vd8 Privacy Policy

1. Introduction

vd8 ("we", "our", "the platform") is committed to protecting the privacy and personal data of all registered users. This Privacy Policy explains what information we collect when you use the vd8 platform, why we collect it, how we use it, and your rights regarding that data. This policy applies to all users of the vd8 website and associated services, including players registered from Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and all other regions of Bangladesh.

By registering an account with vd8 or by continuing to use the vd8 platform after this Privacy Policy has been published or updated, you acknowledge that you have read and understood this policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, you should not use the vd8 platform.

2. Information We Collect

vd8 collects personal data through two primary channels: information you provide directly when registering and using the platform, and information collected automatically through your use of the platform. The categories of personal data we collect include:

• Registration data: full name, date of birth, registered mobile number, and account credentials.
• KYC verification data: government-issued identity document (National ID or passport scan), proof of mobile wallet ownership, and any additional documentation required to verify your identity or age.
• Transaction data: deposit amounts, withdrawal requests, payment method references (bKash/Nagad/Rocket mobile numbers used for transactions), and transaction timestamps.
• Gameplay data: game session history, bet amounts, win/loss records, game preferences, and responsible gaming tool usage (e.g. deposit limit settings, time-out activations).
• Technical data: device type, operating system, browser type, IP address (used for fraud prevention and geolocation compliance), session duration, and page interaction logs.

We do not collect information beyond what is necessary for the purposes described in this policy. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required for age or identity verification under applicable law.

3. How We Use Your Information

vd8 uses the personal data we collect for the following specific purposes only. We do not use personal data for any purpose beyond what is listed here without first obtaining your explicit consent:

• Account creation and management: creating and maintaining your registered account, verifying your identity, processing login requests, and communicating account-related updates.
• Payment processing: processing deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods; verifying that payment accounts are registered in the same name as the vd8 account.
• Fraud prevention and security: detecting and preventing fraud, identity theft, money laundering, bonus abuse, and other prohibited activities outlined in our Terms & Conditions.
• Responsible gaming: monitoring gameplay patterns to identify signs of problem gambling and, where appropriate, proactively offering responsible gaming tools or support resources to players who may benefit from them.
• Customer support: using your account and transaction history to investigate and resolve support enquiries, disputes, and complaints efficiently.
• Marketing communications (with consent): sending promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time.

4. Legal Basis for Processing

vd8 processes personal data only where a valid legal basis exists. The legal bases we rely upon are:

• Contractual necessity: processing required to fulfil the agreement between you and vd8, including account management, payment processing, game access, and customer support.
• Legal obligation: processing required for KYC compliance, anti-money-laundering checks, fraud investigations, and any regulatory requirement applicable to platform operators.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and improving platform performance — where vd8's legitimate interests are not overridden by your privacy rights.
• Consent: processing for marketing communications and optional platform enhancements, where you have provided explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of processing that occurred before withdrawal.

5. Payment Data and Mobile Wallets

When you make a deposit or request a withdrawal via bKash, Nagad, or Rocket, the transaction is processed through the respective mobile financial service provider's own infrastructure. vd8 does not store your full bKash, Nagad, or Rocket PIN or full payment credentials on our servers. We retain only the mobile number associated with each transaction and the transaction reference number for audit and dispute resolution purposes.

vd8 requires that the mobile wallet number used for deposits and withdrawals is registered in the same name as your vd8 account. This requirement exists to prevent money laundering, protect account holders from unauthorised fund movements, and ensure that withdrawal funds are returned only to the verified account holder. Attempts to use a payment method registered in a third party's name will be declined and may trigger an account review.

6. Sharing Your Information

vd8 does not sell, rent, or trade personal data. We share personal data with third parties only in the following limited and specific circumstances:

• Game providers: vd8's third-party game providers (including Pragmatic Play, Evolution Gaming, Spribe, and others) receive session tokens and anonymised player identifiers necessary to operate game sessions. These providers do not receive your full name, mobile number, or financial data.
• Payment processors: mobile financial service providers (bKash, Nagad, Rocket) receive only the transaction amount and the destination account number necessary to execute payment instructions. vd8 does not transmit your full account profile to payment processors.
• Regulatory and law enforcement authorities: where vd8 is required by applicable law or a binding legal order to disclose personal data to a government authority, law enforcement body, or court, we will comply with that obligation. We will notify affected users where legally permitted to do so.
• Fraud prevention services: anonymised or pseudonymised device and behavioural data may be shared with fraud detection service providers solely for the purpose of identifying and preventing fraudulent activity on the platform. No directly identifiable personal data (name, mobile number, ID document) is shared with these services.

All third parties with whom vd8 shares personal data are contractually required to process that data only for the specific purpose for which it was shared, and to maintain appropriate technical and organisational security measures to protect it. vd8 does not permit third-party processors to use your personal data for their own marketing or commercial purposes.

7. Data Retention

vd8 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Registration and KYC data is retained for the full duration of your account plus five years following account closure, to comply with anti-money-laundering record-keeping requirements.
• Transaction records are retained for seven years from the date of each transaction, in line with standard financial record-keeping practice and applicable regulatory obligations.
• Technical and device data (IP logs, session data) is retained on a rolling 90-day basis and is then automatically purged, unless it is required for an ongoing fraud investigation or active dispute, in which case it may be retained until resolution.

When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be linked to an individual. Anonymised aggregate data (e.g. platform usage statistics with no personally identifiable information) may be retained indefinitely for analytics purposes.

8. Cookies and Tracking Technologies

The vd8 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep your session active between pages, and to generate aggregated analytics that help us improve the platform experience. The types of cookies used are:

• Strictly necessary cookies: required for the platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: used to collect anonymised data about how players interact with the platform — such as pages visited, time spent per page, and navigation paths. This data is used in aggregate only and is never linked to individual player identities.
• Preference cookies: used to remember your in-platform preferences such as language selection and display settings, so these do not need to be re-entered on every visit.

vd8 does not use advertising cookies, retargeting pixels, or any third-party tracking technology whose primary purpose is to serve external advertisements or build behavioural profiles for commercial sale. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair platform functionality.

9. Your Rights

As a registered user of vd8, you have the following rights with respect to your personal data. To exercise any of these rights, contact the vd8 support team at [email protected] with "Data Rights Request" in the subject line:

• Right of access: you may request a copy of all personal data vd8 holds about you. We will provide this within a reasonable timeframe, typically within 5 business days.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
• Right to erasure: you may request that vd8 delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to vd8's legal obligations to retain certain data (e.g. transaction records and KYC documents).
• Right to restrict processing: you may request that vd8 restrict how it processes your personal data in certain circumstances — for example while the accuracy of data is being contested.
• Right to data portability: you may request a structured, machine-readable copy of personal data you have provided to vd8, where processing is based on your consent or on contractual necessity.
• Right to object: you may object to processing of your personal data based on legitimate interests grounds, including profiling. vd8 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests and rights.

vd8 aims to respond to all data rights requests within 5 business days. Where a request is complex or involves a large volume of data, we may extend this period and will notify you of the extension with an explanation. There is no charge for submitting a data rights request.

10. Security Measures

vd8 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and the vd8 platform; encrypted storage for sensitive account data including KYC documents; access controls limiting internal access to personal data to authorised personnel only; regular security audits and vulnerability assessments of the platform infrastructure; and OTP-based authentication for login and withdrawal authorisation.

While vd8 implements industry-standard security measures, no system is completely immune from security threats. vd8 cannot guarantee absolute security of data transmitted over the internet or stored on digital infrastructure. In the event of a data security incident that affects your personal data, vd8 will notify you as soon as practicable and will take all reasonable steps to mitigate the impact of the incident.

11. Children and Minors

The vd8 platform is strictly for adults aged 21 and above. vd8 does not knowingly collect personal data from any person under the age of 21. If we discover or have reasonable grounds to believe that a registered account was created by or on behalf of a person under 21, we will immediately close the account, delete any personal data collected in connection with that account to the extent permitted by law, and refund any deposits made to that account.

12. Third-Party Links

The vd8 platform does not contain links to third-party websites for commercial or advertising purposes. Game content streamed through vd8 originates from certified third-party game providers; however, playing these games through the vd8 platform does not direct you to external websites, and your personal data is not transferred to game providers in a form that would allow them to identify you independently. vd8 is not responsible for the privacy practices of third-party software or services that players choose to use outside of the vd8 platform.

13. Marketing Communications

Where you have consented to receive marketing communications from vd8, we may send you promotional offers, bonus notifications, seasonal promotions (such as Eid, Pohela Boishakh, BPL cricket season, and IPL season offers), and platform update notifications via SMS or in-platform notification to your registered mobile number. We will not contact you by email for marketing purposes unless you have separately consented to email marketing.

You may withdraw your consent to receive marketing communications at any time by contacting [email protected] with the subject line "Unsubscribe". Withdrawal of marketing consent does not affect your ability to use the vd8 platform or receive transactional communications (e.g. deposit confirmations, withdrawal notifications, KYC requests) which are sent as part of the contractual relationship.

14. Changes to This Privacy Policy

vd8 reserves the right to update this Privacy Policy at any time to reflect changes in platform operations, applicable law, or data processing practices. When material changes are made, the updated policy will be published on this page with a revised effective date. Where the changes are significant, vd8 will additionally notify registered account holders via in-platform notification or SMS to the registered mobile number.

Continued use of the vd8 platform after an updated Privacy Policy has been published constitutes your acceptance of the revised policy. We recommend reviewing this policy at least once every three months to remain informed of how your data is being handled.

15. Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact the vd8 support team. Our team handles all privacy and data enquiries and aims to respond within 5 business days. Support is available 24 hours a day, 7 days a week.