vs333 Privacy Policy

Welcome to the vs333 Privacy Policy. vs333 operates an online betting and casino platform at https://vs333.io, offering services including sports betting, live casino games, slots, fishing games, and virtual casino products to registered adult members based in Bangladesh and other eligible markets.

This Privacy Policy describes how vs333 ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "User", "Member") who access or use the Platform. It also explains the rights available to you in connection with your personal data and how to exercise those rights.

By registering an account on the vs333 Platform or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should not use the Platform.

This policy should be read alongside the vs333 Terms & Conditions, which govern your use of the Platform as a whole, and the Responsible Gaming policy, which describes the tools and protections in place to support safe gambling behaviour.

For the purposes of this Privacy Policy, vs333 acts as the data controller in respect of personal data collected through the Platform. As data controller, vs333 determines the purposes for which personal data is collected and the means by which it is processed.

All enquiries relating to data protection, including subject access requests and requests for data deletion, should be directed to the vs333 data protection contact using the details provided in Section 15 of this policy. vs333 aims to acknowledge all data-related requests within 3 business days and to fulfil them within 30 days.

Where vs333 engages third-party service providers to process personal data on its behalf, those providers act as data processors under binding contractual agreements that require them to process data only on vs333's documented instructions and to maintain appropriate security measures.

vs333 collects the following categories of personal data, depending on how you interact with the Platform:

vs333 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where age verification processes require confirmation of date of birth as part of the mandatory 21+ age restriction check.

vs333 collects personal data through the following channels and mechanisms:

• Direct interactions: Data you provide when registering an account, completing the KYC process, making a deposit or withdrawal, placing a bet, contacting customer support, or responding to a survey or promotion.
• Automated technologies: Technical and usage data collected automatically as you browse and interact with the Platform, using cookies, server logs, and similar tracking technologies (see Section 8 for full details).
• Third-party payment providers: Confirmation data from payment processors such as bKash, Nagad, Rocket, and Upay when a deposit or withdrawal is initiated. vs333 does not receive or store full payment credentials — only transaction references and verification statuses.
• Identity verification providers: Where vs333 uses a third-party KYC or identity verification service, that provider may return a verification status and basic identity confirmation to vs333. Raw document images are processed by the KYC provider under their own data protection obligations.
• Analytics providers: Aggregated and anonymised usage statistics from analytics services that help vs333 understand platform performance and user behaviour patterns at a population level.
• Fraud detection services: Risk signals from fraud prevention partners that help vs333 identify suspicious account activity, multiple account registration attempts, and potential money laundering indicators.

vs333 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and vs333 — including account creation, bet settlement, deposit and withdrawal processing, and customer support. Without this processing, vs333 cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, age verification requirements, and record-keeping mandates. This includes KYC verification and the retention of transaction records for audit purposes.
• Legitimate interests: Processing that is necessary for vs333's legitimate business interests, where those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security monitoring, analytics to improve the Platform, and responsible gambling monitoring.
• Consent: Where vs333 relies on your consent for a specific processing activity (such as sending optional promotional communications), you may withdraw that consent at any time by contacting support or adjusting your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

vs333 uses the personal data we collect for the following specific purposes:

• Account management: Creating and maintaining your vs333 account, verifying your identity and age (21+ requirement), processing login authentication, and managing account security.
• Service delivery: Processing your bets, game sessions, deposits, and withdrawals; calculating winnings; applying bonuses; and settling accounts accurately.
• Compliance and KYC: Fulfilling our anti-money laundering obligations, verifying the source of funds where required, screening against sanctions lists, and maintaining records as required by applicable law.
• Responsible gambling: Monitoring betting patterns to identify indicators of problem gambling behaviour; enforcing deposit limits, cooling-off periods, and self-exclusion requests; contacting users who show signs of gambling harm.
• Fraud prevention and security: Detecting and preventing fraudulent transactions, multiple account registrations, bonus abuse, and technical attacks on the Platform.
• Customer support: Responding to your enquiries, complaints, and support requests; maintaining records of your communications with our team for quality assurance and dispute resolution purposes.
• Platform improvement: Analysing aggregated usage data to understand how members interact with the Platform, identify technical issues, and make informed product development decisions.
• Marketing communications (with consent): Sending you promotional offers, bonus notifications, and product updates by email or in-platform notification, where you have opted in to receive such communications. You may opt out at any time.
• Legal proceedings: Using personal data as evidence in connection with legal claims, regulatory investigations, or enforcement actions where vs333 is a party.

vs333 does not sell, rent, or trade your personal data to third parties for marketing, advertising, or commercial purposes under any circumstances. Data is shared with external parties only in the limited circumstances described below:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations.
• Identity verification providers: KYC and age verification partners receive identity document data to perform verification checks on our behalf. They are contractually prohibited from using this data for any purpose other than verification.
• Fraud prevention services: Fraud detection and risk management partners receive technical and transactional signals (such as IP address, device fingerprint, and transaction amounts) to assess fraud risk. No unnecessary personal details are shared.
• Analytics providers: Aggregated and anonymised usage data may be shared with analytics platforms to help us understand Platform performance. No individually identifiable data is included in these analytics transfers.
• IT infrastructure providers: Cloud hosting, database, and content delivery network (CDN) providers who store and transmit platform data on our behalf under binding data processing agreements.
• Legal and regulatory authorities: vs333 may disclose personal data to competent authorities, regulators, courts, or law enforcement agencies where required by law, court order, or regulatory direction. vs333 will notify affected users where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of the vs333 business, personal data held by vs333 may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer and any material change to data processing arrangements.

All third parties who process personal data on behalf of vs333 are required to maintain appropriate technical and organisational security measures and to process data only in accordance with vs333's written instructions.

vs333 uses cookies and similar technologies (including local storage, session storage, and pixel tags) to operate the Platform effectively and to improve your experience. Below is a summary of the cookie categories in use:

vs333 does not use behavioural advertising cookies or cross-site tracking cookies. You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, including the ability to remain logged in.

vs333 retains personal data for no longer than is necessary for the purposes described in this Privacy Policy, or as required by applicable law. The following retention guidelines apply:

• Active account data: Retained for the lifetime of your account plus a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years following account closure or the completion of a regulated transaction, in accordance with AML obligations.
• Financial transaction records: Retained for a minimum of 5 years following the date of the transaction.
• Customer support communications: Retained for 3 years following the resolution of the support case, for quality assurance and dispute resolution purposes.
• Technical and usage data (logs): Retained for up to 12 months, after which they are anonymised or deleted.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter to evidence the consent record.

When personal data is no longer required, vs333 securely deletes it from active systems. Data held in backup systems is purged in line with our standard backup rotation schedule. Anonymised or aggregated data that cannot identify any individual may be retained indefinitely for statistical and analytical purposes.

You have the following rights in relation to the personal data vs333 holds about you. To exercise any of these rights, please contact us using the details in Section 15. vs333 will respond within 30 days and will not charge a fee for reasonable requests.

• Right of Access: You have the right to request a copy of the personal data vs333 holds about you, along with information about how and why it is being processed.
• Right to Rectification: If any personal data vs333 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): You may request that vs333 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. This right is subject to vs333's legal obligations to retain certain records (see Section 9).
• Right to Restriction of Processing: You may request that vs333 restrict the processing of your personal data in certain circumstances, such as while a correction request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling. vs333 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.

vs333 implements robust technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, and unauthorised access. Our security framework includes:

• Encryption in transit: All data transmitted between your device and vs333 infrastructure is encrypted using 256-bit TLS (Transport Layer Security). This applies to all Platform pages, API calls, and payment flows.
• Encryption at rest: Sensitive personal data stored on vs333 servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within vs333 is restricted on a strict need-to-know basis. Internal staff access to member data is logged, monitored, and subject to regular audit.
• Password security: User passwords are never stored in plain text. They are stored as salted cryptographic hashes using industry-standard hashing algorithms.
• Two-factor authentication: vs333 supports two-factor authentication (2FA) for all member accounts, providing an additional layer of protection against unauthorised access.
• Penetration testing: vs333's platform infrastructure undergoes regular security assessments and penetration tests to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response: In the event of a personal data breach, vs333 has an established incident response plan. Affected users and relevant authorities will be notified in accordance with applicable legal requirements.

While vs333 takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security. You also have a responsibility to maintain the security of your account credentials. See Section 5 of the Terms & Conditions for your obligations in this regard.

The vs333 Platform does not contain links to external third-party websites. All navigation within the Platform remains within the vs333 domain. However, in circumstances where a third-party service (such as a payment provider gateway page) is accessed as part of a transaction, you will be clearly informed before leaving the vs333 environment.

Third-party websites and services linked to or accessed in connection with a vs333 transaction are governed by their own privacy policies. vs333 has no control over and accepts no responsibility for the privacy practices or content of those third-party environments. We encourage you to review the privacy policy of any third-party service before providing your personal data to them.

The vs333 Platform is strictly restricted to individuals who are 21 years of age or older. vs333 does not knowingly collect personal data from individuals under the age of 21. Registration of an account constitutes a declaration that you meet this age requirement.

vs333 operates mandatory age verification checks as part of the KYC process. Where vs333 discovers or has reasonable grounds to suspect that personal data has been submitted by or on behalf of a person under 21 years of age, the account will be immediately suspended, all associated data will be deleted or rendered inaccessible, and any deposited funds will be returned to the original payment method.

Parents and guardians are strongly encouraged to use parental control software and to monitor the online activities of minors to prevent access to online gambling platforms including vs333.

vs333 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, vs333 will update the "Last Updated" date at the top of this page and, where practicable, notify registered members by email or via an in-platform notification.

We encourage you to review this Privacy Policy periodically to stay informed about how vs333 handles your personal data. Your continued use of the Platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the updated terms.

If any proposed change would materially reduce your rights or increase the scope of data processing in a way that requires fresh consent, vs333 will seek your explicit consent before applying the updated policy to your existing account data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vs333 processes your personal data, please contact our data protection team using the details below. All correspondence will be handled in strict confidence.

• Email: [email protected]
• Response time: vs333 aims to acknowledge all privacy-related enquiries within 3 business days and to provide a substantive response within 30 days of receipt.
• Subject line: Please include "Privacy Request" or "Data Subject Request" in your subject line to ensure your enquiry is routed to the appropriate team member.
• Identity verification: For the security of all members, vs333 may require you to verify your identity before processing a subject access request or data deletion request. This is to prevent unauthorised access to or deletion of another person's data.

vs333 is committed to resolving privacy concerns directly. If, however, you feel that your concern has not been addressed to your satisfaction, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.