vbx8 Privacy
Policy

This Privacy Policy ("Policy") describes how vbx8 ("vbx8", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Player") who access or use the vbx8 website at https://vbx8.io, including all associated services, games, promotions, and support channels. This Policy forms part of the vbx8 Terms and Conditions. By registering an account or using the vbx8 platform, you confirm that you have read and understood this Policy and you consent to the processing of your personal data as described herein.

1. Introduction

vbx8 is Bangladesh's premier online casino and cricket betting platform, offering over 500 casino games and a comprehensive sports betting market to players aged 21 and above. As an operator of a digital platform that processes financial transactions and holds sensitive account information, vbx8 recognises that responsible data stewardship is fundamental to maintaining the trust of our players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and across Bangladesh.

This Policy is written in plain, professional English and is intended to give every vbx8 player a complete and accurate understanding of the data practices that govern their account. We do not use ambiguous language to obscure how your data is used. If any provision of this Policy is unclear, you are encouraged to contact our support team at [email protected] before proceeding to use the platform.

2. Data Controller

vbx8 is the data controller responsible for your personal data collected through the https://vbx8.io website. As data controller, vbx8 determines the purposes for which and the means by which personal data is processed. All data subject rights requests, privacy complaints, and data-related enquiries should be directed to:

• Email: [email protected]
• Subject line: Privacy Policy — Data Controller Enquiry
• Response time: Within 3 business days for general enquiries; within 30 calendar days for formal data subject rights requests

3. Data We Collect

vbx8 collects only the personal data necessary to operate a safe, fair, and legally compliant online gaming platform. The categories of personal data we collect are set out in the table below, together with specific examples and the context in which each category arises.

vbx8 does not intentionally collect special categories of sensitive personal data (sometimes called "sensitive data"), including racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sexual orientation. If you voluntarily disclose such information to our support team in the course of a communication, it will be treated with the highest level of confidentiality and will not be used for any purpose other than responding to your specific query.

4. How We Collect Your Data

4.1 Directly From You

The majority of your personal data is collected directly from you when you register an account, complete KYC verification, make a deposit or withdrawal, claim a promotional offer, contact our support team, respond to a satisfaction survey, or update your account profile settings.

4.2 Automatically Through Technology

When you visit or use the vbx8 platform, we automatically collect Technical Data and Usage Data using cookies, server logs, pixel tags, and similar tracking technologies. This data collection is necessary to deliver a functional, secure, and personalised platform experience. See Section 8 (Cookies & Tracking) for full details.

4.3 From Third Parties

vbx8 may receive limited personal data about you from third parties in the following circumstances:

• Payment providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) may share transaction confirmation data to verify deposit and withdrawal records.
• Identity verification service providers may share the outcome of document verification checks conducted on vbx8's behalf as part of the KYC process.
• Fraud detection and anti-money-laundering (AML) screening services may share risk signals associated with your identity or payment method.

5. Legal Basis for Processing

vbx8 processes your personal data on the following legal bases, each of which is applied to the specific processing activity it justifies:

• Contractual Necessity: Processing required to create and manage your vbx8 account, process deposits and withdrawals, deliver games and services, and enforce the Terms and Conditions you agreed to at registration.
• Legal Obligation: Processing required to comply with applicable KYC, AML, counter-terrorism financing (CTF), and responsible gaming regulations, including mandatory age verification and self-exclusion administration.
• Legitimate Interests: Processing necessary for vbx8's legitimate business interests, including fraud detection, platform security, product improvement, and internal analytics — where these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed consent — primarily for non-essential cookies and marketing communications. You may withdraw consent at any time by adjusting your account notification preferences or contacting support.

6. How We Use Your Data

The personal data vbx8 collects is used for the following specific purposes. Each purpose is tied to a legal basis as described in Section 5:

• Account Management: Creating, verifying, maintaining, and closing your vbx8 player account; providing access to the full range of platform features available to verified players.
• Transaction Processing: Processing BDT deposits from and withdrawals to bKash, Nagad, Rocket, Upay, and connected bank accounts; maintaining an accurate real-time account balance; handling dispute resolution on contested transactions.
• KYC and Age Verification: Confirming your legal identity, verifying that you are aged 21 or above, and ensuring that payment methods are registered in your own name in compliance with our one-account and anti-fraud policies.
• Regulatory Compliance: Fulfilling our obligations under applicable AML, CTF, responsible gaming, and data protection legislation, including filing mandatory reports to relevant authorities where legally required.
• Customer Support: Responding to your enquiries, resolving account issues, processing formal complaints, and administering responsible gaming tools such as deposit limits, cool-off periods, and self-exclusion requests.
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent account activity, unauthorised access, duplicate account registration, bonus abuse, money laundering, and other prohibited conduct described in our Terms and Conditions.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand player behaviour, identify technical issues, improve game performance, and develop new features that better serve Bangladesh players.
• Marketing Communications (with consent): Sending you personalised promotional offers, bonus notifications, game launch announcements, and seasonal promotions (e.g., during Eid, Pohela Boishakh, BPL season) by email or SMS — only where you have opted in to receive such communications. You may unsubscribe at any time.

7. Data Sharing and Disclosure

7.1 No Sale of Personal Data

vbx8 does not sell, rent, trade, or otherwise commercialise your personal data to any third party. Your data is not shared with advertising networks, data brokers, or marketing agencies.

7.2 Service Providers

vbx8 shares personal data with carefully selected third-party service providers who process data on our behalf under written data processing agreements. These providers are permitted to use your data only for the specific purpose for which it was shared and are contractually bound to protect it to the same standard as vbx8. Categories of service providers include:

• Payment processing providers (bKash, Nagad, Rocket, Upay, and connected banking partners)
• KYC and identity verification platforms
• AML and fraud screening services
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — who receive only the anonymised session data necessary to deliver game content

7.3 Legal and Regulatory Disclosure

vbx8 may disclose your personal data to law enforcement agencies, regulatory authorities, financial intelligence units, or courts where we are compelled to do so by a legally binding order, warrant, or statutory obligation. vbx8 will, where permitted by law, notify you of such a disclosure request before complying. Where prior notification is legally prohibited, vbx8 will inform you after the fact as soon as it is legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring involving vbx8, your personal data may be transferred to the acquiring entity as part of the business assets. vbx8 will notify you of any such transfer via email and via a prominent notice on the platform at least 30 days before your data is transferred, giving you the opportunity to request account deletion before the transfer occurs.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by the vbx8 website when you visit. They allow the platform to remember your preferences, maintain your login session, and collect usage data that helps us improve the service. vbx8 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period).

8.2 Categories of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language selection, preferred display settings, and responsible gaming tool configurations to provide a more personalised experience.
• Analytical Cookies: Collect anonymised usage statistics to help vbx8 understand how players interact with the platform, which games are most popular, and where technical issues arise. These cookies do not identify you personally.
• Security Cookies: Used to detect and prevent fraudulent activity, including identifying suspicious login patterns and device fingerprint anomalies associated with account takeover attempts.

8.3 Managing Cookies

You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the vbx8 platform, including the ability to maintain a login session. Strictly necessary cookies cannot be disabled via browser settings as they are essential to platform security.

9. Data Retention

vbx8 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for aggregated statistical analysis.

10. Data Security

vbx8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and vbx8 servers.
• AES-256 encryption for personal data stored in our databases at rest.
• Multi-factor authentication (MFA) for vbx8 staff accessing production systems containing player data.
• Role-based access controls ensuring that staff access only the data necessary for their specific job function.
• Regular independent security audits and penetration testing of the vbx8 platform infrastructure.
• Automated intrusion detection and real-time alerting systems monitoring for anomalous access patterns.
• Secure off-site backups with encrypted replication, tested quarterly for recovery integrity.

While vbx8 takes all reasonable measures to secure your data, no digital platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying us immediately at [email protected] if you suspect unauthorised access to your vbx8 account.

11. Your Data Rights

As a vbx8 player, you hold the following rights regarding your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". vbx8 will respond within 30 calendar days of receiving a valid request. We may need to verify your identity before processing your request.

• Right of Access: You have the right to request a copy of all personal data vbx8 holds about you, together with information about how it is used and with whom it is shared. vbx8 will provide this as a structured data export.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your vbx8 account. Minor corrections (e.g., phone number updates) can be made directly in your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (for consent-based processing), or where processing has no valid legal basis. This right is subject to legal retention obligations — vbx8 cannot delete financial records or KYC documents within mandatory retention periods.
• Right to Restriction: You have the right to request that vbx8 restricts the processing of your personal data in certain circumstances, such as while the accuracy of data you have disputed is being verified.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) and to transmit it to another service provider of your choosing.
• Right to Object: You have the right to object to processing based on legitimate interests and to processing for direct marketing purposes. Where you object to marketing, vbx8 will cease all marketing communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

12. Children's Privacy — 21+ Requirement

The vbx8 platform is strictly intended for adults aged 21 years and above. vbx8 does not knowingly collect, process, or retain personal data from individuals under the age of 21. All accounts undergo mandatory age verification as part of the KYC process. Where vbx8 discovers or has reasonable cause to believe that an account is held by a person under 21, the account will be immediately suspended, all balances will be withheld pending investigation, and the personal data associated with the account will be deleted or retained only as required by applicable legal obligations relating to the underage gambling incident.

Parents and guardians who believe their child may have registered an account with vbx8 should contact our support team immediately at [email protected]. We take underage gambling prevention extremely seriously and will act promptly on all such reports.

13. Third-Party Links

The vbx8 website does not include links to third-party websites, social media profiles, or external services. All navigation within the vbx8 platform remains on the https://vbx8.io domain. In the event that any third-party content is ever displayed within the vbx8 interface (for example, game content delivered by a licensed provider such as Pragmatic Play or Evolution Gaming), that content is rendered within a secure embedded frame and the game provider's own privacy practices govern the data processing that occurs within their game environment. vbx8 is not responsible for the privacy practices of third-party game studios in respect of data they collect independently within their game interfaces.

14. Changes to This Privacy Policy

vbx8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Where a material change is made, vbx8 will notify registered players by email at least 14 days before the change takes effect, and will display a prominent notice on the platform. The effective date at the top of this Policy will be updated to reflect the date the new version enters into force.

Your continued use of the vbx8 platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree to any material change, you have the right to close your account and request deletion of your personal data before the change takes effect, subject to applicable legal retention obligations.

Previous versions of this Privacy Policy are retained in our records and may be provided upon request to [email protected].

15. Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or vbx8's data processing practices, please contact us:

• Email: [email protected]
• Subject line: Privacy Policy — Complaint / Enquiry
• Response time: Within 3 business days for general enquiries; within 30 calendar days for formal data subject rights requests
• Support hours: 24/7, with fastest response during Bangladesh Standard Time (BST, UTC+6) peak hours

vbx8 takes all privacy complaints seriously. Upon receiving a complaint, we will acknowledge receipt within 2 business days, investigate the matter thoroughly, and provide a written response setting out our findings and any corrective action taken. If you are not satisfied with our response, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.

We are committed to resolving all privacy-related disputes fairly, transparently, and in a timely manner. Our goal is to ensure that every vbx8 player in Bangladesh can engage with our platform with full confidence that their personal data is handled with the highest standards of care, integrity, and professionalism.