vsbat Privacy Policy — Your Data, Protected

vsbat collects personal data about you in three primary ways: information you provide directly during registration and account use, information collected automatically as you interact with the platform, and information we receive from trusted third-party partners such as payment processors and identity verification services. We collect only the data that is necessary for the purposes described in this Privacy Policy.

Information You Provide Directly: When you register a vsbat account, place a bet, make a deposit or withdrawal, contact our support team, or respond to a promotion, you may provide us with personal data including your full legal name, date of birth, email address, Bangladesh mobile number, residential address, and payment account details (such as your bKash or Nagad number). During KYC verification, you may also be asked to submit copies of official identity documents such as your National ID Card (NID), passport, or a utility bill confirming your address.

Information Collected Automatically: When you access vsbat through a browser or mobile device, we automatically collect certain technical and behavioural data. This includes your IP address, device type, operating system, browser type and version, pages visited on the vsbat platform, time and duration of visits, session identifiers, and in-platform activity such as games played, bets placed, and features used. This data is collected through cookies, server logs, and similar tracking technologies as described in Section 4 of this policy.

Information from Third Parties: vsbat may receive personal data about you from third-party service providers operating on our behalf. These include payment processors (bKash, Nagad, Rocket, Upay, bank transfer partners), identity verification providers, fraud detection services, and analytics platforms. Any data received from third parties is handled under the same standards described in this Privacy Policy.

vsbat does not knowingly collect personal data from persons under the age of 18. If we become aware that data has been collected from an individual who is under 18, we will delete it promptly and close the associated account. If you believe a minor has submitted data to vsbat, please contact us immediately at [email protected].

vsbat does not sell, rent, or commercially transfer your personal data to any third party. However, to operate the platform effectively and meet our legal obligations, we do share limited personal data with carefully selected categories of third parties. In every case, data is shared only to the extent necessary for the specific purpose, and all third-party partners are contractually required to handle your data securely and in accordance with applicable data protection standards.

Payment Service Providers: To process your deposits and withdrawals, we share relevant financial and identity data with our payment partners — including bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfer partners such as Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These providers receive only the information required to complete the specific transaction.

Identity Verification and KYC Providers: vsbat uses third-party KYC and identity verification services to confirm your age, identity, and source of funds where required. These providers process your identity documents under strict confidentiality agreements and are not permitted to use your data for any purpose other than completing the verification service on our behalf.

Game and Software Providers: Some games available on vsbat are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive session-level technical data necessary to operate the game (such as a session token and stake amount) but do not receive your full identity or financial profile.

Legal and Regulatory Authorities: vsbat may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies in Bangladesh where we are legally required or compelled to do so. We will notify you of any such disclosure where we are legally permitted to do so.

Analytics and Security Providers: We use reputable analytics and fraud-detection providers to monitor platform health and security. These providers receive anonymised or pseudonymised data where technically feasible and are not permitted to identify individual users from the data they process on our behalf.

vsbat implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, vsbat employs industry-standard practices to minimise risk and respond rapidly to any security incident.

• SSL/TLS encryption in transit: All data transmitted between your device and the vsbat platform is encrypted using SSL/TLS protocols. The connection is indicated by the padlock icon in your browser's address bar.
• Encryption at rest: Sensitive data stored in our databases — including financial account details and identity document images — is encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data within vsbat's internal systems is restricted on a strict need-to-know basis. Staff members can only access the categories of data required to perform their specific role.
• Two-factor authentication (2FA): vsbat supports two-factor authentication for player accounts and requires it for internal staff accessing sensitive systems.
• Penetration testing and vulnerability scanning: vsbat conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: vsbat maintains a documented data breach response plan. In the event of a confirmed security incident affecting your personal data, we will notify you and relevant authorities within the timeframes required by applicable law.
• Staff training: All vsbat staff with access to personal data receive mandatory data protection and security awareness training on a regular basis.

You also play an important role in keeping your account secure. Use a strong, unique password for your vsbat account. Do not share your login credentials with anyone. Enable two-factor authentication if available. Contact [email protected] immediately if you suspect unauthorised access to your account.

As a vsbat player, you hold a set of rights over your personal data. vsbat is committed to respecting and facilitating these rights. To exercise any of the rights listed below, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receipt. Where a request is complex or high in volume, we may extend this period by an additional 30 days, and we will notify you of the extension and its reason.

• Right of Access: You have the right to request a copy of the personal data vsbat holds about you, along with information about how and why it is processed. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data vsbat holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Please note that corrections to identity data may require re-submission of KYC documents.
• Right to Erasure: Also known as the "right to be forgotten", this right allows you to request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and no other lawful basis applies. This right is subject to legal retention obligations as described in Section 6.
• Right to Restrict Processing: You may request that vsbat limit the way it processes your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while a complaint is under review.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where vsbat relies on legitimate interest as its lawful basis. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

vsbat will not charge a fee for responding to a privacy rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We may need to verify your identity before processing a rights request to ensure your data is not disclosed to an unauthorised party.