vt8 Privacy Policy — Your Data, Clearly Explained

1 Information We Collect

Registration Information

When you create a vt8 account, we collect the information you provide during the registration form, including your full legal name, date of birth, email address, and Bangladesh mobile number. This information is required to create and administer your account, verify your identity, and communicate with you about account activity.

Identity Verification (KYC) Documents

To comply with our Know Your Customer obligations and to prevent underage gambling and financial fraud, vt8 collects copies of identity documents you submit during the verification process. These typically include your Bangladesh National Identity Card (NID), a selfie photograph, and in some cases proof of payment method ownership such as a screenshot of your bKash or Nagad account. These documents are stored securely and are used solely for verification and regulatory compliance purposes.

Financial Transaction Data

vt8 records all deposit and withdrawal transactions you carry out on the platform, including the amount in Bangladeshi Taka, the payment method used (bKash, Nagad, Rocket, Upay, or local bank transfer), the transaction timestamp, and a reference number. This data is required for account management, dispute resolution, and anti-money-laundering record-keeping obligations. vt8 does not store full payment card numbers; where card details are involved, only a tokenised reference is retained.

Gameplay and Betting Records

vt8 maintains records of your gameplay activity, including the games played, bets placed, wager amounts, game outcomes, and session durations. This data is used for account statement generation, responsible gaming monitoring, bonus wagering tracking, and fraud detection. Aggregated and anonymised gameplay data may also be used for platform performance analytics.

Device and Technical Data

When you access vt8, our servers automatically record certain technical information including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, and the pages you visit on the vt8 platform. This information is used for security monitoring, fraud prevention, and improving platform performance.

Communication Records

If you contact vt8 through live chat, email, or WhatsApp, we retain records of those communications for quality assurance, staff training, and dispute resolution. Records are kept for a minimum of 12 months from the date of the communication.

2 How We Use Your Information

vt8 uses the personal information we collect exclusively for the following purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected without first obtaining your explicit consent.

Account Administration

Your registration data is used to create and maintain your vt8 player account, authenticate your identity when you log in, process your deposits and withdrawals in Bangladeshi Taka, and communicate essential account notifications such as security alerts, withdrawal confirmations, and KYC status updates.

Regulatory Compliance

vt8 is obligated to maintain accurate player records for anti-money-laundering (AML) compliance purposes. This includes retaining identity documents, financial transaction histories, and gameplay records for the legally mandated retention period even after an account is closed. This processing is carried out because it is required by applicable law and is not optional for either vt8 or the player.

Fraud Prevention and Security

Technical data including IP addresses, device fingerprints, and login patterns is used to detect and prevent fraudulent account activity, including multi-accounting, unauthorised access, identity theft, and bonus abuse. Where suspicious activity is detected, your account may be temporarily restricted pending investigation.

Responsible Gaming Monitoring

Gameplay records and session data are used by vt8's responsible gaming systems to identify patterns that may indicate problematic gambling behaviour, including unusually long sessions, rapid deposit escalation, or reversal of self-exclusion requests shortly after activation. Where such patterns are detected, vt8 may proactively contact you with responsible gaming resources. This processing is carried out in your interest and in fulfilment of our duty of care obligations.

Platform Improvement

Anonymised and aggregated technical data and gameplay statistics are used to improve the vt8 platform experience, optimise game loading times, identify and fix software bugs, and plan new features. No individual player is identifiable from this aggregated data.

Marketing Communications

With your explicit consent at the point of registration (or subsequently via account settings), vt8 may send you promotional emails about upcoming bonuses, seasonal offers tied to Bangladesh's cultural calendar (including Eid, Pohela Boishakh, BPL cricket season promotions, and Victory Day free bet credits), and new game releases. You may withdraw consent for marketing communications at any time by updating your account preferences or by contacting support at [email protected].

3 Legal Basis for Processing

Each category of personal data processed by vt8 is processed on one of the following legal bases. vt8 does not process personal data without a clearly identified and documented legal basis.

• Contractual necessity: Processing required to deliver the services described in our Terms & Conditions — including account management, payment processing, and gameplay facilitation — is carried out because it is necessary to perform the contract between vt8 and the player.
• Legal obligation: Processing required to comply with applicable legal obligations — including AML record-keeping, age verification, and fraud reporting — is carried out because it is mandated by law. Players cannot opt out of this processing without closing their account.
• Legitimate interests: Processing carried out for fraud prevention, platform security, and anonymised analytics is based on vt8's legitimate interests in operating a secure and reliable gaming platform, provided those interests are not overridden by the individual player's privacy rights.
• Consent: Processing for direct marketing communications is based exclusively on your freely given, specific, informed, and unambiguous consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4 Sharing & Disclosure of Data

Game Technology Providers

To deliver live dealer games and RNG slot titles, vt8 shares a limited set of session and wallet data with certified third-party game providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. This data sharing is strictly limited to what is technically necessary to authenticate your game session and process in-game transactions. Game providers are contractually bound to process this data only for the purpose of delivering the game and are prohibited from using it for independent marketing or profiling purposes.

Payment Processors

To process your deposits and withdrawals in Bangladeshi Taka, vt8 shares transactional data with the relevant payment service providers — including bKash, Nagad, Rocket, Upay, and local banking partners such as Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. Data shared with payment processors is limited to the transaction reference, amount, and the minimum account details required by the payment network to route funds correctly.

Identity Verification Services

Where vt8 uses a third-party KYC or document verification service to assist in processing identity checks, your submitted KYC documents may be shared with that provider for the sole purpose of verification. All such providers are contractually required to maintain the confidentiality of your documents and to destroy copies upon completion of the verification process.

Legal and Regulatory Disclosure

vt8 may disclose personal information to law enforcement authorities, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of vt8, its players, or the public. Such disclosures are made only to the extent required by the applicable legal obligation.

Business Transfers

In the event that vt8 undergoes a merger, acquisition, or sale of its business assets, player data may be transferred to the acquiring entity as part of that transaction, subject to the acquiring entity assuming all obligations under this Privacy Policy with respect to your data. You will be notified of any such transfer via email at least 30 days in advance where reasonably practicable.

5 Cookies & Tracking Technologies

vt8 uses cookies and similar tracking technologies on the vt8.my website. A cookie is a small text file placed on your device by a web server to help the site remember information about your visit. The following categories of cookies are used by vt8:

Cookie Type	Purpose	Duration	Removable by Player
Strictly necessary	Session authentication, login state, CSRF protection	Session / up to 24 hours	No — required for platform function
Functional	Language preference, preferred payment method display	Up to 30 days	Yes — via browser settings
Analytics	Anonymous page-view counts, navigation path analysis	Up to 12 months	Yes — via browser settings
Security	Device fingerprinting for fraud and bot detection	Up to 90 days	Partial — may affect security features

Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types of cookies, or delete existing cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your vt8 account. Disabling analytics cookies will not affect your ability to use the platform but will reduce vt8's ability to improve the player experience over time.

vt8 does not use third-party advertising cookies or retargeting pixels. No vt8 cookie data is shared with external advertising networks.

6 Data Retention

vt8 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal obligations, whichever is longer. The following retention periods apply to the main categories of data vt8 processes:

• Account registration data: Retained for the duration of the account relationship and for a minimum of 5 years after account closure, in compliance with anti-money-laundering record-keeping requirements.
• KYC identity documents: Retained for a minimum of 5 years from the date of the most recent transaction on the account, or longer if required by a specific legal hold or regulatory investigation.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, consistent with applicable financial record-keeping obligations.
• Gameplay records: Retained for 2 years for operational purposes (account statements, responsible gaming monitoring), and then archived in anonymised form for up to 5 years for aggregate analytics.
• Device and technical logs: Retained for up to 12 months for fraud investigation purposes and then permanently deleted.
• Support communication records: Retained for 12 months from the date of the most recent communication in a given support ticket.
• Marketing consent records: Retained for the duration of the consent period and for 1 year after consent is withdrawn, as evidence of the consent history.

When data is no longer required for any active legal, compliance, or operational purpose, vt8 will securely delete or permanently anonymise it in accordance with our internal data destruction procedures.

7 Your Privacy Rights

As a player registered with vt8 from Bangladesh, you hold the following rights with respect to your personal data. To exercise any of these rights, contact vt8 at [email protected] with the subject line "Privacy Rights Request" and your full name and registered email address. vt8 will respond within 30 days of receiving a verified request.

• Right of access: You may request a copy of all personal data vt8 holds about you, along with information about the purposes for which it is processed and the categories of third parties with whom it has been shared.
• Right to rectification: If any personal data vt8 holds about you is inaccurate or incomplete, you may request that it be corrected. Basic account details such as your email address and mobile number can be updated directly in your account settings.
• Right to erasure: Subject to our legal retention obligations, you may request that vt8 delete your personal data. Where deletion is not possible due to a legal hold (e.g., AML record-keeping requirements), vt8 will explain the specific legal basis for retaining the data and confirm when it will be eligible for deletion.
• Right to restriction of processing: In certain circumstances (for example, while a disputed data accuracy claim is being investigated), you may request that vt8 suspend active processing of your data while retaining it.
• Right to data portability: You may request a copy of the personal data you have provided to vt8 in a structured, commonly used, machine-readable format (such as JSON or CSV), suitable for transfer to another service.
• Right to withdraw consent: Where processing is based on your consent (principally marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of vt8's legitimate interests, including fraud-prevention profiling. vt8 will assess whether its legitimate interests override your objection in the specific circumstances.

8 Data Security Measures

vt8 implements a layered, defence-in-depth approach to the security of player personal data. Our security framework includes the following technical and organisational measures:

• Transport-layer encryption: All data transmitted between your browser or mobile device and the vt8 platform is encrypted using TLS 1.3. The vt8 website enforces HTTPS at all times; plain HTTP connections are automatically redirected.
• Password security: Player passwords are stored as salted cryptographic hashes using a modern hashing algorithm. Plain-text passwords are never stored or logged. vt8 staff cannot retrieve your password; only a password reset is possible.
• Two-factor authentication (2FA): OTP-based two-factor authentication is applied by default for logins from unrecognised devices. This is a platform-level security control that cannot be disabled by the player.
• Access controls: Access to player personal data within vt8's internal systems is restricted on a strict need-to-know basis. Staff are granted the minimum level of access required to perform their role, and all access events are logged and periodically audited.
• Penetration testing: vt8 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities in the platform before they can be exploited.
• Incident response: In the event of a confirmed personal data breach that poses a risk to player rights, vt8 will notify affected players via their registered email address within 72 hours of becoming aware of the breach, describing what data was involved and what steps are being taken to mitigate harm.

While vt8 employs best-practice security measures, no system connected to the internet can be guaranteed to be completely immune from attack. Players are encouraged to use strong, unique passwords, enable 2FA, and contact vt8 support immediately if they suspect unauthorised access to their account.

9 Updates to This Privacy Policy

vt8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made to this Policy, vt8 will notify registered players via email to the address on file and will display a prominent notice on the platform for a minimum of 14 days following the update taking effect.

The revised Privacy Policy will be published at vt8.my/privacy-policy with an updated "Last Updated" date at the top of the document. We recommend reviewing this page periodically. Your continued use of the vt8 platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy.

If you do not agree with any material change to this Privacy Policy, you must cease using the vt8 platform and close your account before the change takes effect. Account closure requests can be submitted to [email protected].

Contact for Privacy Enquiries

For any questions, concerns, or formal correspondence regarding this Privacy Policy or vt8's data practices, contact our privacy team at [email protected]. Please include "Privacy Policy Enquiry" in the subject line. vt8 aims to respond to all privacy enquiries within 5 business days.