va8 Privacy Policy

1. How We Use Your Personal Data

va8 processes your personal data only for purposes that are directly connected to operating the Platform and providing services to you. The specific purposes for which your data is used include:

• Account Management: Creating, maintaining, and administering your va8 player account, including processing registration details and enabling login access.
• Identity Verification (KYC): Verifying that you are who you say you are, that you meet the 21+ age requirement, and that your payment method belongs to you. This process may involve comparing submitted documents against third-party identity verification databases.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladeshi bank transfer channels.
• Game and Betting Services: Delivering the games, sports betting markets, and live casino services you access through the Platform, including recording game outcomes and transaction history.
• Responsible Gaming: Monitoring your account activity to detect signs of problem gambling and applying the responsible gaming tools you have activated, such as deposit limits, loss limits, session reminders, and self-exclusion.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and any other conduct that violates va8's Terms & Conditions or applicable law.
• Customer Support: Responding to your enquiries, resolving disputes, and processing complaints submitted through the support channels at [email protected].
• Legal and Regulatory Compliance: Meeting obligations imposed by applicable law, including record-keeping requirements and responding to lawful requests from competent authorities.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the performance, reliability, and user experience of the Platform. No individual player is identified in this analysis.
• Marketing Communications: Sending you promotional offers, bonus notifications, and seasonal promotions (such as those tied to BPL cricket, Eid, or Pohela Boishakh) only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time by contacting [email protected].

va8 does not use your personal data for any purpose that is incompatible with those listed above. Where a new processing purpose arises, va8 will update this Policy and, where required, seek fresh consent from affected players.

2. Legal Basis for Processing

va8 processes your personal data on one or more of the following legal bases depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and va8, including account creation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable legal obligations, including identity verification, anti-money laundering checks, and record-keeping.
• Legitimate Interests: Processing necessary for va8's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit, freely given consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

3. How We Share Your Personal Data

va8 does not sell, rent, or otherwise share your personal data with unaffiliated third parties for their own marketing purposes. Your data may be shared with third parties only in the following tightly controlled circumstances:

• Identity Verification Providers: Third-party KYC and age verification services used to confirm your identity and age in compliance with our responsible gaming obligations.
• Payment Processors: bKash, Nagad, Rocket, Upay, and banking partners, strictly to the extent necessary to process your deposit and withdrawal transactions.
• Game Technology Providers: Studios and platform providers including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi, who may receive technical session data necessary to deliver their games on the va8 Platform.
• Fraud Prevention and Security Services: Specialised third-party services that assist va8 in detecting and preventing fraudulent, abusive, or illegal activity on the Platform.
• Legal and Regulatory Authorities: Competent government bodies, law enforcement agencies, or courts where va8 is required or lawfully permitted to disclose information in response to a valid legal request.
• Professional Advisors: Legal, accounting, and audit professionals who are bound by professional confidentiality obligations and who process personal data only as necessary to provide their services to va8.

All third parties with whom va8 shares personal data are required to handle that data securely, use it only for the specified purpose, and comply with applicable data protection standards. va8 does not permit third-party service providers to use your data for their own unrelated purposes.

4. How Long We Retain Your Data

va8 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of the player's account with va8 and for a minimum period of five (5) years after account closure.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of the relevant transaction, consistent with standard financial record-keeping requirements.
• Identity Verification Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Support and Communications Records: Retained for a minimum of two (2) years from the date of the last interaction, or longer if the record is relevant to an ongoing dispute or legal matter.
• Marketing Consent Records: Retained for as long as you hold a va8 account and for a reasonable period thereafter in order to demonstrate that consent was validly obtained.
• Technical and Log Data: Typically retained for up to twelve (12) months from collection, unless a specific security investigation requires extended retention.

Once the applicable retention period expires and no legal obligation requires further retention, va8 securely deletes or anonymises the relevant personal data.

5. Cookies and Similar Technologies

va8 uses cookies and similar browser-based technologies to operate and improve the Platform. The cookies deployed by va8 fall into the following categories:

• Strictly Necessary Cookies: Essential session cookies that maintain your logged-in state, preserve your language and display preferences, and enable core Platform functionality. These cookies cannot be disabled without degrading the Platform experience.
• Performance and Analytics Cookies: Cookies that collect anonymised, aggregated data about how players navigate and use the Platform. This data is used internally to identify and resolve technical issues and improve usability. No individual player is identified through this data.
• Functional Cookies: Cookies that remember your preferences — such as your most recently visited game category — to personalise your experience on return visits.

va8 does not place third-party advertising cookies or cross-site tracking pixels on the Platform. You may configure your browser to refuse or delete cookies, though doing so may affect certain Platform features such as staying logged in between sessions.

6. Data Security

va8 implements appropriate technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and va8's servers.
• Encrypted storage of sensitive data, including identity documents and financial records, at rest.
• Strict access controls ensuring that only authorised va8 personnel with a legitimate business need can access personal data.
• Regular internal security assessments and monitoring of the Platform for vulnerabilities and unusual activity.
• Staff training on data protection obligations and secure handling procedures.

While va8 takes all reasonable steps to safeguard your data, no internet-based system can guarantee absolute security. In the unlikely event of a data breach that creates a high risk to your rights, va8 will take immediate steps to contain the incident and notify affected players without undue delay.

7. Your Privacy Rights

As a player on the va8 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact va8 at [email protected] with a clear description of your request. va8 will respond within a reasonable timeframe and may require identity verification before processing certain requests.

• Right of Access: You may request a copy of the personal data va8 holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any personal data held by va8 that is inaccurate or incomplete.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. Note that va8 may be required to retain certain data to comply with legal obligations, even after account closure.
• Right to Restrict Processing: You may request that va8 limit the processing of your personal data in certain circumstances, for example while a rectification request is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you may request that va8 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of va8's legitimate interests, including profiling for responsible gaming purposes, where your individual circumstances justify such an objection.
• Right to Withdraw Consent: Where processing is based on your consent (primarily for marketing), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

8. Children and Minors

The va8 Platform is strictly intended for adults aged 21 years and above. va8 does not knowingly collect or process personal data from individuals under the age of 21. If va8 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed without further notice.

If you are a parent or guardian and believe that a minor has registered on the va8 Platform or provided personal data to va8, please contact [email protected] immediately so that we can investigate and take appropriate action.

9. Third-Party Services and Links

The va8 Platform integrates with certain third-party services — including payment providers such as bKash, Nagad, and Rocket, and game technology providers — in order to deliver its full range of services. When you interact with these third-party services, their own privacy policies govern the handling of any data you provide to them directly. va8 is not responsible for the privacy practices of third-party services and encourages players to review the privacy policies of any third party before providing personal information.

va8 does not include external links to unaffiliated websites on the Platform. All navigation remains within the va8 domain.

10. Changes to This Privacy Policy

va8 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, va8 will provide reasonable notice to registered players via the email address associated with their account or via a notice on the Platform. The "Last Updated" date at the top of this page reflects the most recent revision.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with any change, you should cease using the Platform and request account closure before the amendment takes effect.

11. Contact and Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way va8 handles your personal data, please contact our support team. All privacy-related enquiries will be handled with care and responded to within a reasonable timeframe:

• Email: [email protected] (plain text only — not a clickable link)
• Response Time: va8 aims to respond to all privacy enquiries within five (5) business days of receipt.
• Postal Address: As va8 is a digital-only platform serving Bangladesh, all formal communications should be directed via email to [email protected] for the fastest and most reliable response.

When submitting a privacy request, please include your registered email address and a clear description of your request so that va8 can locate your records and respond accurately. Identity verification may be required before certain requests are actioned.