vaji 999 Privacy Policy

1. Information We Collect

vaji 999 collects personal information in several ways: directly from you when you register and use the platform, automatically through your interactions with the website, and occasionally from trusted third parties for identity verification and fraud prevention purposes. We collect only the information that is genuinely necessary for the purposes described in this policy.

1.1 Information You Provide Directly

When you register for a vaji 999 account, deposit funds, request a withdrawal, contact support, or participate in a promotion, you may provide the following categories of personal information:

• Identity data: Full legal name, date of birth, gender, and nationality.
• Contact data: Mobile phone number, email address, and residential address.
• Account credentials: Username and encrypted password.
• KYC documentation: National Identity Card (NID), passport, birth certificate, utility bills, or bank statements submitted for age and identity verification.
• Payment data: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account details, and transaction reference numbers. Full payment card numbers are never stored on our servers.
• Communications data: The content of messages and emails you send to our support team, including any attachments or screenshots provided in connection with a query or complaint.
• Responsible gaming data: Deposit limits, session time limits, self-exclusion requests, and any voluntary disclosures about gambling habits made during responsible gaming assessments.

1.2 Information Collected Automatically

When you visit or use the vaji 999 platform, certain technical information is collected automatically by our systems:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, games played, bet amounts, session duration, login timestamps, and click-path data.
• Location data: Approximate geographic location derived from your IP address, used solely to confirm that you are accessing the platform from Bangladesh and to detect potential fraud signals.
• Cookie and tracking data: Session identifiers, preference cookies, and analytics data collected via cookies and similar technologies. See Section 5 (Cookies) for full details.

1.3 Information from Third Parties

In limited circumstances, vaji 999 may receive personal information about you from trusted third-party sources:

• Payment processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and banking partners, used to reconcile deposits and withdrawals.
• Identity verification providers: Results from third-party KYC verification services used to confirm the authenticity of identity documents.
• Fraud prevention services: Risk scores and flagged patterns from fraud detection partners, used to protect the security of the platform and all players.

2. How We Use Your Data

vaji 999 processes your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below:

2.1 Marketing Communications

If you have consented to receive marketing communications during registration or at a later point, vaji 999 may send you information about promotions, bonuses, and new game releases via email or SMS. You may withdraw your marketing consent at any time by contacting support at [email protected] (plain text — not a clickable link). Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

2.2 Automated Decision-Making

vaji 999 uses automated systems to assess certain aspects of player activity, including fraud risk scoring and responsible gaming monitoring. Where an automated process results in a significant decision affecting your account — such as a withdrawal hold or account restriction — you have the right to request that a human member of our compliance team reviews that decision. Contact support to exercise this right.

3. Legal Basis for Processing

vaji 999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to create and maintain your account, process payments, and deliver the services you have requested. Without this processing, we cannot provide the vaji 999 platform to you.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, KYC requirements, and responsible gaming regulations. vaji 999 must retain certain records as required by law regardless of your preferences.
• Legitimate interests: Processing carried out in pursuit of vaji 999's legitimate business interests, including fraud prevention, platform security, and improving the quality of our services, where those interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily marketing communications. You may withdraw consent at any time without affecting previous processing.

4. Data Sharing & Third Parties

vaji 999 does not sell your personal data to any third party. We share personal data only in the specific circumstances described below, and only with parties who are bound by confidentiality obligations and data protection requirements consistent with this policy.

4.1 Service Providers

We share data with carefully selected third-party service providers who assist us in operating the platform. These providers act as data processors on our behalf and are contractually prohibited from using your data for any purpose other than providing the service for which they have been engaged. Categories of service provider include:

• Payment processing partners: bKash, Nagad, Rocket, Upay, and banking institutions handling deposit and withdrawal transactions.
• Identity and KYC verification services that validate the authenticity of documents submitted by players.
• Fraud detection and cybersecurity providers that monitor for suspicious activity on the platform.
• Cloud hosting and data storage providers that store platform data in secure server environments.
• Customer support software providers that facilitate communication between players and our support team.
• Game providers including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi, which may receive limited session data necessary to deliver their games on our platform.

4.2 Legal Disclosures

vaji 999 may disclose your personal data to law enforcement agencies, regulatory authorities, or judicial bodies where we are legally required to do so, or where disclosure is necessary to prevent, detect, or prosecute fraud, money laundering, or other criminal activity. We will notify you of any such disclosure where we are legally permitted to do so.

4.3 Business Transfers

In the event that vaji 999 undergoes a merger, acquisition, or sale of all or part of its business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address registered to your account before your data is subject to a materially different privacy policy.

4.4 What We Do Not Share

5. Cookies & Tracking Technologies

vaji 999 uses cookies, local storage, and similar tracking technologies to operate the platform effectively, remember your preferences, and maintain the security of your account session. A cookie is a small text file placed on your device by the website. You can control cookies through your browser settings, though disabling certain essential cookies may affect the functionality of the platform.

5.1 Types of Cookies We Use

5.2 Third-Party Cookies

Game providers integrated into the vaji 999 platform (such as Pragmatic Play, Evolution Gaming, and Spribe) may set their own cookies within the game iframe environment. These cookies are governed by the respective provider's privacy policies and are limited to technical functionality required to run their games. vaji 999 does not permit third-party advertising cookies on the platform.

5.3 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, block only third-party cookies, or clear cookies on browser exit. Blocking essential cookies will prevent you from logging in and using core platform features. Analytics and preference cookies can be disabled without affecting basic platform access.

6. Data Retention & Storage

vaji 999 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your active account relationship, and to comply with applicable legal obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your active account plus a minimum of 5 years after account closure, in line with anti-money laundering record-keeping obligations.
• KYC documents: Retained for a minimum of 5 years after the conclusion of your account relationship with vaji 999.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 3 years from the date of the last interaction in a given support thread.
• Analytics data: Retained in anonymised or aggregated form for up to 24 months; individual-level usage data is anonymised after 12 months of account inactivity.
• Marketing consent records: Retained until consent is withdrawn, plus a further 12 months as evidence of the consent lifecycle.

Where retention beyond these periods is required by law or court order, vaji 999 will comply with that requirement. Where data is no longer required, it is securely deleted or anonymised using industry-standard data destruction methods.

6.1 Data Storage Location

vaji 999's platform data is stored on secure servers. All data at rest is encrypted using AES-256 encryption. Access to production data is restricted to authorised personnel only, and all access events are logged for audit purposes.

7. Your Privacy Rights

As a player on the vaji 999 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] (plain text — not a clickable link). We will respond to all valid requests within 30 days.

• Right of access: You may request a copy of the personal data that vaji 999 holds about you, along with information about how it is processed. This is sometimes called a Subject Access Request (SAR).
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it.
• Right to erasure: In certain circumstances, you may request that vaji 999 delete your personal data — commonly known as the "right to be forgotten". This right is subject to our legal obligations to retain certain records (see Section 6).
• Right to restrict processing: You may ask vaji 999 to suspend certain processing activities while a complaint or dispute is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes at any time. Upon receipt of a valid objection to marketing, we will cease that processing immediately.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing already carried out on the basis of consent before withdrawal.

8. Data Security Measures

Protecting the personal data of our players is a core operational priority at vaji 999. We implement a layered security framework that encompasses technical, administrative, and physical controls designed to prevent unauthorised access, disclosure, alteration, or destruction of personal data.

8.1 Technical Controls

• SSL/TLS encryption for all data in transit between your browser and our platform servers.
• AES-256 encryption for all sensitive data stored at rest, including KYC documents and payment records.
• Bcrypt hashing for all account passwords — plain-text passwords are never stored.
• Firewall protection, intrusion detection systems (IDS), and distributed denial-of-service (DDoS) mitigation at the network layer.
• Regular automated vulnerability scans and periodic penetration testing of the platform.

8.2 Administrative Controls

• Role-based access control (RBAC) ensuring that employees can only access the personal data necessary for their specific role.
• All personnel with access to player data undergo background checks and sign data confidentiality agreements.
• Comprehensive data protection training delivered to all staff as part of onboarding and on an annual refresher basis.
• A documented incident response plan that is reviewed and tested at least annually.

8.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, vaji 999 will notify affected players via their registered email address without undue delay, and no later than 72 hours after becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures we have taken or propose to take to address it.

9. Children's Privacy

If vaji 999 becomes aware that personal data has been collected from a person under 18 years of age, that data will be deleted immediately and the associated account will be permanently closed. Any deposits made by an underage player will be returned to the original payment source and all winnings will be forfeited, as stated in our Terms & Conditions.

If you are a parent or guardian and believe that a minor has created a vaji 999 account using false information, please contact us immediately at [email protected] (plain text — not a clickable link). We will investigate and act within 24 hours of receiving a credible report.

10. Changes to This Privacy Policy

vaji 999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or the features and functionality of the platform. The "Last updated" date at the top of this document will be revised whenever changes are made.

Where changes are material — meaning they significantly affect your rights or the way we process your personal data — vaji 999 will provide advance notice via the email address registered to your account, at a minimum 14 days before the new version takes effect. For non-material changes (such as clarifications of existing practices or typographic corrections), the updated policy will take effect immediately upon publication.

Your continued use of the vaji 999 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the revised version. If you do not accept the revised terms, you must cease use of the platform and may request account closure in accordance with Section 8.1 of our Terms & Conditions.

11. Privacy Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vaji 999 processes your personal data, please contact our support team using the details below. All privacy-related communications are handled in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request – [Your Registered Email]"
• Subject line for privacy complaints: "Privacy Complaint – [Your Registered Email]"
• Support hours: 24 hours a day, 7 days a week, including all Bangladeshi public holidays.
• Response time: Within 1 hour for general queries (BST, UTC+6); within 30 days for formal data rights requests.
• Language: English only.

For related policies and player protection information, the following pages may also be helpful:

• Terms & Conditions — the full player agreement governing use of the vaji 999 platform.
• Responsible Gaming — tools and resources for safe, responsible play.
• FAQ — quick answers to common questions about accounts, payments, and security.