Your Privacy Matters at vdtk1 — Here Is How We Protect It

Introduction

This Privacy Policy ("Policy") describes how vdtk1 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal information relating to individuals ("you", "User", "Player") who access or use the services available at https://vdtk1.io and its associated subdomains and mobile interfaces.

vdtk1 is committed to protecting the privacy and personal data of all users on its platform. This Policy has been drafted to be clear, accessible, and informative so that you can make well-informed decisions about your data. We encourage you to read it carefully before registering an account or making use of any vdtk1 service.

By creating an account on vdtk1, depositing funds, placing bets, or otherwise accessing the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, please refrain from using the vdtk1 platform.

Data Controller

For the purposes of applicable data protection law, vdtk1 acts as the Data Controller in respect of personal data collected from users of the platform. As Data Controller, vdtk1 determines the purposes and means by which personal data is processed and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

If you have any questions about how vdtk1 processes your personal data, or wish to exercise any of your data subject rights as set out in Section 12 of this Policy, please contact the vdtk1 Data Protection team at the contact details provided in Section 15.

Personal Data We Collect

vdtk1 collects personal data in several categories depending on the nature of your interaction with the platform. The categories of data we may collect and hold are detailed in the table below:

vdtk1 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for identification purposes (other than KYC photographs), health data, or data concerning sexual orientation. If any such data is inadvertently received, it will be deleted promptly.

How We Collect Your Data

vdtk1 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide when registering an account, completing identity verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated Technologies: Data collected automatically when you access the platform, including IP addresses, device identifiers, browser fingerprints, and session logs collected via server logs, cookies, and similar tracking technologies (see Section 10).
• Third-Party Sources: Data received from identity verification partners, payment providers (such as bKash, Nagad, Rocket, and Upay), fraud detection services, and publicly available sources where this is necessary for compliance and security purposes.
• Platform Activity: Data generated by your use of the platform — including betting history, game play records, login events, and responsible gambling tool activations — is automatically captured as part of normal platform operation.

Legal Basis for Processing

vdtk1 processes personal data only where a valid legal basis exists for doing so. The legal bases on which vdtk1 relies are as follows:

• Contractual Necessity: Processing required to perform the contract between vdtk1 and the user — including account management, payment processing, and the delivery of betting and gaming services.
• Legal Obligation: Processing necessary to comply with legal requirements applicable to vdtk1, including anti-money laundering regulations, Know Your Customer (KYC) obligations, and responsible gambling duties.
• Legitimate Interests: Processing necessary for vdtk1's legitimate business interests, including platform security, fraud prevention, service improvement, and responsible gambling monitoring, provided such interests are not overridden by the rights and interests of the data subject.
• Consent: Where vdtk1 relies on your consent to process personal data — for example, for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

How We Use Your Personal Data

vdtk1 uses the personal data it holds for the following specific purposes:

• To create, manage, and maintain your vdtk1 player account, including verifying your identity and age.
• To process deposits and withdrawal transactions via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records.
• To detect and prevent fraud, money laundering, account takeover, bonus abuse, and other prohibited activities.
• To monitor your gambling activity in the context of responsible gaming — including identifying patterns that may indicate problem gambling — and to apply self-imposed limits or exclusions where requested.
• To communicate with you regarding your account, including security notifications, transaction confirmations, identity verification requests, and updates to these policies.
• To resolve disputes, respond to complaints, and maintain records for regulatory compliance and legal proceedings.
• To improve the vdtk1 platform through analytics, user behaviour analysis, and technical performance monitoring.
• To send you information about promotions, bonuses, and special offers where you have opted in to receive such communications.

Data Sharing & Third-Party Disclosure

vdtk1 does not sell, rent, or trade personal data to third parties for commercial gain. However, in the normal course of operating the platform, vdtk1 may share personal data with the following categories of recipients:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, Mastercard — for the purpose of processing transactions associated with your vdtk1 account.
• Identity Verification Partners: Third-party KYC and anti-money laundering service providers who assist vdtk1 in verifying player identities and screening for sanctions, fraud, and politically exposed persons.
• Game Software Suppliers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session data necessary to deliver their games on the vdtk1 platform.
• Analytics & Security Providers: Technology partners who assist vdtk1 with platform performance analytics, fraud detection, and cybersecurity — all operating under strict data processing agreements.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or regulatory requirement, vdtk1 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities.

All third-party service providers with whom vdtk1 shares personal data are required to implement appropriate data protection measures and are prohibited from using your data for any purpose beyond the specific service they are contracted to deliver.

International Data Transfers

The vdtk1 platform serves users primarily based in Bangladesh. However, some of the third-party service providers that vdtk1 works with — including game software suppliers and payment technology partners — may be based in or operate from jurisdictions outside Bangladesh. In such cases, personal data may be transferred internationally as part of delivering platform services.

Where personal data is transferred to recipients in other countries, vdtk1 takes appropriate measures to ensure that such transfers are carried out in compliance with applicable data protection obligations. These measures may include contractual safeguards in the form of data processing agreements that require recipients to maintain data protection standards equivalent to those applied by vdtk1.

Data Retention

vdtk1 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention guidelines applied by vdtk1 are as follows:

• Active Account Data: Retained for the duration of your account's active status plus a period of five (5) years following account closure, to comply with anti-money laundering, financial reporting, and dispute resolution obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, in line with standard anti-money laundering compliance requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Retained for three (3) years from the date of the communication, unless the matter is subject to ongoing legal proceedings.
• Technical & Usage Logs: Retained for up to twenty-four (24) months for security monitoring and fraud detection purposes, after which they are aggregated or deleted.
• Marketing Consent Records: Retained for as long as you remain opted in, plus one (1) year following opt-out as an audit record of your consent history.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any individual.

Cookies & Tracking Technologies

vdtk1 uses cookies and similar technologies (including local storage, session storage, and pixel tags) on its platform. Cookies are small text files placed on your device that allow the platform to recognise your browser and remember certain information about your visit.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication cookies that keep you logged in and security cookies that help detect fraud. These cannot be disabled without affecting core platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the vdtk1 platform — such as which pages are visited most frequently and how long sessions last. This data is used solely for platform improvement purposes.
• Functional Cookies: Used to remember your preferences, such as your preferred language, display settings, and notification preferences, so you do not need to reconfigure them on each visit.
• Responsible Gambling Cookies: Used to track session duration and betting activity in the context of responsible gambling monitoring, including the enforcement of self-set time limits and session reminders.

10.2 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use core platform features, including logging in and placing bets. Instructions for managing cookies can typically be found in your browser's help documentation.

Children's Privacy

The vdtk1 platform is strictly intended for adults aged 21 and above. vdtk1 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered an account on vdtk1 or provided personal data to the platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

Your Data Subject Rights

As a user of the vdtk1 platform, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please submit a written request to [email protected]. vdtk1 will respond to all data subject requests within a reasonable timeframe and without charge for standard requests:

• Right of Access: You have the right to request a copy of the personal data vdtk1 holds about you, together with information about how it is being processed.
• Right to Rectification: You have the right to request that any inaccurate or incomplete personal data held about you be corrected or completed without undue delay.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to vdtk1's legal retention obligations (see Section 9).
• Right to Restriction: You have the right to request that the processing of your personal data be restricted in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to vdtk1 in a structured, commonly used, machine-readable format, and to have that data transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling activities. vdtk1 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Data Security

vdtk1 implements a comprehensive set of technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or app and the vdtk1 platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Secure Data Storage: Personal and financial data is stored on secured servers protected by access controls, firewalls, and intrusion detection systems.
• Access Controls: Access to personal data within the vdtk1 organisation is restricted on a strict need-to-know basis. Staff who handle personal data receive data protection training and are bound by confidentiality obligations.
• Regular Security Audits: vdtk1 conducts periodic security reviews and vulnerability assessments to identify and address potential weaknesses in the platform's data protection posture.
• Incident Response: In the event of a data security incident that poses a risk to the rights and freedoms of users, vdtk1 has procedures in place to investigate, contain, and respond to the incident promptly, and to notify affected users as required.

While vdtk1 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are also responsible for protecting the confidentiality of your login credentials and for ensuring that your device is reasonably secured.

Changes to This Privacy Policy

vdtk1 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable data protection law, regulatory guidance, platform functionality, or internal data handling practices. When material changes are made to this Policy, vdtk1 will:

• Update the "Last Updated" date at the top of this page.
• Notify registered users via their registered email address or via a prominent notice on the platform, prior to or at the time the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how vdtk1 is protecting your data. Continued use of the platform following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you should cease using the platform and may request account closure by contacting our support team.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vdtk1 processes your personal data, please get in touch with us using the contact details below. Our Data Protection team will handle your enquiry with care and respond within a reasonable timeframe.

• Email: [email protected] (plain text only — not a clickable link)
• Response Target: Within 48 hours for standard enquiries (BST, UTC+6)
• Data Subject Requests: Handled as a priority — please specify the nature of your request clearly in your message
• Support Hours: 24 hours a day, 7 days a week

For data erasure, portability, or objection requests, please include your registered email address, a brief description of your request, and a copy of a government-issued ID so that we can verify your identity before processing the request. This step is necessary to protect against unauthorised access to your personal data.