vk22 Privacy Policy

This Privacy Policy ("Policy") describes how vk22 ("we", "us", "our") collects, uses, stores, and protects personal information provided by users ("you", "your") when you register an account, access services, place bets, play casino games, or otherwise interact with the vk22 platform at vk22.io ("the Platform").

This Policy applies to all individuals who visit, register with, or use the vk22 Platform, including players based across Bangladesh — in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations. It applies whether you access the Platform via a desktop browser, mobile browser, or any other compatible device.

This Policy should be read together with the vk22 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference. By creating a vk22 account or continuing to use the Platform after this Policy has been updated, you confirm that you have read and understood its contents.

vk22 collects personal data through several channels: directly from you when you register or update your account; automatically when you use the Platform; and from third-party identity verification and payment processing services. The specific categories of data collected are set out in the Data Overview table above and described further below.

Data you provide directly: When registering, you provide identity data (full name, date of birth, national ID or passport details) and contact data (email address, phone number, residential address). When making a deposit or withdrawal, you provide financial data (your bKash, Nagad, Rocket, or Upay account reference, or bank account details). When contacting support, you provide communications data in the form of your messages and any attachments you submit.

Data collected automatically: When you visit or use the Platform, vk22 automatically collects certain technical data including your IP address, device identifiers, browser type and version, operating system, and session timing data. vk22 also collects usage data relating to your interaction with games, betting markets, and platform features — including games played, wager amounts, session lengths, and navigation paths through the Platform.

Data from third parties: vk22 may receive identity verification data from third-party Know Your Customer (KYC) service providers where their services are used to confirm your age and identity. vk22 may also receive fraud signals and transaction confirmation data from payment processors including bKash, Nagad, Rocket, Upay, and banking institutions.

vk22 uses your personal data for the following specific purposes. For each purpose, the applicable legal basis is identified in parentheses:

• Account creation and management — to register your account, verify your identity, manage your profile, and communicate essential account information to you. (Contractual necessity)
• Age verification — to confirm that you meet the minimum age requirement of 21 years before granting access to real-money gambling services. (Legal obligation)
• Payment processing — to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain an accurate record of your transaction history. (Contractual necessity)
• Customer support — to respond to your enquiries, resolve disputes, and provide technical assistance. Support interactions may be recorded for quality assurance and training purposes. (Contractual necessity; Legitimate interests)
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, identity theft, and other illegal conduct on or through the Platform. (Legal obligation; Legitimate interests)
• Responsible gaming monitoring — to monitor your gambling patterns and intervene where usage patterns suggest potential problem gambling behaviour, in accordance with our Responsible Gaming Policy. (Legal obligation; Legitimate interests)
• Platform improvement — to analyse usage data in aggregate and at individual level to improve the functionality, performance, and content of the vk22 Platform. (Legitimate interests)
• Marketing and promotions — where you have given your consent, to send you promotional offers, bonus notifications, tournament invitations, and seasonal campaigns by email or SMS. You may withdraw consent at any time. (Consent)
• Legal compliance — to comply with any applicable legal or regulatory obligations, including responding to lawful requests from law enforcement or government authorities. (Legal obligation)

vk22 will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or establishing a new legal basis for processing.

vk22 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) on the Platform to ensure the Platform functions correctly, to remember your preferences, and to gather analytics data that helps us improve the Platform experience.

The types of cookies used by vk22 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They include session cookies that keep you logged in during your visit, security cookies that protect against cross-site request forgery, and cookies that maintain the state of your active game sessions. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: These cookies remember your preferences such as language settings and display options to provide a more personalised experience. Disabling these cookies may affect Platform functionality but will not prevent you from accessing core features.
• Analytics Cookies: These cookies collect aggregated data about how users interact with the Platform, including which pages are visited most frequently and how long users spend on particular sections. This data is used exclusively for internal Platform improvement purposes.
• Marketing Cookies: Where you have provided consent, these cookies may be used to show you relevant promotional content on the vk22 Platform. vk22 does not use third-party advertising networks or allow external advertisers to place cookies on the Platform.

vk22 does not sell your personal data. We may share your personal data with third parties only in the following circumstances, and only to the extent necessary for the specified purpose:

• Payment processors: Your financial data (payment account references and transaction details) is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment institutions solely for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Your identity and address data may be shared with third-party KYC service providers to verify your age and identity as required for account registration and ongoing compliance. These providers are bound by strict data processing agreements with vk22.
• Game content providers: Where you play games supplied by third-party providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, or Spribe, those providers may receive limited technical data (such as your anonymised player ID and session data) necessary to operate the game. These providers are not permitted to use this data for their own marketing purposes.
• Fraud prevention services: Technical and financial data may be shared with fraud detection and anti-money laundering (AML) service providers to protect the integrity of the Platform and comply with financial crime prevention obligations.
• Law enforcement and regulatory authorities: vk22 will disclose personal data to law enforcement agencies, courts, or regulatory authorities when required to do so by applicable law, court order, or lawful government request. Where legally permitted, vk22 will notify you of such disclosure in advance.
• Business transfers: In the event that vk22 undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the acquiring entity assuming the obligations of this Privacy Policy.

All third parties with whom vk22 shares personal data are required to maintain appropriate technical and organisational security measures and to process your data solely for the purposes specified in their data processing agreements with vk22.

vk22 is an online platform serving players primarily in Bangladesh. Some of the third-party service providers with whom vk22 shares data — including game content providers such as Evolution Gaming, Pragmatic Play, and NetEnt, and certain technical infrastructure providers — may process data in countries outside of Bangladesh.

Where personal data is transferred to a country that does not offer an equivalent level of data protection to Bangladesh, vk22 takes steps to ensure that appropriate safeguards are in place. These safeguards may include contractual clauses that impose data protection obligations on the receiving party, equivalent in scope to those applicable within Bangladesh.

By using the vk22 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh, subject to the safeguards described in this section. If you have questions about international transfers of your data, please contact the vk22 Data Protection contact at [email protected].

vk22 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account relationship with vk22, plus a minimum of 5 years following account closure, for compliance and regulatory record-keeping purposes.
• Transaction and financial data: Retained for a minimum of 7 years following the date of each transaction, in accordance with financial record-keeping obligations applicable to online payment processing and anti-money laundering compliance.
• Support communications: Retained for up to 3 years from the date of the interaction, or longer where the communication relates to an unresolved dispute or regulatory matter.
• Technical and usage data: Retained in identifiable form for up to 2 years, after which it may be retained in fully anonymised aggregate form for analytical purposes without time limit.
• Marketing preference data: Retained for as long as you remain a registered vk22 player or until you withdraw consent to marketing communications, whichever occurs first.

When retention periods expire, personal data is securely deleted or irreversibly anonymised. If you have requested deletion of your account and data, vk22 will process your request within 30 days, subject to retaining any data that vk22 is legally obligated to keep beyond that period.

As a vk22 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the vk22 support team at [email protected] with a clear description of your request and sufficient information to verify your identity.

vk22 will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. vk22 reserves the right to refuse requests that would require the deletion of data that vk22 is legally obligated to retain, or that would impair vk22's ability to detect or prevent fraud.

The vk22 Platform is strictly intended for adults aged 21 years and above. vk22 does not knowingly collect personal data from any individual under the age of 21. If you are under 21 years of age, you must not use or attempt to access the vk22 Platform or register an account.

During the account registration process, vk22 requires users to confirm their date of birth and agree that they meet the minimum age requirement. vk22 also conducts age verification checks using third-party identity verification services as part of its Know Your Customer (KYC) process. Any account found to belong to a person under the age of 21 will be immediately suspended, and any funds held within that account will be withheld pending investigation.

vk22 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and vk22's servers
• Encryption at rest for sensitive stored data including identity documents, financial account references, and authentication credentials
• Access controls limiting internal access to personal data to only those vk22 staff members who require it to perform their job function, on a strictly need-to-know basis
• Regular security assessments including penetration testing and vulnerability scanning of the Platform's infrastructure
• Multi-factor authentication requirements for internal administrative access to data systems
• Incident response procedures including a data breach notification process — in the event of a breach affecting your personal data, vk22 will notify you without undue delay where required by applicable law

While vk22 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. You are also responsible for maintaining the security of your own account credentials. If you suspect that your vk22 account has been compromised, contact us immediately at [email protected].

The vk22 Platform may contain references to third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While these providers supply game content that is delivered within the vk22 Platform environment, they operate under their own privacy practices with respect to data collected directly through their game engines.

vk22 is not responsible for the privacy practices or content of any third-party game provider, payment processor, or external service whose technology is integrated into the Platform. vk22 recommends that you review the privacy documentation of any third-party provider whose services you use in conjunction with the vk22 Platform.

The vk22 Platform does not contain links to unaffiliated external websites for advertising or referral purposes. All navigation links within the Platform direct users to other pages within vk22.io. vk22 does not operate an affiliate tracking system that results in the sharing of your personal data with third-party affiliate websites.

vk22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made to this Policy, vk22 will notify registered users by email or by displaying a prominent notice on the Platform prior to the changes taking effect.

The "Effective Date" shown at the top of this Policy indicates when the current version came into force. The "Last Reviewed" date indicates when the Policy was most recently assessed for accuracy and completeness. Prior versions of this Policy are available on request by contacting [email protected].

Your continued use of the vk22 Platform following notification of any changes to this Policy constitutes your acceptance of those changes. If you do not agree with any updated version of this Policy, you should cease using the Platform and may request closure of your account by contacting our support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or vk22's handling of your personal data, please contact the vk22 Data Protection team using the details below. All enquiries are handled in English and responses are issued within 5 working days under normal circumstances, and within 30 days for formal data rights requests.

• Email: [email protected]
• Subject line for data rights requests: "Privacy / Data Rights Request — [Your Registered Username]"
• Response time: Up to 5 working days for general enquiries; up to 30 calendar days for formal data rights requests
• Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

If you are not satisfied with vk22's response to your complaint or data rights request, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. vk22 is committed to resolving all privacy-related concerns in good faith and in accordance with applicable law.