Privacy Policy — How vdtk1 Protects Your Personal Data

1. Information We Collect

vdtk1 collects personal data through several channels: directly from you when you register or use our platform, automatically through your device and browser as you interact with our services, and from third parties such as payment processors and identity verification providers where necessary to fulfil our legal and operational obligations.

1.1 Information You Provide Directly

When you register an account, complete the identity verification process, make a deposit, request a withdrawal, or contact our support team, you provide us with personal data that may include:

• Identity data: your full legal name, date of birth, and National ID Card (NID), passport, or birth certificate details submitted during KYC verification.
• Contact data: your registered mobile number (Bangladeshi), email address, and, where provided, a mailing address.
• Financial data: your bKash, Nagad, Rocket, or Upay mobile wallet number; Bangladeshi bank account details (for bank transfer transactions); and the last four digits and expiry date of any Visa or Mastercard used. vdtk1 does not store full card numbers.
• Account credentials: your chosen username and a hashed (non-reversible) representation of your password. We never store your password in plain text.
• Communications data: the content of any messages, complaints, or support requests you submit to us via live chat, email, or any other channel.

1.2 Information Collected Automatically

When you access vdtk1.net or our mobile-optimised interface, our servers and analytics systems automatically record certain technical and behavioural data, including:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage data: pages visited, games launched, session duration, click paths, bet history, deposit and withdrawal transaction logs, and feature interactions.
• Location data: country and city-level location inferred from your IP address. vdtk1 does not collect GPS or precise geolocation data from your device.
• Cookie and tracking data: session cookies, persistent cookies, and similar tracking technologies as described in Section 4 of this policy.

1.3 Information from Third Parties

In certain circumstances, vdtk1 receives personal data about you from trusted third parties who provide services that are integral to the operation of the platform:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard partner networks): transaction confirmation data, transaction reference numbers, and payment status updates.
• Identity verification providers: confirmation of identity document authenticity and age verification results where we use a third-party KYC service.
• Fraud detection services: risk scores, device fingerprinting data, and flagged transaction patterns associated with known fraudulent activity.
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others): game session logs, round results, and RNG audit data required to resolve player disputes.

2. How We Use Your Data

vdtk1 processes your personal data only for specific, documented purposes. The table below summarises the primary purposes for which we use each category of data and the legal basis on which we rely for that processing.

Purpose	Data Categories Used	Legal Basis
Account registration and management	Identity, contact, credentials	Contractual necessity
Processing deposits and withdrawals	Identity, financial, transaction logs	Contractual necessity
Identity verification and KYC compliance	Identity, financial, third-party verification	Legal obligation
Fraud prevention and security monitoring	Device, usage, financial, fraud scores	Legitimate interests
Responsible gaming monitoring	Usage, transaction, self-exclusion records	Legal obligation / legitimate interests
Customer support and dispute resolution	Identity, communications, game session logs	Contractual necessity
Platform analytics and improvement	Usage, device, cookie data	Legitimate interests
Promotional communications (opt-in)	Contact, usage preferences	Consent

vdtk1 does not use your personal data for automated decision-making that produces legal or similarly significant effects without a human review step. Where automated tools are used to flag accounts for fraud review or responsible gaming intervention, a member of our compliance team reviews the flag before any consequential action is taken against your account.

2.1 Marketing Communications

vdtk1 will send you promotional communications — such as bonus offers, seasonal promotions tied to events like Eid, Pohela Boishakh, BPL season, or the ICC T20 World Cup — only where you have opted in to receive such communications during registration or through your account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account dashboard or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of any promotional communication sent prior to the withdrawal.

3. Data Sharing & Disclosure

vdtk1 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. We share your data only in the circumstances described below, and only to the minimum extent necessary for each purpose.

3.1 Service Providers and Data Processors

We engage carefully selected third-party service providers who process personal data on our behalf and strictly under our instructions. These include payment processing partners (bKash, Nagad, Rocket, Upay, and card network processors), identity verification providers, fraud detection services, cloud infrastructure providers who host our platform data, and customer support tooling providers. All such providers are required to enter into data processing agreements with vdtk1 that prohibit them from using your personal data for any purpose other than providing the contracted service.

3.2 Game Content Providers

To operate live casino tables, slots, and other game formats, vdtk1 integrates with third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive your account identifier and game session data to operate their games and generate independently verifiable RNG results. They do not receive your full identity data, payment account details, or communications data.

3.3 Legal and Regulatory Disclosures

vdtk1 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are required to do so by applicable law, a valid legal process, or a binding court order. We will, where legally permitted, notify you of any such disclosure request before complying with it.

3.4 Business Transfers

In the event that vdtk1 undergoes a merger, acquisition, or sale of all or a material part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players of any such transfer and of any material change to the data controller's identity via the contact details held on their account, with a minimum of thirty (30) days' notice before the transfer takes effect.

4. Cookies & Tracking Technologies

vdtk1 uses cookies and similar tracking technologies on the vdtk1.net platform to operate core platform functions, maintain your session state across pages, analyse how players use our services, and (where you have consented) deliver relevant promotional content.

4.1 Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your logged-in session, remember your language and currency preferences, and enable core security features such as CSRF protection. These cookies cannot be disabled without preventing you from using the platform.
• Performance and analytics cookies: These cookies collect aggregated and anonymised data about how players navigate the platform — which games are most visited, where users exit the registration flow, and how page load times vary across device types. This data is used exclusively to improve the platform experience.
• Functional cookies: These cookies remember your stated preferences, such as your preferred deposit method or game display settings, so that you do not need to re-enter them on each visit.
• Targeting and promotional cookies: These cookies are used only where you have given explicit consent and are used to tailor promotional banners and bonus offers to your demonstrated gameplay preferences. They do not track your activity outside the vdtk1.net domain.

4.2 Managing Your Cookie Preferences

You can manage cookie preferences at any time through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by specific websites. Please note that disabling strictly necessary cookies will impair your ability to log into and use the vdtk1 platform. Disabling performance or targeting cookies will not prevent you from using any core platform feature.

5. Data Security Measures

vdtk1 takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

Our key security measures include:

• Transport encryption: All data transmitted between your browser or device and our servers is encrypted using TLS 1.2 or higher. Our HTTPS certificate is maintained and renewed continuously.
• Data encryption at rest: Sensitive personal data fields — including identity document details and financial account references — are encrypted within our database using AES-256 encryption.
• Password hashing: Passwords are never stored in plain text. We use an industry-standard one-way hashing algorithm with a unique per-account salt to store password representations.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their vdtk1 accounts. When 2FA is active, a one-time code is sent to your registered Bangladeshi mobile number and must be entered in addition to your password on each new device login.
• Access controls: Access to production systems containing personal data is restricted to authorised personnel on a need-to-know basis, enforced through role-based access controls and individual authentication credentials. All access events are logged.
• Regular security assessments: vdtk1 conducts periodic internal security reviews and engages third-party security consultants to perform vulnerability assessments of our platform infrastructure.

Despite these measures, no system connected to the internet can be guaranteed to be completely secure. In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, vdtk1 will notify affected players without undue delay via their registered contact details, and will take immediate steps to contain and remediate the breach.

6. Data Retention & Deletion

vdtk1 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable legal, regulatory, or contractual obligations.

The following retention periods apply to the main categories of personal data we hold:

• Account and identity data: Retained for the duration of your active account relationship with vdtk1 and for a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements.
• KYC verification documents: Retained for five (5) years from the date of verification or from the date of account closure, whichever is later.
• Customer support communications: Retained for two (2) years from the date of each interaction, to support dispute resolution and service improvement.
• Session and usage logs: Anonymised or pseudonymised log data is retained for up to twelve (12) months for platform analytics purposes.
• Marketing consent records: Retained for the duration of your active consent and for one (1) year following withdrawal of consent, to demonstrate compliance.

Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to technical constraints (for example, within a backup copy), the data is isolated from active processing until it can be securely destroyed.

7. Your Privacy Rights

As a player on the vdtk1 platform, you hold a number of rights in relation to your personal data. We are committed to facilitating the exercise of these rights promptly and without unnecessary barriers.

• Right of access: You may request a copy of all personal data we hold about you at any time. We will respond to verified access requests within thirty (30) days of receipt.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Minor corrections (such as updating your email address or mobile number) can typically be made directly through your account dashboard without contacting support.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data. Where deletion is not legally possible — for example, because the data is required to be retained for anti-money laundering compliance — we will inform you of the specific legal basis preventing deletion and of the earliest date on which deletion can take place.
• Right to restrict processing: You may request that we restrict the use of your personal data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or a contractual relationship, you may request a structured, machine-readable copy of the personal data you have provided to vdtk1.
• Right to object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis for that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based solely on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our data privacy team using the contact details provided in Section 8. We may be required to verify your identity before processing a rights request to protect your data from unauthorised disclosure or deletion.

8. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how vdtk1 has handled your personal data, please contact our data privacy team. Our support team is available around the clock on Bangladesh Standard Time (BST, UTC+6).

You may reach us at:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available on vdtk1.net — select "Privacy & Data" as the query topic when opening a chat session.

We will acknowledge all privacy-related enquiries within two (2) business days and aim to resolve them fully within thirty (30) calendar days of receipt. Where a request is complex or voluminous, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it before the initial thirty-day period expires.

8.1 Complaints

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint. vdtk1 will always attempt to resolve complaints internally first. If internal resolution is not possible, you may escalate the matter through the appropriate consumer protection or data protection channels in your jurisdiction. vdtk1 cooperates fully with any legitimate inquiry conducted by a competent authority.

8.2 Policy Updates

vdtk1 reserves the right to update this Privacy Policy at any time. Where changes are material — meaning they affect how we use your data or the rights available to you — we will notify you via your registered email address or through a prominent notice on the platform at least fourteen (14) days before the updated policy takes effect. The most current version of this Privacy Policy is always available at vdtk1.net/privacy-policy. The "Last Updated" date at the top of this document reflects when the current version became effective.