Your Privacy Matters at vvk8

This Privacy Policy ("Policy") is published by vvk8 ("we", "us", "the Operator") and applies to all personal data collected from individuals ("you", "the Player") who access, browse, register on, or otherwise interact with the vvk8 platform, accessible at https://vvk8.io and all associated subdomains and interfaces (collectively, the "Platform").

vvk8 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy explains what personal data vvk8 collects, on what legal basis that data is processed, how it is used and stored, with whom it may be shared, how long it is retained, and what rights you hold in relation to that data.

This Policy should be read alongside the vvk8 Terms & Conditions and the Responsible Gaming Policy, both of which are accessible on the Platform. By registering an account on vvk8 or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood the contents of this Policy.

vvk8 collects personal data in several categories depending on how you interact with the Platform. The table below provides an overview of the key data types we process:

vvk8 does not intentionally collect sensitive personal data such as health information, biometric data, racial or ethnic origin, political opinions, or religious beliefs. If you choose to disclose such information voluntarily in communications with vvk8 support, it will be handled with additional care and will not be used for any purpose beyond resolving your support enquiry.

vvk8 collects personal data through the following channels:

• Direct submission: When you complete the registration form, submit identity verification documents, make a deposit or withdrawal request, contact our support team, or respond to a vvk8 survey or promotion, you provide personal data to us directly.
• Automated collection: As you navigate and interact with the Platform, certain technical and usage data is collected automatically via cookies, web beacons, log files, and similar tracking technologies. This occurs on every visit, whether or not you are logged in to your account.
• Payment processors: When you initiate a financial transaction via bKash, Nagad, Rocket, Upay, or a bank partner, we receive transaction confirmation data from the relevant payment processor, including transaction reference numbers and the amount transferred.
• Identity verification providers: Where vvk8 uses a third-party KYC service to verify your identity documents, that provider may return a verification result and certain extracted data fields to vvk8 as part of the verification process.
• Game providers: Third-party game suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe may share aggregated or session-level gaming activity data with vvk8 for the purposes of account management, dispute resolution, and responsible gaming monitoring.

vvk8 uses personal data for the following specific purposes. We process your data only to the extent necessary for each stated purpose and do not use it for unrelated activities without your consent.

• Account registration and management: To create, maintain, verify, and administer your vvk8 player account, including processing your registration details, confirming your identity, and managing account preferences and settings.
• KYC and compliance: To fulfil Know Your Customer (KYC) obligations, verify your age (21+), verify your identity and address, and comply with applicable anti-money laundering (AML) and counter-terrorism financing (CTF) requirements.
• Transaction processing: To process deposits and withdrawals in BDT via your chosen payment method (bKash, Nagad, Rocket, bank transfer, etc.) and to maintain accurate financial records of all transactions associated with your account.
• Game and betting services: To deliver the core betting and gaming services of the Platform, including recording bet placements, calculating and paying winnings, and maintaining your gaming history for account reference and dispute resolution.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling behaviour, to enforce any deposit limits, session time limits, cool-off periods, or self-exclusion arrangements you have activated, and to contact you proactively where our systems indicate a potential concern.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, multi-accounting, and any other prohibited conduct described in the vvk8 Terms & Conditions.
• Customer support: To respond to your enquiries, complaints, and support requests, and to maintain records of all correspondence for quality assurance, training, and dispute resolution purposes.
• Platform improvement: To analyse usage patterns, conduct A/B testing, and improve the functionality, performance, and user experience of the Platform.
• Marketing communications: Where you have provided explicit consent, to send you promotional emails, SMS messages, or in-platform notifications about vvk8 offers, bonuses, new game releases, and seasonal promotions. You may withdraw your marketing consent at any time by contacting [email protected].
• Legal obligations: To comply with applicable legal, regulatory, and court-ordered obligations, including data retention requirements, reporting obligations, and responses to lawful authority requests.

vvk8 processes personal data on the following legal bases, as applicable to each processing activity:

• Contractual necessity: Processing that is necessary for the performance of the contract between you and vvk8 — specifically, the Terms & Conditions you accepted upon registration. This covers account management, transaction processing, and the delivery of betting and gaming services.
• Legal obligation: Processing that is required to comply with a legal obligation applicable to vvk8, including KYC/AML compliance, age verification (21+), record-keeping requirements, and responses to lawful requests from authorities.
• Legitimate interests: Processing that is necessary for the purposes of vvk8's legitimate business interests, provided those interests are not overridden by your rights and interests. Legitimate interests relied on by vvk8 include fraud prevention, platform security, responsible gaming monitoring, and analytics to improve the Platform.
• Consent: Processing activities that are not covered by the above bases and for which vvk8 has obtained your specific, informed, and freely given consent. This applies primarily to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

vvk8 does not sell, rent, or otherwise commercially transfer your personal data to third parties. However, in order to operate the Platform effectively and meet its legal obligations, vvk8 shares personal data with the following categories of third-party recipients:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) receive the transaction data necessary to process your deposits and withdrawals in BDT.
• KYC and identity verification providers: Third-party verification services receive copies of your identity documents and the data fields necessary to perform age and identity checks in compliance with vvk8's KYC obligations.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated game suppliers receive session-level data necessary to deliver their games within the vvk8 environment and to settle bets correctly.
• IT and infrastructure providers: Cloud hosting providers, database service operators, content delivery network (CDN) providers, and cybersecurity firms that form part of the technical infrastructure supporting the Platform may have access to personal data in the course of providing their services.
• Analytics providers: Third-party web analytics platforms may receive anonymised or pseudonymised usage data to help vvk8 understand Platform performance and user behaviour.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory instruction, vvk8 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities.

All third-party processors engaged by vvk8 are required to process personal data only in accordance with vvk8's documented instructions and are bound by appropriate contractual data protection obligations. vvk8 does not knowingly permit any third-party processor to use your personal data for their own independent purposes.

vvk8 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to enhance your experience on the Platform, to maintain session integrity, and to gather analytics data that helps us improve our services.

The following categories of cookies are used on the vvk8 Platform:

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly. They enable core features such as user authentication, session management, load balancing, and security. These cookies cannot be disabled without materially impairing your ability to use the Platform.
• Performance and analytics cookies: These cookies collect anonymised data about how visitors use the Platform, including which pages are visited most frequently, how long users spend on each page, and where errors occur. This data is used solely to improve Platform performance and user experience.
• Functional cookies: These cookies allow the Platform to remember your preferences, such as your preferred language setting, display options, and previously entered information, so that you do not need to re-enter it on each visit.
• Targeting and marketing cookies: Where you have provided consent to receive marketing communications, these cookies may be used to deliver relevant promotional content and to measure the effectiveness of vvk8's marketing campaigns. They do not store directly personally identifiable information.

Most browsers allow you to control cookies through their settings preferences. You may choose to block or delete cookies at any time; however, please be aware that disabling strictly necessary cookies will prevent you from logging in to or using core features of the vvk8 Platform. Instructions for managing cookies in your browser can be found in your browser's help documentation.

vvk8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to meet our legal and regulatory obligations, and to protect the legitimate interests of the business. The following general retention periods apply:

• Active account data: Personal data associated with an active vvk8 account is retained for the lifetime of the account and for a minimum of five years following account closure, in order to meet financial record-keeping and AML compliance obligations.
• KYC and identity documents: Copies of identity verification documents are retained for a minimum of five years following the date of submission, in accordance with applicable AML record-keeping requirements.
• Transaction records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of seven years to satisfy tax and financial compliance requirements.
• Gaming and betting history: Records of individual bet placements, game sessions, and wagering activity are retained for a minimum of five years to support dispute resolution and regulatory reporting obligations.
• Customer support communications: Records of support interactions, including live chat transcripts and email correspondence, are retained for a minimum of two years for quality assurance and dispute resolution purposes.
• Marketing consent records: Records of marketing consent (or withdrawal of consent) are retained for as long as necessary to demonstrate compliance with applicable marketing regulations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is not technically feasible, the data is rendered inaccessible and scheduled for deletion at the earliest practicable opportunity.

vvk8 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your browser or mobile device and the vvk8 Platform is protected using SSL/TLS encryption. The vvk8 website operates exclusively over HTTPS.
• Encrypted data storage: Sensitive personal data and financial data held on vvk8 servers is stored in encrypted form using industry-standard encryption algorithms.
• Access controls: Access to systems containing personal data is restricted to authorised vvk8 personnel on a need-to-know basis. All access is logged and subject to periodic review.
• Firewalls and intrusion detection: vvk8 employs network firewalls, intrusion detection systems, and continuous security monitoring to detect and respond to potential threats to Platform infrastructure.
• Penetration testing: The vvk8 Platform undergoes regular security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential security weaknesses.
• Staff training: All vvk8 personnel who handle personal data receive data protection and information security training relevant to their role.

Despite the measures described above, no system connected to the internet can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, vvk8 will notify affected individuals without undue delay and will take all reasonable steps to contain and mitigate the breach.

You are responsible for maintaining the security of your own account credentials. Please refer to Clause 4 of the vvk8 Terms & Conditions for guidance on account security best practices.

As an individual whose personal data is processed by vvk8, you hold the following rights in relation to that data. vvk8 will respond to all valid rights requests within 30 days of receipt, at no cost to you.

The vvk8 Platform is strictly intended for adults aged 21 years and above. vvk8 does not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification checks are performed as part of the registration and KYC process to prevent underage access to the Platform.

If vvk8 becomes aware that personal data has been collected from an individual who is under the age of 21 — whether through misrepresentation at registration or any other means — that account will be immediately suspended, all associated data will be flagged for review, and any funds deposited will be returned to the originating payment method after verification. The personal data of the underage individual will be deleted as soon as reasonably practicable, except where retention is required for legal or compliance purposes.

If you are a parent or guardian and believe that your child has registered on the vvk8 Platform or has accessed it without your knowledge, please contact us immediately at [email protected] so that we can take the appropriate action without delay.

The vvk8 Platform may from time to time contain links to third-party websites, applications, or services — for example, within promotional content or informational articles. These links are provided for your convenience only. vvk8 has no control over the content, privacy practices, or data handling policies of any third-party website or service, and this Privacy Policy does not apply to those external destinations.

vvk8 strongly recommends that you review the privacy policy of any third-party website you visit before providing any personal data to that site. The inclusion of a link on the vvk8 Platform does not constitute an endorsement, recommendation, or approval of that third-party site or its privacy practices.

vvk8 reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be made to reflect updates to our data processing practices, changes in applicable law or regulation, the introduction of new Platform features, or feedback from players and data protection authorities.

When a material change is made to this Policy, vvk8 will take reasonable steps to notify registered players. Notification may be provided by email to the address registered on your account, by an in-Platform notification displayed upon your next login, or by a prominent notice on the relevant page of the Platform. In all cases, the updated Policy will be published at vvk8.io/privacy-policy with a revised effective date.

Your continued use of the vvk8 Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with any changes made to this Policy, you should cease using the Platform and contact [email protected] to discuss the options available to you, including account closure.

vvk8 recommends that you review this Privacy Policy periodically to stay informed of how your personal data is being protected. Archived versions of prior Privacy Policy documents are available upon request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way vvk8 handles your personal data, you are welcome to contact the vvk8 data protection team using the details below. All enquiries will be handled in English and responded to within a reasonable timeframe, and no later than 30 days for formal rights requests.

Please include your registered username and a clear description of your enquiry or request in all correspondence. For formal data rights requests (Subject Access Requests, erasure requests, etc.), please use the subject line "Data Rights Request" to ensure your message is directed to the correct team without delay.

• Email: [email protected] (plain text — not a clickable link)
• Platform: vvk8.io
• Language of correspondence: English
• Response time: Within 5 business days for general enquiries; within 30 days for formal data rights requests
• Operating hours: Available 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)