Your Privacy Matters to Us

Data Collection

vaitaka collects personal data from you in the following ways: directly when you register an account or interact with the Platform; automatically through your use of the Platform; and, in limited circumstances, from third-party service providers who assist us in operating the Platform. The categories of data we collect are described below.

Registration and Account Data

When you create a vaitaka account, we collect the following information:

• Full legal name;
• Date of birth (for age verification purposes);
• Email address and mobile phone number;
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postcode;
• Username and encrypted password;
• Preferred language and currency (Bangladeshi Taka).

Identity Verification Data

As part of our Know Your Customer (KYC) obligations, vaitaka may request the following verification documents:

• Government-issued photographic identification (national identity card, passport, or driving licence);
• Proof of address (utility bill or bank statement issued within the past three months);
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account registered in your name).

Financial and Transaction Data

When you make deposits or withdrawals using payment methods such as bKash, Nagad, Rocket, Upay, Visa, or Mastercard, vaitaka records:

• Transaction amounts in Bangladeshi Taka (BDT);
• Payment method type and masked identifier (e.g., last four digits of a card, or mobile wallet number);
• Transaction timestamps and reference numbers;
• Deposit and withdrawal history associated with your account.

Usage and Technical Data

When you access the vaitaka Platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Pages visited, time spent on the Platform, and navigation paths;
• Game activity, wagering history, and session duration;
• Cookies and similar tracking technologies (see the Cookies section below).

How We Use Your Data

vaitaka processes your personal data for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with those set out below. The primary purposes for which we process personal data are:

You may opt out of marketing communications at any time by contacting support@vaitaka.org or by following the unsubscribe instructions included in any marketing email you receive from vaitaka. Opting out of marketing communications will not affect the processing of your data for account management, verification, or legal compliance purposes.

Data Sharing

vaitaka does not sell, rent, or otherwise disclose your personal data to third parties for their own commercial purposes. We may, however, share your data with carefully selected third parties in the following limited circumstances:

• Payment Processors: We share transaction data with payment service providers — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — solely for the purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations.
• Game Providers: We share account session data with our game content providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to enable you to access their games through the vaitaka Platform. This data is limited to what is technically necessary to operate the game session.
• Identity Verification Services: We may share identification documents and personal details with third-party KYC verification providers to fulfil our age verification and anti-money laundering obligations.
• Analytics Providers: We use anonymised or aggregated usage data with analytics platforms to understand how players use the vaitaka Platform and to improve our services. No personally identifiable information is shared with analytics providers in a form that could identify you individually.
• Legal and Regulatory Authorities: vaitaka will disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or in connection with the investigation of fraud, money laundering, or other criminal activity. We will notify you of any such disclosure to the extent permitted by law.
• Business Transfers: In the event that vaitaka undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you in advance of any such transfer and of any changes to this Privacy Policy that may result from it.

Cookies Policy

vaitaka uses cookies and similar tracking technologies to enhance your experience on the Platform, to remember your preferences, and to collect analytics data that helps us improve our services. This section explains what cookies we use and how you can manage them.

What Are Cookies?

Cookies are small text files that are placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and track certain behaviours. Cookies do not contain executable code and cannot access other data stored on your device.

Types of Cookies Used by vaitaka

Managing Cookies

You can manage or disable cookies through your browser's settings at any time. Most browsers allow you to block third-party cookies, clear existing cookies, and receive notifications when new cookies are set. Please note that disabling essential cookies may impair the functionality of the vaitaka Platform, including your ability to log in and access your account. Disabling analytics or preference cookies will not prevent you from using the Platform but may affect personalisation features.

Data Security

The security of your personal data is a priority for vaitaka. We implement a range of technical and organisational measures to protect your information from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-Bit SSL Encryption: All data transmitted between your device and the vaitaka Platform is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption. This ensures that your personal and financial data cannot be intercepted during transmission.
• Password Hashing: Passwords stored in vaitaka's systems are protected using industry-standard one-way cryptographic hashing algorithms. vaitaka staff cannot view or retrieve your plaintext password at any time.
• Access Controls: Access to personal data held by vaitaka is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are bound by confidentiality obligations.
• Firewalls and Intrusion Detection: vaitaka's server infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection monitoring to identify and respond to potential security threats in real time.
• Regular Security Audits: vaitaka conducts periodic security assessments and penetration testing to identify vulnerabilities and ensure that our security measures remain effective against evolving threats.
• Secure Payment Processing: All financial transactions — including bKash deposits, Nagad transfers, and card payments — are processed through secure, industry-compliant payment gateways. vaitaka does not store full card numbers or mobile banking credentials on its servers.

While vaitaka takes all reasonable steps to protect your personal data, no system is entirely immune to risk. In the unlikely event of a data breach that affects your rights and freedoms, vaitaka will notify affected players as promptly as reasonably practicable and will take immediate remedial action to contain the breach and protect your data.

Your Rights

As a player on vaitaka, you have a number of rights in relation to the personal data we hold about you. vaitaka is committed to honouring these rights and will respond to all valid requests within a reasonable timeframe. Your rights include the following:

• Right of Access: You have the right to request a copy of the personal data that vaitaka holds about you. We will provide this information in a clear, portable format within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly within your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that vaitaka delete the personal data we hold about you. Please note that we may be required to retain certain data for legal compliance purposes (such as KYC records and transaction history) even after your account is closed.
• Right to Restriction of Processing: You may request that vaitaka restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you believe our processing is unlawful.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you have the right to receive the personal data you provided to vaitaka in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please contact vaitaka's support team at support@vaitaka.org with the subject line "Data Rights Request" and a clear description of your request. We may ask you to verify your identity before processing your request in order to protect your data from unauthorised access.

Data Retention

vaitaka retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including legal, regulatory, and operational requirements. The following retention periods apply to the main categories of data we hold:

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures. Anonymised data — from which it is not reasonably possible to identify any individual — may be retained indefinitely for analytical and statistical purposes.

Policy Updates

vaitaka reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Privacy Policy, we will take reasonable steps to notify active players, which may include displaying a notice on the Platform or sending an email to the address registered on your account.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how vaitaka collects, uses, and protects your personal data.

Your continued use of the vaitaka Platform following any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to any changes made to this Privacy Policy, you should discontinue your use of the Platform and contact support@vaitaka.org to arrange account closure.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data vaitaka holds about you, please contact our support team at support@vaitaka.org. We are committed to addressing all privacy- related enquiries promptly and transparently.