vkk8 Privacy Policy

1. Who We Are

vkk8 is an online casino and sports betting platform serving the Bangladesh market. The Platform is accessible at https://vkk8.io and offers a comprehensive range of services including cricket betting, live casino games, slot games, and speciality game categories such as Pappu and Jackpot Fishing.

For the purposes of this Privacy Policy, vkk8 acts as the data controller — meaning we determine the purposes and means by which personal data collected through the Platform is processed. When we engage third-party service providers (such as payment processors and game studios), those parties may act as data processors on our behalf, processing data only on our documented instructions.

This Privacy Policy applies to all users of the vkk8 Platform, including registered account holders, unregistered visitors to the website, and any person who interacts with vkk8 support channels. By using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

vkk8 collects personal data through several channels: directly from you when you register and use the Platform, automatically through your use of the website and associated technology, and in limited cases from third-party verification partners. The categories of data we collect are set out in the table below.

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification (e.g., a photo ID document). Where identity verification involves a liveness check image, that image is processed solely for the purposes of verifying account ownership and is not retained indefinitely.

3. How We Use Your Information

vkk8 uses the personal data described in Section 2 for the following documented purposes:

• Account management: Creating, maintaining, and securing your vkk8 account, including processing login requests, resetting credentials, and managing account preferences.
• Identity verification (KYC): Confirming that you are who you say you are, that you are aged 21 or above, and that you are not a restricted person or a politically exposed person (PEP) as defined under applicable financial compliance frameworks.
• Payment processing: Facilitating deposits and withdrawal transactions through supported channels including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank. Financial data is shared with payment providers only to the extent necessary to complete each transaction.
• Fraud prevention and security: Detecting and investigating suspicious activity, duplicate accounts, collusion, money laundering patterns, chargebacks, and other conduct that may violate our Terms & Conditions or applicable law.
• Responsible gaming: Monitoring gaming behaviour to identify patterns indicative of problem gambling, triggering responsible gaming interventions (such as deposit limit prompts or self-exclusion recommendations), and maintaining records of self-exclusion requests.
• Customer support: Responding to enquiries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance and training purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game offerings, site performance, user experience, and to inform commercial decisions about the Platform's development.
• Legal and regulatory compliance: Meeting our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and data protection frameworks, including responding to lawful requests from law enforcement or regulatory authorities.
• Communications: Sending transactional messages such as deposit confirmations, withdrawal updates, and security alerts. Promotional communications are sent only where you have not opted out of marketing contact.

4. Legal Basis for Processing

vkk8 processes personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to deliver the services you have requested — including account creation, payment processing, and game access — is carried out because it is necessary to perform our contract with you.
• Legitimate interests: Processing carried out to detect fraud, prevent abuse, improve Platform security, and conduct anonymised analytics is based on vkk8's legitimate business interests, provided those interests are not overridden by your privacy rights.
• Legal obligation: Identity verification, AML checks, and the retention of certain transaction records are required by applicable financial compliance obligations, and processing for these purposes is therefore mandatory rather than optional.
• Consent: Where we send optional marketing communications or use non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time by contacting [email protected] or adjusting your cookie preferences.

5. Sharing Your Information

vkk8 does not sell personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment service providers: To process deposits and withdrawals, we share relevant financial and identity data with the payment provider you select (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank). These providers process data under their own privacy policies and applicable financial regulation.
• Identity verification partners: Third-party KYC providers may receive identity documents and liveness check images to perform automated or manual verification on our behalf. These partners act as data processors under contract with vkk8 and may not use your data for any other purpose.
• Game content providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, SA Gaming, and Habanero may receive a session token and anonymised player identifier to deliver their game content. These providers do not receive your full name, NID, or financial details.
• Fraud and security vendors: We may share technical data (IP address, device fingerprint, behavioural signals) with specialist fraud prevention platforms to protect the integrity of the Platform and its users.
• Law enforcement and regulatory authorities: Where required by a lawful order, court directive, or regulatory obligation, vkk8 will disclose personal data to the relevant authority. We will endeavour to notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or a portion of vkk8's business assets, personal data held by vkk8 may form part of the transferred assets. Affected users will be notified prior to their data becoming subject to a different privacy policy.

6. Cookies & Tracking Technologies

vkk8 uses cookies and similar tracking technologies to operate the Platform, maintain session continuity, detect fraud, and analyse aggregate usage patterns. The cookies we use fall into the following categories:

Strictly necessary cookies cannot be disabled as they are essential to Platform functionality. Functional, analytics, and security cookies may be declined or removed through your browser settings. Note that disabling certain cookies may impact your Platform experience — for example, you may be required to log in again on each visit if session cookies are blocked.

vkk8 does not use third-party advertising cookies or behavioural tracking cookies that profile you across unrelated websites for commercial advertising purposes.

7. Data Retention

vkk8 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by applicable law. The following retention schedule applies:

• Account data (identity, contact): Retained for the duration of the account relationship plus five years after account closure, to satisfy AML and KYC record-keeping obligations.
• Financial transaction records: Retained for seven years from the date of each transaction, in accordance with financial compliance obligations.
• Support correspondence: Retained for three years from the date of the last interaction to support dispute resolution, quality assurance, and staff training.
• Technical and usage data: Retained in identifiable form for 12 months, after which data is anonymised and may be retained indefinitely in aggregate, non-identifiable form for Platform analytics.
• Identity verification documents (KYC images): Retained for five years after account closure. Liveness check photographs are deleted within 90 days of successful verification unless a longer period is mandated by applicable law.
• Self-exclusion records: Retained for the duration of the self-exclusion period plus five years, to prevent re-registration during active exclusion periods and to maintain a verifiable record of exclusion history.

When personal data reaches the end of its applicable retention period and no overriding legal obligation requires further retention, vkk8 will securely delete or permanently anonymise the data using procedures that prevent reconstruction of the original information.

8. Data Security

vkk8 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. Key security controls in place include:

• TLS 1.3 encryption for all data transmitted between your browser or mobile device and vkk8 servers.
• AES-256 encryption for personal data and financial records stored in vkk8 databases.
• Role-based access controls (RBAC) ensuring that internal staff access to personal data is limited to what is required for their specific job function.
• Multi-factor authentication (MFA) enforced for all internal administrative access to systems that hold personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Automated anomaly detection systems monitoring for unusual data access patterns, bulk data exports, or other indicators of potential insider threat or external breach.
• A documented data breach response procedure with clear escalation paths and notification timelines.

Despite these controls, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. vkk8 cannot provide an absolute guarantee of security, but we commit to maintaining industry-appropriate standards and to notifying affected users promptly in the event of a confirmed data breach that is likely to result in a high risk to their rights.

9. Your Rights & Choices

As a vkk8 user, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and sufficient detail to allow us to identify your account and the specific right you wish to exercise. We will respond within five business days of receiving a valid request.

• Right of access: You may request a copy of all personal data vkk8 holds about you, along with information on how it is processed and who it is shared with.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is found to be unlawful. Note that certain data must be retained to meet mandatory regulatory retention requirements even after an erasure request.
• Right to restriction of processing: You may request that vkk8 limit processing of your data in specific circumstances, such as while a rectification request is pending.
• Right to data portability: You may request a copy of the personal data you provided to vkk8 in a structured, machine-readable format (CSV or JSON), allowing you to transfer it to another service provider if you choose.
• Right to object: Where processing is based on legitimate interests, you may object to that processing. vkk8 will assess your objection and cease processing unless compelling legitimate grounds override your rights.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10. Third-Party Services

The vkk8 Platform integrates with third-party service providers to deliver its full range of features. While vkk8 carefully selects and contractually obligates these partners to handle data responsibly, each third-party provider operates under its own privacy policy and data governance framework.

Third-party integrations on the vkk8 Platform include game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, SA Gaming, Habanero), payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank), identity verification services, and analytics platforms. vkk8 is not responsible for the data practices of these third parties beyond what is governed by our data processing agreements with them.

The vkk8 website does not embed third-party social media widgets, advertising pixels, or cross-site tracking scripts from platforms such as Facebook, Google Ads, or similar services. Our analytics use is limited to first-party analytics tools operated under our direct control.

11. Children & Minors

The vkk8 Platform is strictly for adults aged 21 years and above. vkk8 does not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is performed as part of the account registration and KYC process.

If vkk8 becomes aware that personal data has been collected from a person under the age of 21, the account will be immediately closed and all associated data will be deleted, with the exception of any records required to be retained for compliance purposes (for example, records of the suspected underage access incident itself, retained to prevent future re-registration).

Parents or guardians who believe that a minor may have accessed or registered on the vkk8 Platform are encouraged to contact [email protected] immediately. vkk8 will investigate all such reports with priority and take appropriate action without delay.

12. Changes to This Policy

vkk8 reviews this Privacy Policy at least annually and whenever significant changes are made to the Platform's data practices. When we update this policy, the revised version will be published at https://vkk8.io/privacy-policy with an updated "Last updated" date at the top of the document.

Where changes are material — meaning they significantly affect how your data is used, with whom it is shared, or what rights you have — vkk8 will make reasonable efforts to notify registered account holders via the contact information on file prior to the changes taking effect. Continued use of the Platform after a revised Privacy Policy is published constitutes acceptance of the updated terms.

If you do not agree with a material change to this Privacy Policy, you may request account closure by contacting [email protected]. We will process your closure request and handle your remaining personal data in accordance with this policy and our mandatory retention obligations.

13. Contact & Data Requests

For all privacy-related enquiries, data rights requests, or concerns about how vkk8 handles your personal data, please contact our support team using the details below. All privacy enquiries are handled in English. Response times are within five business days for data rights requests and within two business days for general privacy enquiries.