Privacy Policy —
How vb33 Protects Your Data

Introduction

This Privacy Policy ("Policy") describes how vb33 ("vb33", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "your", "Player", "User") who access or use the vb33 online gaming and sports betting platform available at vb33.io ("Platform").

By registering an account on the Platform, depositing funds, placing bets, or otherwise using any part of the vb33 service, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy forms part of the vb33 Terms and Conditions, which are available at /terms-conditions, and is incorporated into those Terms by reference.

vb33 is committed to ensuring that your privacy is protected. We take our data protection responsibilities seriously and have implemented technical and organisational measures appropriate to the sensitivity of the data we hold. This Policy is written in plain English and is designed to be understood clearly by all players on our platform.

Data We Collect

vb33 collects personal data across several categories depending on how you interact with the Platform. The table below provides an overview of the categories of personal data we collect and typical examples within each category.

vb33 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless such data is incidentally included in KYC documentation submitted by the Player. Where such data is received, it is not processed for any purpose other than confirming the identity of the submitting Player, and it is handled with heightened protection.

How We Collect Data

vb33 collects personal data through the following means:

• Direct Submission: Data you provide when creating an account (name, date of birth, email, phone number), completing KYC verification, submitting a deposit or withdrawal request, contacting our support team, or responding to promotions.
• Automated Collection: Technical data collected automatically when you access the Platform, including IP address, browser and device information, session data, and interaction logs. This data is collected via server logs and first-party cookies (see Section 9 for details on cookies).
• Payment Processor Data: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or bank transfer, vb33 receives transaction confirmation data from the relevant payment processor, including the transaction reference number, amount, and sender/receiver mobile number or bank account identifier.
• Game Provider Data: Third-party game studios integrated into the vb33 platform (including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe) may return gameplay session data to vb33 servers for the purpose of recording game outcomes, settling bets, and maintaining game history in your account.
• Support Interactions: Any personal information you voluntarily share when using live chat or emailing [email protected], including details you provide to describe your issue or request assistance.

How We Use Your Data

vb33 uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your vb33 player account, including processing registration, verifying your identity, and managing account settings and preferences.
• Service Delivery: Processing deposits and withdrawals, settling bets and game outcomes, crediting bonuses and free spins, and delivering all other core gaming and betting services.
• KYC & Fraud Prevention: Verifying that you meet the eligibility criteria for using the Platform (including the 21+ age requirement), detecting and preventing fraud, money laundering, bonus abuse, and other prohibited conduct as described in the vb33 Terms and Conditions.
• Responsible Gaming: Monitoring gaming behaviour to identify signs of problem gambling, administering deposit limits, cooling-off periods, and self-exclusion tools, and proactively reaching out to players who may be showing indicators of harm.
• Customer Support: Responding to enquiries, resolving complaints, processing account closure requests, and providing technical assistance.
• Security & Platform Integrity: Detecting, investigating, and preventing security incidents, unauthorised account access, bot activity, and technical attacks against the Platform.
• Regulatory Compliance: Maintaining records as required for anti-money laundering (AML) and counter-terrorism financing (CTF) compliance obligations, and responding to lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the performance, features, and user experience of the vb33 Platform. Individually identifiable data is not used for this purpose without your consent.
• Communications: Sending you transactional messages related to your account (deposit confirmations, withdrawal status, security alerts) and, where you have consented, promotional communications about vb33 offers and events. You may opt out of promotional communications at any time by contacting [email protected].

vb33 does not use automated decision-making or profiling in a manner that produces legal or similarly significant effects on Players without human oversight. Where automated tools are used to flag unusual activity (for example, potential fraud or responsible gaming indicators), a human review is conducted before any account action is taken.

Legal Basis for Processing

vb33 processes personal data only where a lawful basis for doing so exists. The primary legal bases on which vb33 relies are as follows:

• Contractual Necessity: Processing required to perform our obligations under the Player Agreement — including account creation, transaction processing, bet settlement, and KYC verification — is carried out on the basis that it is necessary for the performance of a contract with you.
• Legal Obligation: Certain processing activities — particularly those related to AML/CTF compliance, age verification, record-keeping, and responding to regulatory or law enforcement requests — are carried out on the basis that they are required by applicable law.
• Legitimate Interests: Processing undertaken to protect the security and integrity of the Platform (fraud detection, bot prevention, security monitoring) and to improve our services through anonymised analytics is carried out on the basis of vb33's legitimate business interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Where vb33 processes personal data for purposes beyond those described above — for example, sending you promotional marketing communications — we will seek your explicit consent before doing so. You may withdraw consent at any time without detriment to your account standing.

Data Sharing

vb33 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients where it is necessary to deliver our services or meet our legal obligations:

• Payment Processors: bKash, Nagad, Rocket, Upay, and participating bank partners receive the minimum data necessary to process your deposit and withdrawal transactions (typically your mobile number or bank account reference and transaction amount).
• Identity Verification Providers: Third-party KYC and identity verification services that assist vb33 in confirming the identity and eligibility of Players. These providers act as data processors under contractual agreements with vb33 and are not permitted to use your data for their own purposes.
• Game Studios: Third-party game providers (Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe) receive a session token and player account identifier to facilitate game play. They do not receive your full name, contact details, or financial data.
• Technology Infrastructure Providers: Cloud hosting, content delivery, and platform infrastructure providers who process data on vb33's behalf under data processing agreements. Access is strictly limited to what is necessary to perform their contracted functions.
• Regulatory & Law Enforcement Authorities: vb33 may disclose personal data to government bodies, regulators, law enforcement agencies, or courts where required to do so by law, court order, or in connection with an investigation into suspected illegal activity, fraud, or money laundering.
• Professional Advisers: Legal, accounting, or audit professionals acting as processors or joint controllers who require access to certain data in order to provide professional advice or conduct regulatory audits.

In all cases where personal data is shared with third parties, vb33 ensures that appropriate contractual, technical, and organisational safeguards are in place to protect the data and ensure it is processed only for the purposes for which it was shared.

Data Retention

vb33 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention guidelines apply:

• Active Account Data: Personal data associated with an active player account is retained for the duration of the account's existence and for a period of five (5) years following account closure or last activity, whichever is later.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years following the end of the business relationship, in accordance with standard AML/CTF record-keeping obligations.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years following the transaction date.
• Support Communications: Live chat transcripts and email correspondence are retained for three (3) years from the date of the interaction, unless the communication is relevant to an ongoing dispute or investigation, in which case it is retained until the matter is resolved.
• Technical & Log Data: Server access logs and session data are retained for up to twelve (12) months, after which they are automatically purged or anonymised.
• Marketing Consent Records: Records of marketing consent and opt-out requests are retained for the duration of the account relationship and for two (2) years following account closure.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical analysis and Platform improvement purposes.

Data Security

vb33 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your browser or device and the vb33 Platform is encrypted using 256-bit SSL/TLS protocols. This ensures that data cannot be intercepted during transmission.
• Encryption at Rest: Sensitive personal data — including KYC documents and financial details — is encrypted at rest on vb33's servers using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to authorised vb33 personnel and contracted service providers who require access to perform their duties. Access is governed by role-based permissions and is subject to regular review.
• Password Security: Player account passwords are stored using one-way cryptographic hashing. vb33 staff cannot retrieve your password and will never ask you to share it.
• Security Monitoring: vb33 operates continuous monitoring of platform infrastructure to detect and respond to security incidents, intrusion attempts, and anomalous access patterns.
• Incident Response: vb33 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected Players and take all necessary remedial action without undue delay.

Cookies & Tracking

vb33 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. The following types of cookies are used on the vb33 Platform:

vb33 does not use third-party advertising cookies or cross-site tracking cookies. No Player data is shared with advertising networks for the purpose of serving behavioural advertisements on external websites.

You can control cookies through your browser settings. Blocking strictly necessary cookies may prevent the Platform from functioning correctly. Blocking functional or analytical cookies will not prevent you from accessing the Platform but may affect your user experience.

Your Rights

As a vb33 Player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within five (5) business days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data vb33 holds about you. We will provide a summary of your personal data in a clear and structured format, free of charge, within the response period.
• Right to Rectification: If any personal data vb33 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request that vb33 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing exists. Note that certain data may need to be retained for legal compliance purposes even following an erasure request — we will inform you of any such exception.
• Right to Restriction of Processing: You may request that vb33 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed or where you contest the legal basis for processing.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests. vb33 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

Minors

The vb33 Platform is strictly for adults aged 21 and above. vb33 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and vb33 employs age detection measures during account registration to prevent underage access.

If vb33 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete the personal data collected from that individual, and void any transactions associated with the account. Any balance held in the account at the time of suspension will be handled in accordance with applicable legal requirements.

Parents and guardians are encouraged to use parental control tools available on shared devices to prevent underage individuals from accessing gambling websites. If you believe a minor has registered on the vb33 Platform, please contact us immediately at [email protected].

Third-Party Links

The vb33 Platform may contain references to or integration with third-party services such as game studios and payment providers. These third-party services have their own privacy policies and data protection practices, which are independent of vb33's. vb33 is not responsible for the privacy practices or content of third-party services.

When you interact with a third-party game environment embedded within the vb33 Platform (for example, a live casino table operated by Evolution Gaming or Ezugi), that studio's own data handling practices apply within the game environment. vb33 recommends reviewing the privacy policies of any third-party service you interact with through the Platform.

Similarly, when you use a payment method such as bKash, Nagad, or Rocket to make a deposit or withdrawal, that transaction is also subject to the privacy policy of the respective mobile financial service provider. vb33 only receives the transaction confirmation data necessary to credit or debit your account balance.

Changes to This Policy

vb33 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. When material changes are made to this Policy, we will notify registered Players via the email address on file or through a prominent notice displayed on the Platform.

The date of the most recent revision will always be shown at the top of this document and in the "Last Updated" badge above. We encourage all Players to review this Policy periodically. Your continued use of the vb33 Platform following the publication of any updated Policy constitutes your acceptance of the revised terms.

If you have any concerns about the changes made to this Policy, you are entitled to contact [email protected] to discuss those concerns or to request account closure before the changes take effect.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vb33 handles your personal data, please contact our support team using the details below. All data-related enquiries will be handled by a trained team member and responded to within five (5) business days.

For questions specifically about how vb33 handles responsible gaming data, deposit limit records, or self-exclusion information, please visit our Responsible Gaming page or include "Responsible Gaming Data" in your email subject line.

For a complete overview of the rules governing your use of the vb33 Platform, including how privacy obligations interact with account eligibility and gameplay conduct, please review our Terms & Conditions.