Privacy Policy

1 Information We Collect

When you interact with the va99 platform, we collect personal information in several ways. The categories of data we collect, and the contexts in which we collect them, are described in detail below. va99 is committed to collecting only information that is necessary and proportionate to the legitimate purposes for which it will be used.

Registration & Account Data

When you create a va99 account, we collect the information you provide directly during the registration process. This includes:

• Your full legal name as it appears on your government-issued identity document.
• Your date of birth, collected to verify that you meet the 18+ age requirement for using the platform.
• Your residential address, including city, district, and postal code within Bangladesh or the country of your residence.
• Your email address and mobile phone number, used for account communications, transaction confirmations, and security alerts.
• Your chosen username and an encrypted version of your password — va99 never stores passwords in plain text.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, va99 may request copies of identity documents from players at the point of registration, before processing withdrawal requests, or at any other time our compliance team deems necessary. Documents we may request include national identity cards, passports, and driving licences issued by the Government of Bangladesh or any other recognised national authority. These documents are processed securely and retained only for the period required by our compliance obligations.

Financial Transaction Data

When you make deposits or withdrawal requests on va99, we record transactional data including the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, or Mastercard), the transaction amount in Bangladeshi Taka (BDT), the date and time of the transaction, and a transaction reference number. We do not store full payment card numbers or mobile wallet PINs — these are processed directly by the relevant payment provider using their own secure infrastructure.

Technical & Usage Data

When you access the va99 platform, our servers automatically collect certain technical information about your session. This includes your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited within the platform, session duration, and betting or gaming activity logs. This data is used for platform security, fraud detection, and aggregate performance analysis.

Communications Data

If you contact va99 through our support channels — including email, live chat, or any other communication method we make available — we retain a record of that correspondence. This helps us respond accurately to follow-up queries and maintain a consistent support history for your account.

2 How We Use Your Data

va99 processes your personal data only for defined, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The following table summarises our principal processing activities:

Marketing Communications

va99 will only send you promotional emails, SMS notifications, or in-platform messages about bonuses, special offers, and new game launches if you have explicitly opted in to receive such communications during registration or through your account settings. You may withdraw this consent and unsubscribe from marketing communications at any time by contacting support or adjusting your notification preferences in your account dashboard.

Automated Decision-Making

va99 uses automated systems to flag unusual account activity, detect patterns consistent with fraud or bonus abuse, and assess compliance risk. Where an automated process leads to a significant decision affecting your account — such as a temporary suspension pending investigation — you have the right to request a manual review by a member of our compliance team. Please contact support to initiate such a review.

3 Cookies & Tracking

The va99 website uses cookies and similar technologies — including local storage objects and session tokens — to deliver core platform functionality and to improve your experience as a player. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files that a website places on your device when you visit. They allow the site to remember information about your visit — such as your session state, language preference, and browsing behaviour within the site — so that your next visit is smoother and more personalised. Cookies do not contain executable code and cannot be used to access other files on your device.

Categories of Cookies We Use

• Strictly Necessary Cookies: These are essential for the va99 platform to function. They enable core features such as user authentication, session management, and security token validation. These cookies cannot be disabled without severely impairing platform functionality.
• Performance & Analytics Cookies: We use aggregated, anonymised analytics data to understand how players navigate the va99 platform, which pages are most visited, and where technical errors occur. This information helps our development team prioritise improvements. No personally identifiable information is included in analytics data.
• Functional Cookies: These cookies remember your preferences — such as your last-used payment method or preferred display settings — to personalise your platform experience across sessions.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and cross-site request forgery (CSRF). These are strictly necessary from a security standpoint and cannot be disabled.

Managing Your Cookie Preferences

You may control and delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete existing cookies on demand. Please be aware that disabling strictly necessary cookies will prevent you from logging in and using core platform features. For instructions on managing cookies in your specific browser, refer to your browser's help documentation. va99 does not currently respond to browser-level "Do Not Track" signals, as there is no universally adopted standard for interpreting them.

4 Data Sharing & Third Parties

va99 does not sell your personal data. We share your information with third parties only in the specific, limited circumstances described below, and only to the extent necessary for the stated purpose.

Payment Service Providers

When you make a deposit or withdrawal, va99 shares the minimum necessary transaction information with the relevant payment service provider — such as bKash, Nagad, Rocket, Upay, your bank, or your card network — to process the transaction. These providers operate under their own privacy policies and data protection obligations. va99 does not transmit your full payment credentials to any provider beyond what is required to complete the transaction.

Identity Verification Partners

va99 may use third-party identity verification and KYC service providers to assist in verifying the identity and age of players. These partners are contractually bound to process your data solely for verification purposes and to maintain appropriate security standards. They are not permitted to use your identity documents for any other purpose.

Legal and Regulatory Disclosure

va99 may be required by law, court order, or regulatory authority to disclose certain player data to competent authorities. This includes disclosures required under applicable anti-money laundering (AML) regulations and in response to lawful requests from law enforcement agencies. va99 will comply with such requests to the extent required by applicable law, and where legally permissible, will notify affected players of such disclosures.

Platform Technology Providers

va99 uses reputable third-party technology providers for services including cloud infrastructure, database hosting, and cybersecurity monitoring. These providers act as data processors under our instruction and are bound by data processing agreements that restrict their use of your data to the provision of the contracted services only.

Game Content Providers

Some games available on va99 are supplied by third-party game studios and content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session and bet data necessary to deliver and certify their game content. They do not receive your personal registration data or financial details beyond what is technically required for game delivery and fairness auditing.

5 Data Retention

va99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as we are required to retain it under applicable laws and regulations. The following principles guide our data retention practices:

• Active accounts: Personal data associated with an active va99 account is retained for the duration of the account's existence on the platform, plus any legally mandated post-closure retention period.
• Closed accounts: Following account closure, va99 retains identity verification documents and transaction records for a minimum period required under applicable AML and financial record-keeping regulations. This period is typically five (5) years from the date of account closure, unless a longer period is required by law.
• Support communications: Records of customer support interactions are retained for a period of three (3) years from the date of the last interaction, or for the duration of any unresolved dispute, whichever is longer.
• Marketing data: If you have opted in to marketing communications, your email address and communication preferences are retained until you withdraw consent. Following an unsubscribe request, your address is added to a suppression list to ensure you are not contacted again.
• Technical logs: Server access logs and session data are retained for a maximum of twelve (12) months for security and fraud detection purposes, after which they are aggregated and anonymised or permanently deleted.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with va99's data destruction procedures.

6 Data Security

va99 takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• TLS encryption on all data transmitted between your browser or app and the va99 servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• AES-256 encryption for sensitive data stored in our databases, including identity documents and financial records.
• Password hashing using industry-standard cryptographic algorithms — your password is never stored in readable form.
• Two-factor authentication (2FA) available to all registered players to add an additional layer of security to the login process.
• Access controls restricting database and system access to authorised va99 personnel on a strict need-to-know basis, with comprehensive audit logging of all access events.
• Regular security assessments, including vulnerability scanning and third-party penetration testing, to identify and remediate weaknesses proactively.
• DDoS protection and web application firewall (WAF) infrastructure to defend the platform against network-level attacks.

Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, va99 will act promptly to contain the breach, assess its scope and severity, and notify affected individuals as soon as practicable. Notification will be provided via the email address registered to your va99 account. va99 will also fulfil any mandatory breach reporting obligations to competent authorities within the timeframes required by applicable law.

Your Responsibility

While va99 takes extensive measures to protect the data within our systems, the security of your account also depends on the strength of your password and the care you take with your login credentials. You should use a unique, strong password for your va99 account and enable two-factor authentication. Never share your password with anyone, including individuals who claim to be va99 staff — va99 will never ask for your full password through any communication channel.

7 Your Privacy Rights

va99 respects your rights over your personal information. Subject to applicable law and certain limited exceptions (such as where retaining or disclosing data is required for legal or compliance reasons), you have the following rights with respect to your personal data held by va99:

• Right of Access: You have the right to request a copy of the personal data va99 holds about you, along with information about how it is being processed. We will respond to verified access requests within a reasonable timeframe.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may update some information directly through your account settings, or contact support for assistance with changes that cannot be made self-service.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where the data has been processed unlawfully. This right is subject to our obligations to retain certain data under applicable AML and financial regulations.
• Right to Restrict Processing: In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you have the right to request that we restrict the processing of your personal data to storage only.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another service provider.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent — for example, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

How to Exercise Your Rights

To exercise any of the rights described above, please contact the va99 data protection team at the email address displayed in the footer of this page. Your request should clearly state the right you wish to exercise and include sufficient information to allow us to verify your identity before processing the request. We will acknowledge your request promptly and respond within a reasonable timeframe. Please note that exercising certain rights — such as requesting erasure of your account data — will result in the closure of your va99 account and the forfeiture of any active bonuses.

8 Policy Updates & Contact

Changes to This Privacy Policy

va99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes to this policy, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email. Your continued use of the va99 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you should cease using the platform and request account closure.

Children's Privacy

The va99 platform is strictly intended for adults aged 18 and above. va99 does not knowingly collect personal data from individuals under the age of 18. If a parent or guardian becomes aware that their child has created a va99 account or submitted personal data without their consent, they should contact our support team immediately. Any account found to belong to a minor will be closed and all associated data deleted, subject to any mandatory regulatory retention requirements.

Contact the va99 Privacy Team

If you have any questions, concerns, or complaints about this Privacy Policy or the way va99 handles your personal data, you are welcome to reach out to our data protection team. Contact details are provided in the footer of every page on this website. Our team operates on Bangladesh Standard Time (BST, UTC+6) and aims to respond to all privacy-related inquiries within two business days. For general account support or responsible gaming assistance, please visit our FAQ page or the Responsible Gaming page.