vk89 Privacy Policy — Your Data, Our Responsibility

1 Introduction

vk89 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://vk89.io (the "Platform"). We are committed to protecting the privacy and personal data of every individual who visits, registers on, or uses the Platform, including players based in Bangladesh and any other jurisdiction from which the Platform may be lawfully accessed.

This Privacy Policy ("Policy") describes the types of personal information we collect, the purposes for which we collect and process it, the parties with whom we may share it, the measures we take to keep it secure, and the rights you hold in relation to your own data. This Policy forms part of the broader legal framework governing your use of the Platform alongside our Terms & Conditions and Responsible Gaming Policy.

By registering an account on vk89 or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you must discontinue your use of the Platform immediately and contact us at [email protected] to arrange closure of any existing account.

2 Personal Data We Collect

vk89 collects personal data from you directly (when you provide it during registration, verification, or support interactions) and automatically (through your use of the Platform). The categories of personal data we collect are set out in the table below.

2.1 Data We Do Not Collect

vk89 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, or health data, except where such data is incidentally disclosed in a support communication or is required for responsible gaming intervention purposes. Any such data disclosed incidentally will be handled with the highest standard of care and will not be used for any purpose other than the specific purpose for which it was disclosed.

2.2 Data From Minors

vk89 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has provided us with personal data, we will take immediate steps to delete that data and close the associated account. For further detail, see Section 11 of this Policy.

3 How We Use Your Personal Data

vk89 uses the personal data described in Section 2 for the following clearly defined purposes:

• Account Registration and Management: To create, verify, and maintain your player account, including processing your login credentials and keeping your account profile up to date.
• Identity and Age Verification (KYC): To verify that you are who you say you are and that you meet the minimum age requirement of 21 years, in compliance with our anti-money laundering and responsible gaming obligations.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank, and to maintain an accurate record of all financial transactions on your account.
• Game and Platform Delivery: To provide you with access to our casino games, sports betting markets (including BPL cricket, IPL, T20 events, rugby, and football), and all other features of the Platform.
• Customer Support: To respond to your queries, process your complaints, and deliver 24/7 English-language support via our support team.
• Fraud and Security Monitoring: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and other prohibited conduct as described in our Terms & Conditions.
• Responsible Gaming: To monitor your gambling patterns and, where our responsible gaming tools identify a potential problem, to intervene appropriately in accordance with our Responsible Gaming Policy.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable laws, including responding to valid requests from regulatory authorities, law enforcement agencies, and courts.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the design, performance, and content of the Platform.
• Promotional Communications: Where you have provided explicit consent, to send you information about promotions, bonuses, and special offers available on vk89. You may withdraw this consent at any time by contacting [email protected].

4 Legal Basis for Processing

vk89 processes your personal data on the following legal bases, each of which applies to the specific processing activities described against it:

• Performance of a Contract: Processing your identity data, contact data, and financial data is necessary to create and operate your vk89 account, process your bets, and execute deposit and withdrawal transactions. Without this processing, we cannot provide the Platform services to you.
• Legal Obligation: Processing identity documents, financial records, and transaction data is required to comply with applicable anti-money laundering regulations, age verification obligations, and any lawful requests from regulatory authorities or law enforcement agencies.
• Legitimate Interests: Processing technical data and usage data for fraud prevention, security monitoring, and platform improvement serves the legitimate interests of vk89 and its player community. We have assessed that these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing your contact data for the purpose of sending promotional communications is based on your explicit, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5 Sharing Your Personal Data

vk89 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only for the purposes described in this Policy:

5.1 Payment Processors

To process your deposits and withdrawals, we share necessary financial data with our payment processing partners including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. Each of these partners processes your data under their own privacy policies and applicable financial regulations.

5.2 Game Providers

To deliver our casino games and live casino products, we work with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers may process limited technical and session data necessary to deliver gameplay and resolve disputes. They are bound by contractual obligations to handle your data appropriately.

5.3 Identity Verification Providers

To fulfil our KYC obligations, we may share identity documents with third-party identity verification service providers who operate under strict data processing agreements with vk89.

5.4 Regulatory and Legal Authorities

vk89 will disclose personal data to regulatory authorities, law enforcement agencies, tax authorities, or courts where required to do so by applicable law, a valid court order, or where we believe disclosure is necessary to protect the rights, property, or safety of vk89, its players, or the public.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of vk89's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and any material changes to how your data is handled via your registered email address.

6 Cookies and Tracking Technologies

vk89 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyse how players interact with our services. The categories of cookies we deploy are as follows:

You may configure your browser to refuse some or all cookies, or to alert you when cookies are being sent. Please note that disabling strictly necessary cookies will prevent you from using core Platform features including logging in and placing bets. vk89 does not use third-party advertising cookies or behavioural targeting cookies.

7 Data Retention

vk89 retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your account plus a minimum of 5 years following account closure, to comply with anti-money laundering and regulatory record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 7 years following the date of each transaction, in line with standard financial record-keeping obligations.
• KYC Documents: Retained for 5 years following account closure or the completion of the relevant verification process, whichever is later.
• Customer Support Communications: Retained for 3 years from the date of each interaction, to enable us to resolve recurring issues and maintain audit trails.
• Technical and Usage Data: Retained in identifiable form for up to 24 months, after which it is anonymised and may be retained indefinitely for aggregate analytics purposes.
• Marketing Consent Records: Retained for the duration of your consent plus 3 years following withdrawal of consent, as evidence of the consent given.

Following the expiry of the applicable retention period, personal data is securely deleted from vk89 systems using industry-standard data destruction methods, or permanently anonymised such that it can no longer be associated with any identifiable individual.

8 Your Rights Over Your Personal Data

You hold the following rights in relation to the personal data vk89 holds about you. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within 30 calendar days of receipt. In some cases, where requests are particularly complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

• Right of Access: You have the right to request a copy of the personal data vk89 holds about you, together with information about how it is processed. This is sometimes called a "Subject Access Request" (SAR).
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held about you. You may update certain data directly within your account profile; for data you cannot update yourself, please contact our support team.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that this right is subject to legal retention obligations — we cannot delete data we are required by law to retain.
• Right to Restriction of Processing: You may request that vk89 restricts the processing of your personal data in certain circumstances, for example while the accuracy of your data is disputed or while we assess an objection you have raised.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. vk89 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

9 Security Measures

vk89 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to, the following:

• Encryption in Transit: All data transmitted between your device and the vk89 Platform is protected using TLS 1.3 encryption. This applies to all pages of the Platform, including login, deposit, withdrawal, and support chat flows.
• Encryption at Rest: Personal data stored on vk89 servers — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within vk89 is restricted on a strict need-to-know basis. Employees and contractors with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication: vk89 supports and encourages the use of two-factor authentication (2FA) on all player accounts to provide an additional layer of protection against unauthorised access.
• Regular Security Audits: Our platform infrastructure undergoes regular independent penetration testing and vulnerability assessments conducted by qualified third-party security professionals.
• Intrusion Detection: vk89 deploys automated intrusion detection systems that monitor for anomalous activity on our networks and databases in real time, operating on Bangladesh Standard Time (BST, UTC+6) and globally around the clock.

While vk89 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, vk89 will notify affected players via their registered email address without undue delay.

10 Third-Party Services and Links

The vk89 Platform integrates with a number of third-party service providers in order to deliver the full range of features available to players. These include game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe), payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank), and technical infrastructure providers.

Each of these third-party providers operates under its own privacy policy and data processing practices. vk89 enters into data processing agreements with all third-party processors that receive personal data on our behalf, requiring them to process that data only in accordance with our instructions and to implement appropriate security measures.

vk89 does not accept responsibility for the privacy practices of third-party services that operate independently of the Platform. Players who interact directly with third-party payment providers or game studios should review those providers' own privacy policies for information about how their data is handled.

11 Minors and Age Restriction

vk89 takes the protection of minors seriously and employs age verification procedures at the point of registration and during KYC review to ensure that only eligible adults access the Platform. These procedures include documentary verification of date of birth using government-issued identification.

If you are a parent or guardian and believe that your child has registered on vk89 or provided us with personal data, please contact us immediately at [email protected]. Upon verification of the report, we will take prompt steps to delete the minor's personal data and permanently close the account. No funds associated with an underage account will be eligible for withdrawal; they will be refunded to the originating payment source where technically possible.

12 Changes to This Privacy Policy

vk89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the structure of the Platform. The "Last Updated" date at the top of this Policy will be revised each time a material change is made.

Where changes are material — that is, where they significantly affect your rights or the way in which we process your personal data — vk89 will notify you by sending an email to your registered email address at least 14 days before the changes take effect. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Policy periodically so that you remain informed about how vk89 protects your personal data. Archived versions of prior Privacy Policies are available upon request by contacting our support team.

13 Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about how vk89 processes your personal data, please contact our Data Protection team using the details below. Our support team is available 24 hours a day, 7 days a week, including all Bangladeshi public holidays such as Eid, Victory Day (16 December), and Independence Day (26 March).

• Privacy & Data Protection Email: [email protected]
• Subject Line: Please use "Privacy Request — [Your Account Username]" for faster routing
• Response Time: We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 calendar days
• Language: All privacy communications are handled in English
• Support Hours: 24/7, 365 days a year, Bangladesh Standard Time (BST, UTC+6) and globally

For responsible gaming support specifically — including requests to set deposit limits, activate a time-out, or self-exclude from the Platform — please visit our Responsible Gaming page, or contact our support team directly at the address above.