Privacy Policy – How vd8 Collects, Uses, and Protects Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how vd8 ("vd8", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of users ("Player", "User", "you") who access or use the vd8 website at https://vd8.bar and all associated services (collectively, the "Platform").

By registering an account or using any part of the vd8 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms an integral part of the vd8 Terms and Conditions. If you do not agree to this Policy, you must not use the Platform.

We may update this Policy from time to time to reflect changes in our data practices, technology, or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. Your continued use of the Platform after any such amendment constitutes your acceptance of the revised Policy.

2. Data Controller

vd8 is the data controller responsible for your personal information collected through the Platform. For all data-related queries, corrections, or deletion requests, you may contact us directly at [email protected]. We are committed to handling your data in a transparent, lawful, and fair manner.

3. Information We Collect

3.1 Information You Provide Directly

When you register an account, deposit funds, or contact our support team, you provide us with personal information that may include:

• Identity data: Full name, date of birth, nationality, and copies of government-issued identification documents (National ID card, passport, or driving licence).
• Contact data: Email address, mobile phone number, and residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar).
• Financial data: Mobile financial service account details (bKash, Nagad, Rocket, Upay), bank account numbers (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and card details (Visa, Mastercard) used for deposits and withdrawals.
• Account credentials: Username and hashed password (we never store your password in plain text).
• Communications data: Records of your correspondence with our customer support team, including chat transcripts and email exchanges.

3.2 Information We Collect Automatically

When you use the Platform, certain technical information is collected automatically by our systems:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, bet amounts, session duration, click-stream data, search queries within the Platform, and referral source.
• Transaction data: Records of all deposits, withdrawals, bets placed, bonuses claimed, and game outcomes associated with your account.
• Cookie and tracking data: Session cookies, persistent cookies, and similar technologies as described in Section 8 of this Policy.
• Log data: Server logs recording the date, time, and nature of your requests to the Platform, including error logs generated during your session.

3.3 Information From Third Parties

In some circumstances we may receive information about you from third parties, including:

• Identity verification service providers used to confirm the authenticity of documents you submit during Know Your Customer (KYC) checks.
• Payment processors and mobile financial service operators (bKash, Nagad, Rocket) who confirm the status of transactions.
• Fraud prevention and anti-money laundering screening partners who flag accounts associated with known fraudulent activity.

4. How We Use Your Information

vd8 uses the personal data we collect for the following purposes, each of which is underpinned by a legitimate legal basis:

5. Sharing Your Information

vd8 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. We may share your data only in the following limited and controlled circumstances:

5.1 Service Providers and Partners

We engage trusted third-party service providers who process data on our behalf under strict contractual obligations. These include payment processors (bKash, Nagad, Rocket, Visa, Mastercard), identity verification providers, cloud hosting and infrastructure partners, game software providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), and customer support platform operators. All such processors are required to handle your data solely for the purpose of providing services to vd8 and in accordance with this Policy.

5.2 Legal and Regulatory Disclosure

We may disclose your personal data to government bodies, law enforcement agencies, or regulatory authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of vd8, our players, or the public. This includes compliance with anti-money laundering regulations and responses to lawful court orders or subpoenas.

5.3 Business Transfers

In the event that vd8 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the relevant acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to how your data is used as a result.

5.4 Aggregated and Anonymised Data

We may share aggregated, anonymised, or de-identified data — from which no individual player can be identified — with analytics partners, industry bodies, and for internal research purposes. This data carries no privacy risk and is not governed by this Policy.

6. Data Retention

vd8 retains your personal data for as long as your account remains active and for a reasonable period thereafter to fulfil our legal, regulatory, and contractual obligations. In practice, this means:

• Account and transaction records are retained for a minimum of five years following account closure to comply with anti-money laundering and financial record-keeping requirements.
• Identity verification documents are retained for the duration of the account relationship and for five years after closure.
• Customer support correspondence is retained for three years following the resolution of the relevant query.
• Marketing consent records are retained until you withdraw consent, plus a further 12 months for audit purposes.
• Technical and log data is typically retained for 12 months, unless required longer for a specific investigation.

When data is no longer required, it is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures.

7. Data Security

vd8 takes the security of your personal data seriously and implements a comprehensive range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. Our security practices include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or app and our servers.
• Encrypted storage of sensitive data fields, including financial information and identification documents, at rest using industry-standard encryption algorithms.
• Access controls: Strict role-based access controls limit which vd8 staff members can view identifiable player data. Access is granted on a need-to-know basis and is subject to regular review.
• Password security: Passwords are stored exclusively as salted cryptographic hashes. vd8 staff never have access to your plain-text password.
• Regular security assessments: Our Platform and infrastructure undergo periodic vulnerability assessments and penetration testing by qualified security professionals.
• Incident response: We maintain a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players promptly.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device and remember certain information about your visit, such as your session state and preferences. vd8 uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the Platform.

8.2 Types of Cookies We Use

• Strictly necessary cookies: These are essential for the Platform to function. They maintain your login session, remember items in your game queue, and prevent cross-site request forgery. You cannot opt out of these cookies as they are required for the Platform to operate.
• Performance and analytics cookies: These cookies collect anonymised information about how players use the Platform — which pages are visited most often, where users navigate from, and whether error messages are received. This data helps us improve the Platform experience.
• Functionality cookies: These remember choices you make on the Platform (such as your preferred language or display settings) to provide a more personalised experience.

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set notifications when cookies are placed. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, as session management depends on them. Guidance on managing cookies is available through your specific browser's help documentation.

9. Your Rights Regarding Your Personal Data

As a player on the vd8 Platform, you have the following rights with respect to the personal data we hold about you:

• Right of access: You may request a copy of the personal data vd8 holds about you, along with information about how it is processed.
• Right to rectification: You may request that inaccurate or incomplete personal data we hold about you be corrected or completed.
• Right to erasure: In certain circumstances, you may request that we delete your personal data. This right is subject to our legal obligations — for example, we cannot delete financial records we are required by law to retain.
• Right to restriction of processing: You may request that we limit the processing of your data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or contract, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where we rely on your consent as the legal basis for processing (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing of your personal data where that processing is based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and provide a substantive response within 30 days. We may ask you to verify your identity before processing the request.

10. Marketing Communications

With your consent, vd8 may send you promotional communications about bonuses, new games, seasonal offers (including Eid, Pohela Boishakh, and other festive promotions relevant to the Bangladesh market), and other platform updates. You may opt out of marketing communications at any time by contacting [email protected] with the subject line "Unsubscribe". Opting out of marketing communications does not affect essential transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.

11. Children and Minors

The vd8 Platform is strictly intended for adults aged 21 years or older. 21+ We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will delete that data immediately and close the associated account. If you believe a minor has registered on our Platform, please notify us at [email protected] without delay.

12. International Data Transfers

vd8 operates infrastructure and engages service providers that may be located in different countries. As a result, your personal data may be transferred to and processed in countries outside Bangladesh. Where such transfers occur, we take appropriate steps to ensure that your data receives an equivalent level of protection as it would in its country of origin, including the use of contractual safeguards and data processing agreements with our service providers.

13. Third-Party Links

The vd8 Platform does not contain links to third-party websites. All navigation and content remains within the vd8 Platform environment. This Policy applies solely to data processed by vd8 and does not govern the privacy practices of any third-party payment provider or game studio whose services you access through the Platform. We encourage you to review the privacy policies of payment partners such as bKash, Nagad, and Rocket independently.

14. Changes to This Policy

vd8 reserves the right to update or modify this Privacy Policy at any time. Material changes will be communicated to registered players via a notification on the Platform and/or by email to the address associated with your account. The "Last Updated" date at the top of this page will be revised accordingly. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. If you disagree with a revised Policy, you must cease using the Platform and may request account closure.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way vd8 handles your personal data, please contact our team:

Email: [email protected] (plain text — this is not a clickable link)
Response time: Within 48 hours on business days
Subject line for data requests: "Data Rights Request"
Subject line for privacy queries: "Privacy Enquiry"