vb44 Privacy Policy — How We Handle Your Personal Data

vb44 ("vb44", "we", "us", "our") operates the online casino and sports betting platform accessible at vb44.io (the "Platform"). We are committed to protecting the privacy and personal data of every individual who interacts with our Platform, whether as a registered user, a casual visitor, or a support enquiry sender.

This Privacy Policy sets out the types of personal data we collect, the lawful bases on which we process that data, the parties with whom we may share it, the period for which we retain it, and the rights available to you as the data subject. We have written this Policy in formal but accessible English so that users across Bangladesh can clearly understand how their data is handled.

This Policy applies to all personal data processed in connection with your use of the vb44 Platform, including data collected via the web interface, live chat support, email correspondence, and any other channel through which you communicate with us. It applies regardless of whether you access the Platform from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or any other location.

For the purposes of applicable data protection law, vb44 acts as the data controller in respect of the personal data collected through the Platform. As data controller, vb44 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable legal obligations.

All data protection enquiries, access requests, correction requests, deletion requests, and complaints should be directed to the vb44 Data Protection contact point. Contact details are provided in Section 15 of this Policy.

vb44 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

vb44 collects personal data through the following channels:

• Direct provision by you: When you register an account, complete your profile, submit KYC documents, initiate a deposit or withdrawal, contact support, or use any interactive feature on the Platform.
• Automated technical collection: When you visit the Platform, our servers automatically record technical and usage data such as your IP address, device identifiers, browser fingerprint, and session activity via server logs and first-party analytics tools.
• Cookies and similar technologies: As described in Section 7, vb44 uses cookies and similar tracking technologies to maintain your session, remember your preferences, and analyse Platform usage patterns.
• Payment processors: When you transact via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, those providers may transmit to us a transaction reference, masked payment identifier, and transaction status confirmation. We receive only the minimum data necessary to reconcile your deposit or withdrawal.
• Identity verification providers: During KYC, we may engage third-party identity verification services to validate the authenticity of documents you submit. These providers process your identity data on our behalf under a data processing agreement.
• Publicly available sources: In cases of suspected fraud or prohibited conduct, we may supplement our records with information from publicly available databases, credit reference agencies, or sanctions screening services.

vb44 processes your personal data only where a valid legal basis exists. The table below maps each primary processing purpose to the applicable legal basis:

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing communications, use the unsubscribe option in any marketing email or contact us at [email protected].

vb44 does not sell, rent, or trade your personal data. We may disclose your personal data to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment processors: bKash, Nagad, Rocket, Upay, and card network processors receive only the data required to execute and reconcile your financial transactions.
• Identity verification providers: Third-party KYC and age-verification service providers process identity documents on vb44's behalf under binding data processing agreements.
• Game content providers: Licensed game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a session token and game-specific usage data to deliver game content. They do not receive your full identity or financial data.
• IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on vb44's behalf under binding contracts that prohibit independent use.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory direction, vb44 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities. We will notify you of such disclosure where legally permitted to do so.
• Business succession: In the event of a merger, acquisition, or sale of all or part of vb44's business assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections. Affected users will be notified in advance where practicable.

vb44 uses cookies and similar technologies (including local storage and session tokens) on the Platform. These technologies serve the following functions:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a visit. These cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Remember your preferences such as language settings, notification preferences, and responsible gaming limit settings to personalise your experience across sessions.
• Analytics cookies: First-party analytics tools that help vb44 understand how users navigate the Platform, which pages attract the most engagement, and where technical errors occur. This data is anonymised and aggregated before analysis.
• Security cookies: Used to detect and prevent fraud, bot activity, and account takeover attempts. These are strictly necessary and cannot be disabled.

You may manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the Platform, but may reduce the quality of your experience. Disabling strictly necessary or security cookies may render the Platform inaccessible or insecure.

vb44 retains personal data for no longer than is necessary for the purposes for which it was collected or as required by applicable law. The following retention guidelines apply:

• Account and identity data: Retained for the duration of the account relationship and for five (5) years following account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction and financial data: Retained for seven (7) years from the date of the relevant transaction, in accordance with financial record-keeping requirements.
• KYC documentation: Retained for five (5) years following account closure or the completion of the relevant verification process, whichever is later.
• Support communications: Retained for two (2) years from the date of the most recent interaction, to support quality assurance and dispute resolution.
• Technical and usage data (logs): Retained for up to twelve (12) months, after which server logs are purged or anonymised.
• Marketing consent records: Retained for the duration of the marketing relationship and for one (1) year following withdrawal of consent, to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised aggregate data (which cannot be linked back to any individual) may be retained indefinitely for statistical and analytical purposes.

vb44 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption on all data transmitted between user devices and vb44 servers.
• Bcrypt hashing for all stored account passwords. Plain-text passwords are never stored or logged.
• Multi-factor authentication (MFA) available to all users as an optional account security enhancement.
• Strict role-based access controls limiting internal staff access to personal data on a need-to-know basis.
• Regular penetration testing and third-party security audits of Platform infrastructure.
• Automated intrusion detection and real-time anomaly monitoring on all server environments.
• Physical security controls at all data centre facilities used by vb44's infrastructure providers.
• Regular staff training on data protection obligations, phishing awareness, and secure data handling practices.

As a vb44 user, you have the following rights in relation to your personal data. These rights may be exercised by submitting a written request to [email protected] with the subject line "DATA RIGHTS REQUEST":

• Right of Access: You may request a copy of the personal data vb44 holds about you, together with information about how it is processed. We will respond within 30 days of receiving a valid request.
• Right to Rectification: You may request correction of any personal data that is inaccurate or incomplete. Minor corrections (e.g., contact details) can be made directly within your account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is otherwise unlawful. This right is subject to overriding legal retention obligations.
• Right to Restriction: You may request that vb44 restrict processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: You may request that vb44 provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Where you object to direct marketing, processing for that purpose will cease immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

vb44 will respond to all valid data rights requests within thirty (30) days. In complex cases, this period may be extended by a further two months, in which case we will notify you of the extension and the reason for it. Data rights requests are free of charge; however, vb44 reserves the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

The vb44 Platform is strictly intended for adults aged 21 and above. vb44 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is a mandatory step in the account registration process, and vb44 may request documentary proof of age at any point during the account lifecycle.

If vb44 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be returned in full via the original payment method where technically feasible.

The vb44 Platform is operated for users in Bangladesh, and the majority of data processing activities take place within data centre infrastructure serving the South and South-East Asian region. However, some of vb44's third-party service providers — including cloud infrastructure providers, identity verification services, and game content studios — may process data in other jurisdictions.

Where personal data is transferred outside of Bangladesh, vb44 ensures that appropriate safeguards are in place to protect the data to a standard at least equivalent to that required under applicable Bangladeshi data protection norms. Such safeguards may include binding contractual clauses, service provider certifications, or other recognised transfer mechanisms.

The vb44 Platform integrates with third-party services to deliver certain features, including payment processing (bKash, Nagad, Rocket, Upay, Visa, Mastercard), game content delivery (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), and identity verification tools. Each of these providers operates under its own privacy policy and data protection framework.

vb44 selects third-party service providers with care and requires all providers that process personal data on our behalf to execute a data processing agreement that restricts their use of your data to the specific purpose for which it was shared. However, vb44 is not responsible for the independent data practices of these third parties and recommends that you review their respective privacy policies where relevant.

The vb44 Platform does not contain links to external third-party websites for browsing or entertainment purposes. The absence of such links is a deliberate measure to limit exposure to external data collection practices.

vb44 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The updated Policy will be published on the Platform with a revised "Effective" date at the top of the document.

Where a change is material — meaning it significantly affects your rights or the way we handle your data — vb44 will notify registered users via the email address on file at least seven (7) days before the change takes effect. For minor or clarificatory updates that do not change the substance of the Policy, the updated version will be published without advance individual notice.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about how vb44 has handled your personal data, please contact us using the details below. All communications should be in English for fastest resolution.

• Data Protection Contact: [email protected] — please use the subject line "PRIVACY / DATA RIGHTS" for all data-related enquiries
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: We aim to acknowledge all data rights requests within 48 hours and to resolve them within 30 days
• Escalation: If you are dissatisfied with vb44's response to a privacy complaint, you may escalate the matter to the applicable data protection supervisory authority in your jurisdiction

vb44 takes all privacy complaints seriously. Each complaint is logged, assigned to a dedicated member of the data protection team, and resolved in accordance with the timelines set out in this Policy. We are committed to transparent, fair, and timely resolution of all data-related concerns raised by our users.