Privacy Policy — How vk66 Collects, Uses, and Protects Your Personal Data

This Privacy Policy ("Policy") is issued by vk66 ("vk66", "we", "us", "our") and governs the collection, use, storage, sharing, and protection of personal data relating to all users ("you", "Player", "User") who access or use the vk66 platform at https://vk66.io, including all associated sub-pages, mobile-optimised pages, and downloadable applications.

This Policy applies to all personal data processing activities carried out by vk66 in connection with the vk66 betting and casino platform, including sports betting (cricket, football, kabaddi, and other markets), live dealer casino games, slot games, payment processing, customer support interactions, and marketing communications where you have provided consent.

vk66 is committed to handling all personal data with the highest standards of care, transparency, and security. This Policy has been written in plain English and is intended to be fully accessible to players located in Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

For the purposes of this Policy, vk66 acts as the data controller with respect to the personal data you provide when registering an account, making deposits, placing bets, contacting support, or otherwise using the vk66 platform. As the data controller, vk66 determines the purposes and means of processing your personal data.

If you have any questions, requests, or concerns relating to this Policy or to the personal data vk66 holds about you, you may contact our dedicated data support team using the contact details provided in Section 14 of this Policy.

vk66 collects and processes the following categories of personal data about you, depending on how you interact with the platform:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, nationality, government ID number	During registration and KYC verification
Contact Data	Email address, phone number, residential address	During registration and account updates
Financial Data	bKash / Nagad / Rocket / Upay wallet numbers, transaction amounts, deposit and withdrawal history	During deposits, withdrawals, and KYC
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Automatically on each platform visit
Usage Data	Pages visited, games played, bets placed, bet amounts, session duration, click patterns	Automatically during platform use
Communications Data	Live chat transcripts, support emails, complaint records	When you contact vk66 support
Marketing Preferences	Email opt-in/out status, promotional communication preferences	During registration or account settings update
Responsible Gaming Data	Deposit limits set, cooling-off periods activated, self-exclusion records	When responsible gaming tools are used

vk66 collects your personal data through the following channels and mechanisms:

• Direct Interaction: Data you provide when registering an account, completing the KYC verification process, making a deposit or withdrawal request, setting responsible gaming limits, contacting customer support, or responding to surveys and promotions.
• Automated Technical Collection: Data collected automatically when you visit the vk66 platform, including IP address, device identifiers, browser fingerprint, and session activity. This data is collected via server logs, cookies, and similar tracking technologies described in Section 6.
• Payment Processors: Confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a payment transaction. vk66 does not receive or store full card numbers or mobile banking PINs.
• Third-Party Game Studios: Anonymised or pseudonymised game activity data returned from certified third-party game providers (such as Pragmatic Play, Evolution Gaming, Microgaming, Spribe, or Ezugi) in connection with your gaming sessions on the vk66 platform.
• Identity Verification Providers: Verification results from third-party KYC and identity document verification services engaged by vk66 to validate the authenticity of documents you submit.
• Fraud and AML Screening Tools: Risk signals from anti-fraud and anti-money laundering screening systems that process technical and behavioural data to detect unusual or suspicious account activity.

vk66 processes your personal data only for specific, legitimate purposes. The table below outlines the primary processing purposes and the corresponding legal basis for each:

Purpose	Legal Basis
Creating and managing your vk66 account	Performance of contract
Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard	Performance of contract
KYC identity and age verification (21+ compliance)	Legal obligation
Anti-money laundering (AML) and fraud prevention monitoring	Legal obligation / Legitimate interests
Delivering customer support via live chat and email	Performance of contract / Legitimate interests
Responsible gaming monitoring and limit enforcement	Legal obligation / Legitimate interests
Sending promotional and bonus offers (where opted in)	Consent
Platform security, abuse detection, and technical improvements	Legitimate interests
Compliance with legal holds and dispute resolution	Legal obligation
Analytics and platform performance measurement	Legitimate interests

vk66 uses cookies and similar tracking technologies (including pixel tags, web beacons, and local storage) to operate the platform, remember your preferences, analyse usage patterns, and detect fraudulent or abusive behaviour. By using the vk66 platform, you consent to the use of cookies in accordance with this Policy.

The following types of cookies may be set when you visit vk66.io:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a browser session and security cookies used to detect and prevent fraudulent access attempts. These cookies cannot be disabled.
• Functional Cookies: Used to remember your account preferences, language settings, and responsible gaming configuration across sessions. Disabling these cookies may affect platform functionality.
• Analytics Cookies: Used to collect anonymised data about how players navigate the vk66 platform — which pages are visited most frequently, how long sessions last, and where users exit. This data is used solely to improve the platform.
• Security and Fraud Detection Cookies: Set by vk66's internal fraud prevention systems and third-party AML screening tools to assess risk signals associated with your device and session behaviour.

You may manage or delete cookies through your browser settings. Note that disabling cookies may prevent certain features of the vk66 platform from functioning correctly, including the login session and responsible gaming controls.

vk66 does not sell your personal data to third parties. However, vk66 may share your personal data with the following categories of recipients where necessary to operate the platform, fulfil our legal obligations, or protect legitimate interests:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum personal and transactional data required to process your deposit or withdrawal. These providers are independently regulated and operate under their own privacy policies.
• KYC and Identity Verification Partners: Third-party document verification services engaged by vk66 to validate identity documents submitted during the KYC process. These partners are contractually bound to process your data only for the stated verification purpose.
• Game Content Providers: Certified studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and anonymised player data necessary to deliver and record game outcomes on the vk66 platform.
• Anti-Fraud and AML Screening Services: Third-party screening tools that analyse technical and behavioural signals to detect suspicious activity. These services receive pseudonymised data and are bound by strict data processing agreements.
• Legal and Regulatory Authorities: vk66 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law, court order, or where vk66 reasonably believes disclosure is necessary to prevent or report suspected fraud, money laundering, or other criminal activity.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by vk66 under strict confidentiality obligations, solely for the purpose of providing professional advice or services to vk66.

The vk66 platform primarily serves players located in Bangladesh. However, some of the third-party service providers vk66 works with — including certain game studios, payment infrastructure providers, and cloud hosting services — may process data in locations outside Bangladesh.

Where personal data is transferred outside Bangladesh to a third-party processor, vk66 takes appropriate steps to ensure that such transfers are subject to adequate safeguards, including:

• Binding data processing agreements that impose obligations on the receiving party equivalent to those applicable to vk66 under this Policy
• Standard contractual clauses or equivalent transfer mechanisms recognised under applicable data protection frameworks
• Transfers only to processors who can demonstrate that they maintain appropriate technical and organisational security measures

If you would like further information about the safeguards applied to international data transfers involving your personal data, please contact [email protected] with the subject line "International Transfer Enquiry".

vk66 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	AML, legal compliance, dispute resolution
KYC identity documents	Duration of account + 5 years after closure	AML record-keeping obligations
Financial transaction records	Duration of account + 7 years after closure	AML, financial audit, tax compliance
Betting and gaming activity logs	Duration of account + 3 years after closure	Dispute resolution, responsible gaming review
Customer support communications	3 years from last interaction	Quality assurance, dispute evidence
Technical and session log data	13 months	Security monitoring, fraud detection
Marketing consent records	Until consent withdrawn + 1 year	Evidence of consent
Self-exclusion records	Minimum 6 years	Responsible gaming legal obligations

Once a retention period expires and there is no legal basis to retain the data further, vk66 will securely delete or anonymise your personal data in accordance with our internal data destruction procedures.

As a player using the vk66 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and a description of your specific request.

• Right of Access: You have the right to request a copy of all personal data vk66 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of your request.
• Right to Rectification: If any personal data vk66 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may also update certain information directly via your account dashboard.
• Right to Erasure: You may request that vk66 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to our legal retention obligations described in Section 9.
• Right to Restriction of Processing: You may request that vk66 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on consent or on performance of a contract, you may request that your personal data be provided to you in a portable, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for marketing purposes. Where you object, vk66 will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

The vk66 platform is strictly for adults aged 21 and above. vk66 does not knowingly collect personal data from any individual under the age of 21. If vk66 becomes aware that it has inadvertently collected personal data from a person under the minimum age requirement, that data will be deleted immediately and the associated account will be closed.

If you believe that a person under the age of 21 has registered or is using a vk66 account, please report this to [email protected] immediately. We take underage gambling prevention extremely seriously and cooperate fully with any investigation into underage access.

vk66 employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or app and the vk66 platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data fields (including identity document data and financial information) are stored in encrypted form on secured servers with restricted access controls.
• Access Controls: Access to systems containing personal data is restricted to authorised vk66 personnel on a need-to-know basis. All internal access is logged and subject to audit.
• Two-Factor Authentication (2FA): vk66 offers 2FA for player accounts and enforces 2FA for all internal staff accessing systems containing personal data.
• Penetration Testing and Security Audits: vk66 conducts regular security assessments, including penetration testing by independent security professionals, to identify and remediate vulnerabilities.
• Incident Response: vk66 maintains a documented data breach incident response procedure. In the event of a confirmed breach, affected players will be notified promptly in accordance with this Policy.

Despite these measures, no online platform can guarantee absolute security. Players are encouraged to take their own precautions — including using strong, unique passwords and enabling 2FA on their vk66 account — to protect against unauthorised access.

vk66 reserves the right to update or amend this Privacy Policy at any time. When changes are made, the revised Policy will be published at https://vk66.io/privacy-policy with an updated effective date at the top of the document.

Where changes are material — for example, where we introduce a new purpose for processing your data, engage a new category of third-party processor, or significantly alter your rights — vk66 will notify registered players by email or via an in-platform notification prior to the changes taking effect.

Your continued use of the vk66 platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the platform and contact support to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which vk66 processes your personal data, please contact us using the details below. All data-related enquiries are handled by our dedicated privacy support team.

• Email: [email protected] (subject line: "Data Privacy Request" or "Data Rights Request")
• Live Chat: Available 24/7 from within your vk66 account dashboard
• Response Time: Acknowledgement within 48 hours; resolution within 30 calendar days
• Operating Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)