vg999 Privacy Policy

1. Data We Collect

1.1 Information You Provide Directly

When you register a vg999 account, make a deposit, request a withdrawal, contact customer support, or participate in a promotion, you provide us with personal data. The categories of data you provide directly include:

• Identity data: Full legal name, date of birth, gender, nationality.
• Contact data: Email address, mobile phone number, residential address (including district — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or Barisal).
• Verification data: Copies of government-issued national ID, passport, or driving licence; utility bills or bank statements for address verification.
• Financial data: Payment method details (bKash mobile number, Nagad account, Rocket account, Upay account, or bank account details); transaction history including deposit and withdrawal records denominated in Bangladeshi Taka (৳).
• Communications data: Records of your correspondence with vg999 support, including emails, live chat transcripts, and support ticket content.

1.2 Data Collected Automatically

When you access the vg999 platform, certain technical data is collected automatically by our systems without requiring any active input from you. This includes:

• Device and browser data: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution.
• Usage data: Pages visited, games played, session duration, betting patterns, deposit frequency, game provider interactions, and click-path data within the platform.
• Log data: Server-side access logs including timestamps, HTTP request data, error logs, and security event logs.
• Location data: Approximate geographic location derived from your IP address. We use this to apply geo-restrictions where required and to detect suspicious access patterns.

1.3 Data Collected from Third Parties

In limited circumstances, vg999 may receive personal data about you from third-party sources. These include:

• Payment providers: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and banking partners to verify deposits and withdrawals.
• Identity verification services: Results from KYC (Know Your Customer) and AML (Anti-Money Laundering) screening services that cross-reference the identity documents you submit.
• Fraud prevention services: Risk scores and flagging data from third-party fraud detection tools used to protect the integrity of the platform and its players.
• Responsible gaming databases: Where permitted, data from self-exclusion registries to identify and honour player exclusion requests.

2. How We Use Your Data

vg999 uses personal data collected from players for the following purposes. We process your data only where we have a lawful basis to do so — including contract performance, legal obligation, legitimate interest, or your explicit consent.

Purpose	Data Used	Lawful Basis
Account registration and management	Identity, contact, verification data	Contract performance
Processing deposits and withdrawals	Financial data, identity data	Contract performance
Identity verification (KYC/AML)	Verification data, financial data	Legal obligation
Fraud detection and security monitoring	Device data, usage data, log data	Legitimate interest
Customer support and dispute resolution	Communications data, account data	Contract performance
Responsible gaming monitoring	Usage data, financial data	Legal obligation / legitimate interest
Personalised promotions and bonus offers	Usage data, contact data	Consent (opt-in marketing)
Platform improvement and analytics	Usage data, device data (anonymised)	Legitimate interest

vg999 does not use your personal data to make fully automated decisions that produce significant legal effects without human review. Where automated systems flag an account for review (for example, as part of fraud detection or responsible gaming monitoring), a member of the vg999 compliance team reviews the flag before any restrictive action is taken against your account.

3. Cookies & Tracking Technologies

3.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function efficiently and to provide information to website operators. vg999 uses cookies and similar technologies (including local storage, session tokens, and pixel tags) to operate the platform, remember your preferences, and understand how players interact with our services.

3.2 Types of Cookies We Use

• Strictly necessary cookies: Required for core platform functionality including session management, login state, and security tokens. These cookies cannot be disabled without breaking the service.
• Functional cookies: Remember your preferences such as language selection, last-visited game category, and display settings to improve your experience on return visits.
• Analytics cookies: Collect anonymised data about how players navigate the vg999 platform — pages visited, time on page, and click paths — to help us improve performance and usability.
• Security cookies: Used to detect fraudulent activity, identify unusual login behaviour, and protect player accounts against unauthorised access.

3.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies; refer to your browser's help documentation for instructions. Please note that disabling strictly necessary cookies will impair your ability to log in and use the vg999 platform. vg999 does not use third-party advertising cookies or cross-site behavioural tracking cookies.

4. Data Sharing & Disclosure

vg999 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the following limited circumstances:

4.1 Service Providers

We engage carefully vetted third-party service providers to assist in operating the vg999 platform. These include game software providers (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming), payment processing partners (bKash, Nagad, Rocket, Upay, and banking partners), identity verification services, customer support software providers, and cloud hosting infrastructure providers. All service providers are bound by data-processing agreements that require them to handle your personal data only for the specific purpose for which it was shared and to maintain appropriate security standards.

4.2 Legal and Regulatory Disclosure

vg999 may be required to disclose personal data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where required to do so by applicable law or valid legal process. In such cases, vg999 will disclose only the minimum data necessary to fulfil the legal requirement and will, where legally permitted, notify the affected player of the disclosure.

4.3 Business Transfers

In the event that vg999 is involved in a merger, acquisition, restructuring, or sale of assets, player personal data may be transferred as part of that transaction. If such a transfer occurs, the acquiring entity will be required to honour the privacy commitments set out in this policy, or players will be notified and given the opportunity to close their accounts before any change in data controller takes effect.

4.4 Fraud and Security

Where vg999 reasonably suspects that criminal activity — including fraud, money laundering, or identity theft — has occurred or is occurring, we may share relevant data with other operators, fraud prevention organisations, or law enforcement bodies for the purpose of detecting, preventing, and prosecuting such activity.

5. Data Security

vg999 applies a layered security architecture to protect the personal data of all players. Our security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and vg999 servers.
• At-rest encryption for sensitive data fields including payment information and identity document copies stored on our servers.
• Role-based access controls ensuring that only authorised personnel with a specific operational need can access player personal data.
• Two-factor authentication (2FA) available to all players for account login, and mandatory for all internal administrative accounts.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Intrusion detection and monitoring systems that operate continuously to identify and respond to suspicious activity on the vg999 infrastructure.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a risk to the rights and freedoms of affected players, vg999 will notify affected individuals and relevant authorities in accordance with applicable data protection standards, without undue delay.

6. Data Retention

vg999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are:

• Active account data: Retained for the lifetime of your vg999 account and for a period of five years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Transaction records: Financial transaction data, including deposit and withdrawal records in Bangladeshi Taka (৳), is retained for a minimum of five years from the date of the transaction.
• Identity verification documents: Copies of KYC documents are retained for five years following account closure, or longer if required by a law enforcement or regulatory authority.
• Support communications: Customer support tickets, live chat transcripts, and email correspondence are retained for three years from the date of the interaction.
• Marketing preferences: Records of your consent to or opt-out from marketing communications are retained for the duration of your account plus two years.
• Website analytics data: Anonymised usage data is retained for up to 26 months from the date of collection.

When personal data is no longer required, vg999 securely deletes or anonymises it so that it can no longer be linked to an individual player. Data that has been anonymised is not subject to this Privacy Policy and may be retained indefinitely for analytical and business improvement purposes.

7. Your Privacy Rights

As a user of the vg999 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us in writing at [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

7.1 Right of Access

You have the right to request a copy of all personal data that vg999 holds about you. This is sometimes called a Subject Access Request (SAR). We will provide your data in a structured, commonly used format at no charge, unless your request is manifestly unfounded or excessive.

7.2 Right to Rectification

If you believe that any personal data vg999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details (such as email address and phone number) directly through your account settings. For changes to identity data or date of birth, you will be required to submit supporting documentation.

7.3 Right to Erasure

You may request that vg999 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (for consent-based processing), or where you object to processing and vg999 has no overriding legitimate grounds. Note that this right is not absolute — vg999 may be required to retain certain data to comply with legal obligations such as AML record-keeping requirements, which take precedence over erasure requests during the mandatory retention period.

7.4 Right to Restriction of Processing

You have the right to request that vg999 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved, or while your objection to processing is being considered.

7.5 Right to Data Portability

Where vg999 processes your personal data on the basis of your consent or for the performance of a contract, and that processing is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to have it transferred to another data controller where technically feasible.

7.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on vg999's legitimate interests. If you object, vg999 will cease processing unless it can demonstrate compelling legitimate grounds that override your rights, or where processing is necessary for the establishment, exercise, or defence of legal claims.

7.7 Right to Withdraw Consent

Where vg999 processes your personal data on the basis of your consent — for example, for direct marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To unsubscribe from marketing communications, use the unsubscribe link in any marketing email or contact support directly.

7.8 Rights Related to Minors

vg999 does not knowingly collect personal data from individuals under the age of 18. The platform is strictly intended for adults aged 18 and above. 18+ Only If vg999 discovers that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be permanently closed. If you believe a minor has registered on the platform, please contact us at [email protected] immediately.

8. Policy Updates & Contact

8.1 Changes to This Policy

vg999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes, we will update the "Effective Date" at the top of this page and, where appropriate, notify registered players by email. We encourage you to review this policy periodically. Your continued use of the vg999 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

8.2 How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data vg999 holds about you, please contact our data protection team by email at [email protected]. Include "Privacy Request" in the subject line of your email so that your message is directed to the appropriate team member. We respond to all privacy-related enquiries within 48 hours during Bangladesh Standard Time (BST, UTC+6) business hours, and provide a substantive response to formal requests (such as Subject Access Requests) within 30 calendar days.

8.3 Complaints

If you are not satisfied with how vg999 has handled your personal data or responded to your privacy request, you have the right to escalate your complaint. Please write to us in the first instance at [email protected] with the subject line "Privacy Complaint" so that we have the opportunity to resolve the matter directly. vg999 takes all privacy complaints seriously and will conduct a thorough internal review of your concern.