vb33 Privacy Policy

2Information We Collect

We collect the following categories of personal data in the course of operating the Platform:

Registration and Identity Data

When you create an account on vb33, we collect your full name, date of birth, mobile phone number, email address (if provided) and any government-issued identity document details submitted for KYC verification purposes. This information is necessary to verify your identity, confirm your age eligibility and maintain your account.

Transaction and Financial Data

We record all deposits, withdrawals, bet placements and game results associated with your account. We also collect the payment method identifiers used for each transaction — such as your bKash wallet number, Nagad account reference, Rocket number, Upay identifier, or masked Visa/Mastercard card number. We do not store full card numbers or payment credentials directly; these are handled by our payment processing partners in accordance with their own security standards.

Technical and Usage Data

When you use the Platform, we automatically collect your IP address, device type, browser type and version, operating system, session timestamps, pages visited, features accessed and clickstream data. This data is used to operate, secure and improve the Platform, to detect technical issues and to prevent fraudulent or abusive activity.

Communications Data

When you contact our customer support team via live chat, email or any other channel, we retain a record of those communications, including the content of messages, timestamps and any resolutions reached. This enables us to maintain quality of service, resolve disputes and comply with regulatory obligations.

Responsible Gaming Data

Where you use responsible gaming tools — such as setting deposit limits, activating a time-out or requesting self-exclusion — we record these preferences and restrictions as part of your account profile. This data is treated with a heightened level of care given its sensitivity and is used solely for the purpose of enforcing the restrictions you have requested.

How We Protect Your Data

Six pillars of data protection that underpin the vb33 Privacy Policy:

5Sharing of Personal Data

vb33 does not sell your personal data. We may share your data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment service providers: we share transaction data with payment processors including bKash, Nagad, Rocket, Upay and card networks (Visa, Mastercard) to facilitate deposits and withdrawals. These providers are bound by their own data protection obligations and process data only as necessary to complete the transaction.
• Game and technology providers: game studios and software providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming and Spribe may receive limited technical data necessary to deliver their games on our Platform. They act as data processors under our instruction and are not permitted to use player data for their own independent purposes.
• Regulatory and law enforcement authorities: where required by applicable law or a valid legal order, we may be obligated to disclose personal data to government bodies, law enforcement agencies or regulatory authorities. We will notify you of such disclosure where we are legally permitted to do so.
• Fraud prevention and identity verification services: we may share data with specialist third-party fraud detection and identity verification providers to assist with KYC compliance, age verification and anti-money laundering checks. These providers operate under strict contractual data protection obligations.

We require all third parties with whom we share data to respect the security of your personal information and to treat it in accordance with applicable law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

7Data Retention

vb33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention principles apply:

• Account data is retained for the duration of the active account relationship and for a period of at least five years following account closure. This extended retention period is necessary to comply with anti-money laundering obligations and to enable investigation of any post-closure disputes or regulatory enquiries.
• Transaction records are retained for a minimum of five years from the date of the transaction. Financial records may be retained for longer where required by applicable law or where an investigation is ongoing.
• Customer support communications are retained for a period of two years from the date of the last interaction, after which they are securely deleted unless retention is required for an ongoing dispute or regulatory matter.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you. We review our retention schedules periodically and update them in line with changes in applicable law or business requirements.

9Your Data Rights

As a data subject, you have the following rights in relation to your personal data held by vb33. To exercise any of these rights, please contact us at [email protected]:

• Right of access: you have the right to request a copy of the personal data we hold about you, together with information about how and why we are processing it.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: in certain circumstances you have the right to request deletion of your personal data. This right is not absolute and does not apply where we are required to retain data to comply with a legal obligation or to establish, exercise or defend legal claims.
• Right to restriction: you may request that we restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where the processing is unlawful but you prefer restriction to deletion.
• Right to object: where we process your personal data on the basis of our legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
• Right to data portability: where processing is carried out by automated means and is based on consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used and machine-readable format.

We will respond to all data rights requests within 30 days of receipt. Where a request is complex or we have received a high volume of requests, we may extend this period by a further two months, in which case we will inform you of the extension and the reason for it. We may need to verify your identity before processing a data rights request.

11Marketing Communications

From time to time, vb33 may send you promotional communications about bonuses, new games, seasonal offers and Platform updates. We will only send you direct marketing communications where you have opted in to receive them or where we have a legitimate interest basis to do so under applicable law. Marketing communications may be delivered via SMS to your registered mobile number or by email where an address has been provided.

You may opt out of marketing communications at any time by contacting customer support at [email protected] or by adjusting your communication preferences within your account settings. Opting out of marketing communications will not affect transactional messages about your account, such as deposit confirmations, withdrawal notifications or security alerts, which will continue to be sent as they are necessary for the operation of your account.

13Third-Party Links and Services

The Platform may display information about or integrate functionality from third-party game providers and payment services. Where you interact with third-party services — such as completing a payment via your bKash app or accessing a game powered by Pragmatic Play or Evolution Gaming — your data is also subject to the privacy policies of those third parties. vb33 is not responsible for the privacy practices of third-party services and we encourage you to review their privacy policies before providing personal data directly to them.

15Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how vb33 is handling your personal information, please contact our customer support team. We are available 24 hours a day, 7 days a week, including Bangladesh public holidays.

Email: [email protected] (plain text — not a clickable link). Please include your registered mobile number and a brief description of your query or request so that we can direct it to the appropriate team member and respond promptly.