vk223 Privacy Policy
— Your Data, Your Rights

1 Who We Are

vk223 is an online gambling and entertainment platform accessible at vk223.io, offering casino games, live dealer tables, sports betting markets — including cricket BPL and IPL — crash games, and related financial services to adult players primarily located in Bangladesh. References to "vk223", "we", "us" or "our" throughout this Privacy Policy refer to the operators and owners of the vk223 platform.

This Privacy Policy governs the collection, processing, storage, and use of personal data submitted to or generated on the vk223 platform. It applies to all registered Account holders, visitors to vk223.io, and any individual who interacts with our customer support channels.

2 Personal Data We Collect

When you register an Account, use our Services, or contact our support team, vk223 collects personal data across several categories. The table below summarises the main data types and the context in which each is collected.

vk223 does not intentionally collect sensitive personal data such as health information, biometric data (other than as embedded in identity documents submitted for KYC), racial or ethnic origin, political opinions, or religious beliefs. If any such data is inadvertently included in documents submitted to us, it will not be processed for any purpose other than identity verification and will be deleted as soon as the verification process is complete.

3 How We Collect Your Data

vk223 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide directly when completing the registration form, updating your profile, submitting KYC documents, making a deposit or withdrawal request, or contacting our support team via email at [email protected].
• Automated collection: Technical and usage data collected automatically as you browse and interact with the Platform, through server logs, session tracking technologies, and first-party cookies.
• Payment processors: Limited transactional data returned by payment service providers — including bKash, Nagad, Rocket, and Upay — confirming the status of deposit and withdrawal transactions. vk223 does not store full mobile banking PIN numbers or payment passwords.
• Identity verification partners: Where third-party KYC service providers are used to assist with document authentication, those providers return a verified/not-verified status along with the minimum data necessary to complete the check.
• Device and browser signals: Browser fingerprint data, IP geolocation, and device identifiers used for fraud prevention, responsible gaming enforcement, and regulatory compliance purposes.

4 Why We Use Your Personal Data

vk223 uses the personal data it collects for the following defined purposes only. We do not use your data for any purpose not listed below without first obtaining your explicit consent:

• Account creation and management: To open and maintain your vk223 Account, authenticate your identity at login, and manage your Account settings and preferences.
• Service delivery: To provide access to casino games, sports betting markets, promotional offers, and all other features of the vk223 platform that you have subscribed to or opted into.
• Payment processing: To process deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard, and to execute withdrawal requests to verified accounts held in your name.
• Identity and age verification (KYC): To verify that you are a real person, that you are at least 21 years of age, and that you are not on any self-exclusion or restriction list applicable to our platform.
• Legal and regulatory compliance: To meet anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gaming obligations, including maintaining transaction records for the mandatory retention periods required under applicable law.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, multi-accounting, bonus abuse, money laundering, and other prohibited conduct described in our Terms and Conditions.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance through our 24/7 English-language support team.
• Responsible gaming: To monitor your betting patterns, implement deposit limits or session restrictions at your request, action self-exclusion elections, and identify indicators of problem gambling that may require intervention.
• Platform improvement: To analyse aggregated, anonymised usage data to improve platform performance, user experience, game selection, and promotional relevance.
• Direct communications: To send you transactional emails (account confirmations, deposit receipts, withdrawal notifications) and, where you have opted in, promotional communications about relevant offers, tournaments, and seasonal events such as BPL, Eid specials, and Pohela Boishakh promotions.

5 Legal Basis for Processing

vk223 processes personal data only where a valid legal basis exists. The primary legal bases relied upon for each processing activity are as follows:

• Contractual necessity: Processing required to fulfil the contract between vk223 and the Player — including account registration, payment processing, and service delivery — is carried out on the basis that it is necessary to perform the agreement you entered into when creating your Account.
• Legal obligation: Processing carried out to comply with applicable legal requirements, including KYC, AML, CTF, and responsible gaming obligations, is based on our legal duty to meet those requirements.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics is based on vk223's legitimate interests in operating a safe, secure, and compliant gambling platform, where those interests are not overridden by your rights and freedoms.
• Consent: Processing carried out for marketing communications and the use of non-essential cookies is based on your freely given, specific, and informed consent, which you may withdraw at any time.

6 Sharing Your Personal Data

vk223 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard receive the minimum data necessary to process your requested transaction. Each provider is bound by its own data protection obligations.
• Identity verification partners: Third-party KYC and document authentication providers receive identity data solely for the purpose of completing the verification check requested by vk223.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session token to facilitate game access. These providers do not receive your full identity data.
• Technology and infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on our behalf under strict data processing agreements that prohibit independent use of your data.
• Legal and regulatory authorities: Where required by law, court order, or legitimate regulatory enquiry, vk223 will disclose personal data to the relevant government bodies, law enforcement agencies, or financial intelligence units. We will notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of vk223's business, personal data held by vk223 may be transferred to the acquiring entity, subject to equivalent data protection commitments being maintained.

7 Data Retention

vk223 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable law. The following general retention principles apply:

• Active Accounts: All personal and financial data associated with an active Account is retained for the duration of the Account's active status and for a minimum of five (5) years following permanent Account closure, to meet AML and legal record-keeping obligations.
• KYC documents: Identity and verification documents are retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later, in accordance with anti-money laundering regulations.
• Transaction records: Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers, are retained for a minimum of five (5) years.
• Support communications: Customer support correspondence is retained for three (3) years from the date of the final communication in a given thread, unless the communication relates to a live legal dispute, in which case it is retained until the dispute is fully resolved.
• Marketing consent records: Records of consent to receive marketing communications are retained for the duration of the consent period and for one (1) year following withdrawal of consent, as evidence of the lawful basis for any prior communications sent.
• Technical and usage logs: Server logs and session data are retained for up to twelve (12) months for security monitoring and platform optimisation purposes, then deleted or fully anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Requests for early deletion are handled in accordance with Section 10 (Your Rights) of this Policy, subject to any overriding legal retention obligation.

8 Cookies & Tracking Technologies

vk223 uses first-party cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies may be active when you visit vk223.io:

• Strictly necessary cookies: Essential for core platform functions such as maintaining your logged-in session, remembering your language preference, and routing your connection to the correct server. These cookies cannot be disabled without materially impairing your ability to use the Platform.
• Performance and analytics cookies: Used to collect anonymised data about how visitors use the Platform — including pages visited, session duration, and error rates — to help us improve the user experience. These cookies do not identify you personally.
• Functionality cookies: Used to remember your preferences and personalise your experience, such as remembering your preferred deposit method or your favourite game categories.
• Fraud prevention cookies: Used to identify unusual or suspicious behaviour patterns that may indicate unauthorised Account access, multi-accounting, or automated bot activity.

vk223 does not use third-party advertising cookies or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain areas of the Platform.

9 Security Measures

vk223 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our primary security controls include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and vk223 servers, ensuring that login credentials, financial data, and personal information cannot be intercepted in transit.
• Bcrypt password hashing for all Account passwords. vk223 does not store plain-text passwords. Even in the unlikely event of a database breach, stored password hashes cannot be reversed to reveal the original credential.
• Two-factor authentication (2FA) available to all Account holders and strongly recommended as an additional layer of login security.
• Role-based access controls ensuring that vk223 staff can only access personal data where it is strictly necessary for their defined job function. Access to KYC documents and financial records is restricted to a minimal set of authorised personnel.
• Regular security audits and penetration testing conducted by independent technical specialists to identify and remediate potential vulnerabilities before they can be exploited.
• Automated threat detection monitoring for unusual login patterns, abnormal transaction volumes, and other indicators of Account compromise or fraudulent activity.

While vk223 takes all reasonable steps to protect your data, no internet-based system can be guaranteed to be 100% secure. You are responsible for keeping your Account login credentials confidential and for notifying us immediately at [email protected] if you suspect any unauthorised access to your Account.

10 Your Data Rights

As a Player on the vk223 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, submit a written request to [email protected]. vk223 will acknowledge your request within two (2) business days and provide a substantive response within thirty (30) days.

• Right of Access: You have the right to request a copy of all personal data held by vk223 about you, along with information about how that data is used and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Minor corrections (e.g., updating your contact details) can be made directly within your Account settings.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing is unlawful. This right is subject to any overriding legal retention obligation (e.g., AML record-keeping requirements).
• Right to Restrict Processing: You have the right to request that vk223 temporarily suspend processing of your personal data — for example, while the accuracy of data is contested or while a complaint is under review.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON), and to request that it be transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object to processing based on vk223's legitimate interests or for direct marketing purposes. We will cease that specific processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

11 Children's Privacy

vk223 is strictly an adult gambling platform. The Services are not directed to, and are not intended for use by, any individual under the age of 21. vk223 does not knowingly collect personal data from individuals under 21 years of age.

If vk223 becomes aware that personal data has been collected from an individual under 21 without appropriate age verification having taken place, the Account in question will be immediately suspended, all personal data associated with the Account will be deleted, and any funds held in the Account will be handled in accordance with our Terms and Conditions and applicable law.

12 Third-Party Links

The vk223 platform does not include links to third-party websites for browsing or informational purposes. In the limited contexts where references to external brands are made — such as game providers (Pragmatic Play, Evolution Gaming, Spribe) or payment networks (Visa, Mastercard) — these are references to commercial partnerships and do not constitute endorsements of those parties' data practices.

vk223 is not responsible for the privacy practices, terms, or content of any third-party service provider's own platforms or websites. Your interactions with payment providers such as bKash or Nagad are governed by those providers' own privacy policies, and we encourage you to review them independently.

13 Changes to This Privacy Policy

vk223 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When material changes are made — meaning changes that substantively affect your rights or how we process your data — we will notify registered Players via the email address on file at least seven (7) days prior to the change taking effect, where reasonably practicable.

The revised Policy will always be published in full at vk223.io/privacy-policy with the updated effective date clearly stated at the top. Your continued use of the vk223 platform after any changes become effective constitutes your acknowledgement of the revised Privacy Policy. We recommend reviewing this page periodically to stay informed of how your data is handled.

14 Contact & Data Enquiries

All privacy-related enquiries, data subject access requests, complaints, and requests to exercise any right described in Section 10 of this Policy should be directed to the vk223 data protection team using the contact details below:

• Email: [email protected]
• Subject Line (for data requests): "Privacy Request — [Your Account Username]"
• Response Time: Acknowledgement within 2 business days; substantive response within 30 days
• Support Hours: 24 hours a day, 7 days a week
• Language: English

vk223 is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response to your enquiry, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.