vv66 Privacy Policy

1. Introduction

vv66 ("we", "us", "our") is committed to protecting the privacy and security of the personal data of all individuals who use the vv66 Platform, accessible at https://vv66.online. This Privacy Policy describes our practices with respect to the collection, use, storage, disclosure, and protection of personal data in connection with your use of the Platform.

This Privacy Policy applies to all users of the vv66 Platform, including registered account holders, visitors who browse the Platform without registering, and individuals who communicate with us through support channels. It should be read in conjunction with our Terms & Conditions, which govern your use of the Platform more broadly.

By accessing the vv66 Platform or registering an account, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

2. Data Controller

For the purposes of applicable data protection law, vv66 is the data controller responsible for the personal data collected through the Platform. As data controller, vv66 determines the purposes and means of processing your personal data in accordance with this Privacy Policy.

If you have any questions about how vv66 processes your personal data, or if you wish to exercise any of the rights described in Section 10 of this Policy, please contact us using the details set out in Section 15 (Contact Us).

3. Personal Data We Collect

vv66 collects the following categories of personal data from users of the Platform:

3.1 Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you meet the 21+ age requirement)
• Gender (optional, collected during account registration)
• Copies of identity documents submitted for Know Your Customer (KYC) verification, such as National Identity Card (NID), passport, or driver's licence

3.2 Contact Data

• Mobile telephone number (primary contact and OTP delivery)
• Email address
• Residential address, including city and postal code (required for KYC at higher account tiers)

3.3 Financial Data

• Mobile wallet identifiers associated with bKash, Nagad, Rocket, or Upay accounts used for deposits or withdrawals
• Visa or Mastercard details (card number stored in tokenised form only; full card numbers are never stored on vv66 servers)
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references

3.4 Betting & Gaming Data

• Full history of Wagers placed on sports markets, casino games, and live dealer tables
• Game session duration, session start and end times, and in-session activity logs
• Account Balance history, bonus credits awarded, and wagering requirement progress
• Responsible gaming settings, including deposit limits, session limits, and self-exclusion records

3.5 Technical Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type and version
• Unique device identifiers and mobile advertising identifiers (where applicable)
• Session logs, page view history, and click-stream data collected through cookies and similar technologies

3.6 Communications Data

• Records of all communications between you and vv66 support, including live chat transcripts, email correspondence, and support ticket histories
• Records of promotional communications sent to you and your engagement (open/click) with those communications

4. How We Collect Your Data

vv66 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place a Wager, contact support, or update your account settings.
• Automatically — when you browse the Platform, our servers automatically record Technical Data including your IP address, device information, and session activity. Cookies and similar tracking technologies are described in detail in Section 11.
• From third parties — including payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm the status of your transactions, and identity verification service providers who assist with KYC compliance.
• From publicly available sources — in limited circumstances, for fraud prevention and AML screening purposes, vv66 may cross-reference data against publicly available databases or sanctions lists.

5. How We Use Your Personal Data

vv66 processes your personal data for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity, Contact
Age and identity verification (KYC)	Identity, Contact, Financial
Processing deposits and withdrawals	Financial, Identity
Providing betting and casino services	Betting & Gaming, Technical
Fraud detection and prevention	Identity, Financial, Technical, Betting & Gaming
Anti-money laundering (AML) compliance	Identity, Financial, Betting & Gaming
Responsible gaming monitoring	Betting & Gaming, Contact
Customer support and complaint resolution	Identity, Contact, Communications
Sending promotional and bonus communications (with consent)	Contact, Communications
Platform improvement and analytics	Technical, Betting & Gaming

6. Legal Basis for Processing

vv66 processes personal data on the following legal bases:

• Contract performance — processing that is necessary to provide the services you have requested under our Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation — processing that is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and age verification duties.
• Legitimate interests — processing carried out for vv66's legitimate business interests, including fraud detection, platform security, internal analytics, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.
• Consent — where vv66 relies on your consent as the legal basis for processing (for example, sending you marketing communications), you may withdraw that consent at any time by contacting support or updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

7. Sharing Your Personal Data

vv66 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your data in the following limited circumstances:

7.1 Payment Service Providers

To process your deposits and withdrawals, vv66 shares necessary financial and identity data with payment processors including bKash, Nagad, Rocket, Upay, and card network operators (Visa, Mastercard). These providers process data solely for the purpose of completing your requested transaction and are contractually bound to maintain appropriate data security standards.

7.2 Identity Verification Providers

vv66 uses third-party KYC and identity verification service providers to assist in verifying the identity and age of account holders. These providers receive copies of identity documents and biometric data (where applicable) strictly for verification purposes and are not permitted to use this data for any other purpose.

7.3 Game Content Providers

The vv66 Platform hosts games developed by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Technical session data (such as a session token and bet amounts) is transmitted to game servers operated by these studios to enable gameplay. Game providers do not receive your name, contact details, or payment information.

7.4 Legal and Regulatory Disclosure

vv66 may disclose personal data to law enforcement agencies, regulators, or other government authorities where required to do so by applicable law, court order, or binding legal process. Where permitted, vv66 will notify you of any such disclosure.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of vv66's assets, personal data held by vv66 may be transferred to the acquiring entity. You will be notified of any such transfer and any material change to this Privacy Policy that results from it.

8. International Data Transfers

The vv66 Platform primarily serves users located in Bangladesh. Some of our third-party service providers — including game studios and technical infrastructure partners — may be located outside Bangladesh and may process data in jurisdictions that do not provide the same level of data protection as Bangladesh.

Where data is transferred internationally, vv66 takes appropriate steps to ensure that your data receives an equivalent level of protection, including through the use of standard contractual clauses and data processing agreements that impose binding data protection obligations on the recipient.

9. Data Retention

vv66 retains personal data for the following periods, after which data is securely deleted or anonymised:

• Active account data — retained for the duration of your active account relationship with vv66.
• Account closure data — following account closure, identity, financial, and betting data is retained for a minimum of 5 years to satisfy anti-money laundering (AML) record-keeping requirements and to resolve any outstanding disputes or legal claims.
• KYC documents — retained for 5 years from the date of submission or from account closure, whichever is later.
• Support communications — retained for 3 years from the date of the communication.
• Cookie and technical data — session cookies are deleted when you close your browser; persistent cookies and server log data are retained for up to 13 months.
• Responsible gaming records — self-exclusion and deposit limit records are retained for the duration of the exclusion period plus 5 years, to prevent circumvention of self-exclusion requests.

10. Your Data Protection Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by vv66:

• Right of access — you may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to rectification — you may request that inaccurate or incomplete personal data be corrected or completed without undue delay.
• Right to erasure — you may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing based on legitimate interests and no overriding legitimate grounds exist. This right is subject to our legal retention obligations described in Section 9.
• Right to restriction of processing — you may request that we restrict the processing of your data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to data portability — where processing is based on your consent or the performance of a contract, you may request that we provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to object — you may object to processing based on legitimate interests at any time, including profiling for direct marketing purposes. Where you object to marketing, we will stop processing your data for that purpose immediately.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of any processing carried out before withdrawal.

To exercise any of the above rights, please contact us at the email address in Section 15. We will respond to all verified requests within 30 days of receipt. We may need to verify your identity before processing certain requests to ensure that data is not disclosed to unauthorised parties.

11. Cookies & Tracking Technologies

vv66 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device when you visit the Platform. We use the following categories of cookies:

• Strictly necessary cookies — these are essential for the Platform to function. They maintain your login session, remember your account preferences, and enable security features. These cookies cannot be disabled.
• Performance and analytics cookies — these collect anonymised data about how users navigate the Platform (pages visited, time on page, error events) to help us improve usability and identify technical issues.
• Functional cookies — these remember your preferences such as language settings, game display options, and responsible gaming limits set through the Platform interface.
• Session identification cookies — used to authenticate your session with game content providers (such as Pragmatic Play and Evolution Gaming) to enable seamless gameplay without requiring repeated logins during a session.

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform, including logging in to your account. Detailed cookie management instructions are available in the help documentation of your browser.

12. Security Measures

vv66 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
• Encryption of sensitive data at rest, including payment tokens and identity document copies
• Role-based access controls that restrict employee access to personal data on a strict need-to-know basis
• Multi-factor authentication for internal administrative systems
• Regular security assessments and penetration testing of Platform infrastructure
• Automated monitoring systems that detect and alert on anomalous access patterns or potential data breaches
• Documented incident response procedures for managing any confirmed or suspected data security events

While vv66 employs industry-standard security practices, no method of electronic data storage or transmission is entirely free from risk. In the event of a data breach that is likely to result in a risk to your rights and freedoms, vv66 will notify affected users without undue delay and in accordance with applicable legal requirements.

13. Minors

The vv66 Platform is strictly intended for adults aged 21 years and above. vv66 does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. If you believe that a minor has registered an account on the Platform or provided personal data to vv66, please contact us immediately using the details in Section 15 and we will take prompt action to delete the relevant data and close the account.

vv66 uses age verification measures — including document-based KYC checks — to enforce this restriction. For further information about our approach to responsible gaming and underage gambling prevention, please visit our Responsible Gaming page.

14. Changes to This Privacy Policy

vv66 reserves the right to update or amend this Privacy Policy at any time. The most current version of the Policy will always be available on this page, with the "Last Updated" date at the top revised accordingly. Where changes are material, vv66 will notify registered users via email or through a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the vv66 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way vv66 processes your personal data, please contact our data protection team:

• Email: [email protected]
• Response Time: We aim to respond to all privacy-related enquiries and data subject requests within 30 days of receipt.
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays (Bangladesh Standard Time, UTC+6)

When submitting a data subject request, please include your registered account username and mobile number so that we can verify your identity and locate your data efficiently. We may ask for additional verification information before fulfilling any request that involves access to or deletion of personal data.