Privacy Policy — How vg333 Protects Your Data

1 Introduction & Scope

vg333 ("we", "us", "our") is committed to handling all personal data responsibly and transparently. This Privacy Policy sets out a comprehensive account of how vg333 collects, uses, stores, shares, and protects personal information relating to individuals ("you", "your", "the Player") who visit or use the vg333 platform at vg333.io, including all related sub-pages, mobile interfaces, and live-chat support channels.

This policy applies to all current and former account holders, individuals who have submitted a registration inquiry, visitors who interact with our website without creating an account, and any other party whose personal data is processed by vg333 in the course of its operations. Our primary audience is adult players located in Bangladesh, and our data practices are designed with the Bangladesh market in mind.

The vg333 platform operates as an international online entertainment platform offering cricket betting, live casino games, slot games, sports betting, and related services. Given the nature of these services, the accurate collection and responsible handling of personal data is essential both for delivering a high-quality player experience and for meeting our obligations under applicable anti-money laundering and know-your-customer frameworks.

2 Personal Data We Collect

The categories of personal data we collect vary depending on how you interact with our platform. Below is a comprehensive breakdown of the data types we may hold:

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (collected to verify you meet the 21+ age requirement).
• Gender (where voluntarily provided during registration).
• Nationality and country of residence.
• A copy of your government-issued photo ID (National ID card, passport, or driving licence) submitted during KYC verification.
• Proof of residential address (utility bill, bank statement, or similar document dated within three months).

2.2 Contact Data

• Mobile phone number registered in Bangladesh (used for account verification, OTP delivery, and support communication).
• Email address (used for account notifications, promotional communications where opted in, and formal correspondence).
• Residential address (collected as part of KYC; not used for postal marketing).

2.3 Financial & Transaction Data

• Mobile financial service account details (bKash, Nagad, Rocket, or Upay account numbers) as used for deposits and withdrawals.
• Bank account details where bank transfers are used (Dutch-Bangla Bank, City Bank, BRAC Bank).
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used.
• Source of funds documentation where requested during enhanced due diligence reviews.

2.4 Betting & Gaming Activity Data

• Bet history, including markets wagered on, stake amounts, odds accepted, and settlement outcomes.
• Game session data, including games played, session duration, win/loss outcomes, and wagering patterns.
• Bonus usage history, including promotions claimed, wagering progress, and bonus conversion outcomes.
• Responsible gaming tool usage, including any deposit limits, cooling-off periods, or self-exclusion requests you have submitted.

2.5 Technical & Device Data

• IP address at the time of each login and transaction.
• Device type, operating system, and browser type and version.
• Unique device identifiers where applicable.
• Session timestamps and login/logout records.
• Geolocation data (country and city level, derived from IP address) — vg333 does not collect precise GPS location data.

2.6 Communications Data

• Records of all communications between you and vg333 support, including live-chat transcripts, email correspondence, and support ticket logs.
• Any information you voluntarily provide in the course of a support interaction, complaint, or dispute.

3 How We Collect Your Data

vg333 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when completing the registration form, submitting KYC documents, initiating a deposit or withdrawal, or contacting our support team.
• Automated collection: Technical data such as IP address, device identifiers, and session data collected automatically when you access or use the platform, via server logs and similar technical systems.
• Cookies and similar technologies: As described in Section 5, vg333 uses cookies and local storage to maintain session state, remember preferences, and gather aggregate analytics data.
• Payment providers: Where a deposit or withdrawal is processed via bKash, Nagad, Rocket, Upay, or a partner bank, the payment provider may confirm transaction status and basic account holder details to vg333 to facilitate matching and fraud prevention.
• Identity verification services: Where vg333 uses a third-party KYC or identity verification service to check the authenticity of documents you submit, that service may provide verification outcomes and risk signals to vg333.
• Fraud and risk screening tools: Automated screening systems may cross-reference data you provide against industry shared databases of known fraudulent actors or self-excluded players.

4 Purpose & Legal Basis for Processing

vg333 processes personal data only where there is a defined, legitimate purpose for doing so. The table below sets out the primary processing activities, their purposes, and the legal basis on which each activity relies:

Where processing is based on consent (for example, receiving promotional emails), you may withdraw that consent at any time by contacting [email protected] or adjusting your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5 Cookies & Tracking Technologies

5.1 What Are Cookies

Cookies are small text files placed on your device by the vg333 website when you visit. They allow the platform to recognise your device on return visits, maintain your session state while you are logged in, and remember certain preferences. vg333 also uses similar technologies including local storage and session storage for equivalent purposes within the browser environment.

5.2 Types of Cookies Used

• Strictly Necessary Cookies: These are essential for the platform to function. They manage your login session, maintain the security of your connection, and ensure that actions you take (such as placing a bet or initiating a withdrawal) are properly processed. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These remember your preferences such as language selection, preferred payment method display, and recently viewed games. They improve your experience but are not strictly required for the platform to operate.
• Analytics Cookies: vg333 uses aggregated, anonymised analytics data to understand how players navigate the platform, which features are most used, and where technical issues may be occurring. This data is used solely for internal platform improvement purposes and is not linked back to individual player profiles.
• Fraud Detection Cookies: Certain cookies support our fraud prevention systems by helping to identify unusual device behaviour, unusual login patterns, or activity consistent with automated bots or coordinated account abuse.

5.3 Managing Cookies

You can control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies. Please be aware that disabling strictly necessary cookies will prevent you from logging into your vg333 account and using core platform features. Disabling functional and analytics cookies will not affect your ability to access the platform but may reduce the quality of your experience.

6 Third-Party Data Sharing

vg333 may share your personal data with the following categories of third parties, each operating under appropriate data processing agreements or equivalent contractual safeguards:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the minimum data necessary to process your deposit or withdrawal transactions. These providers operate under their own privacy policies and regulatory frameworks.
• Identity verification (KYC) providers: Third-party KYC service providers may receive copies of the identification documents you submit in order to perform automated or human-assisted verification checks on vg333's behalf.
• Game content providers: Game studios such as Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Spribe, and Ezugi may receive session tokens and anonymised player identifiers required to deliver their game content within the vg333 platform environment. These providers do not receive your full identity or payment data.
• Fraud prevention and security services: Specialised fraud screening services may receive device fingerprints, IP addresses, and transaction behavioural data to assist in detecting and preventing fraudulent activity.
• Legal and regulatory authorities: Where required by applicable law, court order, or the lawful request of a competent authority, vg333 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies. vg333 will comply with all lawful disclosure obligations.
• IT infrastructure providers: Cloud hosting, database, and server infrastructure providers who process data on vg333's behalf under strict data processing agreements, with no independent right to use or access your data beyond what is necessary to deliver the technical service.

vg333 does not share personal data with third-party marketers, advertising networks, social media platforms, or data analytics companies for commercial profiling purposes.

7 International Data Transfers

vg333 operates as an international platform, and some of the third-party service providers we work with may be located in countries outside Bangladesh. Where personal data is transferred internationally, vg333 takes steps to ensure that appropriate safeguards are in place to protect that data, including contractual data transfer mechanisms and assessments of the data protection standards in the recipient country.

In particular, data transfers to KYC providers, game content studios, and infrastructure providers may involve servers located in jurisdictions such as Malta, Cyprus, the Isle of Man, or other countries with established online gaming regulatory frameworks. In all such cases, the transfer is governed by contractual obligations that require the recipient to handle your data in accordance with standards consistent with this Privacy Policy.

8 Data Retention

vg333 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following general retention periods apply:

• Active account data: Retained throughout the lifetime of your account and for a period of at least five years following permanent account closure, in line with standard anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of seven years from the date of each transaction to meet financial record-keeping obligations.
• KYC and identity documents: Retained for the duration of your account and for five years after closure, or longer where required by applicable law or ongoing legal proceedings.
• Support and communications records: Retained for three years from the date of the last communication, unless associated with an unresolved dispute or legal proceeding.
• Responsible gaming records: Self-exclusion records and responsible gaming tool usage records are retained indefinitely to prevent circumvention of exclusion measures.
• Analytics data: Aggregated, anonymised analytics data is not subject to a fixed retention limit as it cannot be linked back to individual players.

When retention periods expire, data is securely deleted or anonymised using industry-standard processes. Where deletion is not immediately possible due to technical constraints (for example, backup systems), the data is isolated from active processing until deletion can be completed.

9 Security Measures

vg333 employs a layered approach to data security, combining technical, physical, and organisational controls to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• SSL/TLS encryption: All data transmitted between your browser or mobile device and the vg333 platform is encrypted using industry-standard TLS protocols, preventing interception in transit.
• Encrypted data storage: Sensitive personal data, including financial account details and identity document copies, is stored in encrypted form at rest.
• Access controls: Access to personal data systems is restricted to authorised vg333 personnel on a need-to-know basis, governed by role-based access control policies. All access is logged and periodically reviewed.
• Two-factor authentication (internal): Internal vg333 staff systems require multi-factor authentication for all access to production data environments.
• Intrusion detection and monitoring: vg333's infrastructure is monitored continuously for anomalous activity, and automated alerting systems are in place to detect and respond to potential security incidents in real time.
• Regular security reviews: vg333 conducts periodic internal security reviews and vulnerability assessments of its platform infrastructure and data handling processes.
• Staff training: All vg333 staff who handle personal data receive training on data protection obligations and secure data handling practices as part of their onboarding and on an ongoing basis.

While vg333 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your vg333 account, enable any available two-factor authentication options, and log out after each session — particularly on shared devices.

10 Your Privacy Rights

As a vg333 account holder, you hold the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected]. vg333 will acknowledge your request within five business days and provide a substantive response within 30 calendar days.

Please note that some rights are subject to limitations. For example, the right to erasure does not apply where vg333 is required to retain data to comply with a legal obligation (such as anti-money laundering record-keeping requirements). Where we are unable to fully comply with a request, we will explain the reasons in our response.

11 Minors

vg333 employs age verification as a mandatory step in the account registration and KYC process. If you are a parent or guardian and believe that a minor has registered an account on vg333, please contact us immediately at [email protected] with full details. We will investigate and act promptly.

12 Responsible Gaming & Data

vg333's responsible gaming programme relies in part on the analysis of betting and gaming activity data to identify patterns that may indicate problem gambling behaviour. This processing is conducted in the interests of player welfare and is considered a legitimate and necessary use of activity data on our platform.

Where vg333's responsible gaming monitoring systems flag a player account as displaying patterns of concern, our support team may use the data identified to reach out to the player, apply protective limits, or, in serious cases, initiate a temporary account suspension pending a welfare review. Players retain full rights over this data as described in Section 10 above.

If you have submitted a self-exclusion request, vg333 retains a record of that request indefinitely to prevent circumvention. This is a protective measure, not a punitive one, and is applied in your interests. For more information on our responsible gaming tools and support resources, please visit our Responsible Gaming page.

13 Policy Updates

vg333 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to our services, changes in applicable law, or improvements to our data handling practices. When material changes are made, we will notify registered players via the email address associated with their account and/or by displaying a prominent notice on the vg333.io website prior to the changes taking effect.

The effective date at the top of this policy will always reflect the date on which the most recent version came into force. We encourage you to review this Privacy Policy periodically to remain informed about how vg333 handles your personal data. Your continued use of the vg333 platform after an updated Privacy Policy has come into effect constitutes your acceptance of the revised terms.

If you disagree with any changes to this Privacy Policy and do not wish to continue using the vg333 platform on the updated terms, you should stop using the platform and close your account. Any personal data collected and processed prior to the policy change will continue to be handled in accordance with the version of the policy in force at the time of collection, except where applicable law requires otherwise.

14 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vg333 handles your personal data, you are welcome to contact our support team at any time. Our support team is available 24 hours a day, seven days a week, and will respond to all data-related enquiries in English.

You may contact vg333 regarding privacy matters using the following details:

When submitting a data rights request, please include your registered account username, the email address associated with your vg333 account, a clear description of your request or concern, and any supporting documentation where relevant. This will allow us to locate your records efficiently and respond as quickly as possible.

If you are not satisfied with vg333's response to your privacy concern, or if you believe that we have handled your personal data in a manner that is inconsistent with this Privacy Policy, you have the right to escalate your complaint. vg333 takes all escalated privacy complaints seriously and will conduct a thorough internal review upon receiving formal written notice of an escalation. Please allow up to 14 business days for a formal escalation response.