va77 Privacy Policy — How We Collect, Use, and Protect Your Personal Data
At va77, your privacy is a fundamental commitment, not a legal formality. This Privacy Policy explains precisely what personal data we collect from Bangladesh players, how we use and protect it, who we share it with, and what rights you hold over your own information at all times.
This Privacy Policy ("Policy") is issued by va77 ("the Platform", "we", "us", "our") and applies to all personal data collected through va77.io and its associated services. By registering an account or using any service on the platform, you acknowledge that you have read and understood this Policy in full.
1 Who We Are
va77 is an online betting and casino platform operating at va77.io and serving players in Bangladesh. We offer sports betting on cricket, football, and kabaddi, as well as live casino games, slots, and crash games. References to "va77", "we", "us", and "our" throughout this Policy refer to the platform operator responsible for processing your personal data.
va77 acts as the data controller in respect of the personal data you provide when registering and using our platform. As data controller, we determine the purposes and means by which your personal data is processed and bear responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.
For all privacy-related queries, requests, or complaints, you may contact our dedicated privacy team at [email protected]. We will acknowledge receipt of all written privacy enquiries within 5 business days and aim to resolve them fully within 30 calendar days.
2 Personal Data We Collect
va77 collects personal data through several channels: directly from you when you register and use our platform, automatically through technical systems as you interact with our website, and in limited circumstances from trusted third-party verification partners. The categories of data we collect are described below.
2.1 Registration and Identity Data
When you create a va77 account, we collect your full legal name, date of birth, National Identity Card (NID) number or passport number, residential address, email address, and mobile phone number. This data is required to create and administer your account and to verify your identity in compliance with our age verification and anti-money laundering obligations.
2.2 Financial and Transaction Data
We collect records of all financial transactions conducted through your va77 account, including deposit amounts, withdrawal amounts, payment method identifiers (such as your bKash, Nagad, or Rocket account reference), bank account details where applicable, and transaction timestamps. We do not store full payment card numbers on our servers. Payment card processing is handled by PCI DSS-compliant third-party payment processors.
2.3 Gaming Activity Data
We maintain records of your betting and gaming activity on the platform, including bets placed, games played, amounts wagered, winnings received, and session durations. This data is used to administer your account, calculate your balance, detect suspicious activity, and operate our responsible gaming tools.
2.4 Technical and Device Data
When you access va77.io, our servers automatically collect certain technical data, including your IP address, device type and model, operating system and version, browser type and version, screen resolution, referring URL, pages visited, and timestamps of activity. This data is collected through server logs and cookies as described in Section 6 below.
2.5 Communications Data
If you contact va77 via live chat, email, or any other channel, we retain records of those communications including the content of messages, timestamps, and any attachments submitted. These records are kept for quality assurance, dispute resolution, and legal compliance purposes.
2.6 Verification Documents
As part of our know-your-customer (KYC) process, we may request copies of identity documents, including your NID, passport, driving licence, or a recent utility bill or bank statement as proof of address. These documents are stored securely and used exclusively for identity verification and regulatory compliance purposes.
va77 collects only the personal data that is strictly necessary for the purposes described in this Policy. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless this is directly relevant to a responsible gaming assessment and you have provided explicit consent.
3 How We Use Your Personal Data
va77 uses the personal data we collect for the following purposes. We will only process your data for a purpose that is compatible with the original purpose for which it was collected, unless we have obtained your explicit consent or are required to do so by law.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and administration | Identity, contact, and verification data | Contract performance |
| Age verification (21+ compliance) | Date of birth, NID, verification documents | Legal obligation |
| Payment processing and fraud prevention | Financial, transaction, and device data | Contract performance; legitimate interests |
| Responsible gaming monitoring | Gaming activity, session data | Legal obligation; legitimate interests |
| Customer support and dispute resolution | Communications and account data | Contract performance; legitimate interests |
| Anti-money laundering checks | Identity, financial, and transaction data | Legal obligation |
| Platform security and fraud detection | Technical, device, and behavioural data | Legitimate interests |
| Marketing communications (with consent) | Contact data, gaming preferences | Consent |
| Service improvement and analytics | Technical and gaming activity data | Legitimate interests |
Where we rely on consent as the legal basis for processing — specifically for marketing communications — you may withdraw that consent at any time by updating your notification preferences in your account settings or by emailing [email protected]. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to withdrawal.
4 Legal Basis for Processing
va77 processes your personal data only where we have a valid legal basis to do so. We rely on the following legal bases depending on the nature of the processing activity:
- Contract Performance: Processing is necessary to fulfil our contractual obligations to you as a registered account holder, including providing access to games, processing deposits and withdrawals, and administering your account.
- Legal Obligation: Processing is required to comply with applicable laws and regulations, including age verification requirements, anti-money laundering obligations, responsible gaming regulations, and record-keeping requirements.
- Legitimate Interests: Processing is necessary for the purposes of our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. Legitimate interests include preventing fraud, ensuring platform security, improving our services, and conducting analytics.
- Consent: Where none of the above bases apply, we will request your explicit consent before processing your data for a specific purpose, such as sending you promotional communications. You may withdraw consent at any time.
5 How We Share Your Personal Data
va77 does not sell your personal data to third parties for their own commercial purposes under any circumstances. We share your data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose.
5.1 Payment Processors
We share necessary financial data with payment service providers including bKash, Nagad, Rocket, Upay, and our banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) to process your deposits and withdrawals. These providers are contractually obligated to protect your data and may only use it for the specific purpose of processing your transaction.
5.2 Identity Verification Partners
We use third-party identity verification services to assist with KYC checks and age verification. These services receive only the minimum data required to complete the verification process and are bound by strict data processing agreements.
5.3 Game Content Providers
Live casino and slot content on va77 is provided by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited session and gaming activity data necessary to deliver their games and ensure fair play. They do not receive your identity or financial data beyond what is required for game operation.
5.4 Legal and Regulatory Authorities
We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to prevent or detect crime, protect the rights of va77 or third parties, or enforce our Terms & Conditions.
5.5 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of our business, your personal data may be transferred to the relevant successor entity. We will notify you in advance of any such transfer and of any changes to this Privacy Policy that result from it.
All third parties who receive your personal data from va77 are required to process that data in accordance with applicable data protection law and are prohibited from using it for any purpose other than the specific purpose for which it was shared.
6 Cookies & Tracking Technologies
va77 uses cookies and similar tracking technologies on va77.io to ensure the platform functions correctly, to improve your experience, and to support our analytics and security systems. A cookie is a small text file stored on your device by your browser when you visit a website.
6.1 Types of Cookies We Use
- Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as account authentication, session management, and security. These cookies cannot be disabled.
- Performance and Analytics Cookies: These cookies collect anonymised data about how players use va77.io, which pages are visited most frequently, and where errors occur. This data helps us improve the platform. We use analytics tools that process data on our behalf under strict data processing agreements.
- Functional Cookies: These cookies remember your preferences such as language settings, display preferences, and notification choices so that you do not need to re-enter them each time you visit.
- Marketing Cookies: With your consent, these cookies track your browsing activity to allow us to deliver relevant promotional content. You may opt out of marketing cookies at any time through your browser settings or by contacting [email protected].
6.2 Managing Cookies
Most browsers allow you to view, manage, and delete cookies through the browser settings menu. Please note that disabling strictly necessary cookies will impair the functionality of va77.io and may prevent you from accessing certain features, including your account. Detailed instructions for managing cookies are available in the help section of your browser.
7 Data Security
va77 employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes the following protections:
- All data transmitted between your device and va77.io is encrypted using 256-bit SSL (Secure Sockets Layer / TLS 1.3) technology.
- Account passwords are stored using strong one-way cryptographic hashing algorithms. Plain-text passwords are never stored or transmitted.
- Access to personal data within our organisation is restricted on a strict need-to-know basis. Staff who handle personal data receive regular data protection training.
- Our servers are hosted in secure data centres with physical access controls, redundant power supplies, and continuous monitoring.
- We conduct regular security assessments and penetration tests to identify and address vulnerabilities in our systems.
- Two-factor authentication (2FA) is available to all account holders and is strongly recommended to provide an additional layer of account security.
While va77 takes all reasonable precautions to protect your data, no system of data transmission or storage can be guaranteed to be completely secure. If you believe your account has been compromised, please contact our support team immediately at [email protected] or via live chat.
8 Data Retention
va77 retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. Our general data retention principles are as follows:
- Active Account Data: While your account remains active, we retain all registration, identity, financial, and gaming activity data necessary to administer your account and comply with our legal obligations.
- Closed Account Data: Following the closure of your account, we retain your personal data for a minimum of 5 years to comply with anti-money laundering regulations, tax record-keeping requirements, and to defend against any legal claims that may arise.
- Communications Records: Customer support communications are retained for 3 years following the resolution of the relevant enquiry or dispute.
- Technical and Log Data: Server log and technical data is retained for a maximum of 12 months, after which it is securely deleted or anonymised.
- Marketing Consent Records: Records of your marketing consent preferences are retained for the duration of your account and for 3 years following account closure.
At the end of the applicable retention period, your personal data will be securely deleted or permanently anonymised so that it can no longer be linked to your identity.
9 Your Data Rights
As a va77 account holder, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" along with sufficient information to verify your identity.
- Right of Access: You may request a copy of all personal data that va77 holds about you, along with information about how it is being used.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
- Right to Erasure: In certain circumstances, you may request that we delete your personal data. This right is not absolute — we may be required to retain certain data to comply with legal obligations or to defend legal claims.
- Right to Restriction: You may request that we restrict the processing of your data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
- Right to Data Portability: Where processing is based on your consent or contract performance and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
- Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, and we will cease such processing unless we can demonstrate compelling legitimate grounds.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
We will respond to all verified data rights requests within 30 calendar days. In complex cases, we may extend this period by a further 30 days and will notify you of any extension within the initial 30-day period.
All data rights requests must be submitted in writing to [email protected]. We are required to verify your identity before processing any request. Please include your registered email address, account username, and a copy of a valid identity document with your request.
10 Children's Privacy
va77 is strictly an adult platform. Access to all services on va77.io is limited to individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21.
Our registration process requires age verification via NID-based identity checks specifically to prevent underage registration. If we become aware that personal data has been collected from a person under the age of 21 — whether through fraudulent registration or any other means — we will immediately close the relevant account, delete the associated personal data, and forfeit any balance held in that account.
If you are a parent or guardian and believe that a minor under your care has accessed va77.io or provided us with personal data, please contact us immediately at [email protected] so that we can take appropriate action.
11 Third-Party Links
va77.io may contain links to third-party websites, payment portals, or game provider platforms. This Privacy Policy applies only to va77.io and our own data processing activities. When you click a link that takes you to a third-party website or service, that website's own privacy policy governs the collection and use of your data on that site.
va77 is not responsible for the privacy practices of third-party websites, even where those websites are operated by our payment or game content partners. We encourage you to review the privacy policies of any third-party services you use in connection with your va77 account, including bKash, Nagad, Rocket, and your bank's online banking portal.
12 Updates to This Privacy Policy
va77 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to the Policy, we will notify registered account holders by email and by publishing a prominent notice on va77.io for a minimum of 14 days before the updated Policy takes effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Your continued use of va77.io after the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not accept any amendment, you must cease using the platform and request account closure by contacting [email protected] before the amended Policy takes effect.
13 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to va77's handling of your personal data, please contact our privacy team through the following channels. We are committed to addressing all privacy-related communications promptly and transparently.
- Email: [email protected] — Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
- Live Chat: Available 24 hours a day, 7 days a week directly on the va77 platform after login.
- Response Time: We aim to acknowledge all privacy enquiries within 5 business days and resolve them within 30 calendar days, Bangladesh Standard Time (BST, UTC+6).
For formal data rights requests — including subject access requests, erasure requests, and objections to processing — please email [email protected] with the subject line "Data Rights Request" and include a copy of a valid identity document so that we can verify your identity before processing your request.
Our Privacy Commitments to You
Six core principles that guide how va77 handles your personal data every day.
256-bit SSL Encryption
Every byte of data transmitted between your device and va77.io is protected by industry-standard 256-bit SSL/TLS encryption. Your login credentials, payment details, and personal information are never transmitted in plain text.
We Never Sell Your Data
va77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances. Data sharing is limited strictly to service providers who require it to deliver specific functions on our behalf.
Minimal Data Collection
va77 collects only the personal data that is genuinely necessary for the purposes described in this Policy. We do not collect information for the sake of it. If a piece of data is not needed to serve you or meet a legal requirement, we do not ask for it.
Your Rights, Respected
You hold full rights over your personal data, including the right to access, correct, delete, and port your data. All data rights requests are processed within 30 days. Submit your request at any time to [email protected].
Secure by Design
Data security is built into every layer of the va77 platform — from server infrastructure and access controls to staff training and regular penetration testing. We treat the protection of your personal data as a core operational responsibility.
Clear Retention Limits
Your data is retained only for as long as is necessary. Active account data is held while your account is open; after closure, data is kept for a maximum of 5 years to meet legal obligations, then securely and permanently deleted.
Ready to Experience va77?
Your data is safe with us. Explore our cricket betting markets, live casino tables, and slot games knowing that your personal information is protected by industry-leading security standards. Have questions? Our 24/7 support team is always available.