vb811 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Introduction

vb811 ("we", "us", "our") operates the online betting and casino platform accessible at https://vb811.io (the "Platform"). We are committed to protecting the privacy and personal data of every individual who registers an Account, visits the Platform, or otherwise interacts with vb811 services.

This Privacy Policy sets out in formal, plain English exactly what personal data we collect from users based in Bangladesh and elsewhere, the purposes for which that data is processed, the legal bases upon which processing rests, how long we retain data, with whom we share it, and the rights you hold in relation to your personal information.

This Privacy Policy forms part of the vb811 Terms & Conditions and should be read alongside the vb811 Responsible Gaming Policy. By creating an Account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2 Personal Data We Collect

vb811 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

2.1 Identity Data

• Full legal name as it appears on a government-issued identity document.
• Date of birth (required to verify the minimum age of 21 years).
• Gender (where voluntarily provided during registration).
• Copies of identity documents submitted during KYC verification (e.g., National ID card, passport).

2.2 Contact Data

• Email address used for Account registration and correspondence.
• Mobile phone number, including the number linked to a bKash, Nagad, or Rocket mobile banking account.
• Residential address (where required for advanced KYC verification).

2.3 Financial Data

• Mobile banking account references (e.g., bKash wallet number, Nagad wallet number) used for deposit and withdrawal transactions.
• Bank account details (e.g., Dutch-Bangla Bank, City Bank, BRAC Bank account references) where bank transfer is used.
• Card type and last four digits for Visa and Mastercard transactions.
• Transaction history: deposit amounts, withdrawal amounts, dates, and reference numbers.

2.4 Technical Data

• IP address at time of Account registration and each login session.
• Device type, operating system, and browser type.
• Session timestamps (all recorded in Bangladesh Standard Time, BST UTC+6).
• Cookies and session tokens (see Section 7).

2.5 Usage Data

• Betting history: markets wagered on, stake amounts, odds accepted, and outcomes.
• Casino game history: games played, session duration, bet size, and result records.
• Responsible gaming tool settings: deposit limits, loss limits, self-exclusion records.
• Customer support interaction records: chat transcripts, email correspondence, complaint records.

2.6 Verification Data

• Selfie images or video submitted for liveness-check KYC processes.
• Proof-of-address documents (e.g., utility bill, bank statement).
• Source-of-funds declarations where requested for enhanced due diligence.

3 How We Collect Personal Data

vb811 collects personal data through the following channels:

3.1 Directly From You

The majority of personal data vb811 holds about you is data you provide directly: during Account registration, when completing the KYC verification process, when making a deposit or withdrawal, when contacting our customer support team, and when completing any responsible gaming self-declaration.

3.2 Automatically Through Platform Use

Technical and usage data is collected automatically as you interact with the Platform. This includes your IP address, device identifiers, session timestamps, pages visited, games played, and bets placed. This data is collected via server logs, cookies, and session tracking technologies described in Section 7.

3.3 From Payment Processors

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a partner bank, our payment processing partners provide transaction confirmation data to vb811 to allow us to credit or debit your Account balance accurately. We receive only the reference data required to confirm the transaction; we do not receive your full mobile banking PIN or bank account password.

3.4 From Identity Verification Providers

Where vb811 uses a third-party KYC verification service to confirm your identity and age, that service provider may return a verified/not-verified status and a confidence score to vb811. The underlying identity documents you submit are processed in accordance with that provider's own privacy policy, to which you will be directed at the point of KYC initiation.

4 Why We Use Your Personal Data

vb811 processes your personal data only for specific, legitimate purposes. The table below sets out each purpose and the categories of data used for that purpose:

5 Legal Basis for Processing

Every instance of personal data processing by vb811 rests on one of the following legal bases:

• Contractual Necessity: Processing is required to perform the contract between vb811 and the Player — i.e., to operate your Account, accept bets, and process payments. Without this processing, the service cannot be delivered.
• Legal Obligation: vb811 is required by applicable financial regulations, anti-money-laundering standards, and age-verification requirements to collect and retain certain categories of personal data. This processing is non-optional.
• Legitimate Interests: vb811 processes certain technical and usage data on the basis of its legitimate interest in maintaining a secure, fair, and fraud-free Platform. This interest has been assessed as proportionate and does not override your fundamental privacy rights.
• Consent: Where vb811 processes data for optional purposes — such as sending personalised promotional communications — that processing rests on your freely given, specific, and revocable consent. You may withdraw consent at any time by contacting [email protected].

6 Data Sharing & Third Parties

6.1 Payment Processors

vb811 shares the minimum necessary financial and identity data with its payment processing partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — solely for the purpose of executing deposit and withdrawal transactions initiated by you.

6.2 Game Studio Providers

Third-party game studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive a pseudonymous player identifier and session data from vb811 in order to deliver game content, manage game state, and return game outcomes. These providers do not receive your name, NID, or financial account details.

6.3 Identity Verification Providers

Where KYC verification is required, vb811 may share identity and verification data with a third-party KYC provider. All such providers are contractually bound to process data only on vb811's instructions and to maintain appropriate technical and organisational security measures.

6.4 Legal and Regulatory Disclosure

vb811 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required by applicable law, or where vb811 has a good-faith belief that disclosure is necessary to prevent fraud, protect against legal liability, or protect the rights and safety of vb811, its Players, or the public.

6.5 No Sale of Data

vb811 does not sell, rent, or otherwise transfer personal data to third parties for their own commercial marketing or advertising purposes. Any third-party data processor engaged by vb811 is bound by a written data processing agreement that restricts the use of data to the specific purpose for which it was shared.

7 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, maintain your session, and remember your preferences.

7.2 Cookies Used by vb811

7.3 No Third-Party Advertising Cookies

vb811 does not place or permit third-party advertising or retargeting cookies on the Platform. You will not be tracked across other websites as a result of visiting vb811.io.

7.4 Managing Cookies

You may configure your browser to block or delete cookies at any time. Note that blocking essential cookies will prevent you from logging in and using core Platform features. Analytics and functional cookies may be disabled without affecting core functionality.

8 Data Security

vb811 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

• Encryption in Transit: All data transmitted between your device and the vb811 Platform is encrypted using TLS 1.2 or higher (256-bit SSL). Any page on vb811.io that handles personal data is served exclusively over HTTPS.
• Encryption at Rest: Personal data stored in vb811's databases — including identity documents, payment references, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within vb811's internal systems is restricted on a strict need-to-know basis. Staff authorised to access player data are subject to background checks and ongoing security training.
• Intrusion Detection: vb811's infrastructure is monitored 24/7 for anomalous access patterns, intrusion attempts, and data exfiltration signals. Automated alerts trigger immediate investigation by the security team.
• Password Security: Player Account passwords are stored as salted cryptographic hashes. vb811 staff cannot view your password in plain text. If you forget your password, a reset is initiated via your registered email address.
• Breach Response: In the event of a confirmed data breach that is likely to result in a risk to the rights and freedoms of affected Players, vb811 will notify affected Players and relevant authorities within the timeframes required by applicable data protection standards.

9 Data Retention

vb811 retains personal data only for as long as necessary to fulfil the specific purpose for which it was collected, and in any event for no longer than applicable legal and regulatory requirements demand. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual.

10 Your Rights Over Your Personal Data

As a vb811 Player whose personal data is processed by us, you hold the following rights. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Request". vb811 will respond within 30 calendar days of receipt.

• Right of Access: You have the right to request a copy of all personal data vb811 holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data vb811 holds about you. For Account-level corrections (e.g., updating your contact number), you may also make changes directly in your Account settings.
• Right to Erasure: You have the right to request deletion of your personal data where there is no compelling reason for vb811 to continue processing it. Note that vb811 may be legally required to retain certain data (e.g., financial transaction records) even following an erasure request.
• Right to Restriction: You have the right to request that vb811 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to vb811 in a structured, commonly used, machine-readable format (e.g., CSV), and to have that data transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where vb811 relies on legitimate interests as its legal basis. vb811 will cease processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11 Children & Minors

The vb811 Platform is strictly intended for adults aged 21 years and above. vb811 does not knowingly collect, store, or process personal data from any individual under the age of 21. Age verification is a mandatory step in the Account registration process.

If vb811 becomes aware that personal data has been collected from a person under the age of 21 — whether through registration misrepresentation or any other means — that Account will be immediately suspended, all associated data will be reviewed, and steps will be taken to delete the data of the underage individual from our systems in accordance with our obligations.

If you are a parent or guardian and believe that a minor in your care has registered an Account on vb811, please contact us immediately at [email protected]. We will investigate and take appropriate action within 48 hours of notification.

12 Third-Party Links

The vb811 Platform may contain references to third-party service providers — such as payment processors (bKash, Nagad) or game studios (Evolution Gaming, Pragmatic Play) — in the course of delivering Platform services. These third parties operate their own websites and privacy policies, which are independent of vb811.

vb811 is not responsible for the privacy practices or the content of any third-party website or service. We encourage you to review the privacy policy of any third party before submitting personal data to them directly. The presence of a third-party name or logo on the vb811 Platform does not constitute an endorsement of that party's data handling practices by vb811.

13 Changes to This Privacy Policy

vb811 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes to the services we offer. When material changes are made, vb811 will:

• Update the "Last Updated" date at the top of this document.
• Publish a notice on the Platform informing Players of the change.
• Where required, send a notification to Players' registered email addresses summarising the key changes.

Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept the revised Privacy Policy, you must cease using the Platform and may request Account closure by contacting vb811 support.

Minor administrative changes — such as updates to contact details, corrections of typographical errors, or clarifications that do not alter the substance of any data processing activity — may be made without specific advance notice to Players.

14 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way vb811 handles your personal data, please contact the vb811 Data Protection team using the details below. All enquiries are treated with strict confidentiality.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Subject Request — [Your Full Name]"
• Subject Line for Privacy Complaints: "Privacy Complaint — [Your Full Name]"
• Response Time: vb811 aims to acknowledge all privacy-related enquiries within 5 business days (BST) and to provide a substantive response within 30 calendar days.
• Live Chat: Available 24/7 within the Platform after logging in to your Account for general support queries.

If you are not satisfied with vb811's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. vb811 will cooperate fully with any such authority in the resolution of a complaint.