ve99 Privacy Policy — How We Handle Your Data

1 Who We Are

ve99 is an online casino and sports betting platform operating at ve99.biz, offering casino games, live dealer tables, slot machines, and sports wagering services to eligible players in Bangladesh. In the context of this Privacy Policy, ve99, "we", "us", and "our" refer to the operator of the ve99 platform and all associated services.

As the data controller, ve99 is responsible for determining the purposes and means by which personal data collected through this platform is processed. If you have any questions about how we handle your data, you may contact us at any time using the details provided in Section 14 of this document.

2 Data We Collect

ve99 collects personal data in several categories depending on your interaction with the platform. The categories of data we collect include, but are not limited to, the following:

We do not intentionally collect special category data (such as health, religious, or political information) unless it is volunteered by you in a support context and is directly relevant to your query. Such data is handled with heightened care and is not retained beyond the resolution of the relevant matter.

3 How We Collect Data

ve99 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to surveys.
• Automated technologies: Technical and behavioural data collected automatically when you use the ve99 platform, including through cookies, server logs, and session tracking tools (see Section 7).
• Third-party sources: Identity verification and fraud-screening data obtained from KYC service providers, payment processors (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard), and fraud detection partners — used solely to verify your identity and protect the platform's integrity.
• Game providers: Aggregated session and gameplay data provided by game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe, used to resolve disputes and monitor for irregular activity.

4 How We Use Your Data

ve99 uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and administer your ve99 account, including processing deposits and withdrawals in BDT and managing your account balance.
• Identity verification (KYC): To verify your identity, age (21+), and source of funds in compliance with applicable anti-money laundering and responsible gaming obligations.
• Service delivery: To provide access to casino games, sports betting markets, live dealer tables, promotions, and bonuses consistent with your account eligibility.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, and other prohibited conduct that could harm players or the platform.
• Responsible gaming: To monitor gaming behaviour and identify patterns that may indicate problem gambling, and to facilitate self-exclusion, deposit limits, and cooling-off periods where requested.
• Customer support: To respond to your queries, process complaints, and maintain records of communications for quality assurance purposes.
• Legal compliance: To fulfil our obligations under applicable laws and to respond to lawful requests from regulatory or law enforcement authorities.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may opt out at any time.
• Platform improvement: To analyse aggregate usage data, test new features, and improve the overall performance and user experience of the ve99 platform.

5 Legal Basis for Processing

ve99 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the player agreement you enter when registering an account, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, responsible gaming requirements, and responses to lawful regulatory requests.
• Legitimate interests: Processing carried out to pursue ve99's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your explicit consent, such as receiving direct marketing communications. You may withdraw consent at any time by contacting support or adjusting your account notification preferences.

6 Data Sharing & Third Parties

ve99 does not sell or rent personal data to third parties. We share data only where strictly necessary for the purposes described in this policy, with the following categories of recipients:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transaction data to process deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial regulations.
• KYC and identity verification providers: Third-party identity verification services that assist in confirming player age, identity, and source of funds as required by responsible gaming and anti-money laundering obligations.
• Game providers and software suppliers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive technical session data necessary to deliver gameplay and resolve disputes.
• Fraud prevention and cybersecurity partners: Specialist providers engaged to detect, investigate, and prevent fraud, account takeover, and other security threats to the platform.
• Legal and regulatory authorities: Law enforcement agencies, courts, or regulatory bodies where ve99 is legally required to disclose personal data in response to a lawful order or statutory obligation.
• Professional advisers: Lawyers, auditors, and accountants who are bound by professional confidentiality obligations and who assist in the operation of the ve99 business.

All third-party data processors engaged by ve99 are required to process data strictly in accordance with our instructions and to maintain appropriate technical and organisational security measures. We do not permit them to use player data for their own independent purposes.

7 Cookies & Tracking Technologies

The ve99 platform uses cookies and similar technologies (including web beacons, pixel tags, and local storage) to enhance your experience, maintain session continuity, and collect analytical data about platform usage. The categories of cookies we use are as follows:

• Essential cookies: Required for the basic functioning of the platform, including maintaining your login session, remembering your game preferences, and securing transactions. These cannot be disabled without affecting platform functionality.
• Analytical cookies: Used to collect aggregated, anonymised data about how players navigate the platform — such as which pages are visited most frequently — to help us improve platform design and performance.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to deliver a more personalised experience.
• Marketing cookies: Used, where you have consented, to track your engagement with ve99 promotional content and to measure the effectiveness of our marketing campaigns.

You can control and manage cookies through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the ve99 platform. For more information on managing cookies in your specific browser, refer to your browser provider's help documentation.

8 Data Retention

ve99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following general retention principles apply:

• Active account data: Retained for the full duration of your account's active status, plus an additional period as required by applicable anti-money laundering, tax, and gaming regulations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with standard financial record-keeping requirements.
• KYC and identity verification documents: Retained for the period specified by applicable regulatory requirements, typically a minimum of five (5) years following account closure.
• Support communications: Retained for up to three (3) years following the resolution of the relevant query or complaint, to support quality assurance and dispute resolution.
• Marketing preferences: Retained until you withdraw consent or opt out of marketing communications, at which point your preference is recorded and honoured immediately.

When personal data is no longer required for any lawful retention purpose, ve99 will securely delete or anonymise it using industry-standard data destruction methods.

9 Data Security

ve99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ve99 servers.
• Encrypted storage for sensitive data at rest, including financial records and identity documents.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access specific categories of personal data.
• Regular internal and third-party security audits and vulnerability assessments of platform infrastructure.
• Multi-factor authentication requirements for internal staff accessing player data systems.
• Incident response procedures for detecting, reporting, and managing data security breaches in a timely and transparent manner.

10 International Data Transfers

Some of ve99's third-party service providers — including game studios, payment processors, and cloud infrastructure providers — may process personal data in countries outside Bangladesh. Where such transfers occur, ve99 takes appropriate steps to ensure that your personal data is afforded a level of protection consistent with the standards described in this Privacy Policy.

These steps may include entering into data processing agreements with third parties that incorporate appropriate data protection clauses, selecting providers that maintain internationally recognised security certifications, and conducting due diligence on the data protection practices of all material third-party processors before engagement.

11 Your Rights & How to Exercise Them

As a ve99 player, you hold the following rights in relation to your personal data, as summarised in the "Your Rights" section above and detailed here:

• Right of access: You may request a copy of all personal data ve99 holds about you. Requests will be fulfilled within a reasonable timeframe, typically within 30 calendar days.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you may request that it be corrected. Where possible, corrections will be applied within 15 business days.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. This right is subject to exceptions where ve99 is required to retain data to comply with a legal obligation or to establish, exercise, or defend legal claims.
• Right to restriction of processing: You may request that ve99 restrict certain processing activities while a query or objection is under review.
• Right to data portability: Where technically feasible and where processing is based on consent or contract, you may request a copy of your personal data in a structured, machine-readable format.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though ve99 may be able to demonstrate compelling grounds to continue processing.
• Right to withdraw consent: Where processing is based solely on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact ve99 in writing at [email protected] with the subject line "Data Rights Request", your full registered name, and a description of the right you wish to exercise. We may need to verify your identity before processing your request. All requests are handled free of charge for the first request in any 12-month period.

12 Children & Underage Players

The ve99 platform is strictly intended for adults aged 21 and above. ve99 does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not use the ve99 platform or provide any personal data to us.

If ve99 becomes aware that personal data has been collected from a person under the age of 21 — whether through the KYC process, a parental report, or any other means — that account will be immediately suspended, all associated data will be promptly deleted to the extent permitted by law, and any deposits held in the account will be returned via the original payment method where possible.

If you believe that a person under 21 has registered a ve99 account, please contact us immediately at [email protected] so we can investigate and take appropriate action.

13 Changes to This Policy

ve99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where changes are material — meaning they significantly affect the way we collect, use, or share your personal data — ve99 will notify registered players via the email address associated with their account or through a prominent notice on the platform prior to the changes taking effect. Continued use of the ve99 platform after the revised policy is published constitutes your acceptance of the updated terms.

We recommend reviewing this Privacy Policy periodically. Archived versions of previous policies are available on request by contacting our support team.

14 Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ve99 handles your personal data, please contact us through the following channel:

• Email: [email protected]
• Subject Line: Privacy Policy Enquiry / Data Rights Request
• Live Chat: Available 24/7 directly through the ve99 platform
• Response Time: ve99 will acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and will aim to provide a substantive response within 14 calendar days.