vb66 Privacy Policy

1 Introduction

vb66 ("we", "us", "our") operates the online betting and casino platform accessible at vb66.io, offering sports betting, live casino, slot games, fishing games, and related gaming services primarily to players located in Bangladesh. This Privacy Policy explains how vb66 collects, uses, stores, shares, and protects the personal data of registered players and visitors to our platform.

We take the protection of your personal data seriously. vb66 applies industry-standard technical and organisational security measures to safeguard the information you entrust to us. This policy has been prepared in plain, accessible English to ensure that every player — whether in Dhaka, Chittagong, Sylhet, Khulna, or anywhere else in Bangladesh — can clearly understand their privacy rights and our data practices.

This Privacy Policy forms part of the vb66 Terms and Conditions. By using the vb66 platform, you agree to both documents. Where terms used in this policy are defined in the Terms and Conditions, those definitions apply here as well.

2 Personal Data We Collect

2.1 Registration Data

When you create a vb66 account, we collect the following information that you provide directly:

• Full legal name
• Date of birth (to verify you are aged 21 or older)
• Email address
• Mobile phone number
• Residential address (city, district, and division within Bangladesh)
• Preferred currency (Bangladeshi Taka / BDT)
• Username and hashed password

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may collect copies of the following documents. This data is collected only when verification is required and is stored in encrypted form:

• National ID card (NID), passport, or driving licence
• Proof of address (utility bill, bank statement, or official correspondence dated within 90 days)
• Evidence of payment method ownership (screenshot of bKash, Nagad, or bank account registered in your name)
• Selfie photograph for identity confirmation where required

2.3 Transaction Data

vb66 records all financial activity associated with your account, including:

• Deposit amounts, timestamps, and payment method identifiers (tokenised references only — not full payment credentials)
• Withdrawal requests, amounts, and processing status
• Bonus credits applied to your account and associated wagering activity
• Account balance history

2.4 Gaming Activity Data

For operational, responsible gaming, and fraud-prevention purposes, vb66 records data relating to your platform activity, including:

• Bets placed, stakes, outcomes, and associated odds (sports betting)
• Casino game sessions, including game name, provider, stake, result, and session duration
• Login timestamps, session durations, and logout events
• Responsible gaming tool activations (deposit limits set, cooling-off periods requested, self-exclusion applied)

2.5 Technical and Device Data

When you access vb66 via a web browser or mobile device, we automatically collect certain technical information:

• IP address (used for geolocation, fraud detection, and regulatory compliance)
• Device type, operating system, and browser version
• Referring URL and on-site navigation path
• Cookie identifiers and session tokens (see Section 7)

2.6 Communications Data

When you contact vb66 support via live chat or email, we retain a record of that communication, including the content of messages, timestamps, and the resolution outcome. This data is used for quality assurance, dispute resolution, and staff training purposes.

3 How We Collect Your Data

vb66 collects personal data through the following channels:

• Directly from you: when you complete the registration form, submit KYC documents, contact support, or update your account profile.
• Automatically during platform use: through server logs, session tracking, and cookie-based technologies when you browse or play on the vb66 platform (see Section 7).
• From payment service providers: confirmation data returned by bKash, Nagad, Rocket, Upay, and bank transfer processors when transactions are initiated or completed.
• From third-party game providers: aggregated, anonymised session and RTP data from studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi, used for platform reporting and quality assurance. Individual player data is not received directly from game providers.
• From fraud and security tools: risk signals from internal fraud-detection systems that cross-reference device fingerprints, IP addresses, and behavioural patterns against known fraud indicators.

4 Legal Basis for Processing

vb66 processes your personal data on one or more of the following lawful grounds:

• Contract performance: Processing is necessary to create your account, operate your betting and gaming activity, process deposits and withdrawals, and deliver the services you have requested.
• Legal obligation: vb66 is required to collect and retain certain data — including KYC documentation and transaction records — to satisfy its anti-money laundering, fraud prevention, and responsible gaming obligations.
• Legitimate interests: vb66 processes certain technical and behavioural data in pursuit of its legitimate interests in maintaining platform security, detecting fraud, preventing underage gambling, and improving service quality, provided those interests do not override your fundamental privacy rights.
• Consent: Where vb66 relies on your consent as the basis for processing (for example, for optional marketing communications), you may withdraw that consent at any time by contacting support or updating your account preferences.

5 How We Use Your Personal Data

vb66 uses the personal data it collects for the following purposes:

• Account creation and management: Setting up, maintaining, and securing your vb66 player account.
• Identity verification: Confirming that you are who you say you are, that you meet the 21+ age requirement, and that you are authorised to use the payment methods associated with your account.
• Payment processing: Facilitating deposits from and withdrawals to bKash, Nagad, Rocket, Upay, and bank transfer accounts registered in your name.
• Game and betting services: Recording your betting and gaming activity, settling bets, calculating winnings, and maintaining your account balance.
• Responsible gaming: Monitoring patterns of play to identify potential problem gambling behaviour, enforcing deposit limits and self-exclusion requests, and contacting players where intervention may be in their best interest.
• Fraud prevention and security: Detecting unauthorised account access, identifying suspicious betting patterns, preventing multi-accounting, and investigating potential money laundering activity.
• Customer support: Responding to your queries, resolving disputes, and processing complaints in English via live chat and email.
• Platform improvement: Analysing anonymised, aggregated usage data to improve navigation, game selection, and the overall player experience on vb66.
• Legal compliance: Retaining records required by applicable law and responding to lawful requests from regulatory or law enforcement bodies.
• Marketing communications (where consented): Sending you information about vb66 promotions, bonuses, seasonal offers (such as Eid and Pohela Boishakh specials), and new games — only where you have opted in to receive such communications.

6 Data Sharing and Disclosure

6.1 No Sale of Personal Data

vb66 does not sell, lease, or otherwise commercially transfer your personal data to any third party. Your data is not a product. It is information entrusted to us for the sole purpose of operating your account and delivering our services.

6.2 Service Providers

vb66 may share necessary personal data with carefully selected third-party service providers who assist us in operating the platform. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Sonali Bank, Visa, and Mastercard — solely for the purpose of processing your transactions.
• Identity verification providers: Third-party KYC and document verification platforms used to authenticate player identity documents.
• Game content providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — limited session data may be shared as necessary to operate their game interfaces.
• Fraud detection and cybersecurity vendors: Specialist tools used to detect suspicious activity and protect the platform against fraud and unauthorised access.
• Cloud infrastructure providers: Secure hosting and data storage providers bound by strict contractual data protection obligations.

All third-party service providers engaged by vb66 are bound by contractual data processing agreements that require them to handle your personal data securely, use it only for the specified purpose, and not share it further without authorisation.

6.3 Legal and Regulatory Disclosure

vb66 may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, or where vb66 has a good-faith belief that such disclosure is necessary to prevent fraud, money laundering, or harm to platform integrity.

7 Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the site to recognise your device on return visits, remember your preferences, and collect technical information about how you use the platform. vb66 uses cookies and similar tracking technologies (such as local storage and session tokens) to provide a functional, secure, and personalised experience.

7.2 Types of Cookies We Use

• Essential cookies: Required for the platform to function. These include session authentication tokens that keep you logged in, security cookies that protect against cross-site request forgery, and cookies that store your language and currency preferences. Essential cookies cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to understand how players navigate the vb66 platform — which pages are most visited, where users drop off, and which games are most popular. This data is aggregated and anonymised; it does not identify individual players.
• Fraud-prevention cookies: Used to build a device fingerprint for security purposes, helping vb66 detect when a new or unusual device accesses an existing account.
• Preference cookies: Store your platform settings such as your preferred deposit method and interface configuration, so you do not need to re-enter them on every visit.

7.3 Managing Cookies

You can control and manage cookies through your web browser settings. Please note that disabling essential cookies will prevent you from logging into your vb66 account and using core platform features. Instructions for managing cookies vary by browser; consult your browser's help documentation for guidance. Continued use of the vb66 platform after reviewing this notice constitutes your acceptance of our use of cookies as described above.

8 Data Retention

vb66 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our anti-fraud obligations. The following retention periods apply as a general guide:

Data Type	Retention Period	Basis
Account registration data	Duration of account + 5 years post-closure	Legal obligation / anti-fraud
KYC identity documents	Duration of account + 5 years post-closure	Legal obligation
Transaction records	Minimum 5 years from transaction date	Legal obligation / dispute resolution
Betting and gaming history	Minimum 5 years from account closure	Responsible gaming / dispute resolution
Support communications	3 years from last interaction	Legitimate interests / quality assurance
Technical and device data	13 months from collection	Legitimate interests / fraud prevention
Marketing consent records	Until consent withdrawn + 2 years	Legal compliance (proof of consent)

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where data must be retained beyond these periods due to an ongoing investigation, legal proceeding, or regulatory requirement, it will be kept only for the duration of that necessity.

9 Data Security

vb66 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and the vb66 platform.
• Encrypted at-rest storage for all personally identifiable data, KYC documents, and financial records held on vb66 servers.
• Access control policies that restrict access to personal data to only those vb66 staff and systems that have a legitimate operational need for it.
• Two-factor authentication (2FA) options available to players to add an extra layer of security to account access.
• Regular security audits and penetration testing conducted to identify and remediate vulnerabilities in the vb66 platform infrastructure.
• Incident response procedures that ensure any data security incident is investigated promptly and, where required by applicable law, reported to the relevant authorities and affected players without undue delay.

10 Your Privacy Rights

As a vb66 player, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact our support team via live chat or email at [email protected]. vb66 will respond to all valid privacy rights requests within 30 days of receipt.

• Right of access: You may request a copy of the personal data vb66 holds about you, including a summary of how it is used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your account profile page.
• Right to erasure: In certain circumstances, you may request that vb66 delete the personal data we hold about you. Please note that this right is subject to our legal retention obligations; we cannot delete data that we are required by law to retain.
• Right to restrict processing: You may request that vb66 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or the performance of a contract, you may request that vb66 provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where vb66 relies on your consent as the legal basis for processing (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to the processing of your personal data where vb66 relies on legitimate interests as the legal basis, subject to vb66 demonstrating compelling legitimate grounds that override your interests.

vb66 will not charge a fee for exercising any of the rights listed above under normal circumstances. Where requests are manifestly unfounded or excessive, vb66 reserves the right to charge a reasonable administrative fee or refuse to act on the request, providing written reasons for that decision.

11 Children and Minors

The vb66 platform is strictly for players aged 21 years and older. vb66 does not knowingly collect personal data from any person under the age of 21. If vb66 identifies or has reasonable grounds to believe that an account has been registered by a person under the age of 21, the account will be immediately suspended, all associated balances forfeited, any personal data collected will be securely deleted (subject only to any mandatory legal retention requirements), and the matter may be referred to relevant authorities.

If you are a parent or guardian and believe that your child has registered an account on vb66, please contact our support team immediately via live chat so that we can investigate and take appropriate action without delay.

12 Third-Party Links

The vb66 platform does not contain links to external third-party websites for browsing or general navigation purposes. Where references to game providers (such as Evolution Gaming, Pragmatic Play, or Spribe) or payment method brands (such as bKash and Nagad) appear on the platform, these are provided for informational context only. vb66 is not responsible for the privacy practices, data handling policies, or content of any third-party organisation. If you visit the websites of these third parties directly, their own privacy policies will govern the use of any data you provide to them.

13 Updates to This Privacy Policy

vb66 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or platform features. The most recent version of the Privacy Policy is always available on this page at vb66.io/privacy-policy. The "Last updated" date at the top of this document indicates when the most recent revision was made.

Where changes to this Privacy Policy are material — for example, where we introduce a new category of data collection or a new purpose for processing — vb66 will notify registered players via the email address on file prior to the changes taking effect. Your continued use of the vb66 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

If you do not agree with any changes to this Privacy Policy, you must stop using the vb66 platform and contact our support team to request account closure before the updated policy takes effect.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vb66 handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled in English and will receive a response within 4–12 hours for email submissions, or in under 2 minutes via live chat.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the vb66 platform
• Response time: Under 2 minutes (live chat) / 4–12 hours (email)

When submitting a privacy rights request, please include your registered username and the email address associated with your vb66 account so that we can locate your records and respond efficiently. vb66 may need to verify your identity before processing a data access, rectification, or erasure request to ensure that personal data is not disclosed to or acted upon by an unauthorised party.