vm99 Privacy Policy

Last updated: January 2026

1. Information We Collect

When you register and use vm99, we collect personal information that is necessary to provide, secure, and improve your experience on the platform. The categories of personal data we collect include:

• Identity information: full name, date of birth, and a copy of a government-issued identification document where KYC verification is required.
• Contact information: email address and mobile phone number, used for account communication and transaction notifications.
• Financial information: deposit and withdrawal transaction records, payment method identifiers (e.g. bKash or Nagad account reference), and account balance history. We do not store full payment card numbers.
• Technical information: IP address, device type and operating system, browser type, session timestamps, and geolocation data derived from your IP address.
• Usage data: game history, bet amounts, platform navigation patterns, and interaction logs. This data is used for responsible gaming monitoring and fraud prevention.

We collect only the minimum data necessary for the purposes stated in this policy. You may be asked to provide additional documentation at the KYC verification stage in order to comply with anti-money laundering obligations.

2. How We Use Your Information

The personal data we collect is used exclusively for the following purposes. We do not use your data for any purpose not listed here without first obtaining your separate consent:

• Account creation and management: to register your account, verify your identity, and maintain the accuracy of your account records throughout your use of vm99.
• Transaction processing: to facilitate deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment providers, and to maintain accurate financial records for your account.
• Customer support: to respond to your enquiries, resolve disputes, and process complaints submitted to the vm99 support team.
• Responsible gaming: to monitor account activity for indicators of problem gambling and to enforce any self-restriction tools, deposit limits, or exclusions you have activated on your account.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, unauthorised account access, money laundering, and other illegal or prohibited activity.
• Platform improvement: to analyse aggregate usage patterns, identify technical issues, and improve the overall experience of vm99 for all Bangladeshi players. Analytical data used for this purpose is anonymised where possible.

3. Legal Basis for Processing

vm99 processes your personal data under the following legal bases, each of which applies to one or more of the processing activities described in this policy:

• Contractual necessity: processing required to fulfil the agreement between you and vm99, including account creation, payment processing, and customer support.
• Legal obligation: processing required to comply with applicable law, including anti-money laundering regulations, age verification requirements, and responding to lawful regulatory requests.
• Legitimate interests: processing carried out for fraud detection, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your rights.
• Consent: processing for optional purposes such as promotional communications. You may withdraw consent for these at any time by contacting [email protected] or updating your account notification preferences.

4. Sharing Your Information

vm99 does not sell, rent, or trade your personal data to any third party for marketing purposes. We share your data only in the following limited circumstances:

• Payment processors: we share transaction data with bKash, Nagad, Rocket, and other payment partners solely to process deposits and withdrawals you initiate on your vm99 account.
• Game providers: your account identifier and session data may be shared with licensed game studios (such as Pragmatic Play, Evolution Gaming, and Spribe) to enable game access and maintain fair play records.
• Fraud and compliance services: we may share data with third-party identity verification, KYC, and fraud detection providers where this is necessary to meet our legal obligations or protect the integrity of the platform.
• Legal authorities: we may disclose personal data to regulatory authorities or law enforcement agencies where required by applicable law or in response to a valid legal order.

Where we share data with third-party service providers, we ensure they are bound by appropriate data protection obligations and are not permitted to use your data for any purpose beyond the specific service they provide to vm99.

5. Cookies and Tracking Technologies

vm99 uses cookies and similar tracking technologies to operate the platform, remember your session, and analyse how you use the site. The types of cookies we use are:

• Essential cookies: required for the platform to function correctly. These include session cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled.
• Analytics cookies: used to understand how visitors interact with vm99, which pages are visited most frequently, and where technical issues occur. Data collected is aggregated and anonymised.
• Functional cookies: used to remember your preferences, such as language settings, so that the platform behaves consistently across your sessions.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some features on vm99. Essential session cookies are required for the platform to operate and cannot be turned off while you are actively using the site.

6. Data Retention

vm99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Account data (identity, contact, financial records) is retained for the duration of your active account and for a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping obligations. Usage and game data is retained for a rolling 24-month period and then anonymised or deleted. Support correspondence is retained for 3 years. Where you request deletion of your data and there is no legal obligation preventing this, we will process your request within 30 days.

7. Data Security

vm99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes 256-bit SSL encryption on all data transmissions, firewalled server environments with restricted access controls, regular security auditing and vulnerability assessments, and staff training on data handling and privacy obligations. While we take every reasonable precaution to protect your data, no online system is entirely immune from risk. If you believe your vm99 account has been accessed without your authorisation, please contact us immediately at [email protected].

8. Your Rights

As a user of vm99, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line 'Data Rights Request' and your registered account username:

• Right of access: you may request a copy of the personal data we hold about you at any time. We will respond to valid requests within 30 days.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
• Right to erasure: you may request deletion of your personal data where there is no longer a legal or contractual basis for us to retain it. Note that certain data must be retained for regulatory compliance regardless of this request.
• Right to restrict processing: in certain circumstances you may request that we limit the way we use your data, for example while a dispute about its accuracy is resolved.
• Right to data portability: you may request a structured, machine-readable copy of the personal data you have provided to vm99 for the purpose of transferring it to another service provider.
• Right to object: you have the right to object to processing of your personal data where that processing is based on our legitimate interests, including profiling. You also have the right to object to receiving direct marketing communications at any time.

vm99 will acknowledge receipt of all data rights requests and aim to resolve them within 30 days. In complex cases this may be extended to 60 days, and you will be informed of any extension. There is no fee for exercising your rights under this policy.

9. Children's Privacy

vm99 is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 21. If we discover that a minor has registered an account or provided personal data, we will immediately close that account, delete all associated data, and reverse any transactions where possible. If you believe a minor has accessed vm99, please notify us immediately at [email protected] so we can take appropriate action without delay.

10. Third-Party Links

The vm99 platform may contain references to third-party game providers and payment services. While we take care in selecting our partners, vm99 is not responsible for the privacy practices or content of any third-party service. Each third-party provider operates under its own privacy policy, and we encourage you to review those policies before engaging with any external service. This Privacy Policy applies only to data collected directly by vm99 through the vm99 platform.

11. Changes to This Privacy Policy

vm99 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will update the 'Last updated' date at the top of this page and, where the changes are significant, notify registered users via their account email address or through an in-platform notification. Your continued use of vm99 following notification of any change constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vm99 handles your personal data, please contact our privacy team by email at [email protected]. Please include your registered account username and a clear description of your request. Our team is available 24 hours a day, 7 days a week and will respond to all privacy-related enquiries within 5 business days.