercial marketing, advertising, or data brokerage purposes. This prohibition applies regardless of whether the data is transferred in identifiable or aggregated form where re-identification would be reasonably possible.

4. Cookies & Tracking Technologies

vd99 uses cookies and similar technologies (including web beacons and local storage objects) to enable essential platform functionality, maintain session state, detect fraud, and analyse how the platform is used so that we can improve the experience for all players.

4.1 Categories of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the vd99 platform to function. They maintain your login session, remember your language preferences, enable secure areas of the site, and support the correct functioning of payment flows. These cookies cannot be disabled without significantly disrupting your ability to use the platform.
• Analytics Cookies: These cookies collect aggregated, anonymised data about how players interact with vd99, including which pages are visited most frequently and where navigation difficulties arise. This information is used solely to improve platform performance and user experience. You may opt out of analytics cookies via your browser settings.
• Fraud Detection Cookies: These cookies and device fingerprinting technologies help vd99 identify suspicious activity, prevent account takeover attempts, and detect the use of multiple accounts by the same individual. They are processed under our legitimate interest in maintaining a secure and fair platform.
• Preference Cookies: These cookies remember choices you make on the platform, such as display preferences or notification settings, so that you do not have to re-enter them on each visit.

4.2 Managing Cookies

You can control or delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will impair your ability to log in and use core platform features. Instructions for managing cookies in commonly used browsers are available in each browser's help documentation. vd99 does not respond to "Do Not Track" browser signals at this time, as there is no universally accepted standard for interpreting such signals.

5. Data Security Measures

vd99 implements a layered approach to data security designed to protect your personal information against unauthorised access, accidental loss, alteration, and disclosure. Our security measures include, but are not limited to, the following:

• Transport Layer Security (TLS): All data in transit between your device and vd99 servers is encrypted using TLS 1.2 or higher. Our SSL certificate is kept current and verified by a trusted certificate authority.
• Encryption at rest: Sensitive personal data stored in vd99 databases, including identity documents and financial records, is encrypted using AES-256 encryption.
• Password hashing: Account passwords are stored using a one-way cryptographic hash function with salting. vd99 staff cannot view your password in plain text under any circumstances.
• Access controls: Access to personal data within vd99 systems is restricted on a strict need-to-know basis. Staff access is role-based, logged, and subject to periodic review. Administrative access to production systems requires multi-factor authentication.
• Penetration testing: vd99 conducts regular security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses before they can be exploited.
• Incident response: vd99 maintains a documented data breach response plan. In the event of a security incident that poses a risk to your personal data, affected players will be notified promptly in accordance with applicable notification obligations.

While vd99 takes all reasonable and commercially practicable steps to protect your personal data, no data transmission over the internet or method of electronic storage is completely secure. We therefore cannot provide an absolute guarantee of security, and you acknowledge this inherent risk when using any online service.

6. Data Retention

vd99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

• Active account data: Retained throughout the period your account remains open and active on the vd99 platform.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of the transaction, in compliance with anti-money laundering record-keeping requirements.
• Identity verification documents: Retained for a minimum of five (5) years following account closure, or longer where required by applicable law or ongoing investigation.
• Customer support records: Retained for three (3) years following the closure of the relevant support interaction.
• Marketing preferences and opt-in records: Retained for the duration of your account plus two (2) years post-closure as evidence of consent.
• Technical and usage logs: Retained for up to twelve (12) months for operational and fraud prevention purposes, after which they are anonymised or deleted.

When personal data reaches the end of its applicable retention period and there is no legal or operational justification for continued storage, it is securely deleted from vd99 systems or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

7. Your Privacy Rights

As a player on the vd99 platform, you hold the following rights with respect to the personal data we process about you. These rights may be exercised at any time by contacting our support team using the contact details provided in Section 8 of this Policy.

• Right of Access: You have the right to request a copy of the personal data vd99 holds about you, together with information about how it is being used. We will provide this information in a clear and portable format within thirty (30) days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many of your account details directly through your vd99 account settings. For changes to identity or financial data, our support team will guide you through the verification process.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and there is no other legal basis for processing), or where the data has been unlawfully processed. Please note that this right is subject to overriding legal obligations — for example, we cannot delete transaction records that we are required to retain under anti-money laundering law.
• Right to Restriction: In certain circumstances, you have the right to request that vd99 restrict the processing of your personal data — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. vd99 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receipt of promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

vd99 will not charge a fee for handling reasonable privacy requests. However, where requests are manifestly unfounded, excessive, or repetitive, vd99 reserves the right to charge a reasonable administrative fee or decline to respond, and will explain the reason for doing so.

8. Policy Updates & Contact

vd99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered players by email to the address associated with their vd99 account and by posting a prominent notice on the vd99 website at least seven (7) days before the updated Policy takes effect.

The "Effective" date displayed at the top of this page will be updated each time this Policy is revised. We encourage you to review this page periodically to remain informed about how vd99 protects your personal data. Your continued use of the vd99 platform following notification of a Policy update constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data vd99 holds about you, please contact our support team. Our team is available around the clock and can communicate in both English and Bengali.