vk8a Privacy Policy

1. Data Controller Information

For the purposes of this Privacy Policy, the data controller responsible for the personal information collected through the vk8a platform (vk8a.app) is the vk8a operating entity. When we refer to "vk8a", "we", "us", or "our" in this document, we mean the entity responsible for processing your personal data in connection with the services described herein.

If you have any questions about how your personal data is handled, or if you wish to exercise any of the data rights described in Section 9 of this policy, you may contact our dedicated privacy team using the contact details provided in Section 12.

---

2. Information We Collect

vk8a collects personal information from players through several channels: directly when you register an account or interact with the platform, automatically when you browse or play, and from third-party providers such as payment processors and identity verification services. The categories of data we collect are described below.

2.1 Registration and Account Data

When you create a vk8a account, we collect the following information:

• Full legal name
• Date of birth (to verify you are aged 18 or above)
• Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other locations in Bangladesh)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (BDT / Bangladeshi Taka)

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer obligations, we may request and retain copies of:

• Government-issued identity documents (National Identity Card, passport, or driving licence)
• Proof of address (utility bill, bank statement, or similar document dated within three months)
• Selfie photographs submitted alongside identity documents for facial verification purposes
• Source of funds documentation where required by our compliance team

2.3 Financial Transaction Data

When you make deposits or withdrawals on the vk8a platform, we record transaction data including the amount (in BDT), the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), the transaction reference number, the date and time of the transaction, and the resulting account balance. We do not store full card numbers or mobile wallet PINs on our servers.

2.4 Gaming Activity Data

We maintain records of your activity on the vk8a platform, including the games you play, the bets you place, the outcomes of those bets, the bonus offers you claim and the wagering progress against those bonuses, and any session duration data. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical and Device Data

When you access the vk8a platform, our systems automatically collect certain technical data, including your IP address, browser type and version, operating system, device type (mobile or desktop), referring URL, pages visited within the platform, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.

2.6 Communications Data

We retain records of communications between you and the vk8a support team, including live chat transcripts, email correspondence, and any formal complaints submitted through the platform. These records are kept for quality assurance, dispute resolution, and regulatory reporting purposes.

---

3. How We Use Your Information

vk8a uses the personal data we collect for the following purposes:

Purpose	Description
Account Management	Creating, maintaining, and securing your vk8a player account, including processing deposits and withdrawals and managing your bonus entitlements.
Identity Verification	Verifying your identity and age (18+) as required by our responsible gaming obligations and anti-money laundering procedures.
Service Delivery	Enabling you to access and play casino games, place sports bets, and use all features of the vk8a platform.
Fraud and Security	Detecting, investigating, and preventing fraudulent transactions, bonus abuse, account takeovers, money laundering, and other prohibited conduct.
Responsible Gaming	Monitoring gaming patterns to identify players who may be showing signs of problem gambling and offering appropriate tools or interventions.
Customer Support	Responding to your support requests, processing complaints, and resolving disputes relating to game outcomes or account activity.
Marketing Communications	Sending you promotional offers, bonus notifications, and platform updates by email or SMS — only where you have given consent and subject to your opt-out rights.
Legal Compliance	Fulfilling our obligations under applicable law, including anti-money laundering regulations, responding to lawful requests from regulatory or law enforcement authorities.
Platform Improvement	Analysing aggregated, anonymised usage data to improve the performance, design, and game selection of the vk8a platform.

---

4. Legal Basis for Processing

vk8a processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing that is necessary to perform our obligations under the Terms & Conditions you entered into when registering a vk8a account. This covers account creation, transaction processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in pursuit of vk8a's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming analysis — provided those interests do not override your fundamental rights.
• Consent: Where we rely on your consent as the legal basis for processing — most commonly for sending marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

---

5. Sharing Your Information

vk8a does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

5.1 Payment Service Providers

To process deposits and withdrawals, we share relevant transaction data with payment processors including bKash, Nagad (Telecom), Rocket (Dutch-Bangla Bank), Upay (UCB), and international card networks (Visa, Mastercard). These providers receive only the information they require to process the specific transaction and are contractually prohibited from using your data for any other purpose.

5.2 Identity Verification Partners

vk8a works with licensed identity verification and KYC service providers to confirm the identity and age of registered players. These partners may process copies of identity documents and facial verification data on our behalf under strict data processing agreements.

5.3 Game Technology Providers

The games available on the vk8a platform are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe, among others. Your gaming activity data (bets placed, game sessions, outcomes) may be processed by these providers' systems as part of game delivery. These providers operate under their own data processing standards and our contractual data protection requirements.

5.4 Legal and Regulatory Authorities

We may be required to disclose your personal data to law enforcement agencies, regulatory bodies, or courts in response to a lawful request, court order, or legal obligation. vk8a will notify you of any such disclosure where permitted by law to do so.

5.5 Business Transfers

In the event that vk8a undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

---

6. Cookies and Tracking Technologies

The vk8a platform uses cookies — small text files stored on your device — and similar tracking technologies to provide a functional, secure, and personalised experience. The categories of cookies we use are as follows:

Cookie Category	Purpose	Retention
Strictly Necessary	Essential for the platform to function. These cookies maintain your login session, remember your account preferences, and enable secure transactions. They cannot be disabled without impairing platform functionality.	Session / up to 30 days
Performance & Analytics	Help us understand how players navigate the vk8a platform by collecting anonymised usage statistics. This data is used to identify and fix performance issues and improve the user experience.	Up to 12 months
Functional	Enable enhanced functionality such as remembering your preferred language, currency display setting, and game lobby filters between sessions.	Up to 12 months
Marketing & Targeting	Used only with your consent to deliver relevant promotional content and to measure the effectiveness of marketing campaigns. These cookies do not share data with third-party advertising networks.	Up to 90 days

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies will affect the functionality of your vk8a account. Please refer to your browser's help documentation for instructions on managing cookie settings.

---

7. Data Retention

vk8a retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data we hold:

• Account and Registration Data: Retained for the duration of your active account, plus a minimum of five years after account closure to satisfy anti-money laundering record-keeping requirements.
• KYC and Identity Verification Documents: Retained for a minimum of five years from the date of verification, or for the period required by applicable law, whichever is longer.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction in accordance with financial record-keeping obligations.
• Gaming Activity Logs: Retained for a minimum of three years for responsible gaming monitoring, dispute resolution, and regulatory compliance purposes.
• Support and Communications Records: Retained for two years from the date of the most recent communication in a given support thread, or for as long as needed to resolve an open dispute.
• Marketing Consent Records: Retained for the duration of your active account or until you withdraw consent, whichever comes first, plus a reasonable period thereafter to demonstrate compliance.
• Technical and Device Data (logs): Typically retained for 90 days for security and fraud detection purposes, after which logs are anonymised or deleted.

When a retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

---

8. Data Security

vk8a employs a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and the vk8a platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Encrypted Data Storage: Sensitive data at rest — including identity documents and payment method references — is stored in encrypted form on access-controlled infrastructure.
• Access Controls: Access to personal data is restricted to vk8a personnel and authorised third-party processors who require it to perform their specific functions. All access is logged and subject to regular review.
• Two-Factor Authentication: vk8a offers two-factor authentication (2FA) for player accounts. We strongly recommend enabling 2FA to add an additional layer of security to your login process.
• Fraud Detection Systems: Automated monitoring systems analyse account activity in real time to identify and flag suspicious behaviour, including unauthorised login attempts and unusual transaction patterns.
• Regular Security Audits: The vk8a platform undergoes periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

While vk8a takes all reasonable steps to protect your data, no digital platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to affect your rights, vk8a will notify affected players as soon as practicable and take all appropriate steps to contain and remediate the breach.

---

9. Your Data Rights

As a registered player on the vk8a platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the vk8a privacy team using the details in Section 12.

• Right of Access: You have the right to request a copy of the personal data vk8a holds about you, along with information about how it is being processed. We will provide this information within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your account settings dashboard.
• Right to Erasure: You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected. Note that this right is subject to our legal obligations; we may be required to retain certain data even after an erasure request.
• Right to Restrict Processing: You have the right to request that we limit how we use your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

vk8a will respond to all valid data rights requests within 30 days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it. We do not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive.

---

10. Children's Privacy

The vk8a platform is strictly intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. Age verification is carried out as part of the account registration and KYC process to ensure that all registered players meet the minimum age requirement.

If vk8a becomes aware that personal data has been collected from a person under the age of 18, that account will be suspended immediately, the data will be deleted as soon as practicable, and any funds held in the account will be handled in accordance with our Terms & Conditions.

---

11. Changes to This Policy

vk8a reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players by sending an update to the email address on file at least 7 days before the revised policy takes effect.

The updated Privacy Policy will always be available at vk8a.app/privacy-policy. The "Last updated" date at the top of this document will reflect the date of the most recent revision. We encourage you to review this page periodically to stay informed about how we protect your personal data.

Your continued use of the vk8a platform after a revised Privacy Policy has taken effect constitutes your acceptance of the changes. If you do not agree with the revised policy, you should stop using the platform and may request account closure in accordance with the Terms & Conditions.

---

12. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vk8a handles your personal data, please get in touch with our privacy team using the following contact details:

• Email: [email protected] (please include "Privacy Request" in the subject line)
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days.
• Postal: Please contact us via email in the first instance; our support team will provide a postal address if required for formal legal correspondence.

For general account support, game enquiries, or payment assistance, please use the standard support channel at [email protected] and our team will route your query to the appropriate department.