Privacy Policy
at vb66

When you interact with vb66 — whether browsing the website, registering an account, making a deposit, placing a bet, or contacting support — we may collect the following categories of personal information:

Registration & Identity Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify you are 18 years of age or older).
• Residential address, including district, city, and postcode (Bangladesh addresses accepted).
• Email address used to create and manage your vb66 account.
• Mobile phone number, which may be used for two-factor authentication and transaction alerts.
• Username and encrypted password (passwords are never stored in plain text).

Identity Verification (KYC) Documents

• Copy of a government-issued photo identification document: National Identity Card (NID), passport, or driving licence.
• Proof of address document where required (e.g., a utility bill or bank statement issued within the past 3 months).
• Confirmation of ownership of a payment method (e.g., a screenshot of a bKash, Nagad, or Rocket wallet statement).

Financial & Transaction Data

• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers) used for deposits and withdrawals.
• Transaction history: deposit amounts, withdrawal amounts, dates, and reference numbers.
• Bonus credits applied, wagering progress, and withdrawal eligibility status.

Usage & Technical Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser type and version.
• Pages visited, time spent on each page, click paths, and referral source.
• Game session logs: games played, bet amounts, session start and end times, and outcomes (used for fairness auditing and responsible gaming monitoring).

Communications Data

• Content of messages sent to vb66 via live chat, email, or any support channel.
• Records of any dispute, complaint, or formal request submitted to vb66.

vb66 uses the personal data we collect for clearly defined purposes. We do not use your data in ways that are incompatible with the purposes described below without first obtaining your explicit consent or being required to do so by law.

Purpose	Data Used
Account creation & management	Name, email, phone, date of birth, username, password
Age & identity verification (KYC)	Date of birth, NID / passport copy, address proof
Processing deposits & withdrawals	Mobile wallet identifiers, transaction records
Fraud prevention & security monitoring	IP address, device data, login history, transaction patterns
Responsible gaming monitoring	Game session logs, betting history, deposit frequency
Customer support & dispute resolution	Communications data, account history, transaction records
Platform analytics & performance improvement	Usage data, page views, click paths, session durations
Promotional communications (with consent)	Email address, game preferences, deposit history
Legal & regulatory compliance	All categories as required by applicable law

Where you have opted in to receive promotional emails from vb66 — for example, notifications about new games, BPL season betting offers, or Eid special promotions — you may withdraw that consent at any time by contacting support. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to that withdrawal, and it does not affect our ability to contact you for operational purposes (such as account verification, security alerts, or withdrawal confirmations).

vb66 processes your personal data on the following legal grounds, depending on the nature of each processing activity:

• Contractual necessity: Most core processing activities — account creation, transaction processing, KYC verification, and customer support — are necessary to perform the contract between you and vb66. Without this data, we cannot provide the service.
• Legal obligation: Certain data processing is required by applicable law, including anti-money laundering (AML) checks, record-keeping obligations, and responding to lawful requests from relevant authorities.
• Legitimate interests: vb66 processes some data on the basis of its legitimate interests as a platform operator, including fraud detection, platform security, abuse prevention, and internal analytics to improve service quality. We carry out legitimate interest assessments to ensure these interests do not override your rights.
• Consent: Where processing is not required by contract or law — for example, sending you marketing emails about new promotions — we rely on your freely given, informed, and revocable consent. You can withdraw this consent at any time.

If you would like to know the specific legal basis applicable to a particular data processing activity, please contact our support team at [email protected] and we will provide a clear written explanation.

vb66 does not sell or rent your personal data to third parties. We may share specific categories of data with the following categories of recipient, strictly for the purposes described:

Payment Processing Partners

To process deposits and withdrawals, vb66 shares necessary transaction data with the relevant mobile financial service providers you use — bKash, Nagad, Rocket, and Upay. These providers receive only the data required to complete the specific transaction. Their handling of your data is governed by their own privacy policies.

Identity Verification Services

vb66 may use trusted third-party KYC and identity verification services to assist in verifying identity documents submitted during registration or withdrawal. These services are bound by strict data processing agreements and may not use your data for any purpose other than verification on vb66's behalf.

Game Software Providers

Games on the vb66 platform are powered by licensed providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session data (such as a session token and bet size) to facilitate gameplay. They do not receive your personally identifiable information such as your full name, NID number, or mobile wallet details.

Analytics & Performance Tools

vb66 uses server-side analytics tools to monitor platform performance, uptime, and user experience quality. Usage data shared with these tools is aggregated and anonymised wherever possible.

Legal & Regulatory Authorities

vb66 will disclose personal data to relevant governmental bodies, law enforcement agencies, or judicial authorities when required to do so by applicable law or a valid legal order. Where permitted by law, we will notify you of such a disclosure.

vb66 uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how players interact with the site. A cookie is a small text file stored on your device by your browser. The cookies used by vb66 fall into the following categories:

Cookie Type	Purpose	Lifespan
Strictly Necessary	Maintain your login session, remember your account state, enable secure page transitions, prevent cross-site request forgery (CSRF)	Session / up to 24 hours
Functional	Remember your language preference, display settings, and responsible gaming tool configurations	Up to 30 days
Analytics	Measure page load times, identify broken journeys, understand which game categories attract the most engagement — all data is aggregated	Up to 12 months
Security	Detect unusual login patterns, flag suspicious device changes, support fraud detection workflows	Up to 90 days

vb66 does not use third-party advertising or retargeting cookies. We do not place cookies that track your behaviour across other websites outside of vb66.org.

Strictly necessary cookies cannot be disabled as they are required for the platform to function securely. You may control functional and analytics cookies through your browser settings. Disabling functional cookies may affect your experience — for example, your display preferences may not be remembered between sessions.

vb66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data (name, email, contact details, account settings): Retained for the duration your account remains active, plus a period of 5 years following account closure to meet record-keeping obligations.
• KYC / identity verification documents: Retained for a minimum of 5 years from the date of submission, in compliance with standard financial services record-keeping requirements.
• Transaction records (deposits, withdrawals, bets): Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for 3 years from the date of the most recent communication in a given support thread.
• Game session logs: Retained for 2 years for responsible gaming monitoring and fairness auditing purposes.
• Marketing consent records: Retained for 3 years from the date of consent or the date of last interaction, whichever is later.
• Analytics / usage data: Retained in aggregated, anonymised form indefinitely; individually identifiable usage logs are deleted after 13 months.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised so it can no longer be associated with any individual. If you request deletion of your data and there is no outstanding legal obligation requiring us to retain it, we will action your request within 30 days and confirm deletion in writing to your registered email address.

As a vb66 account holder and data subject, you hold the following rights with respect to your personal data. You may exercise any of these rights at any time by contacting our support team:

• Right of Access: You have the right to request a copy of all personal data vb66 holds about you. We will provide this in a structured, readable format within 30 days of receiving your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. Corrections to registered name or date of birth will require supporting documentation.
• Right to Erasure ("Right to Be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been unlawfully processed. Deletion requests are subject to our legal retention obligations — we will inform you of any data categories that must be retained and the reason why.
• Right to Restrict Processing: You may request that we temporarily suspend processing of your data while the accuracy of that data is being contested, or while a legitimate interest objection is being assessed.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request that we provide your data in a portable, machine-readable format (such as JSON or CSV) that you can transfer to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling carried out for fraud detection, where you believe your individual circumstances override vb66's interests. We will assess your objection and respond within 30 days.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receiving marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact vb66 support and include the subject line "Privacy Rights Request" along with your registered email address and a description of the right you wish to exercise. We may ask you to verify your identity before processing the request to protect against unauthorised access to your account data.

vb66 will not charge a fee for handling privacy rights requests made in good faith. If a request is manifestly unfounded or excessive (for example, repeated identical requests in a short timeframe), we reserve the right to decline or charge a reasonable administrative fee.

vb66 takes the security of your personal data seriously and employs a range of technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and vb66 servers.
• Encrypted storage of passwords, identity documents, and payment method references at rest.
• Access controls ensuring that only vb66 staff with a documented need — such as KYC reviewers and compliance officers — can access personally identifiable account data.
• Two-factor authentication (2FA) available for all player accounts and enforced for all internal staff access to production systems.
• Regular security assessments and penetration testing of platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Audit logging of all access to player account data, enabling detection and investigation of any anomalous access patterns.
• Secure data disposal procedures ensuring that when data reaches the end of its retention period, it is shredded, wiped, or cryptographically erased.

Despite these measures, no online platform can guarantee absolute security. In the event that vb66 becomes aware of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players via their registered email address as promptly as practicable, and will report the breach to the relevant authorities as required by applicable law.

You also play a role in keeping your account secure. Use a strong, unique password for your vb66 account. Do not share your credentials with anyone. Log out of your account when using shared or public devices. If you notice any suspicious activity on your account, contact vb66 support immediately.