vc33 Privacy Policy

01Introduction

vc33 ("we", "us", "our") operates the online betting and casino platform available at https://vc33.io (the "Platform"). We are committed to protecting the privacy of all players who access and use the Platform. This Privacy Policy sets out in clear, formal terms how vc33 collects, uses, discloses, stores, and protects your personal data.

This Privacy Policy applies to all users of the vc33 platform, including registered account holders, visitors who browse the platform without registering, and any individual who contacts vc33 support. It covers data collected via the website at https://vc33.io and any associated digital touchpoints operated by vc33.

vc33 operates its platform with primary focus on the Bangladesh market. This Policy is written in English and is governed by applicable data protection principles. References to "personal data" in this Policy mean any information that identifies or could reasonably be used to identify a living individual, including name, date of birth, address, mobile number, email address, payment account details, IP address, and device identifiers.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overarching agreement between you and vc33.

02Data We Collect

2.1 Registration Data

When you create a vc33 account, we collect the following information that you provide directly:

• Full legal name — as it appears on your government-issued identity document.
• Date of birth — to verify that you meet the minimum age requirement of 21 years.
• Residential address — including district, city, and postal code within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Mobile phone number — your primary contact number, which may also serve as your account identifier for mobile banking transactions via bKash, Nagad, or Rocket.
• Email address — used for account communications, security alerts, and transaction confirmations.
• Username and password — your chosen account credentials. Passwords are stored in hashed form and are never stored in plain text.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request and collect the following documentary evidence:

• National Identity Card (NID) number and a scanned copy or photograph of the document.
• Passport details where an NID is not available or where additional verification is required.
• Proof of address — such as a utility bill, bank statement, or mobile banking statement showing your registered address.
• Selfie photograph for biometric identity comparison against submitted documents.

2.3 Financial & Transaction Data

We collect records of all financial transactions conducted on your vc33 account, including:

• Deposit amounts, dates, times, and the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, or card).
• Withdrawal requests, amounts, and destination payment method details.
• Mobile banking account numbers or bank account details associated with your registered payment methods.
• Transaction reference numbers issued by payment providers.
• All wagering activity — bets placed, stakes, odds, game titles, outcomes, and winnings — associated with your account.

2.4 Technical & Usage Data

When you access and use the vc33 platform, our systems automatically collect certain technical data, including:

• IP address and approximate geographic location derived from IP data.
• Device type, operating system, browser type, and browser version.
• Pages visited, features accessed, duration of sessions, and click-path data.
• Login timestamps and session durations.
• Error logs and performance data used for platform diagnostics and improvement.

2.5 Communications Data

If you contact vc33 support or engage with us through any communication channel, we retain records of those communications, including the content of messages sent to [email protected], the date and time of contact, and the nature of any query or complaint raised. This data is used to manage your request, maintain quality assurance, and meet any legal record-keeping obligations.

03How We Use Your Data

vc33 uses your personal data only for defined, lawful purposes. The table below summarises the primary purposes for which each category of data is used:

04Legal Basis for Processing

vc33 processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual necessity: Processing required to create and manage your vc33 account, process your transactions, and provide the betting and gaming services you have requested. Without this data, vc33 cannot deliver its services to you.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) requirements, identity verification (KYC) obligations, fraud prevention mandates, and any lawful orders from regulatory or law enforcement authorities.
• Legitimate interests: Processing conducted to protect the security and integrity of the platform, prevent fraud and prohibited conduct, conduct aggregate analytics to improve platform performance, and manage responsible gaming obligations — where these interests are not overridden by your data protection rights.
• Consent: Where we send you marketing communications or use non-essential cookies, we rely on your consent as the legal basis. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

05Data Sharing & Third Parties

5.1 Who We Share Data With

vc33 does not sell or rent your personal data. We share personal data with third parties only in the following limited, defined circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals. Each payment provider operates under their own privacy policy and data security standards.
• Identity verification providers: Third-party KYC and identity verification service providers may process your registration and documentary data solely for the purpose of verifying your identity in accordance with our AML obligations.
• Game studios: Certified game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi receive only the minimum session data required to deliver game content (such as a session token and account identifier). They do not receive your full registration or financial profile.
• Legal and regulatory authorities: We may disclose personal data to relevant authorities where we are legally compelled to do so — for example, in response to a lawful court order, regulatory investigation, or anti-money laundering reporting obligation.
• Fraud prevention and security services: Aggregate or anonymised data may be shared with fraud detection platforms to identify and prevent prohibited conduct on the platform.

5.2 Data Processor Agreements

All third parties who process personal data on behalf of vc33 are required to do so under data processor agreements that bind them to process data only for the specified purpose, to maintain appropriate technical and organisational security measures, and to delete or return data upon termination of the processing relationship.

06Data Retention

vc33 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

• Active account data: Retained for the duration of your account being open and active on the vc33 platform.
• Closed account data: Following account closure, registration and transaction data is retained for a minimum of 5 years to satisfy anti-money laundering record-keeping requirements and to resolve any disputes that may arise following closure.
• KYC documentation: Retained for a minimum of 5 years from the date of the last transaction or account closure, whichever is later, in compliance with AML obligations.
• Support communications: Retained for 2 years from the date of the communication unless the subject matter requires longer retention for legal or compliance purposes.
• Technical and usage data: Retained in aggregate, anonymised form for up to 24 months for platform analytics purposes. Individual-level technical logs are retained for a maximum of 12 months.
• Marketing consent records: Retained for the duration of your consent and for 1 year after withdrawal of consent as an audit record.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes as it can no longer be used to identify any individual.

07Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and remember certain information about your preferences and session state. vc33 uses cookies and similar technologies (such as local storage and session storage) to operate the platform effectively and to understand how it is used.

7.2 Categories of Cookies We Use

7.3 Third-Party Advertising Cookies

7.4 Managing Cookies

You can manage or disable cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your vc33 account or using core platform functions. Disabling functional or analytics cookies will not affect your ability to access and use the platform but may result in a less personalised experience.

08Data Security

vc33 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data in transit between your device and vc33 servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser address bar confirms that your connection is secure.
• Password Hashing: Account passwords are stored using a strong cryptographic hashing algorithm. vc33 staff cannot view your plain-text password under any circumstances.
• Access Controls: Access to personal data within vc33's internal systems is restricted on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion Detection: vc33 employs automated monitoring systems to detect and respond to suspicious access patterns, potential intrusions, and unusual activity that may indicate a security incident.
• Regular Security Reviews: vc33 conducts periodic security assessments to identify and remediate vulnerabilities in its platform infrastructure.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, vc33 will notify affected players without undue delay and take immediate remedial action to contain the breach.

You also have a role in keeping your account secure. You must maintain the confidentiality of your login credentials and must not share your username or password with any third party. If you suspect your account has been compromised, contact vc33 support immediately at [email protected].

09Your Rights Over Your Data

As a vc33 player whose personal data we hold and process, you are entitled to exercise the following rights:

• Right of Access: You may request a copy of the personal data vc33 holds about you at any time. We will provide this in a structured, commonly used, machine-readable format where technically feasible.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You can update basic account details directly in your account settings or by contacting support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. We will comply to the extent permissible under applicable law. Note that certain data may be retained to meet anti-money laundering record-keeping requirements or to resolve outstanding disputes even after an erasure request.
• Right to Restriction of Processing: You may request that vc33 restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of the data, pending resolution.
• Right to Data Portability: You may request that we provide your personal data to you in a portable format for transfer to another service provider, where technically feasible and where the processing is based on your consent or a contract.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring purposes, unless vc33 can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications or optional analytics cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing conducted before the withdrawal.

10Children & Minors

Parents and guardians who believe that a minor may have registered on vc33 using false age information should contact [email protected] immediately with relevant details so that the account can be investigated and closed. vc33 takes underage gambling extremely seriously and cooperates fully with responsible gaming organisations operating in the Bangladesh market.

11International Data Transfers

vc33 operates its platform with primary focus on the Bangladesh market. Some of our third-party service providers — including certain game studios and technology infrastructure providers — may process data in jurisdictions outside Bangladesh. Where personal data is transferred internationally, vc33 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards for international data transfers may include contractual obligations imposed on the receiving party via data processor agreements, binding corporate rules, or other recognised transfer mechanisms. vc33 does not transfer data to jurisdictions that do not provide an adequate level of data protection without ensuring that appropriate contractual safeguards are in place.

12Third-Party Links

The vc33 platform may contain references to third-party payment providers or game studios. These third parties operate their own websites and services under their own privacy policies, which are entirely independent of this Privacy Policy. vc33 is not responsible for the data practices of any third-party service, and we strongly recommend that you review the privacy policy of any third-party service you choose to use in connection with your vc33 account.

vc33 does not endorse, control, or assume responsibility for the content, privacy practices, or data security standards of any third-party website or service. Your interactions with third-party services — including payment gateways such as bKash, Nagad, and Rocket — are governed solely by those third parties' respective terms and privacy policies.

13Policy Amendments

vc33 reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing practices, introduction of new platform features, or refinements to our data security measures. The "last updated" date at the top of this Policy will be revised whenever a material change is made.

Where a change is material — meaning it significantly affects your rights or the way we process your personal data — vc33 will notify registered players via email or via an in-platform notification prior to the change taking effect. Your continued use of the vc33 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to remain informed about how vc33 protects your personal information. Archived versions of this Policy are available upon request by contacting [email protected].

14Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how vc33 has handled your personal data, please contact our support team using the details below. All data-related enquiries are handled confidentially and with priority.