vd99 Privacy Policy —
Your Information, Our Responsibility

This Privacy Policy ("Policy") applies to the use of vd99's website and services. When you create an account on the vd99 platform, conduct transactions, or contact us, you are considered to have given your consent to the terms described in this Policy. We place the highest importance on your privacy and are committed to complying with applicable data protection laws and regulations.

---

1. Types and Methods of Data Collection

vd99 collects two types of information from you — (a) information you voluntarily provide, and (b) information collected automatically during your use of the platform.

1.1 Directly Provided Information

• Name, email address, and date of birth (at the time of account registration).
• Address and national identity card details (when identity verification is required).
• Payment information — bKash, Nagad, Rocket, Upay, or bank account details.
• Messages and attachments you provide when contacting our support team.

1.2 Automatically Collected Information

• IP address, device type, and operating system.
• Browser type, language settings, and session duration.
• Pages visited, click patterns, and navigation paths.
• Information collected through cookies and similar tracking technologies.
• Transaction history and gaming activity logs.

---

2. Purposes of Data Use

vd99 uses your information only for the following purposes. It is never used beyond the approved purposes.

• To create, verify, and manage your account.
• To process deposits, withdrawals, and other financial transactions.
• To prevent fraud, comply with anti-money laundering (AML) regulations, and ensure the security of your account.
• To implement responsible gaming policies.
• To respond to your complaints and support requests.
• To fulfil applicable legal obligations.
• To send promotional offers and notifications with your consent.
• To improve platform performance and user experience.

---

3. Data Storage and Security

vd99 takes industry-standard technical and organizational measures to keep your personal information secure.

3.1 Technical Security

• SSL/TLS encryption — all data transfers between your browser and our servers are encrypted.
• Data at rest is protected with strong encryption algorithms.
• Regular security audits and vulnerability assessments are conducted.
• Two-Factor Authentication is provided.
• Firewalls and intrusion detection systems remain active.

3.2 Organizational Security

• Only authorized staff have access to the minimum necessary information.
• All staff are bound by confidentiality agreements and receive regular training.
• Data access logs are maintained and reviewed periodically.

3.3 Data Retention Period

Your information is retained for as long as your account is active and for as long as necessary to fulfil applicable legal obligations. Even after an account is closed, records of financial transactions may be kept for a defined period in accordance with regulatory requirements.

---

4. Sharing Information with Third Parties

vd99 does not sell, rent, or commercially transfer your personal information. However, limited information may be shared in the following circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and authorized banks receive the information necessary to complete transactions.
• Identity verification services: Information may be shared with trusted verification agencies to complete the KYC (Know Your Customer) process.
• Legal obligations: Information may be provided in response to a court order or a lawful request from a competent authority.
• Technology partners: Technology service providers required for platform operations — who are bound by strict confidentiality agreements.
• Business restructuring: In the event of a merger or acquisition, information may be transferred after notifying users in advance.

Third parties receive only the minimum information necessary for the specified purpose and may not use that information for any other purpose.

---

5. Cookie Policy

The vd99 platform uses cookies and similar technologies. Cookies are small data files stored on your device that help us improve the quality of our service.

5.1 Types of Cookies

• Essential cookies: Necessary for the basic operation of the platform — maintaining login sessions, security verification, and so on.
• Functional cookies: Used to remember your preferences (language, display settings).
• Analytical cookies: Collect anonymous data to monitor and improve platform usage.

5.2 Cookie Controls

You can disable cookies by changing your browser settings. However, please note that disabling essential cookies may affect some important platform functionality.

---

6. Your Rights

vd99 respects your data protection rights. You have the following rights:

• Right of access: You may request to know what information we hold about you.
• Right to rectification: If there is any error in your information, you may request a correction.
• Right to erasure: You may request deletion of your information in certain circumstances, though this may not always be possible where legal obligations exist.
• Right to object: You may object to the use of your information for specific purposes.
• Data portability: Where applicable, you may request a copy of your information in a structured format.
• Withdrawal of marketing consent: You may opt out of promotional communications at any time.

To exercise these rights, email us at [email protected]. We will generally respond to your request within 30 business days.

---

7. Protection of Minors

vd99 is strictly for those aged 21 and above. We do not knowingly collect information from minors. Age verification is in place at the time of account registration. If it is brought to our attention that information from a minor has been collected by mistake, we will immediately delete that information and close the associated account.

---

8. International Transfer of Data

vd99's servers may be located in various countries. When transferring data outside Bangladesh, we ensure that the receiving party complies with appropriate security measures and that your rights are protected. This is carried out under data transfer agreements, standard contractual clauses, or equivalent protection frameworks.

---

9. Response to a Data Breach

If a data breach occurs, we will take swift action:

• Affected systems will be isolated as quickly as possible after the incident is identified.
• You will be notified within 72 hours if there is a significant risk to your rights.
• Necessary measures will be taken to investigate the incident and prevent recurrence.
• Applicable regulatory authorities will be notified in a timely manner.

---

10. Changes to the Policy

vd99 may update this Privacy Policy as needed. For significant changes, we will publish a notice on the platform and inform you via your registered email. If you continue to use the platform after the changes, you will be considered to have consented to the updated policy. You can confirm the current version of the policy by checking the "Last Updated" date at the top of the page.

---

11. Contact and Complaints

For any questions, concerns, or complaints regarding privacy, please contact us:

If you are not satisfied with the response received through our service, you have the right to file a complaint with the competent authority in your country under applicable law.