vbx8 Privacy Policy — Your Data, Your Rights

1. Introduction

vbx8 ("we", "us", "our") operates the online gaming platform accessible at vbx8.bio. We act as the data controller in respect of the personal data we collect from players and visitors to our platform. This Privacy Policy applies to all personal data collected through or in connection with our website, mobile experience, customer support interactions and any promotions or competitions we run.

By registering an account or continuing to use the vbx8 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use and storage of your personal data as described herein. If you do not agree to this policy, please do not use the Platform.

Your Privacy at a Glance

2. Information We Collect

vbx8 collects personal data through several means: directly from you when you register an account or contact us, automatically when you use the Platform, and from third-party service providers who assist us in verifying your identity or processing your payments. We collect only what is necessary for the purposes described in this policy.

Registration & Account Data

• Full name as it appears on your official government-issued identification document.
• Mobile phone number (used as your primary account identifier and for two-factor authentication).
• Date of birth (used to verify that you meet the 21+ age requirement).
• Email address (used for account notifications, promotional communications where you have opted in, and password recovery).

Identity Verification (KYC) Data

• Copies of government-issued identification documents (National ID card, passport or driving licence) as required to comply with anti-money laundering obligations.
• Proof of address where required (for example, a utility bill, bank statement or official letter addressed to your registered address).
• Proof of payment method ownership (for example, a screenshot of your bKash or Nagad wallet showing the registered phone number matching your account).

Automatically Collected Data

• Device and browser information, including device type, operating system, browser version, screen resolution and device identifiers. This data is used for fraud prevention and to optimise the platform experience for your device.
• IP address and approximate geolocation derived from it. This is used to identify the jurisdiction from which you are accessing the Platform and to detect suspicious login activity.
• Gameplay data, including game session logs, bet amounts, game types played, win/loss records and session timestamps. This data is retained for dispute resolution, regulatory compliance and responsible gaming monitoring purposes.

3. How We Use Your Information

vbx8 uses the personal data we collect for the following purposes. We will not use your personal data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent.

• To create and manage your account, process your deposits and withdrawals and provide access to the games and services available on the Platform.
• To verify your identity and age in accordance with our KYC obligations, and to carry out ongoing anti-money laundering screening as required by applicable regulations.
• To detect, investigate and prevent fraudulent activity, cheating, bonus abuse and any other conduct that breaches our Terms & Conditions.
• To provide customer support, including handling complaints, responding to enquiries and resolving disputes related to game outcomes or payment transactions.
• To send you account-related notifications such as deposit confirmations, withdrawal updates, security alerts and important changes to our policies. These communications are not optional — they are a necessary part of providing the service.
• To send you promotional communications about bonuses, new games and seasonal offers — but only where you have opted in to receive such communications. You may opt out at any time via your account notification settings or by contacting support.

4. Legal Basis for Processing

vbx8 processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual necessity: Processing that is necessary to perform the contract between you and vbx8 — for example, verifying your identity so that we can open your account, processing deposits and withdrawals and settling bets.
• Legal obligation: Processing required to comply with applicable law — including anti-money laundering obligations, responsible gaming requirements and any order or request from a competent regulatory or law enforcement authority.
• Legitimate interests: Processing based on vbx8's legitimate interests, including detecting and preventing fraud, ensuring platform security, improving the quality of our services and analysing aggregate gameplay data to improve game offerings — except where such interests are overridden by your privacy rights.
• Consent: Processing based on your freely given, specific and informed consent — for example, processing your personal data to send you promotional emails and SMS messages about bonuses and offers. You may withdraw consent at any time.

5. Sharing Your Information

vbx8 does not sell, rent or trade your personal data to third parties for their own marketing purposes. We share personal data only in the circumstances described below, and only to the minimum extent necessary for the relevant purpose.

Categories of Third Parties We Share With

• Payment processors and financial institutions: We share transaction data with bKash, Nagad, Rocket, Upay and participating Bangladesh banks to process your deposits and withdrawals. These parties are subject to their own privacy and data security obligations.
• Identity verification (KYC) providers: We may share your identification documents and personal details with specialist KYC service providers who assist us in verifying your identity in compliance with anti-money laundering requirements.
• Game content providers: Game providers such as Pragmatic Play, Evolution Gaming, Spribe and Ezugi may receive anonymised session and gameplay data from vbx8 for the purpose of game performance monitoring and technical support. These providers do not receive personally identifiable information unless specifically required for dispute resolution.
• Regulatory and law enforcement authorities: We may be required by applicable law or a binding order from a competent authority to disclose personal data to government bodies, law enforcement agencies or regulatory authorities. We will comply with such requirements and, where permitted by law, will notify you of any such disclosure.

All third parties with whom vbx8 shares personal data are required to maintain appropriate technical and organisational security measures to protect that data and are prohibited from using it for any purpose beyond the specific purpose for which it was shared.

6. Payment Data & Financial Information

vbx8 does not store complete payment credentials for bKash, Nagad or Rocket on our own servers. When you make a deposit or withdrawal via a mobile financial service, the transaction is handled directly between your mobile wallet provider and our payment processing partner. vbx8 receives only a transaction reference, amount and status confirmation — not your full mobile banking PIN or any other authentication credential.

For bank card transactions (Visa, Mastercard), card details are processed directly by our PCI-DSS compliant payment gateway partners. vbx8 does not have access to your full card number, CVV or card expiry date at any point in the transaction process. We retain only a masked card reference (last four digits and card type) for the purpose of matching withdrawals to the correct payment method.

7. Cookies & Tracking Technologies

vbx8 uses cookies and similar technologies to operate the Platform, maintain your login session, prevent fraud and improve your experience. Cookies are small text files stored on your device by your browser. We use three categories of cookies:

• Essential cookies: These are strictly necessary for the Platform to function. They maintain your login session, remember your language preference and protect against cross-site request forgery. These cookies cannot be disabled without preventing the Platform from functioning correctly.
• Analytical cookies: These cookies help us understand how players use the Platform — which pages are visited most often, where users experience errors and how long a typical session lasts. This data is collected in aggregate and anonymised form and is used solely to improve the Platform.
• Preference cookies: These cookies remember choices you make on the Platform, such as your selected language, your preferred display settings and notification preferences, so that you do not need to re-configure them on each visit.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair or prevent your ability to use the Platform. Disabling analytical or preference cookies will not affect your ability to log in or place bets but may reduce the quality of your experience.

8. Data Retention

vbx8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply: account data and transaction records are retained for a minimum of five (5) years from the date of account closure to comply with anti-money laundering record-keeping obligations; KYC documents are retained for the same five-year minimum period; gameplay logs are retained for three (3) years for dispute resolution purposes; promotional communication preferences and opt-in records are retained for the duration of your account and for one year following account closure.

Where a legal or regulatory obligation requires us to retain data for a longer period, we will comply with that obligation. Where you have requested deletion of your personal data and no legal obligation prevents us from complying with that request, we will delete or irreversibly anonymise your data within thirty (30) days of receiving the verified request.

9. Data Security

vbx8 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include: industry-standard SSL/TLS encryption for all data in transit between your device and our servers; encryption of sensitive data fields at rest in our databases; role-based access controls that limit which staff members can access personal data and for what purpose; regular penetration testing and security audits of our platform infrastructure; and two-factor authentication for player accounts and for internal administrative access.

No system is completely immune to security incidents. In the unlikely event of a data breach that is likely to result in a high risk to your rights and freedoms, vbx8 will notify affected players as promptly as possible and take all reasonable steps to mitigate the impact of the breach. We encourage all players to use a strong and unique password for their vbx8 account and to enable any available two-factor authentication features.

10. Your Rights

As a player using the vbx8 platform, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within thirty (30) days. In some cases, we may need to ask you to verify your identity before we can action your request.

• 👁️
  Right of Access — You have the right to request a copy of the personal data we hold about you, along with information about how and why we are processing it.
• ✏️
  Right of Rectification — If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
• 🗑️
  Right of Erasure — You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (if consent was the legal basis), or where we have no legitimate basis to continue processing it. This right is subject to legal retention obligations.
• ⏸️
  Right to Restrict Processing — You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while we are investigating a dispute about the accuracy of your data.
• 📦
  Right to Data Portability — Where we process your personal data by automated means on the basis of your consent or a contract with you, you have the right to receive a copy of that data in a structured, commonly used and machine-readable format.
• 🚫
  Right to Object — You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis — including profiling for direct marketing purposes. Where you object to direct marketing, we will cease that processing immediately.

vbx8 will not charge a fee for handling a data rights request unless the request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or to decline the request. We will always explain our reasoning if we are unable to comply with a request in full.

11. Protection of Minors

The vbx8 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will delete that data immediately and close the associated account. If you are a parent or guardian and believe that a person under 21 in your household has registered an account with vbx8, please contact us immediately at [email protected] so that we can take prompt action.

12. Third-Party Links

The vbx8 platform may from time to time reference or link to third-party websites or services, such as the websites of game providers or payment partners. These third-party sites operate under their own privacy policies, which vbx8 has no control over and is not responsible for. We recommend that you review the privacy policy of any third-party site before providing them with your personal data.

13. Changes to This Privacy Policy

vbx8 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify registered players by email or by an in-platform notification at least seven (7) days before the updated policy takes effect, except where an immediate change is required by law.

The date at the top of this page indicates when the current version of the Privacy Policy was last updated. Your continued use of the Platform following the effective date of any revised policy constitutes your acceptance of the revised policy.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a complaint about how vbx8 has handled your personal data, please contact our Data Support team. We take all privacy concerns seriously and will acknowledge your contact within 48 hours. Our team is available 24 hours a day, 7 days a week, in both English and Bengali.

Email: [email protected]