vr777 Privacy Policy

We collect personal data from you through several channels when you interact with the Platform. The categories of personal data we collect include:

• Registration data: full name, date of birth, residential address, email address, and mobile phone number provided when you create your vr777 account.
• Identity verification data: copies of government-issued identification documents (such as NID or passport), proof of address documents, and selfie photographs submitted as part of the KYC verification process.
• Financial data: transaction history including deposit amounts, withdrawal amounts, payment method identifiers (such as the registered mobile number linked to a bKash, Nagad, or Rocket wallet), and any payment card details used for Visa or Mastercard transactions. vr777 does not store full card numbers; card data is tokenised by the payment processor.
• Gaming activity data: records of games played, bet amounts placed, game outcomes, session durations, bonus claims, responsible gaming tool activations (such as deposit limits or self-exclusion requests), and any communications with the vr777 customer support team.
• Technical data: IP address, device type, operating system, browser type and version, screen resolution, time zone, and session access logs collected automatically when you visit the Platform.

In addition to data you provide directly, we may receive data about you from third-party identity verification providers, fraud prevention agencies, and payment service processors where this is necessary to fulfil our legal and compliance obligations. We do not purchase marketing lists or obtain data from social media platforms for the purpose of targeting you with advertising.

vr777 uses the personal data we collect for the following specific purposes:

• To create and maintain your vr777 account, verify your identity in accordance with our KYC obligations, and deliver the gaming, betting, and payment services you have requested.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to reconcile transaction records to prevent errors and detect fraud.
• To comply with our legal and regulatory obligations, including anti-money laundering (AML) requirements, age verification requirements, and obligations to cooperate with law enforcement where required by a valid legal order.
• To monitor player activity for the purpose of identifying responsible gaming risk indicators, such as unusual patterns of play, increasing bet sizes relative to deposit history, or session duration anomalies, and to offer appropriate responsible gaming interventions.
• To personalise your experience on the Platform, including showing you promotions and game recommendations that are relevant to your gaming history and preferences, to the extent you have not opted out of personalised communications.
• To communicate with you regarding your account, including security alerts, transaction confirmations, identity verification requests, policy update notifications, and responses to your customer support enquiries.

vr777 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, beyond the automated fraud-detection systems that flag accounts for human review. Any decision to close or suspend your account based on fraud or compliance grounds will involve human review before that decision is finalised.

vr777 does not share your personal data with third parties except in the following limited circumstances:

• Payment service providers: we share the minimum necessary financial data with bKash, Nagad, Rocket, Upay, and our card payment processor (Visa/Mastercard network) strictly for the purpose of processing your deposit and withdrawal transactions. These providers are contractually bound to use your data only for the purposes of processing payments on our behalf and are prohibited from using it for any other purpose.
• Identity verification and fraud prevention partners: we share relevant identity data with third-party KYC verification providers and fraud prevention agencies where this is required to complete the verification process or to investigate suspected fraudulent activity on your account. These partners are bound by strict data processing agreements.
• Law enforcement and regulatory authorities: we will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where we are required to do so by a valid legal order, court order, or applicable law. In such cases, vr777 will provide only the minimum data required to comply with the order and will not disclose more than is legally required.
• Technology service providers: we use reputable third-party technology providers for services such as cloud hosting, data analytics, customer support software, and platform security monitoring. These providers access personal data only to the extent necessary to deliver the contracted service and are bound by confidentiality and data processing obligations that prohibit them from using your data for their own purposes.

All third parties with whom vr777 shares personal data are required to maintain appropriate technical and organisational security measures to protect that data. vr777 does not permit any third party to use shared data for secondary purposes, including their own marketing activities. If you have concerns about the third parties we work with, please contact us at [email protected].

vr777 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes 256-bit SSL encryption for all data transmitted between your device and the Platform, server-side encryption for stored personal data, multi-factor authentication for staff access to systems containing personal data, firewalls and intrusion detection systems, and regular penetration testing conducted by independent security professionals. Access to personal data within vr777 is restricted to employees and contractors who have a genuine operational need to process that data in the course of their duties and who are bound by confidentiality obligations.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, vr777 will notify affected players without undue delay, and in any case within 72 hours of becoming aware of the breach, where this is required by applicable law. The notification will describe the nature of the breach, the categories of data involved, the likely consequences, and the steps vr777 has taken or proposes to take to address the breach. You should notify vr777 immediately at [email protected] if you believe your account has been subject to any unauthorised access.

vr777 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and regulatory obligations. As a general guide: account registration data and KYC documents are retained for the duration of your account and for a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements. Financial transaction records are retained for a minimum of five years from the date of the transaction. Gaming activity logs are retained for a minimum of two years for dispute resolution and responsible gaming monitoring purposes. Technical and device data is retained for a maximum of twelve months, after which it is aggregated or deleted.

When personal data is no longer required and no legal retention obligation applies, vr777 will securely delete or anonymise the data so that it can no longer be used to identify you. Where anonymisation is not technically feasible, the data will be securely deleted using industry-standard secure deletion methods. Players may request details of the specific retention period that applies to their data category by contacting [email protected].

vr777 may update this Privacy Policy from time to time to reflect changes in the way we process personal data, changes in applicable law, or improvements to our privacy practices. When we make material changes to this Privacy Policy, we will provide notice to affected players via a notification on the Platform no less than seven days before the updated policy takes effect. Non-material changes (such as typographical corrections or clarifications that do not affect how we process your data) may take effect immediately upon publication. The current version of this Privacy Policy, including its effective date, will always be available on this page.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how vr777 has handled your personal data, please contact our privacy team by email at [email protected]. Please include 'Privacy Policy Enquiry' or 'Data Rights Request' in the subject line of your email so that your message is directed to the correct team. vr777 aims to acknowledge all privacy enquiries within 24 hours and to provide a substantive response within 30 days.