vy666 Privacy Policy

vy666 ("we", "us", "our") is the operator of the online casino and sports betting platform accessible at vy666.io. We are the data controller responsible for the personal data of all registered players and website visitors who interact with our platform.

vy666 is a platform built specifically for the Bangladesh market. Our primary player base consists of residents of Bangladesh, including players located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. All data processing activities described in this policy are conducted with the interests of our Bangladeshi player community in mind.

For all privacy-related enquiries, please contact our dedicated data protection team at [email protected] with the subject line "Privacy Enquiry — [Your Account Username]".

vy666 collects personal data in several categories, depending on the nature of your interaction with the platform. The following table summarises the categories of data we collect and provides examples of the specific data points within each category.

vy666 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting customer support.
• Automated technical collection: Data collected automatically by our servers and analytics systems each time you visit or interact with the vy666.io platform, including IP addresses, device fingerprints, session duration, and navigation paths.
• Cookies and similar tracking technologies: Session cookies, persistent cookies, and similar technologies placed on your device when you visit vy666.io. Full details are provided in Section 7 of this policy.
• Third-party verification partners: Identity and age verification data returned by KYC service providers following document submission. These providers process data on our behalf under strict data processing agreements.
• Payment processors: Transaction confirmation data returned by our payment partners (bKash, Nagad, Rocket, Upay, and card processors) following a deposit or withdrawal instruction from you.
• Game providers: Game session and outcome data transmitted by third-party game studios (including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and Microgaming) via certified APIs. This data is used solely for account record-keeping, dispute resolution, and responsible gaming monitoring.

vy666 processes your personal data only when a valid legal basis exists for doing so. The legal bases we rely on are as follows:

• Contractual necessity: Processing is required to fulfil our obligations under the player account agreement — specifically, to create and manage your account, process deposits and withdrawals, provide access to games and betting markets, and deliver customer support.
• Legitimate interests: Processing is necessary for vy666's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, platform security, abuse detection, and business analytics that improve the player experience.
• Legal obligation: Processing is required to comply with applicable anti-money laundering (AML) regulations, age verification requirements, and record-keeping obligations. This includes retaining KYC documentation and transaction history for the periods prescribed by relevant financial regulations.
• Consent: Where no other legal basis applies, we will seek your explicit consent before processing. The clearest example is marketing communications — we will only send you promotional emails or messages if you have actively opted in. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

vy666 uses personal data for the following specific purposes. Each purpose is matched to the legal basis described in Section 4:

• Account creation and management: To register your account, verify your identity and age (21+ requirement), maintain account records, and process account closure requests.
• Service delivery: To provide access to casino games, sports betting markets, live dealer tables, and all other platform features for which you have registered.
• Payment processing: To process deposits from and withdrawals to your verified payment methods (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard) and to maintain accurate BDT balance records.
• Identity and fraud verification: To conduct KYC checks, detect duplicate accounts, identify and investigate suspicious account activity, and prevent money laundering in compliance with AML best practices.
• Responsible gaming: To monitor player activity for signs of problem gambling, enforce deposit limits and session time limits you have set, action self-exclusion requests, and provide appropriate intervention where our responsible gaming triggers are activated.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and maintain a record of support interactions for quality assurance and audit purposes.
• Platform security: To detect and prevent unauthorised account access, protect against automated bot activity, investigate security incidents, and maintain the integrity of our games and betting markets.
• Legal compliance: To retain records required by applicable regulations, respond to lawful requests from competent authorities, and enforce our Terms & Conditions where a breach has occurred.
• Marketing (with consent only): To send you promotional offers, bonus notifications, tournament announcements, and platform updates relevant to your gaming preferences — but only if you have opted in to receive such communications. You may opt out at any time by contacting [email protected].
• Platform improvement: To analyse aggregated and anonymised usage data to identify technical issues, improve game performance, refine the user interface, and develop new features that better serve our Bangladeshi player community.

vy666 does not sell, rent, or commercially exploit your personal data to any third party. We share personal data only in the following limited and necessary circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to process your deposit and withdrawal transactions. Each processor is bound by its own privacy policy and applicable financial data protection regulations.
• KYC and identity verification providers: Third-party identity verification services that process your submitted documents on our behalf under binding data processing agreements. These providers may not use your data for any purpose beyond fulfilling verification for vy666.
• Game studios: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and other certified game providers receive the minimum session data necessary to deliver and certify game outcomes. They are contractually prohibited from using this data for any independent commercial purpose.
• Fraud prevention and security services: Specialist third-party services that assist vy666 in detecting fraud, bot activity, and money laundering. Data shared with these services is pseudonymised where possible and strictly limited to the information needed for the specific security assessment.
• Legal and regulatory authorities: Competent law enforcement or regulatory bodies where vy666 is required to disclose data by law, court order, or other binding legal process. We will notify you of any such request to the extent permitted by law.
• Professional advisors: Legal counsel, auditors, and accountants who are bound by professional secrecy obligations, where disclosure is necessary for the provision of their professional services to vy666.

All third parties with whom vy666 shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the stated purpose under documented agreements.

vy666 uses cookies and similar tracking technologies on the vy666.io platform. A cookie is a small text file placed on your device by our web server when you visit the site. Cookies allow the platform to recognise your device on subsequent visits, maintain your session state, and improve platform performance.

The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication tokens (so you remain logged in while navigating the site), security tokens (to prevent cross-site request forgery), and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Enable enhanced functionality and personalisation — for example, remembering your preferred language settings, currency display preference (BDT), and responsible gaming limit configurations between sessions.
• Analytics cookies: Collect anonymised data about how players navigate the platform — which pages are visited most frequently, where sessions begin and end, and which features generate the most engagement. This data helps us improve the platform. Analytics data is aggregated and does not identify individual players.
• Security and fraud detection cookies: Used to identify and flag unusual access patterns, multiple account attempts from the same device, and bot activity that could compromise platform integrity.

Most web browsers are set to accept cookies by default. You may configure your browser to refuse cookies or to notify you before a cookie is placed. However, disabling strictly necessary cookies will prevent you from logging into your vy666 account and accessing platform services. Disabling functional or analytics cookies will not impair core platform access but may reduce the quality of your experience.

vy666 retains personal data for no longer than is necessary for the purpose for which it was collected, or for the duration required by applicable legal and regulatory obligations, whichever is longer. The following retention periods apply:

Upon expiry of the applicable retention period, data is either securely and permanently deleted from our systems or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.

vy666 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our core security infrastructure includes:

• Transport Layer Security (TLS 1.3): All data exchanged between your browser or device and our servers is encrypted in transit using TLS 1.3 with 256-bit cipher suites. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Data encryption at rest: Sensitive personal data stored in our databases is encrypted at rest using AES-256. Encryption keys are managed separately from the encrypted data and rotated on a scheduled basis.
• Access controls: Access to personal data is restricted to vy666 staff members who have a specific, documented need to access that data to perform their job function. Access rights are reviewed regularly and revoked immediately upon role change or employment termination.
• Two-factor authentication (2FA): All internal vy666 staff accounts with access to production systems are required to use 2FA. We also strongly recommend (and facilitate) 2FA on all player accounts.
• Intrusion detection and monitoring: Our infrastructure is monitored 24/7 by automated intrusion detection systems. Any anomalous access pattern triggers an immediate security alert for review by our security team.
• Penetration testing: vy666 commissions independent penetration testing of its platform on a scheduled basis. Findings are remediated within documented timeframes according to their severity rating.
• Data breach response: In the event of a confirmed personal data breach that presents a risk to your rights and freedoms, vy666 will notify affected players without undue delay and take all available measures to contain and remediate the breach.

As a registered player or website visitor, you hold the following rights with respect to your personal data held by vy666. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Account Username]". We will acknowledge your request within 5 working days and complete it within 30 calendar days.

• Right of Access: You may request a copy of all personal data we hold about you, together with information on how it is being used and who it has been shared with. We will provide this in a structured, commonly used, machine-readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections (e.g., a misspelled address), you may update these directly in your Account Settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. We will comply unless we are required to retain the data to fulfil a legal obligation (e.g., AML record-keeping) or to defend a legitimate legal claim. Where deletion is not possible, we will explain the specific reason.
• Right to Restrict Processing: You may request that we pause all processing of your personal data while a rectification or erasure request is being assessed, or if you have objected to processing (see below). During a restriction, we will continue to store your data but will not actively use it.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a portable format so that you can transfer it to another service provider.
• Right to Object: You may object to processing of your personal data that is based on vy666's legitimate interests. We will cease that specific processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based solely on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

vy666 will never charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case we will notify you in advance before applying any charge.

vy666 is an online gambling platform strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and accounts found to belong to individuals under 21 will be immediately suspended and all funds returned to the payment source.

If you are a parent or guardian and believe that a minor in your care has registered an account on vy666.io or submitted personal data to the platform, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and close the account within 48 hours of a confirmed report, and will securely delete all associated personal data to the extent permitted by our legal retention obligations.

vy666 operates server infrastructure and engages service partners that may be located outside of Bangladesh. Where personal data is transferred to a jurisdiction outside your country of residence, vy666 takes the following steps to ensure your data remains protected to a standard equivalent to that described in this Privacy Policy:

• Contractual safeguards: All third-party data processors who receive personal data from vy666 — regardless of their location — are required to sign data processing agreements that impose obligations equivalent to those described in this policy.
• Encryption in transit: All international data transfers are conducted over encrypted channels (TLS 1.3 minimum) so that data cannot be intercepted during transmission across network boundaries.
• Minimisation: Where data must be transferred internationally, vy666 ensures that only the minimum data necessary for the specific processing purpose is transferred. Full player records are not transferred unless specifically required.
• Adequacy assessment: Before engaging any service provider whose processing occurs outside Bangladesh, vy666 conducts a data transfer impact assessment to evaluate the legal framework of the destination jurisdiction and confirm that adequate protections are in place.

By using the vy666 platform, you acknowledge that your personal data may be processed outside Bangladesh in accordance with the safeguards described above. If you have concerns about a specific international transfer, please contact us at [email protected].

The vy666.io platform may contain references to third-party game studios, payment providers, and sporting event organisers. While vy666 takes care to reference only reputable and well-established organisations, we have no control over the privacy practices of third-party websites or services that may be linked to or from our platform.

This Privacy Policy applies solely to personal data collected and processed by vy666 in connection with your use of the vy666.io platform. It does not apply to any third-party website or service, even if a link to that service appears on our platform. We strongly encourage you to review the privacy policy of any third-party service before submitting personal data to it.

vy666 accepts no responsibility or liability for the privacy practices, content, or data handling of any third-party website or service.

vy666 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal and regulatory obligations. All updates will be handled as follows:

• Minor updates (e.g., clarifications of existing practices, corrections of typographical errors, updates to contact details) will be reflected on this page with a revised "Last Updated" date. No individual notification will be sent for minor updates.
• Material updates (e.g., new categories of data being collected, new purposes for processing, changes to your data rights, or changes to how we share data with third parties) will be communicated to all registered players by email at least 14 days before the updated policy takes effect. The updated policy will also be prominently flagged on the vy666.io platform during the notice period.

Your continued use of the vy666 platform after the effective date of a material update constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with a material update, you have the right to close your account and request deletion of your personal data in accordance with Section 10 of this policy before the update takes effect.

We recommend bookmarking this page and reviewing it periodically, even in the absence of a material-update notification, to remain informed about how your data is being protected.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data vy666 holds about you, please contact our data protection team using the details below. We are committed to addressing all privacy enquiries promptly, professionally, and confidentially.

• Email: [email protected] — subject line: "Privacy Enquiry — [Your Account Username]"
• WhatsApp: +880 1700 000000
• Live Chat: Available 24/7 directly on the vy666.io platform (Bangladesh Standard Time, UTC+6)
• Response Time: Email privacy enquiries are acknowledged within 5 working days and resolved within 30 calendar days. Live chat responses average under 2 minutes.

For formal data rights requests (access, rectification, erasure, portability, objection), please submit your request in writing via email to the address above, clearly stating the nature of your request, your account username, and the contact email address associated with your account. This allows us to verify your identity before processing the request.