vasa8 Privacy Policy — Your Data, Explained Clearly

This Privacy Policy ("Policy") describes how vasa8 ("we", "us", "the Platform") collects, processes, stores, shares and protects the personal data of users ("you", "Player") who access or use the vasa8 online casino and sports betting platform at vasa8.vip. By creating an account on vasa8 or by using any of our services, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not access or use the vasa8 platform.

This Policy applies to all personal data that vasa8 processes in connection with your use of the platform, whether you access vasa8 via a mobile browser on Android or iOS, or via any other device or means. This Policy should be read alongside the vasa8 Terms & Conditions, which governs the overall contractual relationship between you and the platform.

vasa8 collects personal data from you directly (information you provide when registering or using the platform) and indirectly (information generated by your use of the platform). The categories of personal data we collect include:

• Identity and contact data — your full legal name, date of birth, Bangladesh mobile number, and any email address you provide. These are collected at registration and used for account management, identity verification (KYC) and communications.
• Payment and transaction data — details of deposits and withdrawals processed through your account, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts, dates and reference numbers. Full payment credentials (such as bKash PINs or card numbers) are never stored by vasa8; these are handled exclusively by the respective payment processors.
• KYC verification documents — copies of identity documents (such as National ID or passport) and proof of address (such as a utility bill or bank statement) submitted in response to an identity verification request. These documents are stored securely and processed only for the purpose of age and identity verification.
• Usage and gameplay data — information about your activity on the platform, including games played, bets placed, session durations, browser type, device type, operating system version, IP address and general geographic location data derived from your IP address. This data is used for platform improvement, fraud prevention and responsible gaming monitoring.
• Communications data — records of any messages, live chat transcripts, emails or support tickets you exchange with the vasa8 customer support team. These records are retained for quality assurance, dispute resolution and compliance purposes.

vasa8 does not collect sensitive personal data beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect data about your racial or ethnic origin, political opinions, religious beliefs, health information or biometric data.

vasa8 uses the personal data it collects for the following purposes:

• Account management and service delivery — to create and manage your player account, process deposits and withdrawals via bKash, Nagad, Rocket and other payment methods, provide access to games and betting markets, and send transactional communications such as deposit confirmations and withdrawal notifications.
• Identity verification and KYC compliance — to verify your age (21+), identity and source of funds in accordance with our anti-money laundering obligations and responsible gaming commitments.
• Fraud prevention and security — to detect, investigate and prevent fraudulent activity, bonus abuse, money laundering, multi-accounting and other prohibited conduct described in our Terms & Conditions. This includes automated risk-scoring of account behaviour and transaction patterns.
• Responsible gaming monitoring — to monitor gameplay patterns and identify signs of problem gambling behaviour. Where our systems detect potential indicators of harm, we may proactively contact you to offer support tools such as deposit limits or self-exclusion, in accordance with our responsible gaming obligations.
• Platform improvement and analytics — to analyse usage patterns across the platform to improve game selection, payment processing speed, user interface design and overall service quality. Analytics data is aggregated and anonymised wherever possible before being used for this purpose.

vasa8 does not use your personal data for unsolicited third-party marketing and does not sell your data to any advertising network, data broker or marketing platform. If we wish to send you promotional communications about vasa8 offers (such as bonus alerts or seasonal promotions), we will do so only where you have given explicit consent, and you may opt out at any time.

vasa8 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity — processing that is necessary to perform the contract between you and vasa8, including account registration, payment processing and game access. Without this processing, we cannot provide you with vasa8 services.
• Legal obligation — processing that is necessary to comply with applicable legal and regulatory requirements, including anti-money laundering obligations, KYC verification requirements and responsible gaming obligations.
• Legitimate interests — processing for fraud prevention, security monitoring, platform analytics and responsible gaming monitoring, where these interests are not overridden by your rights and freedoms.
• Consent — processing for optional marketing communications, where you have given explicit consent. You may withdraw consent at any time without this affecting the lawfulness of processing based on consent before its withdrawal.

vasa8 does not sell your personal data. We share personal data only where necessary and only with the following categories of recipient, each of whom is bound by confidentiality obligations and applicable data protection requirements:

• Payment processors — bKash, Nagad, Rocket, Upay, Visa and Mastercard receive the minimum data necessary to process your deposit and withdrawal transactions. vasa8 does not receive or store your full payment credentials. Each payment processor operates under its own privacy policy and security standards.
• KYC and identity verification service providers — third-party identity verification companies that assist in verifying the age and identity of players in accordance with our compliance obligations. These providers process your identification documents under strict data processing agreements.
• Game providers — Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe and other game studios may receive anonymised session and gameplay data for the purpose of game performance monitoring and RNG certification compliance. No personally identifiable information is shared with game providers beyond what is strictly required for session management.
• Regulatory and law enforcement authorities — where required by applicable law, court order or regulatory demand, vasa8 may disclose personal data to law enforcement agencies, financial intelligence units or other competent authorities. vasa8 will notify you of any such disclosure where legally permitted to do so.

All third parties with whom vasa8 shares personal data are required to handle that data in accordance with applicable data protection law, to implement appropriate technical and organisational security measures, and to use your data only for the specific purposes for which it was shared. vasa8 does not permit third-party recipients to use your data for their own marketing purposes.

The security of your financial information is of the highest priority to vasa8. All payment transactions on the platform are processed through the respective payment gateway of your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa or Mastercard). vasa8 never handles your full payment credentials directly. When you initiate a bKash deposit, for example, the transaction is completed within the bKash system; vasa8 receives only a transaction confirmation reference and the amount processed.

Transaction records — including deposit amounts, withdrawal amounts, dates and payment method types — are retained by vasa8 for the period required by applicable financial regulations and anti-money laundering laws. These records may be disclosed to regulatory or law enforcement authorities upon lawful request. Transaction records are not used for marketing or shared with third parties for commercial purposes.

vasa8 uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and improve performance. The cookies we use fall into the following categories:

• Essential cookies — strictly necessary for the platform to function. These include session authentication tokens, CSRF protection cookies and load-balancing identifiers. Without these cookies, core platform functions such as logging in, placing bets and processing deposits cannot operate. These cookies cannot be disabled.
• Analytical cookies — used to collect anonymised data about how players navigate the platform, which games are most popular, and where users encounter performance issues. This data helps vasa8 improve the platform experience. Analytical cookies do not identify you personally.
• Preference cookies — used to remember settings you have chosen, such as your display language preference. These cookies persist across sessions so that you do not need to reset your preferences each time you visit.

You can control and delete cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging in and using core platform features. For detailed guidance on managing cookies on Android Chrome or iOS Safari, refer to your device's browser help documentation.

vasa8 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and our internal data governance policies. The specific retention periods that apply are as follows: account and identity data is retained for the duration of the account relationship and for a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements. Transaction and payment data is retained for a minimum of 5 years from the date of each transaction. KYC verification documents are retained for the same period as the underlying account data. Communication records (support tickets, live chat transcripts) are retained for 2 years from the date of the last interaction.

Where your data is no longer required for the purpose for which it was collected and no legal retention obligation requires us to keep it, vasa8 will securely delete or anonymise it. Anonymised data (data from which all identifying information has been irreversibly removed) may be retained indefinitely for statistical and platform improvement purposes. If you close your vasa8 account, your personal data will enter a retention hold period in line with our legal obligations before being deleted.

Subject to applicable law, you have the following rights in relation to the personal data that vasa8 holds about you. To exercise any of these rights, contact us at [email protected] with a clear description of your request. We will respond within 5 business days and aim to resolve all requests within 30 days.

• Right of access — you may request a copy of the personal data we hold about you, together with information about how we use it, who we share it with, and how long we retain it.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Where we are unable to correct the data (for example, because it relates to a historical transaction record), we will explain why.
• Right to erasure — you may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent on which processing is based, or where the data has been processed unlawfully. This right is subject to our legal retention obligations.
• Right to restriction of processing — you may request that we restrict processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over deletion.
• Right to data portability — where processing is based on your consent or on a contract and carried out by automated means, you may request a machine-readable copy of your personal data to transfer to another service provider.

vasa8 will not charge a fee for handling data rights requests in normal circumstances. We may ask you to verify your identity before processing a request, to ensure that personal data is not disclosed to an unauthorised person. Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or to decline the request, providing written reasons.

vasa8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include: 256-bit SSL/TLS encryption for all data transmitted between your device and vasa8 servers; secure, access-controlled server environments with regular security patching; role-based access controls ensuring that vasa8 staff can only access personal data where their role requires it; regular internal security reviews and third-party penetration testing; and multi-factor authentication options for player accounts.

While vasa8 takes all reasonable steps to protect your personal data, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, vasa8 will notify you without undue delay in accordance with applicable data breach notification requirements.

vasa8 is strictly an adult platform. Access is prohibited to persons under the age of 21. vasa8 does not knowingly collect personal data from persons under 21. If we discover or are notified that we have collected personal data from a person under the age of 21, we will immediately suspend that account, delete the associated personal data and, where applicable, refund any deposits to the originating payment source. If you are a parent or guardian and believe that a person under 21 in your care has created a vasa8 account or submitted personal data to the platform, please contact us immediately at [email protected] so that we can take appropriate action.

vasa8 may update this Privacy Policy from time to time to reflect changes in applicable law, data processing practices or platform functionality. The date of the most recent update is displayed at the top of this page. Where any change is material — meaning it significantly affects how we collect or use your personal data — we will provide advance notice to registered players via the mobile number or email address associated with their account, or by displaying a prominent notice on the platform.

Your continued use of the vasa8 platform after this Privacy Policy has been updated constitutes your acceptance of the revised Policy. If you do not agree to the changes, you must cease using the platform and may request account closure by contacting [email protected]. Previous versions of this Privacy Policy are available on request.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy concern, please contact the vasa8 privacy team directly. We are committed to handling all privacy enquiries promptly, professionally and in accordance with applicable data protection law.

Contact email for privacy matters: [email protected]. Please include "Privacy Request" in your message subject line to ensure your query is routed to the correct team. We aim to acknowledge all privacy enquiries within 2 business days and to resolve them fully within 30 days. For urgent matters relating to a suspected data breach or unauthorised account access, please mark your message as urgent and we will prioritise your request.