Privacy Policy — How vd22 Collects, Uses, and Protects Your Data

vd22 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every player who registers and uses vd22.io. This Privacy Policy sets out in formal terms the categories of personal data we collect, the purposes for which we process that data, the legal bases on which we rely, the parties with whom we may share your data, the security measures we apply to protect it, the period for which we retain it, and the rights you hold as a data subject.

This Privacy Policy forms part of the overall agreement between you and vd22, alongside the Terms & Conditions published at /terms-conditions. Defined terms used in this Policy carry the same meanings as in the Terms & Conditions unless otherwise stated. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy shall take precedence.

vd22 is operated as a premium online betting and casino platform designed for adult players across Bangladesh. All data processing activities described in this Policy are carried out with Bangladesh-market operations in mind. All times referenced in relation to data processing activities are expressed in Bangladesh Standard Time (BST, UTC+6).

vd22 collects personal data in the categories described below. The data collected from any individual player will depend on the nature of that player's interaction with the Platform — a player who has only browsed the site will have a smaller data footprint than a fully registered and verified player who has made deposits and placed bets.

vd22 collects personal data through the following mechanisms:

• Direct submission: Data you actively provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or adjusting your responsible gaming settings.
• Automated collection: Technical data such as your IP address, device identifiers, browser characteristics, and session activity data are collected automatically each time you visit vd22.io, regardless of whether you are logged in.
• Cookies and similar technologies: vd22 uses cookies, local storage, and similar tracking technologies to maintain session state, remember preferences, analyse usage patterns, and detect fraudulent behaviour. See Section 7 for full details on our cookie usage.
• Payment processors: When you initiate a deposit or withdrawal through bKash, Nagad, Rocket, Upay, or our bank partners, those providers may share transaction confirmation data with vd22 to facilitate processing and reconciliation.
• Identity verification providers: Where vd22 uses third-party KYC verification services to validate your identity or age, those providers may share the result of their checks with vd22.
• Fraud detection services: Anti-fraud and AML screening providers may share risk-scoring data with vd22 to assist in identifying suspicious account activity.

vd22 processes your personal data only for the specific purposes listed below. We do not use personal data for purposes that are incompatible with those original purposes without first obtaining your explicit consent or identifying a new legal basis.

• Account creation and management: Processing your registration, maintaining your account, enabling login, and managing account security including password resets and two-factor authentication.
• Identity and age verification: Confirming that you meet the minimum age requirement of 21 years and that the identity information provided is accurate and genuine.
• Payment processing: Facilitating deposits from and withdrawals to your nominated payment method (bKash, Nagad, Rocket, bank account), verifying transaction authenticity, and maintaining accurate financial records.
• Game delivery and personalisation: Providing access to the games, betting markets, and Casino features available on the Platform; personalising your experience based on your activity history and preferences.
• Bonus and promotion management: Determining your eligibility for promotional offers, crediting bonus funds, monitoring wagering requirement compliance, and detecting bonus abuse.
• Customer support: Responding to your enquiries, resolving complaints, and providing responsible gaming assistance.
• Fraud prevention and AML compliance: Monitoring account activity for indicators of fraud, money laundering, or other prohibited conduct; conducting AML screening; and reporting suspicious activity to relevant authorities where required by law.
• Legal compliance and record-keeping: Meeting record-keeping obligations, responding to lawful requests from competent authorities, and maintaining audit trails for regulatory purposes.
• Platform security and integrity: Identifying and mitigating security threats, investigating account anomalies, and maintaining the technical stability of vd22.io.
• Marketing communications: Sending promotional emails and notifications about offers, new games, and platform updates — but only where you have given explicit consent and have not subsequently withdrawn it.
• Analytics and improvement: Analysing aggregated, anonymised usage patterns to improve the vd22 platform, optimise game offerings, and enhance the overall player experience.

vd22 relies on the following legal bases to process your personal data, depending on the specific processing activity:

• Contractual necessity: The majority of data processing carried out by vd22 is necessary to perform the contract between you and the Platform — specifically, to operate your account, process transactions, and deliver gaming services. Without this processing, vd22 could not provide the services described in the Terms & Conditions.
• Legal obligation: Certain processing activities — particularly identity verification, AML record-keeping, and responses to lawful authority requests — are required by applicable law. vd22 has no discretion to decline this processing.
• Legitimate interests: vd22 processes technical data, fraud signals, and security logs on the basis of its legitimate interest in protecting the integrity of the Platform and the security of all players. These interests have been assessed and found not to override the fundamental rights and interests of players.
• Consent: Marketing communications and the use of non-essential cookies are processed on the basis of your explicit consent. You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

vd22 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your personal data only as described below, and only to the extent strictly necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the financial data necessary to process your deposit or withdrawal transaction. These providers are independent data controllers and handle your payment data under their own privacy policies.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and bet data necessary to deliver their games and settle results. They do not receive your full identity or contact data.
• Identity verification providers: Third-party KYC services receive copies of your identity documents solely for the purpose of verifying your age and identity. They are bound by strict confidentiality and data protection obligations.
• Fraud prevention and AML services: vd22 uses third-party fraud detection and AML screening services that process certain account and transaction data to generate risk assessments. These providers act as data processors under vd22's instructions.
• Legal and regulatory authorities: vd22 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a lawful order, warrant, or legal obligation. We will notify you of such disclosure where permitted by law to do so.
• Business successors: In the event of a merger, acquisition, or sale of all or substantially all of vd22's assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified in advance of any such transfer.

vd22 uses cookies and similar tracking technologies (including local storage and session storage) on vd22.io. These technologies serve the purposes described below. By continuing to use vd22.io after being informed of our cookie usage, you consent to the use of cookies as described in this section.

• Strictly necessary cookies: These cookies are essential for the operation of vd22.io. They maintain your login session, protect against cross-site request forgery (CSRF), and enable core platform features. These cookies cannot be disabled without disabling the service itself.
• Functional cookies: These cookies remember your preferences — such as your display settings and responsible gaming configurations — so that you do not need to re-enter them on each visit.
• Analytics cookies: vd22 uses analytics technologies to understand aggregate patterns in how players navigate and use the Platform. This data is anonymised and used solely to improve the platform. No individual player is identified through analytics data.
• Fraud detection cookies: Certain cookies are used to assign a consistent device fingerprint to your browser session, enabling vd22's fraud detection systems to identify unusual login patterns or account-sharing behaviour.
• Marketing cookies: Where you have given consent, vd22 may use cookies to track your engagement with promotional content and to serve relevant offers within the Platform. These cookies are not used to track your activity on third-party websites.

You may manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the vd22 Platform. vd22 does not use third-party advertising networks or cross-site tracking technologies.

vd22 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulation. The retention periods set out below represent vd22's standard practice:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be linked to an individual. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for aggregate analytical purposes.

vd22 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, alteration, or disclosure. While no online platform can guarantee absolute security, vd22's security programme includes the following measures:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or device and vd22.io is encrypted using TLS. The connection is indicated by the padlock icon in your browser's address bar.
• Encryption at rest: Sensitive data stored on vd22's servers — including identity documents and financial account references — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within vd22's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular data protection training.
• Penetration testing and vulnerability management: vd22's technical infrastructure is subject to regular security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: vd22 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to players, vd22 will notify affected players promptly, with full details of the nature of the breach and the steps being taken to address it.
• Two-factor authentication: Players are encouraged to enable 2FA on their vd22 accounts via SMS to add an additional layer of protection beyond their password.

As an individual whose personal data is processed by vd22, you hold the following rights in relation to that data. You may exercise any of these rights at any time by submitting a written request to [email protected]. vd22 will acknowledge your request within 3 business days and respond in full within 30 calendar days, subject to the complexity of the request.

• Right of Access: You have the right to request a copy of the personal data vd22 holds about you, together with information about how it is processed. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: If any personal data vd22 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain data directly within your account settings.
• Right to Erasure: You have the right to request that vd22 delete your personal data. This right is not absolute — vd22 may be required to retain certain data for legal compliance purposes even after an erasure request. Where erasure is not possible in full, vd22 will explain why and delete what it legally can.
• Right to Restriction: You have the right to request that vd22 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of data held about you, pending vd22's verification.
• Right to Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The vd22 Platform is strictly intended for use by adults aged 21 and above. vd22 does not knowingly collect personal data from any person under the age of 21. If you are under 21, you must not register an account, access the Platform, or submit any personal data to vd22.

If vd22 discovers or has reasonable grounds to believe that an account is held by a person under the age of 21, that account will be immediately suspended pending identity and age verification. If the age breach is confirmed, the account will be permanently closed, all funds will be handled in accordance with applicable policies, and any personal data collected from the underage individual will be deleted as promptly as possible subject to any legal retention obligations.

The vd22 Platform incorporates games and services provided by third-party game studios and technology providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game hosted by one of these providers, your gameplay data is processed by that provider in accordance with their own privacy policies. vd22 has no control over the data practices of third-party game providers and is not responsible for their privacy policies or procedures.

Payment services used on vd22 — including bKash, Nagad, Rocket, Upay, and our partner banks — are independently operated services with their own terms of service and privacy policies. When you transact through these services, your financial data is handled partly by those providers. vd22 recommends reviewing the privacy policies of any payment provider you use.

vd22.io does not contain outbound links to third-party websites. Where third-party technology is embedded within the Platform (such as game iframes), that technology operates within the vd22 environment and does not redirect you to external sites. vd22 is not responsible for the privacy practices of any third-party service accessed independently outside of vd22.io.

vd22 reserves the right to update or amend this Privacy Policy at any time. Updates may be made to reflect changes in applicable law or regulation, changes in vd22's data processing practices, changes to the services offered on the Platform, or feedback from players and regulators. The effective date at the top of this document will be updated each time a material change is made.

Where an update constitutes a material change to the way vd22 processes your personal data, vd22 will notify registered players via email to the address on file, or via a prominent notice on vd22.io, at least 14 days before the updated Policy takes effect. Your continued use of the Platform after the effective date of any updated Policy constitutes your acknowledgement of and agreement to the updated terms.

Minor corrections — such as typographical fixes, formatting adjustments, or clarifications that do not alter the substance of how data is processed — may be made without prior notice. The version history of this Policy is available on request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way vd22 processes your personal data, please contact the vd22 data team using the details below. All privacy-related enquiries are handled by trained staff and will receive a response within one business day (Bangladesh Standard Time, UTC+6).

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week
• Response Language: English
• Response Time Target: Within 1 business day (BST, UTC+6)