vv999 Privacy Policy

1 Who We Are

vv999 operates the online casino and sports betting platform accessible at vv999.io (the "Platform"). In the context of this Privacy Policy, vv999 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed.

If you have any questions about how your personal data is handled, or wish to exercise any of the rights described in this Policy, please contact our Data Protection team at [email protected] with the subject line "Privacy Request".

2 Data We Collect

Depending on how you interact with the Platform, vv999 may collect and process the following categories of personal data:

2.1 Identity Data

Full legal name, date of birth, nationality, national identification number (NID), passport number, or driving licence number as provided during registration and KYC verification.

2.2 Contact Data

Email address, mobile phone number, and residential address (including district, division, and postcode within Bangladesh).

2.3 Financial Data

Payment method details (e.g., bKash account number, Nagad number, bank account number, Visa or Mastercard last four digits), transaction history, deposit and withdrawal records denominated in Bangladeshi Taka (৳ BDT), and wallet balance information.

2.4 Technical Data

IP address, device type and operating system, browser type and version, time zone setting, screen resolution, session duration, pages visited, click-stream data, referral source, and unique device identifiers.

2.5 Gaming and Betting Data

Game history, bet history, wagering amounts, win and loss records, bonus usage, game preferences, and responsible gaming tool settings (e.g., deposit limits, self-exclusion status).

2.6 Communications Data

Records of communications between you and vv999 customer support, including live chat transcripts, email correspondence, and any attachments or documents you submit to us.

2.7 Marketing Preference Data

Your opt-in or opt-out status for marketing communications, communication channel preferences, and records of your engagement with promotional emails or in-platform notifications.

3 How We Collect Data

vv999 collects personal data through the following means:

• Direct Interactions: Data you voluntarily provide when registering an account, completing KYC, making deposits or withdrawals, contacting customer support, or updating your account profile.
• Automated Technologies: Technical and usage data collected automatically when you access the Platform, via cookies, web beacons, server logs, and similar tracking technologies (see Section 5).
• Third-Party Sources: Identity verification data from KYC partners; fraud-screening data from anti-fraud service providers; payment confirmation data from payment processors including bKash, Nagad, Rocket, and Upay.
• Public Sources: Publicly available records that may be consulted during enhanced due diligence, such as sanctions lists and politically exposed persons (PEP) databases, in connection with our anti-money-laundering obligations.

4 Purposes and Lawful Bases

The table below summarises the primary purposes for which vv999 processes your personal data and the lawful basis relied upon for each purpose.

5 Cookies and Tracking

vv999 uses cookies and similar tracking technologies to operate the Platform effectively, analyse usage patterns, and deliver a personalised experience. Cookies are small data files stored on your device when you access the Platform.

5.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences such as language settings, last-visited game categories, and responsible gaming tool configurations to provide a more convenient experience on return visits.
• Analytics Cookies: Collect aggregated, anonymised data about how players use the Platform, including which games are most popular and where users navigate before depositing, to help us improve the service.
• Marketing Cookies: Used (where you have consented) to deliver relevant promotional communications and measure the effectiveness of our marketing campaigns.

5.2 Managing Cookies

You may control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from accessing secure areas of the Platform, including your account wallet and game lobbies. For detailed instructions on managing cookies in your specific browser, refer to your browser provider's help documentation.

6 Sharing Your Data

vv999 does not sell your personal data. We share personal data only in the following circumstances and only to the extent necessary for each purpose:

• Payment Processors: We share financial transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard, solely for the purpose of processing your deposits and withdrawals.
• Identity Verification Partners: We share identity documents and personal information with contracted KYC and anti-money-laundering service providers for the purpose of verifying your identity and age as required by our operating obligations.
• Game Studios and Content Providers: Technical identifiers (not your full identity) may be shared with game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to facilitate game session integrity, fair-play certification, and dispute resolution.
• Analytics Providers: Aggregated, pseudonymised technical data is shared with analytics service providers to help us understand Platform usage patterns and improve our services.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, court order, or other binding legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of vv999's assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

All third-party service providers who process personal data on vv999's behalf are bound by written data processing agreements that prohibit them from using the data for any purpose other than providing services to vv999.

7 International Transfers

Some of vv999's service providers may be located in countries outside Bangladesh. Where personal data is transferred internationally, vv999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Safeguards used for international transfers include: standard contractual clauses incorporated into data processing agreements; the requirement that recipient organisations maintain security practices equivalent to those described in Section 12 of this Policy; and, where applicable, adequacy determinations recognising the receiving country's data protection framework as sufficient.

8 Data Retention

vv999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, or contractual requirements. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account relationship with vv999 plus a post-closure period of 5 years to satisfy anti-money-laundering record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of account closure, in accordance with applicable financial crime prevention requirements.
• Transaction Records: Retained for 5 years from the date of the transaction, in line with financial record-keeping obligations.
• Customer Support Communications: Retained for 2 years from the date of the last interaction unless the communication forms part of an ongoing dispute or legal claim.
• Marketing Preference Records: Retained for 2 years from the date of your last marketing interaction, or until you withdraw consent, whichever is earlier.
• Technical and Log Data: Retained for up to 12 months from collection, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an individual.

9 Your Rights

As a data subject, you have the following rights in relation to the personal data vv999 holds about you. These rights are not absolute and are subject to certain conditions and exceptions under applicable law.

To exercise any of these rights, please submit your request in writing to [email protected] with the subject line "Privacy Request — [Right Name]". vv999 will respond within 30 calendar days of receiving a valid request. We may need to verify your identity before processing your request to prevent unauthorised disclosure of personal data.

10 Marketing Communications

vv999 may send you marketing communications about promotions, bonuses, new game releases, BPL and IPL cricket betting offers, and seasonal campaigns (such as Eid and Pohela Boishakh specials) where you have given your explicit opt-in consent to receive such communications.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email sent by vv999;
• Updating your communication preferences in your account settings; or
• Sending an email to [email protected] with the subject line "Unsubscribe".

Opting out of marketing communications does not affect the delivery of transactional messages (such as deposit confirmations, withdrawal notifications, or account security alerts), which are sent as part of the contractual service and cannot be disabled while your account is active.

11 Children and Minors

The vv999 Platform is strictly intended for adults aged 21 years and above. vv999 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory age verification, and we conduct KYC checks to confirm the age and identity of all registered players.

If vv999 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please notify us immediately at [email protected].

12 Security Measures

vv999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using current TLS standards.
• AES-256 Encryption at Rest: Sensitive personal data and financial records stored on vv999 servers are encrypted at rest using AES-256 encryption.
• Access Controls: Personal data access is restricted on a need-to-know basis. Staff members are granted access only to the categories of data required to perform their specific job functions. Access privileges are reviewed quarterly.
• Two-Factor Authentication (2FA): All vv999 staff accounts that can access personal data require 2FA. Players are also encouraged to enable 2FA on their accounts.
• Penetration Testing: vv999 conducts regular third-party security assessments and penetration tests of the Platform infrastructure to identify and remediate vulnerabilities.
• Incident Response: vv999 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, affected players will be notified without undue delay.
• Staff Training: All vv999 employees who handle personal data receive regular data protection and information security training.

While vv999 takes all reasonable steps to protect your data, no digital system is entirely immune to risk. You are also responsible for maintaining the security of your own device and account credentials, as described in the Terms & Conditions.

13 Third-Party Links

The Platform may contain references to third-party services, game studios, or payment providers. This Privacy Policy applies solely to the vv999 Platform and does not extend to any third-party websites, applications, or services that may be linked from or integrated into the Platform.

vv999 accepts no responsibility for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party service providers whose services you access in connection with your use of vv999.

14 Changes to This Policy

vv999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify registered players by email and/or by displaying a prominent notice on the Platform prior to the change taking effect.

The date at the top of this Policy indicates when it was last revised. We encourage you to review this Policy periodically to stay informed about how vv999 protects your personal data. Your continued use of the Platform following notification of any changes constitutes your acknowledgement of the updated Policy.

If a proposed change materially affects the way we process data that was originally collected on the basis of your consent, we will seek fresh consent before the new processing begins.

15 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or the way vv999 processes your personal data, please contact our Data Protection team using the details below:

• Email: [email protected] (subject line: "Privacy Request")
• Response Time: We aim to acknowledge all privacy-related enquiries within 2 business days and provide a full response within 30 calendar days.
• Support Hours: 24 hours a day, 7 days a week — including Eid, public holidays, and Victory Day (December 16).
• Language: Our support team handles privacy requests in both English and Bengali.

vv999 takes all privacy complaints seriously. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.