vd678 Privacy Policy

1. Introduction

vd678 ("vd678", "we", "us", "our") operates the online betting and casino platform accessible at https://vd678.io (the "Platform"). As part of operating the Platform, we collect and process personal data relating to our registered users ("Players", "you") and visitors to our website. This Privacy Policy sets out in full the basis on which any personal data we collect from you, or that you provide to us, will be processed.

We are committed to protecting your privacy and ensuring that your personal data is handled with the care, transparency, and security it deserves. This policy has been drafted to reflect recognised international data protection principles, including data minimisation, purpose limitation, storage limitation, and data subject rights, adapted to the context of our Bangladesh-facing Platform.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the agreement between you and vd678.

2. Data We Collect

2.1 Registration Data. When you open a vd678 account, we collect the information you provide during the registration process, including:

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Residential address in Bangladesh (city, district, full postal address)
• Mobile phone number
• Email address
• Chosen username and encrypted password

2.2 Identity Verification (KYC) Data. To comply with our know-your-customer obligations and to process withdrawal requests, we may collect:

• Scanned copy or photograph of a government-issued photo ID (National Identity Card or passport)
• Proof of address document (utility bill, bank statement, or equivalent dated within 90 days)
• Selfie or live facial image for identity matching purposes, where required
• Source of funds documentation where transaction volumes trigger enhanced due diligence thresholds

2.3 Financial Transaction Data. Each deposit and withdrawal transaction on your account generates a record that includes the transaction amount, currency (BDT), payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction reference number, timestamp, and outcome. We do not store full card numbers; card data is tokenised by the relevant payment processor.

2.4 Gameplay & Betting Data. We record all betting, wagering, and game activity carried out through your account, including bet amounts, game titles, outcomes, and session timestamps. This data is used for account management, dispute resolution, bonus settlement, and responsible gaming monitoring.

2.5 Technical & Device Data. When you access the Platform, our servers automatically log certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and session duration. This data is collected via server logs and first-party analytics tools.

2.6 Communications Data. If you contact our support team by email, live chat, or WhatsApp, we retain a record of the correspondence, including the content of your messages and any attachments you provide, for a period of three years from the date of the final communication in each support thread.

3. How We Use Your Data

The table below summarises the primary purposes for which vd678 processes your personal data:

We do not use your personal data for automated individual decision-making or profiling that produces legal effects or similarly significant impacts without human oversight.

4. Legal Basis for Processing

4.1 Contract Performance. The majority of our data processing is necessary to fulfil our contractual obligations to you under the vd678 Terms & Conditions — specifically, to operate your account, process your transactions, and deliver gaming services.

4.2 Legal Obligation. Certain processing activities — particularly KYC identity verification and anti-money laundering record-keeping — are carried out because they are required under applicable laws and regulations governing financial services and online gaming platforms.

4.3 Legitimate Interests. We process technical and gameplay data to prevent fraud, detect security threats, improve the Platform, and fulfil our responsible gaming obligations. These activities are carried out on the basis of our legitimate interests, which we have assessed to be proportionate and not overridden by your privacy interests.

4.4 Consent. Where we send you promotional communications (including bonus offers, seasonal promotions, or tournament notifications), we do so only with your prior consent, which you may withdraw at any time by updating your communication preferences in your account settings or by contacting [email protected].

5. Cookies & Tracking Technologies

5.1 vd678 uses cookies and similar browser-based technologies to operate the Platform. Cookies are small text files placed on your device by your browser. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a visit, and security cookies that help detect fraudulent access attempts. These cookies cannot be disabled without impairing Platform functionality.
• Preference Cookies: Used to remember your Platform settings, such as your preferred language, display settings, and notification preferences, so you do not need to re-enter them on each visit.
• Analytics Cookies: We use first-party analytics tools to collect anonymised statistics about how visitors use vd678.io — including which pages are visited most often, session lengths, and navigation paths. This data is aggregated and cannot be used to identify individual users.

5.2 vd678 does not use third-party advertising cookies, tracking pixels from social media platforms, or behavioural retargeting technologies. Your browsing activity on vd678.io is not shared with advertising networks.

5.3 You may manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the Platform.

6. Data Sharing & Disclosure

vd678 does not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• Payment Processors: To process your deposits and withdrawals, we share necessary transaction data with our payment partners including bKash, Nagad, Rocket, Upay, and card processing networks. These partners are contractually obligated to protect your data and use it only for payment processing purposes.
• Identity Verification Providers: To fulfil KYC obligations, we may share identity documents with third-party verification services. These providers operate under strict confidentiality agreements and process data solely to confirm the authenticity of the documents you submit.
• IT Infrastructure & Hosting Providers: The Platform is hosted on secure server infrastructure provided by contracted technology partners. These partners have access to data only to the extent necessary to maintain server operations and are bound by data processing agreements.
• Legal & Regulatory Disclosure: We may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where we are legally required to do so, including in response to a valid court order, subpoena, or regulatory investigation.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the vd678 business, player data may be transferred to the acquiring entity as part of that transaction. We will notify affected players prior to any such transfer and will ensure the acquiring entity is bound by privacy obligations no less protective than those in this policy.

7. International Data Transfers

7.1 vd678 operates primarily from its Bangladesh-focused server infrastructure. However, some of our third-party service providers — including payment processors and identity verification partners — may process data on servers located outside Bangladesh.

7.2 Where data is transferred to a third country, vd678 ensures that appropriate safeguards are in place, including contractual data protection clauses, to ensure that your personal data receives a level of protection consistent with the principles set out in this Privacy Policy.

7.3 By using the vd678 Platform, you acknowledge and consent to the possibility that your data may be processed in jurisdictions outside Bangladesh where data protection laws may differ from those applicable in your home country.

8. Data Retention

8.1 We retain your personal data for as long as your vd678 account remains active, and for a further period after account closure as required to meet our legal, regulatory, and compliance obligations. Specific retention periods applicable to key data categories are as follows:

• Account and registration data: Retained for 5 years following permanent account closure.
• KYC and identity verification documents: Retained for 5 years following account closure, in line with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for 5 years from the date of each transaction.
• Gameplay and betting records: Retained for 3 years from the date of each session or bet.
• Customer support communications: Retained for 3 years from the date of the final communication in each support thread.
• Technical and device logs: Retained for 12 months from the date of collection, after which they are deleted or fully anonymised.

8.2 Once the applicable retention period expires, data is securely deleted using industry-standard data destruction methods, or irreversibly anonymised so that it can no longer be linked to any individual.

9. Your Data Rights

As a vd678 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified data subject requests within 10 business days.

10. Security Measures

10.1 vd678 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Technical and organisational measures in place include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers
• AES-256 encryption for sensitive data stored at rest on our servers
• One-way cryptographic hashing (bcrypt) for all stored passwords — plain-text passwords are never retained
• Multi-factor authentication for all internal staff access to production systems
• Role-based access controls limiting data access to personnel with a documented operational need
• Automated intrusion detection and 24/7 security monitoring of server infrastructure
• Regular independent security audits and vulnerability assessments
• SMS-based two-factor authentication for player logins from new or unrecognised devices

10.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, vd678 will notify affected players without undue delay once the breach has been confirmed and assessed.

11. Children & Minors

The vd678 Platform is strictly for adults aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has registered an account or provided personal data to us, we will immediately close the account, delete all associated data, and refund any real-money deposits. If you believe a minor has accessed the Platform using your payment method or personal details, please contact [email protected] immediately.

12. Third-Party Links

The vd678 Platform does not contain links to third-party websites. In the event that third-party game content is accessed through the Platform (such as games provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), those game interfaces are delivered via secure embedded technology. vd678 is not responsible for the privacy practices of game content providers, and we recommend that you review the privacy policies of any third-party software providers whose games you access.

13. Policy Amendments

13.1 vd678 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform functionality. When material changes are made, we will publish the updated policy on this page with a revised "Last Updated" date and, where practicable, notify registered players via email or in-platform notification.

13.2 Your continued use of the vd678 Platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how we protect your data.

14. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which vd678 handles your personal data, please contact our Data Support team using the details below. All communications should be in English.

• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +880 1700 000000
• Live Chat: Available 24/7 on vd678.io
• Response Time: Within 10 business days of receiving a verified data subject request
• Operating Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint through the appropriate dispute resolution process as outlined in our Terms & Conditions.