vd33 Privacy Policy

01 About This Policy

This Privacy Policy applies to all personal data processed by vd33 in connection with the operation of the https://vd33.io website, its associated mobile-optimised interface, and all related customer support and operational functions. It covers data collected from Players based in Bangladesh and any other jurisdiction from which the Platform is accessed.

This Policy should be read alongside the vd33 Terms & Conditions, which govern the overall contractual relationship between vd33 and its Players. In the event of any conflict between this Policy and the Terms & Conditions on a matter relating to personal data, this Policy shall prevail.

vd33 acts as the data controller in respect of personal data collected through the Platform. This means we are responsible for determining the purposes and means of processing your personal data, and we are accountable for doing so in a lawful, fair, and transparent manner.

02 Data We Collect

vd33 collects the following categories of personal data from Players during registration, account use, and customer support interactions:

03 How We Collect Your Data

vd33 collects personal data through the following channels and mechanisms:

• Direct Registration: Information you provide when creating your vd33 account, completing the KYC verification process, updating your account profile, or communicating with the vd33 support team.
• Platform Activity: Data generated automatically as you use the vd33 platform — including the games you play, bets you place, and features you interact with — is recorded in our systems for account management and security purposes.
• Payment Processing: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or any bank transfer, the transaction details necessary to process and verify the payment are recorded.
• Automated Technologies: Technical and usage data is collected automatically via cookies, web beacons, server logs, and similar tracking technologies when you access the vd33 website. See Section 7 for full details on our cookie practices.
• Third-Party Sources: In limited circumstances, vd33 may receive identity or fraud-screening data about you from trusted third-party verification service providers engaged to assist with KYC compliance. Such providers are contractually bound to handle your data securely.

04 How We Use Your Data

vd33 uses your personal data for the following specific purposes:

• Account Management: To create, maintain, and administer your vd33 account, including authenticating your identity when you log in and processing account-level requests.
• Service Delivery: To provide you with access to casino games, sports betting markets, live dealer tables, and all other features available on the vd33 platform.
• Payment Processing: To process deposits and withdrawal requests, verify that funds originate from payment accounts registered in your name, and maintain accurate financial records.
• Identity & Age Verification: To verify that you are who you claim to be and that you meet the minimum age requirement of 21 years, in compliance with responsible gaming obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other prohibited activities that could harm Players or the integrity of the Platform.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling, to administer deposit limits and self-exclusion requests, and to provide you with responsible gaming tools and information.
• Customer Support: To respond to your queries, process your complaints, and maintain records of your support interactions for quality assurance and training purposes.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, record-keeping obligations, and responses to lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how Players use the vd33 platform and to improve its features, performance, and user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about vd33 services where you have consented to receive such communications. You may withdraw this consent at any time by contacting [email protected].

05 Legal Basis for Processing

vd33 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to fulfil the contract between vd33 and you as a registered Player — including account creation, payment processing, and service delivery.
• Legal Obligation: Certain data processing activities, particularly KYC verification and AML record-keeping, are required by law and cannot be declined.
• Legitimate Interests: vd33 processes technical and usage data to maintain platform security, prevent fraud, and improve service quality. These legitimate interests are balanced against your privacy rights and do not override them.
• Consent: Where vd33 relies on your consent — for example, to send you marketing emails or promotional SMS messages — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Disclosure

vd33 does not sell your personal data. We may share your data with the following categories of recipients only where strictly necessary and subject to appropriate data protection safeguards:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and other payment processors involved in handling your deposits and withdrawals. These providers receive only the data necessary to process your transactions.
• Identity Verification Partners: Third-party KYC and document verification service providers engaged to assist with age and identity verification. These partners are bound by strict confidentiality obligations and may not use your data for any other purpose.
• Game Content Providers: Licensed game studios and software providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive anonymised session identifiers necessary to deliver their games within the vd33 platform. No personally identifiable information is passed to game providers.
• IT & Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers who process data on our behalf under binding data processing agreements.
• Competent Authorities: vd33 may disclose personal data to law enforcement agencies, financial intelligence units, or other government bodies where required to do so by law, court order, or in connection with the investigation of fraud, money laundering, or other serious offences.
• Professional Advisers: Legal counsel, auditors, and accountants may access personal data on a need-to-know basis in connection with their professional advisory functions, subject to professional secrecy obligations.

07 Cookies & Tracking Technologies

The vd33 website uses cookies and similar tracking technologies to ensure the platform operates correctly and to improve the Player experience. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the vd33 website to function. They enable core features such as secure login sessions, account authentication, and navigation between pages. These cookies cannot be disabled without impairing the functionality of the platform.
• Performance & Analytics Cookies: These cookies collect anonymised information about how Players use the vd33 website — such as which pages are visited most frequently and how long sessions last. This data is used to improve platform performance and user experience. No personally identifiable information is collected by these cookies.
• Functionality Cookies: These cookies remember your preferences and settings — such as your preferred language or the last game you played — to provide a more personalised experience on your next visit.
• Security Cookies: These cookies assist in detecting and preventing fraudulent activity, unauthorised account access, and other security threats by analysing session behaviour patterns.

vd33 does not use third-party advertising cookies or cross-site tracking cookies. Your browsing behaviour on the vd33 platform is not shared with advertising networks.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the vd33 platform normally. For instructions on managing cookies in your specific browser, refer to the help documentation provided by your browser's developer.

08 Data Retention

vd33 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Active Account Data: Personal data associated with an active Player Account is retained for the duration of the account relationship and for a minimum of five years following account closure, to satisfy legal and regulatory record-keeping obligations.
• Financial Transaction Records: Records of all deposits, withdrawals, and betting transactions are retained for a minimum of seven years from the date of the transaction, in compliance with applicable financial regulations.
• KYC Verification Documents: Identity and address verification documents submitted as part of the KYC process are retained for a minimum of five years following account closure.
• Customer Support Records: Records of support interactions, complaints, and dispute resolutions are retained for three years from the date of the interaction.
• Marketing Preferences: Records of marketing consent and opt-out requests are retained for the duration of the account relationship and for two years following account closure.
• Responsible Gaming Records: Self-exclusion and deposit limit records are retained for a minimum of five years following account closure to prevent the re-registration of excluded Players.

When personal data is no longer required for any legitimate purpose and the applicable retention period has expired, vd33 will securely delete or anonymise the data in accordance with our internal data disposal procedures.

09 Data Security

vd33 takes the security of your personal data extremely seriously and has implemented a comprehensive set of technical and organisational measures to protect your data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the vd33 servers is protected by industry-standard 256-bit SSL/TLS encryption, preventing interception during transmission.
• Encrypted Data Storage: Sensitive personal and financial data stored in the vd33 database is encrypted at rest using strong encryption algorithms.
• Access Controls: Access to personal data within vd33's systems is restricted to authorised employees and contractors who require access to perform their specific job functions. All access is logged and monitored.
• Firewalls & Intrusion Detection: vd33's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and regular vulnerability assessments to identify and remediate security weaknesses.
• Staff Training: All vd33 personnel who handle personal data receive regular data security and privacy training to maintain awareness of data protection obligations and best practices.
• Incident Response: vd33 maintains a documented data breach response procedure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, vd33 will notify affected Players without undue delay.

10 Your Privacy Rights

As a Player on the vd33 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact vd33 at [email protected] with a clear description of your request and sufficient information to verify your identity:

• Right of Access: You have the right to request a copy of all personal data that vd33 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data vd33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account information directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that vd33 delete your personal data. This right is subject to limitations where data must be retained to comply with legal obligations or to resolve disputes.
• Right to Restriction of Processing: You may request that vd33 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to vd33 in a structured, commonly used, machine-readable format, where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to other forms of processing based on legitimate interests, subject to certain conditions.
• Right to Withdraw Consent: Where vd33 relies on your consent as the legal basis for processing, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

vd33 will respond to all verifiable data subject requests within 14 business days. In complex cases, this may be extended by a further 14 business days, and you will be notified if an extension is required.

11 International Data Transfers

The vd33 platform serves Players primarily in Bangladesh. In the course of operating the platform, your personal data may be processed by servers or service providers located outside Bangladesh, including countries that may not have equivalent data protection laws.

Where such transfers occur, vd33 ensures that appropriate safeguards are in place to protect your data. These safeguards may include data processing agreements incorporating standard contractual clauses, or transfers to recipients in jurisdictions that have been assessed to provide an adequate level of data protection.

By using the vd33 platform, you acknowledge and accept that your personal data may be transferred to, and processed in, countries outside Bangladesh for the purposes described in this Policy.

12 Third-Party Links

The vd33 platform may, from time to time, contain references to or integrations with third-party services — such as game providers and payment platforms. While vd33 takes care to work with reputable partners, this Privacy Policy applies only to data processed by vd33 directly.

Third-party services, including payment providers such as bKash and Nagad, operate under their own privacy policies and data practices. vd33 is not responsible for the privacy practices of any third party and encourages you to review the privacy policies of any third-party service you interact with in connection with your use of the vd33 platform.

13 Children's Privacy

The vd33 platform is strictly intended for individuals aged 21 years and above. vd33 does not knowingly collect, use, or store personal data from anyone under the age of 21.

If vd33 becomes aware that personal data has been collected from a person under 21, that data will be deleted promptly and the associated account will be closed. Any balances associated with an underage account will be handled in accordance with the vd33 Terms & Conditions.

If you are a parent or guardian and believe that a person under your care has registered on the vd33 platform, please contact us immediately at [email protected] so that we can take appropriate action without delay.

14 Amendments to This Policy

vd33 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we provide. When material changes are made to this Policy, vd33 will notify registered Players by email to their registered address and/or via a prominent notice on the platform, at least 7 days before the changes take effect.

The "Effective Date" shown at the top of this Policy indicates when the current version came into force. Continued use of the vd33 platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you must stop using the platform and may request account closure by contacting [email protected].

We recommend that you review this Privacy Policy periodically to stay informed about how vd33 is protecting your personal data. The most current version of this Policy will always be available at https://vd33.io/privacy-policy.

15 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way vd33 handles your personal data, please contact our Privacy team using the details below:

Please include your registered account username and a clear description of your query or request in all correspondence. To protect your data security, vd33 may need to verify your identity before processing any data subject rights request.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. vd33 takes all privacy complaints seriously and will work constructively to resolve any issues raised.