vd89 Privacy Policy — How We Protect Your Personal Data

vd89 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses, registers with, or otherwise interacts with the vd89 platform available at vd89.io. This Privacy Policy describes in clear, plain English how we collect, use, store, share, and protect personal data relating to our players, prospective players, and website visitors, with particular attention to users based in Bangladesh.

This Privacy Policy applies to all personal data processing activities carried out by vd89 in connection with the operation of the vd89 website, mobile site, and all associated services, including sports betting, live casino, slots, and payment processing. It applies regardless of the device or channel through which the vd89 platform is accessed.

This Privacy Policy should be read alongside the vd89 Terms & Conditions, which together form the complete legal framework governing your relationship with vd89. Terms not defined in this Privacy Policy carry the meanings given to them in the Terms & Conditions.

For the purposes of applicable data protection principles, vd89 acts as the data controller in respect of personal data collected and processed through the vd89 platform. As data controller, vd89 determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities are carried out lawfully, fairly, and transparently.

All data protection enquiries, access requests, correction requests, deletion requests, and formal complaints relating to vd89's data processing activities should be directed to:

vd89 collects the following categories of personal data, depending on your interaction with the platform:

3.1 Registration & Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for 21+ age verification purposes)
• Bangladesh mobile number (used as your primary account identifier)
• Email address
• Residential address (city, district, division — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)
• Account username and hashed password

3.2 KYC & Verification Documents

• Bangladesh National Identity Card (NID) — front and back image
• Valid Bangladeshi passport (bio-data page)
• Bangladesh driving licence
• Proof of address documents (utility bills, bank statements dated within three months)
• Proof of payment method ownership (e.g., bKash or Nagad account confirmation)
• Facial photographs or selfie images submitted for identity matching purposes

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records (amounts in BDT, timestamps, payment channel used)
• Mobile wallet identifiers (bKash number, Nagad number, Rocket number, Upay number)
• Bank account details submitted for bank transfer withdrawals
• Bonus redemption records and wagering history

3.4 Gameplay & Betting Data

• Bet placements, bet amounts, bet outcomes, and game session records
• Casino game history (slots, live Baccarat, live Roulette, Teen Patti, Dragon Tiger, Andar Bahar)
• Sports betting selections (cricket markets including BPL, IPL, T20 World Cup, Bangladesh Tigers series)
• Session durations, login timestamps, and logout timestamps

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type
• Unique device identifiers
• Referring URL and on-site navigation path data
• Cookie identifiers and session tokens (see Section 10)

3.6 Communications Data

• Records of support ticket exchanges between you and vd89 customer support
• Live chat transcripts (where applicable)
• Records of any responsible gaming requests, self-exclusion requests, or dispute submissions
• Marketing preferences and consent records

vd89 collects personal data through the following channels:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account profile, you provide data directly to us.
• Automated technical collection: When you browse or interact with the vd89 platform, our servers and analytics systems automatically record technical and device data as described in Section 3.5.
• Payment providers: When you transact via bKash, Nagad, Rocket, Upay, or a Bangladesh bank, vd89 receives transaction confirmation data (including your mobile wallet number or bank reference) from the relevant payment provider in order to credit or debit your account.
• Game software providers: Third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share session-level game data with vd89 for account crediting and dispute-resolution purposes.
• Identity verification services: Where vd89 uses a third-party KYC verification partner to validate identity documents, that partner may return a verification outcome and associated data to vd89.

The table below summarises the primary purposes for which vd89 processes your personal data and the legal basis applicable to each processing activity:

Where vd89 relies on legitimate interests as the legal basis for processing, we have assessed that our interests are not overridden by your rights and interests, taking into account the nature of the data processed and the safeguards in place.

Where vd89 relies on consent as the legal basis, you have the right to withdraw that consent at any time by contacting us at [email protected] or by updating your marketing preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

vd89 does not sell, rent, or otherwise trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the limited circumstances described below:

6.1 Payment Service Providers

When you make a deposit or request a withdrawal, vd89 shares the minimum necessary data (your name, mobile number, and transaction reference) with the relevant payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank — strictly for the purpose of processing that transaction. Each payment provider processes your data subject to their own privacy policies.

6.2 Game Software Providers

Third-party game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) may receive a session token or anonymised player identifier for the purpose of launching game sessions, crediting winnings, and resolving game-related disputes. Full identity data is not shared with game providers.

6.3 Identity Verification Partners

For KYC verification, vd89 may use a trusted third-party identity verification service. Copies of your identity documents are transmitted to this partner over encrypted channels solely for verification purposes and are not retained by the partner beyond the verification workflow.

6.4 Legal and Regulatory Authorities

vd89 may disclose personal data to law enforcement agencies, regulators, courts, or other government authorities where required to do so by applicable law, legal process, or lawful authority. In such cases, vd89 will disclose only the minimum data required to satisfy the legal obligation.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of vd89's assets, personal data held by vd89 may be transferred to the acquiring entity. Affected users will be notified in advance, and the acquiring entity will be bound by privacy obligations no less protective than those set out in this Privacy Policy.

vd89 primarily processes the personal data of Bangladesh players within secure server infrastructure. Where personal data is processed by third-party service providers whose servers are located outside Bangladesh — including game software providers and payment technology partners — vd89 takes appropriate steps to ensure that such transfers are subject to adequate data protection safeguards.

These safeguards may include: contractual data processing agreements incorporating standard data protection clauses; binding corporate rules where applicable; or transfers to recipients in jurisdictions assessed to provide an adequate level of data protection.

If you would like further information about the specific safeguards applied to any international transfer of your personal data, please contact our Data Protection Team at [email protected].

vd89 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any overriding legal, regulatory, or contractual retention obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

vd89 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS encryption on all pages and API endpoints, ensuring all data in transit between your device and the vd89 platform is fully encrypted.
• AES-256 encryption at rest for stored sensitive data including identity documents, payment details, and account credentials.
• One-way password hashing using industry-standard algorithms — vd89 staff cannot read your password in plain text under any circumstances.
• Two-factor authentication (2FA) via OTP sent to your registered Bangladesh mobile number for login and withdrawal requests.
• Role-based access control — internal access to personal data is restricted to authorised vd89 personnel on a strict need-to-know basis.
• Regular security audits and vulnerability assessments conducted on the vd89 platform infrastructure.
• Intrusion detection systems monitoring for unusual access patterns, automated credential-stuffing attempts, and other security threats in real time.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights and interests, vd89 will notify affected users promptly and take all reasonable steps to contain and remediate the breach.

vd89 uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the vd89 platform to function. They enable core features such as secure login sessions, account authentication, and fraud prevention. These cookies cannot be disabled without significantly impairing platform functionality.

10.2 Analytical & Performance Cookies

These cookies collect anonymised information about how visitors use the vd89 platform — which pages are visited most frequently, how users navigate between sections, and where errors occur. This data helps vd89 improve the quality and usability of the platform. No personally identifiable information is collected via these cookies.

10.3 Functional Cookies

These cookies remember your preferences — such as your language settings and preferred payment method — to provide a more personalised experience on subsequent visits.

10.4 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the vd89 platform. Instructions for managing cookies in the most common browsers are available on the respective browser support pages.

As a user of the vd89 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Right Type] — [Your Name]". vd89 will acknowledge your request within two (2) Bangladesh Standard Time business days and respond substantively within thirty (30) days.

• Right of Access: You have the right to request a copy of all personal data vd89 holds about you, along with information about how it is processed. There is no charge for a first access request in any 12-month period.
• Right to Rectification: If any personal data vd89 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to vd89's legal retention obligations.
• Right to Restriction of Processing: You have the right to request that vd89 restrict processing of your personal data in certain circumstances, for example while the accuracy of data is contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where it is carried out on the basis of legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

These rights are not absolute and may be subject to exceptions or limitations where vd89 has overriding legitimate interests or legal obligations. vd89 will always explain any limitation applied to a rights request.

The vd89 platform is strictly intended for adults aged 21 years and above. vd89 does not knowingly collect, process, or store personal data relating to any individual under the age of 21. Age verification is a mandatory step in the vd89 registration and KYC process, and accounts that cannot be verified as belonging to an individual aged 21 or over will be suspended and any funds returned through the original payment channel.

If vd89 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately and the associated account will be permanently closed. If you are a parent or guardian and believe that a minor has registered with vd89, please contact us without delay at [email protected] with the subject line "Minor Account Report".

vd89 encourages responsible use of parental controls and filtering software to prevent underage individuals from accessing online gambling platforms. Further guidance is available on the vd89 Responsible Gaming page.

The vd89 platform integrates with a number of third-party service providers in order to deliver its core functionality. These include game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), payment technology providers (bKash, Nagad, Rocket, Upay, and the banking partners listed above), and platform analytics tools.

Each of these third-party providers operates under its own privacy policy and data protection framework. vd89 exercises due diligence in selecting service providers and requires, by contract, that they process personal data only in accordance with vd89's instructions and applicable data protection standards.

vd89 is not responsible for the privacy practices of any third-party provider and encourages users to review the relevant provider's privacy policy where personal data is shared with that provider. vd89 will always identify the categories of third-party providers involved in processing your data upon request.

vd89 reserves the right to update or modify this Privacy Policy at any time in response to changes in applicable data protection law, changes in our data processing activities, or improvements to our platform. When material changes are made, vd89 will:

• Update the "Last Updated" date displayed at the top of this Privacy Policy.
• Post a notice on the vd89 platform homepage informing users of the change.
• Where required by applicable law or where the change significantly affects your rights, provide direct notification to registered users via their registered mobile number or email address.

Your continued use of the vd89 platform following notification of changes to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should close your account and cease using the vd89 platform. To close your account, please contact [email protected] with the subject line "Account Closure Request".

We recommend that you review this Privacy Policy periodically to remain informed of how vd89 protects your personal data. Archived versions of previous Privacy Policy editions are available upon request.

If you have any questions, concerns, or requests relating to this Privacy Policy or to vd89's data processing activities more generally, please do not hesitate to contact our Data Protection Team:

We are committed to resolving all privacy-related enquiries promptly, fairly, and transparently. If you are not satisfied with vd89's response to a data rights request or privacy complaint, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.