Your Privacy Matters — How vg999 Handles Your Personal Data

1. Introduction

vg999 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all players who access our online betting and gaming services. This Privacy Policy describes how vg999 collects, uses, stores, shares, and protects personal information provided by players based in Bangladesh and elsewhere when using the vg999 website and associated services.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming guidelines, both of which form part of the overall agreement between you and vg999. In the event of a conflict between this Privacy Policy and any other document, this Privacy Policy shall take precedence with respect to data privacy matters.

We reserve the right to update this Privacy Policy periodically. The most recent version will always be published on this page, with the effective date clearly indicated at the top. Your continued use of the vg999 platform following any update constitutes your acceptance of the revised policy.

2. Data Controller

For the purposes of applicable data protection law, vg999 acts as the data controller in respect of the personal data of its registered players. This means vg999 determines the purposes for which and the means by which your personal data is processed.

All privacy-related enquiries, data access requests, and complaints should be directed to our support team. Contact details are provided in Section 15 of this policy. vg999 will respond to all privacy requests within a reasonable period and in compliance with applicable data protection obligations.

3. Data We Collect

vg999 collects several categories of personal data in connection with the operation of the platform and the provision of services to registered players. The categories of data collected are as follows:

3.1 Identity Data

• Full legal name as it appears on government-issued identification
• Date of birth (to verify compliance with the 21+ age requirement)
• Nationality and country of residence
• Copies of government-issued identification documents (National ID card, passport, or driving licence) submitted during KYC verification

3.2 Contact Data

• Mobile phone number (primary contact and OTP verification channel)
• Email address (account communications, password reset, and support)
• Residential address (for KYC and fraud prevention purposes)

3.3 Financial Data

• Mobile financial service account references (bKash, Nagad, Rocket, Upay account numbers associated with deposits and withdrawals)
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used
• Card details where Visa or Mastercard payments are processed (handled via PCI-DSS compliant payment processors — vg999 does not store full card numbers)

3.4 Technical Data

• IP address at the time of registration and subsequent logins
• Device type, operating system, browser type and version
• Session timestamps and login history
• Geolocation data (country and city level) derived from IP address

3.5 Usage Data

• Pages visited on the vg999 platform and time spent on each
• Games played, betting history, wagering amounts, and outcomes
• Bonus claims and promotional activity records
• Support interactions and correspondence history

3.6 Verification Data

• KYC document images and verification status records
• Selfie photographs submitted as part of the identity verification process
• Proof of payment method ownership documentation

4. How We Collect Data

vg999 collects personal data through the following channels:

• Registration form: Name, date of birth, contact details, and account credentials are collected when you create your vg999 account.
• KYC verification process: Identity and address documents are collected when you submit verification materials via the account dashboard.
• Deposits and withdrawals: Payment method details and transaction records are collected automatically when you conduct financial transactions on the platform.
• Platform usage: Technical and usage data is collected automatically via server logs, cookies, and analytics tools as you navigate and use the platform.
• Support communications: Any personal information you provide when contacting our support team is recorded and stored as part of your account history.
• Third-party verification providers: Where vg999 uses third-party identity verification services, those providers may return data to us confirming the result of identity checks.

5. Purpose & Legal Basis for Processing

vg999 processes personal data only where there is a lawful basis for doing so. The table below sets out the primary purposes for which vg999 processes personal data and the corresponding legal basis for each:

Where vg999 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Sharing Your Data

vg999 does not sell, rent, or commercially exploit your personal data. However, we may share your data with the following categories of third parties where necessary for the provision of our services or compliance with legal obligations:

6.1 Payment Service Providers

To process deposits and withdrawals, vg999 shares transaction data with payment processors including bKash, Nagad, Rocket, Upay, and card network processors. These providers receive only the data necessary to complete the specific transaction and are contractually required to protect that data.

6.2 Identity Verification Providers

vg999 may use third-party KYC and identity verification service providers to assist with the verification of player identity documents. These providers process identity data on behalf of vg999 and are bound by data processing agreements that restrict the use of your data solely to the purpose of verification.

6.3 Game Software Providers

Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session data (such as an anonymised player identifier and stake information) for the purposes of operating the games you play. These providers do not receive your full personal profile.

6.4 Legal and Regulatory Authorities

vg999 may disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or in connection with an investigation into fraud, money laundering, or other illegal activity.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the vg999 business, personal data held by vg999 may form part of the transferred assets. Players will be notified of any such transfer and of any change in the identity of the data controller via the email address registered on their account.

7. Payment Data & Financial Privacy

vg999 takes the security of financial data with particular seriousness given the sensitivity of payment information. The following practices apply to the handling of all financial data on the platform:

• Full card numbers are never stored on vg999 servers. Card transactions are processed via PCI-DSS compliant payment gateways, and only tokenised payment references are retained.
• Mobile financial service account numbers (bKash, Nagad, Rocket, Upay) are stored in encrypted form and are used solely for the purpose of processing the transactions you initiate.
• Transaction history is retained as part of your account record for a minimum of five years to comply with anti-money-laundering record-keeping obligations.
• All withdrawal requests are matched against the payment method used for the corresponding deposit to prevent fraudulent redirection of funds.

All amounts on the vg999 platform are processed in Bangladeshi Taka (BDT). Where Visa or Mastercard transactions involve a foreign currency conversion, the conversion is handled by the card network at the prevailing rate and vg999 does not retain currency conversion data beyond what is included in the transaction record.

8. Cookies & Tracking Technologies

vg999 uses cookies and similar tracking technologies to operate the platform and to improve your experience. A cookie is a small text file placed on your device when you visit the vg999 website. The following types of cookies are used:

8.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They maintain your login session, remember your preferences within the current session, and enable core security features. Essential cookies cannot be disabled without significantly impairing your ability to use the platform.

8.2 Analytics Cookies

vg999 uses anonymised analytics data to understand how players interact with the platform — including which pages are visited most frequently, where users navigate after landing on the site, and how long sessions typically last. This data is used solely to improve platform design and performance. Analytics data does not identify you personally.

8.3 Preference Cookies

Preference cookies remember settings you have applied during previous visits, such as your preferred display language or any accessibility settings you have activated, so that you do not need to reapply them on each visit.

8.4 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that blocking essential cookies will impair the functionality of the vg999 platform, including your ability to remain logged in during a session. Detailed instructions for managing cookies are available in the help documentation of your browser.

9. Data Retention

vg999 retains personal data for as long as is necessary for the purpose for which it was originally collected, subject to any overriding legal obligation to retain data for a longer period. The following retention periods apply as a general guide:

Where data is no longer required and no legal obligation requires its retention, vg999 will securely delete or anonymise it. Anonymised data that cannot be linked back to an individual may be retained indefinitely for aggregated platform analytics purposes.

10. Data Security

vg999 implements a comprehensive range of technical and organisational security measures to protect personal data from unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• TLS/SSL Encryption: All data in transit between your browser or app and the vg999 servers is encrypted using Transport Layer Security (TLS). This prevents interception of data during transmission.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using industry-standard cryptographic algorithms so that even if our database were compromised, passwords could not be retrieved in usable form.
• Access Controls: Access to personal data within vg999's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data required for their specific role.
• Two-Factor Authentication (2FA): Players are encouraged to enable two-factor authentication on their accounts to add an additional layer of protection against unauthorised login attempts.
• Regular Security Audits: vg999 conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential risks proactively.
• Device Fingerprinting: vg999 uses device recognition technology to detect unusual login patterns that may indicate unauthorised account access and to notify account holders promptly where a new device is used.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, vg999 will notify affected players without undue delay in accordance with applicable data protection obligations.

11. Your Data Rights

As a registered player, you have the following rights with respect to the personal data vg999 holds about you. To exercise any of these rights, please contact our support team using the details in Section 15:

11.1 Right of Access

You have the right to request a copy of all personal data vg999 holds about you, together with information about how that data is processed, on what legal basis, and with whom it has been shared. We will fulfil access requests within a reasonable period of receiving your request.

11.2 Right to Rectification

If any personal data vg999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly via your account dashboard. For changes to identity data (name, date of birth), a formal rectification request with supporting documentation will be required.

11.3 Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Please note that vg999 may be unable to delete data where it is required to be retained under applicable legal obligations (such as the five-year financial record retention requirement described in Section 9).

11.4 Right to Restriction of Processing

You may request that vg999 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing and a determination is pending.

11.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.

11.6 Right to Object

You have the right to object to the processing of your personal data where vg999 relies on legitimate interest as the legal basis. You also have an absolute right to object to the processing of your data for direct marketing purposes. Where a valid objection is raised, vg999 will cease processing your data for that purpose unless there are compelling legitimate grounds that override your interests.

11.7 Withdrawal of Consent

Where processing is based on your consent (for example, the receipt of promotional communications), you may withdraw that consent at any time by contacting support or by adjusting your communication preferences in your account dashboard. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

12. Protection of Minors

The vg999 platform is strictly for adults aged 21 years and above. vg999 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and vg999 will immediately close any account where it is established that the account holder does not meet the minimum age requirement.

If you have reason to believe that a minor has registered an account with vg999 using false information, please contact our support team immediately at [email protected]. vg999 will investigate and take prompt action to close any identified underage account and to ensure that any funds associated with that account are handled appropriately.

Parents and guardians are encouraged to make use of parental control software and internet filtering tools to restrict access to gambling websites for persons under the age of 21 in their household. vg999 supports the use of third-party responsible gaming tools and we recommend consulting the Responsible Gaming page for further guidance.

13. International Data Transfers

vg999 operates primarily to serve players in Bangladesh. However, some of the third-party service providers we use (including cloud infrastructure providers and game software studios) may process data in data centres located outside Bangladesh. Where such international data transfers occur, vg999 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this policy.

Safeguards for international transfers include contractual data processing agreements with service providers that impose data protection obligations equivalent to those described in this policy, and the use of service providers who maintain recognised security certifications such as ISO 27001 or SOC 2.

14. Changes to This Privacy Policy

vg999 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. The effective date of the current version is always displayed at the top of this page.

Where changes to this policy are material — meaning they significantly affect the way your data is processed or your rights in relation to that data — vg999 will notify registered players via email to the address associated with their account at least 7 days before the changes take effect. For minor clarifications and corrections, we may update the policy without prior notification.

Your continued use of the vg999 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not accept the revised policy, you must discontinue your use of the platform and contact support to close your account.

15. Contact Us

For all privacy-related queries, data rights requests, or complaints regarding the handling of your personal data, please contact the vg999 support team using the details below. All privacy communications are handled in English.

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Privacy requests acknowledged within 2 hours; resolved within a reasonable timeframe depending on complexity
• Coverage: Serving players across all divisions of Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh

If you are not satisfied with how vg999 has handled your privacy request or complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction. vg999 will cooperate fully with any regulatory investigation into our data processing practices.