vk98 Privacy Policy —
How We Handle Your Personal Data

1 Introduction & Scope

This Privacy Policy ("Policy") describes the practices of vk98 ("the Platform", "we", "us", "our") with respect to the collection, use, storage, sharing, and protection of personal information relating to individuals ("you", "the Player", "User") who access or use the services available at https://vk98.io ("the Site").

This Policy applies to all personal data collected through the Site, whether submitted during account registration, account verification, depositing funds, participating in betting or casino activities, communicating with our support team, or simply browsing the Site. It applies to players located in Bangladesh and wherever else the Site may be accessed.

By using the Site or registering an account with vk98, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Site immediately.

2 Information We Collect

vk98 collects personal information in the following categories, depending on how you interact with the Platform:

vk98 does not intentionally collect or process special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, unless specifically required for legal compliance purposes (for example, processing a self-exclusion request that involves a medical or problem gambling context).

3 How We Use Your Information

vk98 uses the personal data it collects for the following purposes:

• Account creation and management: To register your account, verify your identity, process deposits and withdrawals, and maintain accurate records of your activity on the Platform.
• Service delivery: To provide access to sports betting markets, casino games, live dealer tables, and all other features of the vk98 Platform as described on the Site.
• Identity and age verification (KYC): To confirm that you meet the minimum age requirement of 21 years and that the payment methods registered to your account are held in your own name.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, multiple account creation, and other prohibited activities that could harm the Platform or other players.
• Responsible gaming compliance: To administer deposit limits, cooling-off periods, and self-exclusion requests, and to identify patterns of play that may indicate problem gambling behaviour.
• Customer support: To respond to your inquiries, resolve account issues, and communicate important service updates.
• Legal and regulatory compliance: To fulfil obligations under applicable anti-money laundering (AML) laws, record-keeping requirements, and any legal process served on vk98 by competent authorities.
• Marketing communications (with consent only): To send you promotional offers, bonus notifications, and news about vk98 events and new games, where you have given explicit consent. You may withdraw this consent at any time.
• Platform improvement: To analyse aggregated usage patterns, diagnose technical issues, and develop new features for the benefit of all vk98 players.

4 Legal Basis for Processing

vk98 processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is used:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions that govern your account — including operating your account, processing transactions, and delivering the services you have requested.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out in pursuit of vk98's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your own data protection rights.
• Consent: Processing based on your explicit, freely given consent — specifically in relation to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing & Disclosure

vk98 does not sell or rent your personal data to third parties. We may share your information with the following categories of recipients, strictly as required to operate the Platform and comply with our legal obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners receive the minimum data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are independently responsible for the data they hold.
• Game providers: Third-party studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and Spribe may receive session and gameplay data required to render and operate their games. No identity data beyond a session token is passed to game providers.
• Identity verification services: Specialist KYC providers may receive copies of identity documents you submit for age and identity verification. These providers are contractually bound to process such data only for verification purposes.
• Legal and regulatory authorities: vk98 will disclose personal data to law enforcement agencies, regulators, courts, or other competent authorities where required to do so by applicable law or a valid legal order.
• Fraud prevention networks: Aggregated or anonymised risk signals may be shared with industry fraud prevention services to protect the Platform and its players from fraudulent activity.

Any third party that receives personal data from vk98 is required to implement appropriate security measures and to use that data only for the purposes specified by vk98. vk98 does not authorise third parties to use your personal data for their own independent marketing purposes.

6 Payment Data & Financial Information

When you make a deposit or withdrawal on vk98 using bKash, Nagad, Rocket, Upay, or a bank transfer, the financial transaction is processed directly by the relevant payment provider. vk98 does not store your full mobile financial service PIN, bank account login credentials, or card security codes on its servers.

vk98 retains a record of:

• The payment method type and masked account identifier (e.g., the last four digits of a mobile number associated with your bKash account).
• Transaction amounts (in Bangladeshi Taka, ৳), timestamps, and reference numbers.
• The outcome of each transaction (completed, pending, declined, or reversed).

This transactional record is retained for a minimum of five years from the date of the transaction, in accordance with financial record-keeping obligations applicable to platforms serving players in Bangladesh.

All financial data stored by vk98 is held on secured servers with restricted access, encrypted at rest using AES-256 encryption, and protected by role-based access controls that limit visibility to authorised personnel only.

7 Cookies & Tracking Technologies

vk98 uses cookies and similar tracking technologies to improve your experience on the Site, ensure the Platform functions correctly, and gather analytical data to guide our development priorities. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Site to function. They enable you to log in, maintain your session, and navigate between pages. These cookies cannot be disabled without affecting Site functionality.
• Functional cookies: These cookies remember your preferences, such as your preferred language setting (English), and your last selected game categories, so that the Platform can provide a more personalised experience during your session.
• Analytical cookies: vk98 uses first-party analytical cookies to measure Site traffic, understand which pages and features are most popular, and identify technical errors. The data collected is aggregated and does not identify individual users.
• Marketing cookies (consent required): If you have given consent, marketing cookies allow vk98 to present you with relevant promotional content based on your activity on the Site. You may withdraw this consent at any time through your browser settings or by contacting support.

You may configure your browser to block or delete cookies at any time. Note that disabling strictly necessary cookies will prevent you from logging in to your vk98 account. Most modern browsers provide cookie management controls in their settings or preferences menu.

8 Data Retention

vk98 retains personal data only for as long as is necessary for the purpose for which it was collected, subject to any longer retention periods required by law. The following retention periods apply as a general guide:

After the applicable retention period has elapsed, personal data is securely deleted or anonymised in accordance with vk98's internal data destruction procedures.

9 Your Rights as a Data Subject

As a player whose personal data is processed by vk98, you hold the following rights with respect to that data. To exercise any of these rights, please contact the vk98 support team at [email protected] with a clear description of your request. We will respond within 30 calendar days.

• Right of access: You may request a copy of all personal data vk98 holds about you, together with an explanation of how it is used and with whom it has been shared.
• Right to rectification: If any personal data vk98 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Many details can be updated directly within your account profile.
• Right to erasure: You may request that vk98 delete your personal data where it is no longer necessary for the purpose for which it was collected, and where no overriding legal obligation requires it to be retained. Note that we cannot delete data that we are legally required to hold.
• Right to restriction of processing: You may request that vk98 restrict the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to data portability: You may request a copy of the personal data you have provided to vk98 in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where vk98 relies on legitimate interests as its legal basis, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10 Data Security

vk98 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption on all data transmitted between your device and the vk98 servers, including during login, registration, and payment processing.
• AES-256 encryption at rest for stored personal and financial data on vk98 servers.
• Role-based access controls that restrict access to personal data to only those employees and contractors who require it to perform their job functions.
• Two-factor authentication (2FA) available for player accounts, providing an additional layer of protection beyond the standard username and password.
• Regular security assessments and penetration testing conducted to identify and remediate vulnerabilities in the Platform.
• Incident response procedures to detect, contain, and respond to any data security incidents in a timely manner, with affected players notified as required.

Despite these measures, no online platform can guarantee absolute security. vk98 encourages all players to use a strong, unique password for their account, to enable 2FA, and to contact support immediately at [email protected] if they suspect their account has been compromised.

11 Children & Underage Players

vk98 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes an age declaration step, and accounts are subject to age verification as part of the KYC process.

If vk98 discovers or is notified that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to:

• Suspend and permanently close the account concerned.
• Return any account balance to the payment source from which funds were deposited, after deducting any bonuses or promotional funds applied.
• Delete all personal data associated with the underage account, subject to any legal retention obligations.

If you are a parent or guardian and believe that your child may have registered an account on vk98, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

12 Changes to This Policy

vk98 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify registered players by email and by posting a prominent notice on the Site at least seven (7) days before the revised Policy takes effect.

The date on which the current version of the Policy became effective is shown at the top of this document. We encourage you to review this Policy periodically to stay informed about how vk98 protects your personal information.

Your continued use of the Site after the effective date of a revised Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must cease using the Site and may close your account by contacting support.

For any questions, concerns, or requests relating to this Privacy Policy or the way vk98 handles your personal data, please contact our support team directly. We are available 24 hours a day, 7 days a week, and are committed to resolving all privacy-related inquiries promptly and transparently.