vid49 Privacy Policy

1 Information We Collect

When you register for and use the vid49 platform, we collect personal information in the following categories. The precise data points collected at each stage are described below.

1.1 Registration Data

At the time you create a vid49 account, we collect: your full legal name, date of birth, residential address in Bangladesh, mobile phone number, and email address. This data is required to create your account, verify your identity, and maintain our records as required by applicable compliance obligations. Providing false or incomplete registration data is a breach of our Terms & Conditions.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) programme, we may collect copies of government-issued identity documents (such as your National Identity Card, passport, or birth certificate) and proof of address documents (such as a utility bill or bank statement). These documents are used solely to verify your age, identity, and residential address. They are stored securely and are not used for any purpose other than compliance verification.

1.3 Financial and Transaction Data

We collect records of all deposits, withdrawals, bonus credits, and game transactions made on your account. For payment processing purposes, we collect the mobile wallet numbers (bKash, Nagad, Rocket, Upay) or bank account details you use to deposit or withdraw funds. We do not store full payment card numbers on our servers; card transactions are processed via PCI-DSS compliant payment processors who handle sensitive card data directly.

1.4 Device and Usage Data

When you access the vid49 platform, we automatically collect certain technical information including: your IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, referring URL, pages visited on the platform, session duration, and in-game actions. This data is used to operate the platform, detect fraud, diagnose technical issues, and improve the user experience. It is not linked to your identity in a way that would allow it to be used for direct marketing.

1.5 Customer Support Communications

When you contact the vid49 support team by email or live chat, we retain a record of your query and the response provided. This record is used to resolve your issue, maintain service quality, and — where legally required — to fulfil our obligations under applicable consumer protection and anti-money-laundering regulations.

2 How We Use Your Data

vid49 uses the personal data we collect for the following specific purposes. We process your data only where we have a lawful basis for doing so — typically because the processing is necessary to perform the contract between you and vid49, because we have a legal obligation to process it, or because it is in our legitimate interests to do so in a manner that does not override your rights.

vid49 does not use your personal data for automated decision-making that produces significant legal effects without human review. Where our fraud prevention systems flag an account for review, a member of the compliance team will assess the situation manually before any account action is taken.

3 Data Sharing & Disclosure

vid49 does not sell, rent, or trade your personal data to any third party. We may share your data only in the limited circumstances described below, and only to the extent necessary for each purpose.

3.1 Payment Service Providers

To process deposits and withdrawals, we share the minimum necessary financial data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Visa, and Mastercard network processors, and partner banks including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These providers process your payment data under their own privacy policies and are bound by applicable financial data protection regulations. vid49 does not receive or store full card numbers.

3.2 Identity Verification Partners

To complete KYC verification, we may share identity document images and registration data with a third-party identity verification service. Such providers are contractually required to process your data solely for verification purposes and to delete submitted documents within a defined period after verification is complete.

3.3 Game Software Providers

Some games on the vid49 platform are provided by third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session identifiers to deliver game content and maintain game integrity. They do not receive your name, address, payment details, or any directly identifying information from vid49.

3.4 Legal and Regulatory Disclosure

vid49 may disclose personal data to competent governmental authorities, law enforcement agencies, or regulatory bodies where we are required to do so by law, court order, or in response to a lawful request. We will, where legally permissible, notify the affected player of any such request before complying.

3.5 Business Continuity

In the event that vid49 undergoes a merger, acquisition, or sale of substantially all of its assets, player account data may be transferred to the acquiring entity as part of that transaction. In such an event, vid49 will notify registered players and ensure that the recipient entity commits to maintaining equivalent privacy protections.

4 Cookies & Tracking Technologies

The vid49 platform uses cookies and similar technologies to deliver a functional and consistent user experience. A cookie is a small text file stored in your browser that allows the platform to recognise your session and preferences across page loads.

4.1 Types of Cookies We Use

4.2 Advertising and Third-Party Cookies

vid49 does not deploy advertising cookies, retargeting pixels, social media tracking scripts, or any third-party cookie whose purpose is to build advertising profiles or track your behaviour across other websites. Our analytical cookies are processed internally and are not shared with external analytics companies.

4.3 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from remaining logged in to your vid49 account and may cause certain platform features to malfunction. Instructions for managing cookies are available in your browser's help documentation. Disabling analytical or functional cookies will not affect your ability to use the core features of the platform.

5 Data Retention

vid49 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, accounting, and reporting obligations. The following retention periods apply:

• Account and registration data: Retained for the duration of the active account relationship, plus a minimum of five years following account closure, to meet anti-money-laundering record-keeping requirements.
• KYC identity documents: Retained for five years from the date of verification, or five years from account closure, whichever is later, in compliance with financial crime prevention regulations.
• Transaction records (deposits, withdrawals, bets): Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for three years from the date of the interaction, unless the communication relates to an ongoing dispute or legal matter, in which case it is retained until that matter is fully resolved.
• Device and usage logs: Retained in identifiable form for up to 12 months, after which they are anonymised and may be retained in aggregate form indefinitely for statistical purposes.
• Responsible gaming records (self-exclusion requests, deposit limit settings): Retained for five years from the date of the request, to prevent a self-excluded player from being re-onboarded inadvertently.

When the applicable retention period expires, personal data is securely deleted from our active systems. Backup copies stored in disaster-recovery archives are overwritten on a rolling schedule consistent with our data destruction policy.

6 Data Security Measures

vid49 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS/SSL encryption: All data in transit between your browser or device and the vid49 platform is encrypted using Transport Layer Security (TLS 1.2 or higher). The vid49.app domain enforces HTTPS on all connections.
• Encryption at rest: Sensitive data fields — including identity document images, payment account identifiers, and authentication credentials — are encrypted at rest using AES-256 encryption within our database infrastructure.
• Access controls: Access to production systems and customer data is restricted to authorised personnel on a strict need-to-know basis. All access is logged and subject to regular review.
• Penetration testing: The vid49 platform undergoes periodic security assessments, including vulnerability scanning and penetration testing, conducted by qualified independent security professionals.
• Two-factor authentication: Players are strongly encouraged to enable two-factor authentication (2FA) on their accounts. Internally, all staff with access to customer data are required to use multi-factor authentication.
• Incident response: vid49 maintains a documented data breach incident response procedure. In the event of a breach that poses a material risk to player data, affected players will be notified without undue delay.

Despite these measures, no data transmission over the internet or electronic storage system is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security. You also have an important role to play — keep your account password strong and unique, enable 2FA, and never share your login credentials with anyone.

7 Your Rights Over Your Data

As a player and data subject, you hold a set of rights over the personal data that vid49 processes about you. To exercise any of these rights, contact us in writing at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five business days and respond in full within 30 days.

7.1 Right of Access

You have the right to request a copy of all personal data vid49 holds about you, together with information about how it is being processed. We will provide this in a structured, commonly used, machine-readable format where technically feasible.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For certain data fields — such as your registered name or date of birth — we may require you to submit supporting documentation before making the correction, to ensure the accuracy of our compliance records.

7.3 Right to Erasure

You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (if consent was the basis for processing), or where you have objected to processing and there is no overriding legitimate interest. Please note that erasure requests cannot be fulfilled in respect of data we are legally required to retain — for example, transaction records subject to anti-money-laundering retention obligations.

7.4 Right to Restriction of Processing

In certain circumstances — for example, where you contest the accuracy of data we hold or where you have objected to processing pending a determination of our legitimate interests — you may request that we restrict processing of your data to storage only, without further use, while the matter is resolved.

7.5 Right to Data Portability

Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive the personal data you provided to us in a structured, machine-readable format, and to transmit it to another controller if technically feasible.

7.6 Right to Object

You have the right to object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of such an objection, we will cease processing your data for marketing immediately. You may also object to processing based on legitimate interests, in which case we will assess whether our interests are overridden by your rights and inform you of our decision.

8 Contact & Privacy Queries

If you have any questions, concerns, or complaints about this Privacy Policy or about how vid49 handles your personal data, please contact us using the details below. We are committed to resolving privacy queries promptly and transparently.

• Email: [email protected] — use the subject line "Privacy Query" or "Data Rights Request" for fastest routing.
• Live chat: Available 24 hours a day, 7 days a week from within the vid49 platform. Live chat agents can escalate privacy-related matters to our compliance team immediately.
• Response time: We aim to acknowledge all written privacy queries within five business days and provide a full substantive response within 30 days. Complex data rights requests (e.g., a full data access request) may take up to 30 calendar days from acknowledgement.

8.1 Changes to This Privacy Policy

vid49 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to our platform. When a material change is made, we will publish the updated policy on this page with a revised effective date and, where the change is significant, we will send a notification to your registered email address. We encourage you to review this page periodically to stay informed about how your data is protected.

8.2 Minors and Data Protection

The vid49 platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has submitted personal data to vid49 — for example through unauthorised use of your account — please contact us immediately at [email protected]. We will promptly investigate and delete any data confirmed to belong to an underage individual, in line with our commitment to child protection.