vf999 Privacy Policy — Your Data, Your Rights

vf999 operates the online gaming and sports betting platform accessible at https://vf999.bio. As part of providing our services to registered players in Bangladesh and elsewhere, vf999 necessarily collects and processes certain categories of personal data. vf999 takes its obligations regarding data privacy seriously and is committed to handling personal information responsibly, transparently, and in accordance with applicable data protection principles.

This Privacy Policy sets out the types of personal data vf999 collects, the purposes for which that data is processed, the legal basis for each processing activity, the circumstances in which data may be shared, the period for which data is retained, the security measures applied, and the rights available to data subjects. This policy should be read together with the vf999 Terms & Conditions, which are published separately at https://vf999.bio/terms-conditions.

vf999 collects personal data in the following categories when you register, verify your account, make transactions, or interact with our platform:

Specifically, the data collected may include:

• Registration data: mobile number, full name, date of birth, and preferred currency (BDT).
• Identity verification data: copies of government-issued ID documents submitted during KYC verification, where applicable.
• Financial data: deposit and withdrawal transaction records, payment method identifiers (e.g. bKash mobile number, Nagad account reference), and transaction amounts in BDT.
• Technical data: IP address, device type, operating system, browser type, session timestamps, and approximate geolocation derived from IP address.

vf999 uses the personal data collected for the following purposes:

• Account creation and management: to register your account, verify your identity, and maintain your account in good standing on the vf999 platform.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain an accurate record of all financial transactions on your account.
• Regulatory compliance: to fulfil our obligations under applicable anti-money laundering (AML) rules, including KYC verification requirements and the reporting of suspicious activity where legally required.
• Customer support: to respond to your enquiries, resolve account issues, investigate complaints, and communicate with you regarding your account.
• Responsible gaming: to monitor gameplay patterns for indicators of problem gambling and to apply responsible gaming measures, including deposit limits and account restrictions, where appropriate.
• Platform improvement: to analyse aggregated, anonymised usage data to improve the performance, content, and functionality of the vf999 platform.

vf999 does not use your personal data for automated decision-making processes that produce legal or similarly significant effects without human review. Where automated systems are used to flag accounts for review (for example, fraud detection or responsible gaming monitoring), a human reviewer is involved before any account action is taken.

vf999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: processing that is necessary to perform the vf999 service contract with you, including account creation, payment processing, and the delivery of gaming services.
• Legal obligation: processing necessary to comply with applicable legal requirements, including AML obligations, KYC verification, and the reporting of suspicious financial activity.
• Legitimate interests: processing carried out in the legitimate interests of vf999, including fraud prevention, platform security, responsible gaming monitoring, and improving our services, where those interests are not overridden by your data protection rights.
• Consent: where vf999 relies on your consent as the legal basis for a specific processing activity (for example, sending you promotional communications), you may withdraw that consent at any time by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

vf999 does not sell, rent, or trade your personal data. We may share your personal data with third parties only in the following limited circumstances:

• Payment processors: we share transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to the extent necessary to process your deposits and withdrawals.
• Game providers: technical session data is shared with our licensed game providers (including Pragmatic Play, Evolution Gaming, NetEnt, PG Soft, Microgaming, Spribe, and Ezugi) to the minimum extent required to deliver and audit game sessions.
• Legal and regulatory authorities: we will disclose personal data to competent authorities, law enforcement agencies, or financial regulators where we are required to do so by applicable law or a binding legal order.
• Service providers: we engage reputable third-party technology providers to support platform operations (such as hosting, analytics, and fraud detection). These providers act as data processors under contractual obligations of confidentiality and may only use your data for the specific purpose for which they were engaged.

In all cases where data is shared with third-party service providers, vf999 requires contractual assurances that the recipient will process the data only for the stated purpose, maintain appropriate security standards, and not further disclose the data without authorisation.

vf999 processes financial data — including mobile wallet identifiers associated with bKash, Nagad, and Rocket accounts, and card details associated with Visa and Mastercard transactions — solely for the purpose of facilitating deposits and withdrawals on the platform. vf999 does not store full card numbers. Card payment processing is handled by PCI-DSS compliant payment processors, and card credentials are transmitted directly to those processors without being stored on vf999 servers.

All financial transactions on vf999 are denominated in Bangladeshi Taka (BDT) and records of all transactions are retained in accordance with applicable legal requirements. You may request a statement of your transaction history at any time by contacting customer support.

vf999 uses cookies and similar tracking technologies on its platform to support the following functions:

• Essential cookies: required for the platform to function correctly, including maintaining your login session state, remembering your language preference, and enabling secure payment flows.
• Analytics cookies: used to collect anonymised data about how users navigate the platform, which pages are visited most frequently, and where technical errors occur, so that we can improve platform performance and content.
• Security cookies: used to detect and prevent fraudulent account access, bot activity, and other security threats in real time.

Most modern browsers allow you to manage cookie preferences through your browser settings. However, disabling essential cookies may impair the functionality of the vf999 platform and prevent you from accessing certain features, including the login and deposit flows. vf999 does not currently use third-party advertising cookies or cross-site tracking cookies.

vf999 retains your personal data for as long as your account remains active and for a defined period thereafter as required by applicable law or legitimate business necessity. Specifically: account registration data and transaction records are retained for a minimum of five years following account closure, in compliance with applicable AML and financial record-keeping requirements. KYC identity documents are retained for the same period. Technical log data (IP addresses, session records) is retained for a shorter period aligned with security and fraud detection needs.

Where personal data is no longer required for the purpose for which it was collected and no legal retention obligation applies, vf999 will securely delete or anonymise that data. If you close your account and request data deletion, vf999 will process your request within 30 days, subject to any overriding legal retention requirements. You will be notified of any data categories that cannot be immediately deleted due to legal obligations.

As a data subject, you have the following rights in respect of the personal data vf999 holds about you:

• Right of access: you may request a copy of the personal data vf999 holds about you at any time. vf999 will respond to access requests within 30 days.
• Right of rectification: if any personal data vf999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right of erasure: you may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention requirements applicable to vf999.
• Right to restrict processing: you may request that vf999 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being investigated.
• Right to data portability: where processing is carried out on the basis of your consent or a contract with you, you may request that vf999 provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.

To exercise any of the above rights, please contact vf999 support at [email protected] with the subject line "Data Rights Request". vf999 will acknowledge your request within 5 business days and will endeavour to fulfil it within 30 days. In cases where a request cannot be fulfilled (for example, due to a legal retention obligation), vf999 will explain the reason in writing.

vf999 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include 256-bit SSL/TLS encryption for all data transmissions between your device and the vf999 platform, encrypted storage of sensitive account data at rest, access controls restricting internal access to personal data to authorised personnel only, regular security assessments of the platform and its underlying infrastructure, and two-factor authentication options available to all registered accounts.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is entirely immune from security risk. vf999 cannot provide an absolute guarantee of security and will not be liable for any breach that occurs despite the reasonable security measures described above, provided that such breach does not result from vf999's own negligence or wilful misconduct. In the event of a significant data breach affecting your personal data, vf999 will notify affected users without undue delay in accordance with applicable legal requirements.

The vf999 platform is strictly intended for adults aged 21 years and above. vf999 does not knowingly collect personal data from individuals under the age of 21. If vf999 becomes aware that personal data has been collected from a person under the age of 21, it will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor has registered on the vf999 platform, please contact support immediately at [email protected] so that the matter can be addressed promptly.

vf999 reserves the right to update or amend this Privacy Policy at any time. The most current version of this policy will always be available at https://vf999.bio/privacy-policy. The date of the most recent revision is indicated at the top of this page. Where amendments are material — for example, where vf999 introduces a new category of data processing or a new category of data sharing — vf999 will notify registered users via account notification prior to the changes taking effect, and will seek fresh consent where required by applicable law.

Your continued use of the vf999 platform following the publication of any amendment to this Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised policy, you must cease using the platform and may request closure of your account by contacting support at [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vf999 handles your personal data, our dedicated support team is available 24 hours a day, 7 days a week. You may also submit a formal data rights request as described in Section 9 above.

Email: [email protected]