vc333 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy ("Policy") describes how vc333 ("vc333", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of users ("Player", "User", "you") who register for and use the vc333 online gaming and sports betting platform accessible at vc333.io ("Platform"). This Policy applies to all services offered by vc333, including the vc333 Casino, sports betting, live casino, slots, and all other game categories available on the Platform.

By registering an account on vc333 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not create an account or continue using the Platform.

1 Introduction and Scope

vc333 is committed to protecting the privacy and personal data of all players, with particular care taken to address the needs of our player base across Bangladesh, including players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. This Policy applies to all personal data collected through the Platform, including data submitted during registration, during the Know Your Customer (KYC) verification process, during deposit and withdrawal transactions, during customer support interactions, and during ordinary use of Platform features.

This Policy should be read alongside the vc333 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference and together form the complete agreement between you and vc333 governing your use of the Platform.

2 Data Controller Information

For the purposes of applicable data protection law, vc333 acts as the data controller in respect of all personal data collected through the Platform. As data controller, vc333 determines the purposes and means by which your personal data is processed. If you have any questions about how vc333 handles your data, or if you wish to exercise any of your data subject rights, you may contact the vc333 Data Protection team directly:

3 Personal Data We Collect

vc333 collects the following categories of personal data, depending on how you use the Platform:

Data Category	Specific Data Points	When Collected
Identity Data	Full legal name, date of birth, national ID number, passport number, photograph	Registration & KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration
Financial Data	bKash/Nagad/Rocket mobile wallet number, bank account details, transaction history, deposit and withdrawal amounts	Payment processing
Technical Data	IP address, device type, operating system, browser type and version, time zone, screen resolution	Platform access (automatic)
Usage Data	Pages visited, games played, bet amounts, session duration, feature interactions, login timestamps	Platform use (automatic)
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Customer support interactions
Responsible Gaming Data	Self-exclusion status, deposit limit settings, session reminder configurations, cooling-off period requests	Responsible gaming tool use

vc333 does not collect special categories of sensitive personal data (such as health information, racial or ethnic origin, political opinions, religious beliefs, or biometric data) except where this is strictly required by law for identity verification purposes (for example, a photograph on a government-issued ID document submitted during KYC).

4 How We Collect Your Data

vc333 collects personal data through the following channels and methods:

• Direct submission: Information you actively provide when registering your account, completing KYC verification, making deposits or withdrawals, contacting customer support, or submitting feedback.
• Automated technical collection: Data automatically gathered when you access the Platform, including IP address, device identifiers, browser information, and behavioural usage data, collected via server logs, cookies, and similar tracking technologies.
• Third-party sources: Identity verification and fraud prevention partners may provide additional data points to supplement or verify the information you have supplied, solely for the purposes of KYC compliance and security screening.
• Payment processors: Transaction confirmation data and payment method ownership verification data received from bKash, Nagad, Rocket, Upay, and banking partners in the course of processing deposits and withdrawals.

5 Legal Basis for Processing

vc333 processes your personal data only where a valid legal basis exists for doing so. The legal bases applicable to vc333's processing activities are:

• Contractual necessity: Processing that is necessary to perform the contract between you and vc333 — including account creation, payment processing, game operation, and customer support.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering (AML) requirements, know your customer (KYC) obligations, and financial reporting duties.
• Legitimate interests: Processing for purposes such as fraud detection, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where vc333 relies on your consent as the legal basis for processing — for example, sending you promotional communications about bonuses and new games — you may withdraw that consent at any time by updating your account preferences or contacting support.

6 How We Use Your Personal Data

vc333 uses the personal data collected from players for the following specific purposes:

• To create, maintain, and manage your vc333 account and vc333 Login credentials.
• To verify your identity and age (21+) in compliance with KYC requirements before processing withdrawal requests.
• To process deposits via bKash, Nagad, Rocket, Upay, and bank transfer, and to process withdrawal requests to your verified payment method.
• To operate the games and betting services available on the Platform, including recording wager history and calculating winnings.
• To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other violations of the vc333 Terms & Conditions.
• To send you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts via email or SMS.
• To send promotional communications about bonuses, new games, and seasonal offers — only where you have consented to receive such communications.
• To operate and improve responsible gaming tools, including monitoring for signs of problem gambling behaviour and reaching out proactively where concerns are identified.
• To analyse aggregate, anonymised Platform usage data in order to improve the user experience, optimise game offerings, and develop new features.
• To comply with applicable legal and regulatory obligations, including cooperation with law enforcement agencies where required by law.

7 Data Sharing and Third Parties

vc333 does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data may be shared with carefully selected third-party service providers who assist vc333 in operating the Platform, subject to strict contractual data protection obligations. These providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process financial transactions.
• Identity verification providers: Third-party KYC and AML screening services that verify the authenticity of identity documents and screen against sanctions lists and politically exposed persons (PEP) databases.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who may receive anonymised session identifiers to authenticate game sessions. These providers do not receive personally identifiable information beyond what is required for technical game session management.
• Cloud infrastructure and hosting providers: Secure data centre and cloud infrastructure partners who host the Platform under strict data processing agreements.
• Fraud prevention and security services: Specialised providers that help vc333 identify and prevent bot activity, account takeover attempts, and financial fraud.
• Law enforcement and regulatory authorities: Where vc333 is required by applicable law to disclose personal data to a government body, court, regulator, or law enforcement agency, vc333 will comply with such requests and will notify the affected player where legally permitted to do so.

8 Cookies and Tracking Technologies

vc333 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the Platform, maintain your logged-in session, remember your preferences, and analyse how players interact with the site. The categories of cookies used by vc333 are:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your vc333 account and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and responsible gaming configuration. These improve your experience but are not essential for basic Platform operation.
• Analytics cookies: Used to collect aggregate, anonymised data about how players navigate the Platform — which pages are visited most, which games are most popular, and where players encounter difficulties. This data is used exclusively to improve the Platform. vc333 does not use third-party advertising analytics networks.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your vc333 account and using most Platform features. For full cookie management instructions specific to your browser, consult your browser's help documentation.

9 Data Retention

vc333 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Data Category	Retention Period	Reason
Account and identity data	5 years after account closure	AML legal obligation and dispute resolution
Financial transaction records	7 years after transaction date	Financial record-keeping legal obligation
KYC verification documents	5 years after account closure	AML and KYC regulatory requirement
Customer support communications	3 years after last interaction	Dispute resolution and service improvement
Technical and usage data (logs)	13 months from collection	Security monitoring and fraud prevention
Marketing consent records	Until consent is withdrawn + 3 years	Proof of consent for regulatory compliance
Self-exclusion records	Indefinitely (or minimum 6 years)	Responsible gaming enforcement obligation

When personal data reaches the end of its applicable retention period, vc333 will securely delete or anonymise it in a manner that prevents reconstruction or re-identification.

10 Data Security

vc333 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and vc333 servers.
• AES-256 encryption for personal and financial data stored in vc333 databases.
• Multi-factor authentication requirements for all vc333 staff accessing systems that handle player personal data.
• Role-based access controls ensuring that personal data is accessible only to staff members whose job function requires it.
• Regular third-party penetration testing and security audits of the Platform infrastructure.
• Automated intrusion detection and 24/7 security monitoring of all Platform systems.
• Comprehensive staff training on data protection obligations and security best practices.

While vc333 takes every reasonable step to protect your personal data, no internet-based platform can guarantee absolute security. Players are encouraged to use a strong, unique password for their vc333 Login and to contact support immediately if they suspect any unauthorised access to their account.

11 Your Rights as a Data Subject

As a player whose personal data is processed by vc333, you hold the following rights in respect of your personal information. To exercise any of these rights, contact the vc333 Data Protection team at [email protected] with the subject line "Data Protection Request":

• Right of Access: You may request a copy of all personal data vc333 holds about you, along with information about how it is being used.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that your personal data be deleted where it is no longer necessary for the purpose for which it was collected, subject to vc333's legal retention obligations.
• Right to Restriction of Processing: You may request that vc333 restricts the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your personal data where vc333 relies on legitimate interests as the legal basis, or where your data is being used for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

vc333 will respond to all verified data subject requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case vc333 will notify you of the extension and the reason for it within the initial 30-day period.

12 Children's Privacy

The vc333 Platform is strictly intended for adults aged 21 years and above. vc333 does not knowingly collect or process personal data belonging to individuals under the age of 21. Any account found to have been registered by a person under the minimum age will be immediately closed and all associated personal data will be securely deleted, except where retention is required by law.

If you have reason to believe that a person under 21 has submitted personal data to vc333, please contact us immediately at [email protected] so that appropriate action can be taken without delay.

13 Cross-Border Data Transfers

To deliver a reliable, high-performance platform to players across Bangladesh, vc333 may store and process your personal data on servers located outside of Bangladesh. In all cases where personal data is transferred internationally, vc333 ensures that:

• The recipient country provides an adequate level of data protection, or
• Appropriate safeguards are in place — such as standard contractual clauses — to ensure your personal data receives the same level of protection it would within Bangladesh, or
• The transfer is necessary for the performance of the contract between you and vc333 (for example, routing a payment through an international payment network).

You may request further information about the specific safeguards applied to any international transfer of your personal data by contacting the vc333 Data Protection team.

14 Changes to This Policy

vc333 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to the Platform. When material changes are made, vc333 will notify registered players by email to their registered address and will display a prominent notice on the Platform's homepage for a period of not less than 14 days following the change.

The "Last Revised" date at the top of this Policy will be updated each time a change is made. Continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you may request voluntary account closure as described in the vc333 Terms & Conditions.

15 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about how vc333 handles your personal data, please contact the vc333 Data Protection team using the details below. We are available seven days a week, including all Bangladeshi public holidays.

vc333 takes every privacy concern seriously. If you feel your concern has not been adequately addressed after contacting our Data Protection team, you retain the right to escalate your complaint through the appropriate legal channels available to you under applicable law.