vk8 Privacy Policy

1 Who We Are

vk8 operates the online casino and sports betting platform accessible at https://vk8.cam (the "Platform"). In the context of this Privacy Policy, references to "vk8", "we", "us", or "our" refer to the operator of this Platform. References to "you", "your", or "the user" refer to any individual who accesses, registers on, or interacts with the vk8 Platform in any capacity.

vk8 serves users primarily located in Bangladesh, with platform infrastructure and services designed to meet the needs of Bangladeshi players. Our support team operates on Bangladesh Standard Time (BST, UTC+6) and can be reached at the contact details set out in Clause 16 of this policy.

vk8 acts as the data controller in respect of all personal data collected through the Platform, meaning we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to carry out data processing on our behalf, those parties act as data processors under our instruction.

2 Data We Collect

vk8 collects several categories of personal data in the course of providing and improving the Platform. The categories and specific data points we collect are described in the table below:

vk8 does not intentionally collect special category data (such as health information, political opinions, or biometric data) unless explicitly required to comply with a responsible gaming obligation — for example, where a user voluntarily discloses a gambling disorder in connection with a self-exclusion request. Such data is handled with the highest level of care and is never used for commercial purposes.

3 How We Collect Your Data

vk8 collects personal data through the following channels:

• Direct interactions: Data you provide when you register an account, complete the KYC identity verification process, make a deposit or withdrawal, contact our support team, or respond to a promotion or survey.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, via cookies, server logs, and similar tracking technologies (see Clause 7 for full details).
• Third-party sources: Identity verification data from KYC service providers; fraud-risk signals from payment processors such as bKash, Nagad, and Visa/Mastercard; and publicly available information used for due-diligence purposes in compliance with anti-money-laundering obligations.

In all cases, vk8 collects only the minimum data necessary to fulfil the stated purpose. You are not required to provide optional data fields, though doing so may enhance your user experience or enable certain features of the Platform.

4 Legal Basis for Processing

vk8 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing that is required to fulfil the contract between you and vk8, including account registration, identity verification, payment processing, and the provision of gaming services.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money-laundering (AML) obligations, know-your-customer (KYC) requirements, and tax reporting.
• Legitimate interests: Processing carried out for the legitimate business interests of vk8 where those interests are not overridden by your privacy rights. This includes fraud prevention, platform security, service improvement, and responsible gaming monitoring.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily in the context of direct marketing communications and certain optional platform features. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 How We Use Your Data

The personal data collected by vk8 is used for the following specific purposes:

• Creating, maintaining, and managing your vk8 account, including processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks.
• Verifying your identity and age (18+ requirement) in accordance with our KYC obligations.
• Detecting and preventing fraudulent activity, including multi-accounting, collusion, money laundering, and unauthorised account access.
• Personalising your experience on the Platform, including surfacing relevant game recommendations and promotions based on your usage patterns.
• Monitoring your gaming behaviour to identify potential problem gambling indicators and to enable responsible gaming interventions where appropriate.
• Processing bonus claims, tournament entries, and promotional rewards.
• Communicating with you regarding account status, transaction confirmations, security alerts, and policy updates.
• Sending you promotional materials and offers where you have provided consent to receive marketing communications.
• Improving the technical performance, content quality, and user experience of the Platform through anonymised analytics.
• Maintaining accurate records for legal, audit, and compliance purposes.

6 Sharing Your Data

vk8 does not sell, rent, or trade your personal data to third parties. We may share your data with trusted third parties only in the following circumstances and only to the extent necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banking institutions require transaction data to facilitate deposits and withdrawals. These parties are bound by their own privacy obligations and may not use your data beyond the scope of payment processing.
• Identity verification providers: Third-party KYC service providers who assist in verifying your identity and age as required by our compliance obligations.
• Game content providers: Where you play games supplied by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), the relevant provider may receive technical session data necessary to deliver the game. Game providers do not receive your full personal profile.
• IT and infrastructure providers: Cloud hosting, cybersecurity, and customer support platform vendors who process data on our behalf under binding data processing agreements.
• Legal and regulatory authorities: Where vk8 is required by law, court order, or competent authority to disclose personal data, we will comply with such requirements. Where permitted, we will notify you of such disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of vk8's business, user data may be transferred to the acquiring entity. You will be notified of such a transfer and your rights in respect of your data will be preserved.

7 Cookies & Tracking Technologies

vk8 uses cookies and similar tracking technologies (including web beacons and local storage objects) to operate and improve the Platform. The types of cookies we use are as follows:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences, such as your preferred language, game display settings, and notification choices. These enhance your experience but are not essential.
• Analytics cookies: Used to collect anonymised data about how users navigate the Platform, which pages are most visited, and where users encounter errors. This data is used exclusively to improve the Platform.
• Marketing cookies: Set only where you have provided explicit consent. These enable vk8 to deliver personalised promotional content based on your interests and gaming activity.

You can manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect the performance or availability of some Platform features. Note that strictly necessary cookies cannot be refused as they are integral to secure platform operation.

8 Data Retention

vk8 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, or audit obligations. Our standard retention periods are as follows:

Once a retention period has expired, personal data is either securely deleted using industry-standard methods or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.

9 Data Security

vk8 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include:

• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their job functions.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity professionals.
• Multi-factor authentication enforced for all internal systems that store or process personal data.
• 24/7 intrusion detection and monitoring systems with automated alerts for anomalous activity.
• Regular staff training on data protection obligations and phishing awareness.
• A documented incident response plan to ensure prompt action in the event of a data breach, including user notification within a reasonable timeframe where the breach poses a risk to your rights or interests.

While vk8 takes all reasonable and appropriate measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

10 International Data Transfers

vk8 primarily serves users in Bangladesh and processes the majority of personal data within infrastructure located in or near the South and Southeast Asia region. However, some of our third-party service providers — including cloud infrastructure, game content providers, and cybersecurity vendors — may be located in other jurisdictions.

Where personal data is transferred outside Bangladesh, vk8 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections provided under this Privacy Policy. These safeguards include:

• Contractual clauses requiring recipients to process data in accordance with applicable data protection principles.
• Transferring data only to jurisdictions that maintain adequate data protection standards or to recipients who have committed to equivalent protections.
• Where required, obtaining your explicit consent for the transfer.

You may request details of the safeguards applied to any specific international data transfer by contacting us using the details in Clause 16.

11 Your Rights

As a vk8 user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details provided in Clause 16. We will respond to all verified requests within 30 days:

• Right of Access: You have the right to request a copy of the personal data that vk8 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by vk8 be corrected or completed without undue delay.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing is unlawful. This right is subject to our legal obligations to retain certain data (see Clause 8).
• Right to Restriction: You have the right to request that vk8 restricts the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

12 Children's Privacy

vk8 employs age verification controls during the account registration process and conducts KYC checks that include date-of-birth verification. Any account found to be held by a person under 18 years of age will be suspended immediately and any balance will be returned to the verified payment method of the account holder's parent or guardian upon verification of their identity.

If you are a parent or guardian and believe that your child has created an account on vk8 or provided personal data to us, please contact us immediately at [email protected] so that we can take the necessary corrective action.

13 Third-Party Links

The vk8 Platform may contain references to game providers, payment partners, and other services whose products are integrated into the platform. While vk8 takes care to work only with reputable third-party providers, we do not control the privacy practices of these external entities and are not responsible for their data handling policies.

Each third-party provider operates under its own privacy policy. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of vk8. This includes mobile financial service providers such as bKash and Nagad, as well as game studios whose titles are available on the Platform.

14 Marketing Communications

Where you have given your consent during registration or through your account settings, vk8 may send you promotional communications about new games, upcoming tournaments, seasonal bonus offers (such as Eid promotions or Pohela Boishakh specials), and platform updates. These communications may be delivered by email or SMS to the contact details registered on your account.

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email from vk8.
• Updating your communication preferences in your account dashboard under the "Notifications" section.
• Contacting the vk8 support team directly at [email protected] with a request to be removed from marketing lists.

Opting out of marketing communications does not affect your receipt of transactional messages, such as deposit confirmations, withdrawal notifications, security alerts, and account verification emails. These operational communications are necessary for the safe operation of your account and cannot be disabled.

15 Updates to This Privacy Policy

vk8 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or the services we offer. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

Where changes to this policy are material — meaning they significantly affect how we collect, use, or share your personal data — vk8 will notify registered users by email and by displaying a prominent notice on the Platform. In such cases, we may request that you re-confirm your acceptance of the revised policy before continuing to use the Platform.

For minor or administrative changes, updated notice on the Platform alone is sufficient. We encourage you to review this Privacy Policy regularly to stay informed of how vk8 protects your data.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vk8 handles your personal data, you may contact our support team using the following details:

We take all privacy-related enquiries seriously and commit to acknowledging receipt of your request within two business days and providing a substantive response within 30 days. For complex requests, we may require identity verification before processing your enquiry to ensure that we are communicating with the correct account holder.