va777 Privacy
Policy

va777 collects personal data from you in several ways: directly when you register an account or contact support, automatically when you use the platform, and occasionally from third-party identity verification or payment providers. The categories of personal data we collect are described below.

Registration and identity data:

• Full legal name as it appears on government-issued identification;
• Date of birth (used for mandatory age verification);
• Email address and, where provided, mobile phone number;
• Residential address including city, district, and postcode;
• Nationality and country of residence;
• Username and hashed account password.

Identity verification (KYC) data:

• Copies of government-issued photographic identification (national ID card, passport, or driving licence);
• Proof of address documents (utility bills or bank statements dated within three months);
• Selfie or liveness check image where required by our verification provider.

Financial and transactional data:

• Deposit and withdrawal amounts, dates, and associated payment method references;
• bKash, Nagad, Rocket, or Upay account identifiers (not PINs or full credentials);
• Masked card numbers for Visa and Mastercard transactions;
• Wagering history, game activity logs, and bonus redemption records.

Technical and usage data:

• IP address and approximate geolocation derived from it;
• Browser type, version, and operating system;
• Device identifiers and screen resolution;
• Pages visited, session duration, click paths, and referral source;
• Cookie identifiers and similar tracking technologies (see Section 4).

Communications data:

• Content of live chat conversations with our support team;
• Email correspondence and support ticket records;
• Feedback, complaints, or dispute submissions.

va777 does not sell, rent, or trade your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Service providers and data processors:

va777 engages trusted third-party service providers who process data on our behalf under strict contractual terms. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card network processors (Visa, Mastercard) receive transaction data necessary to authorise and settle deposits and withdrawals;
• Identity verification providers: KYC and age verification platforms receive identity documents submitted during account verification to perform automated and manual checks;
• Cloud infrastructure and hosting providers: Server and database infrastructure providers who store platform data under data processing agreements;
• Customer support platform providers: Live chat and ticketing software used to deliver 24/7 support to players;
• Analytics providers: Aggregated and anonymised usage analytics platforms that help va777 understand platform performance (no individually identifying data is shared with analytics vendors).

Legal and regulatory disclosures:

va777 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, court order, or in response to a lawful request made by a government authority. In such cases, va777 will disclose only the minimum data required to comply with the relevant legal obligation.

Anti-money laundering obligations:

Where va777's AML monitoring procedures identify suspicious transaction patterns, relevant data may be disclosed to the appropriate financial intelligence unit or law enforcement body in accordance with va777's offshore compliance obligations.

Business transfers:

In the event of a merger, acquisition, or sale of all or part of va777's business assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any resulting material changes to this Privacy Policy before the transfer takes effect.

va777 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include but are not limited to the following:

• Transport Layer Security (TLS): All communications between your device and the va777 platform are encrypted using TLS 1.2 or higher, protecting data from interception during transit;
• Password hashing: Account passwords are stored as salted cryptographic hashes. va777 staff cannot view your plaintext password under any circumstances;
• Access controls: Access to production databases and player records is restricted to authorised personnel only, governed by role-based access controls and audit logging;
• Infrastructure security: Platform servers are hosted in access-controlled data centres with physical security, redundant power, and network intrusion detection systems;
• Regular security reviews: va777 conducts periodic internal security assessments to identify and address potential vulnerabilities;
• Incident response: va777 maintains a data incident response procedure. In the event of a data breach that poses a risk to players, affected individuals will be notified without undue delay.

While va777 takes its security obligations seriously, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their va777 accounts and to enable any additional authentication options available in their account settings. You must notify va777 immediately if you suspect any unauthorised access to your account.

va777 respects the privacy rights of all players. Depending on your circumstances and applicable law, you may have some or all of the following rights in relation to the personal data that va777 holds about you:

• Right of access: You may request a copy of the personal data va777 holds about you. We will respond to verified access requests within 30 days;
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated;
• Right to erasure: In certain circumstances you may request that va777 delete your personal data. This right is subject to overriding legal retention obligations — for example, transaction records that must be retained for AML compliance cannot be erased on request;
• Right to restrict processing: You may ask va777 to restrict the processing of your data in certain circumstances, such as while a dispute about data accuracy is being resolved;
• Right to data portability: Where processing is based on your consent or on a contract, you may request that your data be provided in a structured, machine-readable format;
• Right to object: You may object to processing that is based on va777's legitimate interests. We will assess your objection and cease processing unless compelling legitimate grounds exist that override your interests;
• Right to withdraw consent: Where processing is based on your consent (for example, receipt of promotional emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our support team via live chat. We may ask you to verify your identity before acting on a request, to ensure we do not disclose or modify data belonging to another individual. We will respond to all verifiable requests within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 30 days and will inform you of the extension.