Your Privacy Matters
at vl666

Introduction

vl666 is committed to safeguarding the privacy of all individuals who interact with the Platform. This Policy has been prepared to give you a clear, honest, and comprehensive account of how your personal information is handled from the moment you land on vl666.io through to account closure and beyond.

We recognise that privacy is not merely a legal obligation — it is a fundamental component of the trust that our players in Bangladesh and beyond place in us. Whether you access vl666 from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or anywhere else in the country, this Policy applies uniformly to your data and the rights you hold over it.

This Policy applies to all personal data processed by vl666 in connection with the operation of the Platform, including data collected through account registration, deposits and withdrawals, gameplay, customer support interactions, and communications such as promotional emails or SMS notifications (where opted in).

Data Controller

vl666 acts as the data controller with respect to all personal data collected and processed in connection with the Platform. As data controller, vl666 determines the purposes for which your personal data is processed and the means by which that processing is carried out.

Where vl666 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification services, or game content providers — those parties act as data processors under the instructions of vl666 and are bound by contractual obligations consistent with this Policy.

You may contact the vl666 Data Protection team at any time using the details set out in Section 17 of this Policy.

Data We Collect

vl666 collects personal data from you in the course of providing its services. The categories of personal data we collect include, but are not limited to, the following:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or biometric data unless specifically required for identity verification purposes and only with your explicit consent.

How We Collect Data

4.1 Direct Collection

The majority of the personal data we hold about you is provided directly by you in the course of your interactions with vl666. This includes data entered during account registration, KYC document uploads, deposit and withdrawal requests, contact form submissions, and customer support communications.

4.2 Automated Collection

When you access and navigate vl666.io, certain technical and usage data is collected automatically via cookies, web beacons, server logs, and similar technologies. This includes your IP address, browser fingerprint, device identifiers, session timestamps, and in-game activity records. This data is collected to maintain platform security, detect fraud, and improve the overall user experience.

4.3 Third-Party Sources

vl666 may receive personal data about you from trusted third-party sources in limited circumstances, including:

• Identity verification and KYC service providers who confirm the authenticity of documents you submit.
• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm the status of transactions.
• Fraud detection and anti-money-laundering screening services that cross-reference your details against watchlists.
• Game Providers (Pragmatic Play, Evolution Gaming, Microgaming, Spribe, Ezugi, NetEnt) who report game session outcomes and RNG audit records to us for settlement purposes.

In each case, vl666 satisfies itself that third-party sources have a lawful basis for sharing data with us before we receive or process it.

Legal Basis for Processing

vl666 processes your personal data only where a valid legal basis exists under applicable data protection law. The legal bases we rely upon are as follows:

• Contract Performance: Processing that is necessary to fulfil the account agreement between you and vl666, including account management, transaction processing, and game settlement.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering (AML) obligations, age verification requirements, and financial reporting duties.
• Legitimate Interests: Processing that serves vl666's legitimate business interests — such as fraud detection, platform security, and internal analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for which you have provided freely given, specific, informed, and unambiguous consent, such as the receipt of marketing communications via email or SMS. You may withdraw consent at any time.

How We Use Your Data

The personal data vl666 collects is used for the following purposes:

• Account Creation & Management: Registering your account, verifying your identity and age, maintaining your account profile, and administering your session on the Platform.
• Transaction Processing: Receiving deposits, processing withdrawal requests, resolving payment disputes, and maintaining accurate financial records in BDT.
• Game Service Delivery: Providing access to cricket betting, live casino, slots, and other gaming products; settling bets; and recording wagering history.
• Customer Support: Responding to your enquiries, resolving complaints, and maintaining records of our communications for quality assurance and dispute resolution.
• Responsible Gaming: Monitoring gameplay patterns for signs of problem gambling, administering self-exclusion and deposit limit requests, and enforcing cooling-off periods when requested.
• Fraud Prevention & Security: Detecting, preventing, and investigating fraudulent activity, money laundering, bonus abuse, and unauthorised account access.
• Legal Compliance: Meeting our obligations under applicable laws, cooperating with regulatory authorities, and responding to lawful requests from law enforcement.
• Platform Improvement: Analysing anonymised usage data to understand how players interact with vl666 and to inform improvements to the platform's design, features, and game offering.
• Marketing & Promotions: Sending personalised promotional offers, bonus notifications, and product updates to players who have opted in to receive such communications.

Data Sharing & Disclosure

7.1 Service Providers

vl666 shares personal data with carefully selected third-party service providers who act as data processors under our instruction. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification providers, fraud screening services, cloud hosting providers, and customer support software vendors. Each provider is bound by a data processing agreement requiring them to maintain appropriate security standards and to use your data only for the specific purpose for which it was shared.

7.2 Game Providers

To deliver live casino and slot game content, vl666 integrates with licensed game studios including Pragmatic Play, Evolution Gaming, Microgaming, Spribe, Ezugi, and NetEnt. These providers may receive technical data such as your session identifier, stake amounts, and game outcomes for the purpose of game delivery, RNG auditing, and dispute resolution. They do not receive your full identity details unless specifically required for a regulated purpose.

7.3 Legal & Regulatory Disclosure

vl666 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by law, court order, or regulatory direction. We will notify you of such disclosure where permitted by law to do so.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of vl666's business, personal data held by the Platform may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to the privacy practices that may result from it.

7.5 No Data Selling

vl666 does not sell, rent, lease, or otherwise commercially transfer your personal data to third parties for their own marketing purposes. Any data sharing is strictly limited to what is described in this Policy and to the purposes for which you provided your data.

Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the site to recognise your device on subsequent visits and to store information about your preferences and interactions. vl666 uses cookies and similar technologies including web beacons, local storage, and session tokens.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Store your preferences such as language settings, preferred game category, and display options so that your experience is consistent across sessions.
• Analytical Cookies: Allow us to measure how visitors use the Platform — which pages are most visited, where users drop off, and how long sessions last. This data is used in aggregated, anonymised form to improve the Platform. We use privacy-respecting analytics tools that do not send your data to advertising networks.
• Responsible Gaming Cookies: Track session duration and betting frequency to support our responsible gaming monitoring obligations and to trigger alerts or interventions where configured by you.

8.3 Managing Cookies

You can control and delete cookies through your browser settings. Disabling strictly necessary cookies will prevent you from using core features of vl666 including login and payments. Disabling functional or analytical cookies may degrade your experience but will not prevent access to the Platform. Instructions for managing cookies are available in the help documentation of all major browsers.

Data Retention

vl666 retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. Our standard retention periods are as follows:

• Active Account Data: Retained for the duration of your account relationship with vl666 and for a period of five years following account closure, to meet AML, tax, and regulatory compliance obligations.
• Transaction Records: Financial transaction logs are retained for a minimum of seven years from the date of the transaction in accordance with financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for five years following account closure or the date of the last transaction, whichever is later.
• Customer Support Records: Communications with our support team are retained for three years from the date of the last interaction to support dispute resolution and quality assurance.
• Marketing Consent Records: Records of your marketing preferences and consent history are retained for five years from the date of your last interaction with vl666 or until you withdraw consent, whichever occurs first.
• Technical & Usage Data: Server logs, session data, and anonymised analytics data are retained for up to 24 months before being deleted or fully anonymised.

When data is no longer required under these retention periods, it is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

Data Security

vl666 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and our servers is encrypted using industry-standard TLS protocols.
• At-Rest Encryption: Stored personal data and financial records are encrypted using AES-256 encryption on all primary and backup storage systems.
• Access Controls: Access to personal data systems is restricted on a need-to-know basis, with role-based access controls, multi-factor authentication for internal systems, and regular access reviews.
• Intrusion Detection: Our infrastructure is protected by intrusion detection and prevention systems (IDPS) that monitor for unusual access patterns, denial-of-service attempts, and known attack signatures.
• Regular Security Audits: vl666 conducts periodic internal and third-party security assessments, penetration testing, and vulnerability scanning to identify and remediate security weaknesses before they can be explo ited.
• Staff Training: All vl666 personnel with access to personal data receive regular data protection and security awareness training to ensure they handle your information responsibly and in accordance with this Policy.
• Incident Response: We maintain a documented data breach response procedure. In the event of a security incident that affects your personal data and poses a risk to your rights, we will notify you without undue delay in accordance with applicable law.

While vl666 takes every reasonable precaution to protect your data, no system connected to the internet can be guaranteed to be completely secure. You also have a role to play in keeping your account safe — use a strong, unique password, do not share your login credentials, and contact us immediately at [email protected] if you suspect unauthorised access to your account.

International Transfers

vl666 operates globally and may transfer your personal data to servers or service providers located outside Bangladesh. When such transfers occur, vl666 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections afforded under this Policy.

Safeguards we use for international data transfers include:

• Contractual clauses in data processing agreements with third-party processors that require them to maintain equivalent data protection standards.
• Transfers to jurisdictions that provide an adequate level of data protection as determined by applicable standards.
• Technical security measures such as encryption in transit and at rest that apply regardless of where data is physically stored.

If you would like further information about the international transfers of your data or the safeguards in place, please contact us at [email protected].

Your Rights

As a player on vl666, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a verifiable request.

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this in a readable format at no charge.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may ask us to correct it. Basic profile details can also be updated directly in your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other legal basis for processing. Note that we may be required to retain certain data for legal compliance purposes even after an erasure request.
• Right to Restriction of Processing: You may ask us to temporarily pause processing of your data in certain circumstances — for example, while we verify the accuracy of data you have disputed.
• Right to Data Portability: Where processing is based on consent or contract, you may request that we provide your data in a structured, commonly used, machine-readable format so that it can be transferred to another provider.
• Right to Object: You may object to processing based on legitimate interests at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights. You may also object to direct marketing at any time, absolutely and without condition.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Lodge a Complaint: If you are unsatisfied with how we have handled your personal data or a data rights request, you may raise a formal complaint with us at [email protected]. We will investigate and respond within 14 working days.

Marketing Communications

With your consent, vl666 may contact you with promotional offers, bonus announcements, new game launches, seasonal promotions (such as BPL season offers, Eid special bonuses, or Pohela Boishakh promotions), and other marketing communications via email or SMS.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included at the bottom of any promotional email we send you.
• Updating your notification preferences in your account settings on vl666.io.
• Sending an opt-out request to [email protected] with the subject line "Unsubscribe".

Please note that opting out of marketing communications does not affect transactional communications — we will continue to send you account-related messages such as deposit confirmations, withdrawal notifications, security alerts, and support responses, as these are necessary for the performance of your account agreement with us.

We do not send unsolicited bulk marketing without prior opt-in consent. If you believe you have received a marketing message from vl666 without having consented to receive it, please contact us immediately so we can investigate and correct the issue.

Minors

vl666 is strictly an adults-only platform. You must be 21 years of age or older to register an account and use any service on vl666. We do not knowingly collect, process, or store personal data from individuals under the age of 21.

Our registration process includes age verification steps designed to prevent minors from accessing the Platform. Players who cannot satisfactorily verify that they are aged 21 or above will be denied access to all real-money services.

If vl666 becomes aware, or has reason to believe, that personal data has been collected from or in relation to an individual under the age of 21, we will:

• Immediately suspend the associated account pending investigation.
• Permanently close the account if the age violation is confirmed.
• Delete all personal data associated with the account as soon as is practicable, subject to any legal retention obligations.
• Reverse any deposits made to the account and return funds via the original payment method where possible.

If you are a parent or guardian and believe that your child may have accessed vl666 and provided personal data without your knowledge, please contact us immediately at [email protected].

Third-Party Links

The vl666 Platform may contain references to third-party game studios (Pragmatic Play, Evolution Gaming, Microgaming, Spribe, Ezugi, NetEnt) and payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard). While we integrate with these partners to deliver services on the Platform, their own privacy practices are governed by their respective privacy policies and are outside the scope of this document.

vl666 does not include hyperlinks to external websites within its Platform content. However, if you navigate to a third-party website or application via any external means in connection with using vl666 services, we encourage you to review the privacy policy of that third party before providing any personal data. vl666 accepts no responsibility for the privacy practices of external websites or services.

Policy Updates

vl666 reserves the right to update, revise, or replace this Privacy Policy at any time. When we make material changes to this Policy, we will:

• Update the "Effective Date" displayed at the top of this page and in the document header.
• Display a prominent notice on the vl666 homepage and/or within the Platform informing players that the Policy has been updated.
• Where required by law or where changes materially affect your rights, send a direct notification to your registered email address summarising the key changes.

Your continued use of the vl666 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of the Platform and may request account closure by contacting [email protected].

We recommend that you review this Privacy Policy periodically to stay informed about how vl666 protects your personal data. The most current version of the Policy is always available at vl666.io/privacy-policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data vl666 holds about you, please contact our Data Protection team using the details below:

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request"
• Subject Line for Privacy Complaints: "Privacy Complaint"
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Data rights requests will be acknowledged within 2 business days and fully responded to within 30 calendar days. Privacy complaints will be investigated and resolved within 14 working days.

We are committed to resolving all privacy-related enquiries promptly and transparently. If you are not satisfied with our response, you have the right to escalate your complaint as described in Section 12 of this Policy.