vf77 Privacy Policy

1. Data We Collect

When you interact with the vf77 Platform — whether by registering an account, making a deposit, placing a wager, or contacting our support team — vf77 collects certain personal data. We collect only the information that is genuinely necessary to deliver our services, comply with applicable legal obligations, and protect the security of the Platform and its users.

1.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, email address, Bangladeshi mobile number, and chosen account credentials (username and password).
• Identity verification documents: National Identity Card (NID), passport, or other government-issued photo ID submitted in response to a verification request.
• Address information: Residential address in Bangladesh, as required for account verification and fraud prevention purposes.
• Payment information: bKash account number, Nagad account number, Rocket account number, Upay details, or bank account information used to process deposits and withdrawals. Full payment credentials are handled by our payment processing partners and are not stored on vf77 servers in unencrypted form.
• Support communications: Any messages, emails, or chat transcripts exchanged with the vf77 customer support team, including their content and metadata.

1.2 Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser version, screen resolution, and device identifiers.
• Usage data: Pages visited, games accessed, betting history, session duration, click paths, and feature interactions on the Platform.
• Transaction logs: Timestamps, amounts, and reference numbers for all deposits, withdrawals, bets, and bonus activations.
• Geolocation data: Approximate geographic location derived from your IP address, used to confirm access from Bangladesh and to enforce jurisdiction-based access restrictions.
• Cookie and tracking data: Information collected through cookies and similar technologies as described in Section 4 of this Policy.

2. How We Use Your Data

vf77 processes your personal data on the basis of contract performance, legal obligation, legitimate business interests, and — where required — your explicit consent. The following table sets out the primary purposes for which we use your data and the corresponding legal basis for each.

Where vf77 processes your data on the basis of consent — for example, sending you promotional emails about upcoming BPL cricket betting markets or Eid bonus offers — you may withdraw that consent at any time by contacting [email protected] or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

3. Data Sharing & Third Parties

vf77 does not sell, rent, or trade your personal data. We share your data with third parties only in the specific, limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment Processing Partners

To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and participating Bangladeshi banks (including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank), vf77 shares the minimum necessary payment and identity information with our authorised payment processing partners. These partners operate under strict data processing agreements and are prohibited from using your data for any purpose other than completing the requested transaction.

3.2 Identity Verification Services

vf77 may engage specialist third-party identity verification providers to assist with KYC (Know Your Customer) and age verification checks. These providers receive only the data required to complete the verification check and are contractually bound to delete or return data once the check is complete.

3.3 Platform Technology and Analytics Providers

We work with technology providers who supply game platforms, live casino streaming infrastructure, and anonymised analytics tools. These providers may process aggregated, non-identifiable usage data. No personally identifiable information is shared with game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi beyond what is technically required to deliver a seamless gaming session.

3.4 Legal and Regulatory Disclosure

vf77 will disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies when required to do so by law, court order, or in connection with a legitimate investigation. We will notify you of such disclosure where we are legally permitted to do so.

4. Cookies & Tracking Technologies

vf77 uses cookies and similar client-side tracking technologies to operate the Platform, remember your preferences, maintain your session while you are logged in, and gather anonymised analytics that help us improve the overall experience for Bangladeshi players.

4.1 Cookie Categories Used by vf77

4.2 Managing Cookies

You may control or disable cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your vf77 account and using core Platform features. Disabling functional or analytics cookies will not prevent access to the Platform but may affect the quality of your personalised experience.

Most modern browsers — including those commonly used on Android and iOS devices in Bangladesh — provide clear options to view, block, or delete cookies. Consult your browser's help documentation for specific instructions.

5. Data Retention

vf77 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce our agreements.

• Active account data is retained for the lifetime of your account plus a minimum of 5 years after account closure, in accordance with anti-money laundering record-keeping requirements.
• Identity verification documents are retained for a minimum of 5 years following account closure or the completion of the relevant transaction, whichever is later.
• Transaction and betting records are retained for a minimum of 5 years to support financial auditing, dispute resolution, and AML compliance obligations.
• Support communications are retained for 3 years from the date of the last interaction on the relevant support thread.
• Analytics data is retained in anonymised form only, with no defined maximum retention period, as it cannot be linked back to an individual once anonymised.
• Marketing consent records are retained for as long as you hold an active account and for 1 year after account closure, to demonstrate compliance with consent obligations.

When a retention period expires, vf77 securely deletes or irreversibly anonymises the relevant data. Deletion requests from players are honoured promptly, except where retention is required to meet an ongoing legal obligation or to defend a pending legal claim.

6. Data Security Measures

vf77 implements a layered approach to data security, combining technical controls, operational procedures, and staff training to protect your personal information against unauthorised access, loss, alteration, or disclosure.

6.1 Technical Controls

• 256-bit SSL/TLS encryption for all data in transit between the player's device and vf77 servers.
• AES-256 encryption for sensitive data fields stored in our databases, including payment account references and identity document metadata.
• Multi-factor authentication (MFA) for all internal staff accounts with access to player data systems.
• Regular automated vulnerability scanning and annual third-party penetration testing of the Platform infrastructure.
• Intrusion detection systems (IDS) monitoring network traffic for anomalous patterns in real time.
• Strict role-based access controls ensuring that individual staff members can only access the minimum data required for their specific operational function.

6.2 Operational Procedures

• All vf77 staff who handle personal data receive mandatory data protection training upon joining and annually thereafter.
• A documented data breach response procedure is in place. In the event of a breach that is likely to result in risk to affected players, vf77 will notify impacted individuals without undue delay.
• Third-party data processors are assessed for security standards prior to engagement and are bound by data processing agreements that require them to maintain equivalent security controls.

7. Your Privacy Rights

As a vf77 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our Data Support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and provide a full response within 30 days.

7.1 Right of Access

You may request a copy of all personal data vf77 holds about you, along with information about how it is being used. This is sometimes referred to as a Subject Access Request (SAR). The first SAR per 12-month period is provided free of charge.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Most basic account data (name, phone number, email) can be updated directly within your account settings. For changes to identity documents or date of birth, please contact our support team.

7.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that vf77 cannot erase data that it is legally required to retain — for example, transaction records subject to AML retention rules.

7.4 Right to Restrict Processing

In certain circumstances — such as while the accuracy of data is being contested, or while a legitimate interest objection is being assessed — you may request that vf77 restricts the processing of your data to storage only.

7.5 Right to Object

You may object to the processing of your personal data where vf77 relies on legitimate interests as its legal basis. You also have an absolute right to object to your data being used for direct marketing purposes at any time, after which your data will no longer be used for that purpose.

8. Policy Updates & Contact

vf77 reviews this Privacy Policy periodically to ensure it remains accurate and reflects any changes to our data practices, the services we offer, or applicable legal requirements. The most recent version of the Policy is always available at vf77.app/privacy-policy. The "Last updated" date at the top of this page indicates when the current version was published.

Where a change to this Policy is material — meaning it significantly affects how we use your data or reduces your rights in a way that is not required by law — we will provide advance notice via your registered email address at least 14 days before the change takes effect. Your continued use of the vf77 Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

8.1 How to Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way vf77 handles your personal data, please contact us using the details below. All privacy-related enquiries are handled by our dedicated Data Support team.

• Email (plain text — not a link): [email protected]
• Subject line: "Privacy Enquiry" or "Data Rights Request"
• Response time: Within 5 business days for acknowledgement; full response within 30 days
• Operating hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)