vaji Privacy Policy
At vaji, protecting the personal information of our players is a core responsibility, not an afterthought. This Privacy Policy explains exactly what data we collect, why we collect it, how we use and store it, and what rights you have over your information as a registered player on vaji.club.
By using vaji.club, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the platform.
SSL-Encrypted Data Transmission
All data exchanged between your device and vaji.club is protected by 256-bit SSL encryption. Your personal details, payment information, and account credentials are never transmitted in plain text.
No Unnecessary Data Collection
vaji collects only the personal data that is genuinely required to operate your account, process payments, comply with KYC obligations, and deliver a safe gaming experience. We do not collect data speculatively.
No Sale of Personal Data
vaji does not sell, rent, or trade your personal information to third-party advertisers or data brokers under any circumstances. Your data is used to operate vaji and nothing else.
Bangladesh Payment Privacy
Payment details provided through bKash, Nagad, Rocket, and Upay are processed securely. vaji does not store full mobile wallet credentials — only transaction references needed for record-keeping and dispute resolution.
Your Rights, Clearly Stated
You have the right to access, correct, export, and request deletion of your personal data at any time. vaji processes all data requests within 30 days and provides clear written responses to every request received.
Transparent Cookie Use
vaji uses cookies strictly for session management, security, and platform analytics. We do not use cross-site tracking cookies. A full breakdown of every cookie category we use is provided in this Privacy Policy.
Information We Collect
vaji collects personal data from registered players and site visitors through several distinct channels. We collect only the data that is necessary for the lawful, safe, and effective operation of the vaji.club platform. The categories of personal data we collect are described below.
1.1 Registration Data
When you create a vaji account, we collect the information you provide directly during the registration process. This includes your full legal name, date of birth, email address, mobile phone number, and the username and password you select. This data is required to create and maintain your account and to verify that you meet the platform's eligibility requirements, including the 18+ age restriction.
1.2 Identity Verification (KYC) Data
As part of our Know Your Customer process, vaji may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or Bangladesh driving licence. We may also request proof of address in the form of a recent utility bill or bank statement, and proof of payment method ownership. KYC documents are collected to fulfil our responsible gaming and anti-money-laundering obligations and to protect both the player and the platform from fraudulent activity.
1.3 Financial Transaction Data
When you make a deposit or request a withdrawal, vaji collects the transaction reference number, the payment method used (e.g., bKash, Nagad, Rocket, Upay, or bank transfer), the transaction amount in Bangladeshi Taka, and the timestamp of the transaction. For bank transfers, we collect the bank account or mobile wallet number used. vaji does not store full payment credentials such as mobile banking PINs or full card numbers.
1.4 Gameplay and Betting Data
vaji records a complete log of all gaming and betting activity associated with your account. This includes bets placed, game sessions initiated, game outcomes, bonus claims and wagering activity, and any sports betting selections you make. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.
1.5 Technical and Device Data
When you access vaji.club, our servers automatically collect certain technical information about your device and connection. This includes your IP address, browser type and version, operating system, device type (mobile, desktop, or tablet), screen resolution, time zone (Bangladesh Standard Time, UTC+6 is the reference), referring URL, and pages visited on vaji.club along with timestamps. This data helps us maintain platform security and optimise the user experience.
1.6 Communications Data
If you contact vaji's support team via live chat, WhatsApp, or email, we retain a record of the conversation including the content of messages exchanged, the date and time of contact, and the resolution reached. This data allows us to maintain quality of support, track ongoing issues, and provide consistent assistance across sessions.
vaji applies the principle of data minimisation — we collect only the personal data that is directly necessary for the purposes described in this policy. We do not collect sensitive categories of data such as racial or ethnic origin, political opinions, or biometric data beyond what is required for identity verification.
You are responsible for providing accurate and up-to-date personal information when registering and during KYC verification. Providing false or misleading information is a breach of vaji's Terms & Conditions and may result in account closure and forfeiture of balances.
How We Use Your Data
vaji uses the personal data collected from you for the following specific and lawful purposes. We do not use your data for any purpose beyond those described in this Privacy Policy without first obtaining your explicit consent or being required to do so by applicable law.
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, email, mobile number |
| Identity verification (KYC) | Name, date of birth, NID/passport, proof of address |
| Processing deposits and withdrawals | Transaction data, payment method details |
| Providing gaming and betting services | Gameplay data, betting history, session data |
| Customer support | Communications data, account data, transaction history |
| Fraud prevention and AML compliance | Transaction data, device data, IP address, betting patterns |
| Responsible gaming monitoring | Betting frequency, session duration, deposit patterns |
| Platform security | IP address, device fingerprint, login timestamps |
| Personalised promotions (with consent) | Account activity, preferred game types, deposit history |
| Analytics and platform improvement | Anonymised or aggregated technical and usage data |
Where vaji uses your data for personalised marketing communications, this is done only with your explicit opt-in consent obtained at registration or subsequently through your account settings. You may withdraw this consent at any time by updating your communication preferences in your account settings panel or by contacting support.
vaji only uses your data for the purposes listed in this section. If we need to use your data for a materially different purpose in the future, we will notify you and — where required — seek your consent before doing so.
Platform analytics are performed on aggregated, anonymised datasets wherever possible. Individual player data is not used for analytics purposes in a way that could identify you personally. Analytics are used exclusively to improve platform performance and user experience.
Legal Basis for Processing
vaji processes your personal data only where there is a lawful basis to do so. The legal bases on which vaji relies when processing player data are as follows:
- Contractual necessity: The majority of data processing by vaji is necessary for the performance of the contract between you and vaji — specifically, to create and maintain your account, process your transactions, deliver gaming services, and provide customer support. Without this processing, vaji could not fulfil its obligations to you as a registered player.
- Legal obligation: vaji is required by law to collect and retain certain categories of data for anti-money-laundering compliance, responsible gaming obligations, and financial record-keeping. This processing is not optional and cannot be refused without affecting your ability to maintain a registered account.
- Legitimate interests: vaji processes certain data — including device data, IP addresses, and behavioural patterns — on the basis of its legitimate interests in maintaining platform security, preventing fraud, and ensuring the integrity of the gaming environment. Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms.
- Consent: Where vaji sends you personalised marketing communications or uses optional analytics cookies, this is done on the basis of your freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
vaji does not process personal data unless there is a clear lawful basis to do so under one of the four categories described in this section. Where the basis is consent, you retain the right to withdraw that consent at any time through your account settings or by contacting support at [email protected].
Data Sharing & Third Parties
vaji does not sell, rent, or trade your personal data to any third party. However, in order to deliver the services available on vaji.club, we share certain categories of data with a limited set of trusted third-party service providers and partners. All third parties with whom vaji shares data are contractually bound to process that data only for the specific purpose for which it was shared, in accordance with appropriate data protection standards.
The third-party categories with whom vaji may share your data are as follows:
- Payment processing providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a supported bank, transaction data is shared with the relevant payment service to process the transaction. This sharing is strictly limited to the data required to execute and confirm the payment.
- Game content providers: vaji's casino games and live dealer products are delivered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. Basic session data (e.g., player ID, bet amounts, game session identifiers) is shared with game providers for the purpose of delivering game functionality and resolving disputes. Game providers do not receive your full identity data unless required for a specific dispute or regulatory investigation.
- KYC and identity verification providers: vaji may use third-party identity verification services to validate KYC documents submitted by players. These providers process identity document images and associated personal data strictly for verification purposes and are bound by data processing agreements that prohibit secondary use.
- Fraud prevention and AML services: vaji uses specialist third-party tools to monitor transactions and player behaviour for signs of fraud or money laundering. These services may process IP addresses, device fingerprints, and transaction patterns. They do not receive your full personal profile unless required for an investigation.
- Platform infrastructure and hosting providers: vaji's platform is hosted on secure cloud infrastructure. Infrastructure providers may technically process data as part of their hosting function but are contractually prohibited from accessing or using that data for any purpose beyond infrastructure provision.
- Legal and regulatory authorities: vaji may be required by applicable law or a valid legal process to disclose certain player data to law enforcement agencies, regulatory bodies, or courts. vaji will only make such disclosures where legally compelled to do so and will take reasonable steps to notify the affected player where legally permitted.
vaji does not share your data with social media platforms, advertising networks, or data brokers. No cross-platform advertising tracking of vaji players is conducted.
vaji never sells, rents, or trades your personal data to third parties for commercial gain. Data sharing is limited strictly to the operational partners described in this section, and all such sharing is governed by data processing agreements.
All third parties who process data on behalf of vaji are required to maintain appropriate technical and organisational security measures. vaji conducts periodic reviews of its third-party data processors to ensure ongoing compliance with the standards set out in their data processing agreements.
Data Retention
vaji retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The retention periods we apply to different categories of data are described below.
- Account and registration data is retained for the full duration of your active account relationship with vaji, plus a minimum of five years following account closure. This retention period is required for anti-money-laundering record-keeping and financial audit purposes.
- KYC identity verification documents are retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later. This is in accordance with standard AML compliance record-keeping requirements.
- Financial transaction records — including deposit and withdrawal logs — are retained for a minimum of five years from the date of each transaction. These records may be required for regulatory, legal, or dispute resolution purposes.
- Gameplay and betting logs are retained for a minimum of two years from the date of each gaming session or betting event. Betting logs form an important part of our responsible gaming monitoring and dispute resolution processes.
- Customer support communications are retained for two years from the date of the most recent interaction in a support thread, or until any associated dispute is fully resolved, whichever is later.
- Technical and device data (IP logs, session logs) is retained for up to 12 months from collection, after which it is deleted or fully anonymised.
- Marketing consent records are retained for the period during which consent is active, plus two years following withdrawal of consent, as a record of the consent history.
When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Data that has been anonymised and aggregated may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.
- Account data5 years post-closure
- KYC documents5 years min.
- Transaction records5 years per transaction
- Betting logs2 years
- Support records2 years
- IP / session logs12 months
When retention periods expire, data is securely deleted using industry-standard deletion methods that prevent recovery. Where technical constraints require anonymisation rather than deletion, all identifying attributes are irreversibly removed before the retention period ends.
Data Security
vaji takes the security of your personal data seriously and maintains a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. The security measures we maintain include the following:
- 256-bit SSL/TLS encryption is applied to all data transmitted between your device and vaji.club. This ensures that your personal details, login credentials, and payment information cannot be intercepted in transit.
- Encrypted data storage: Sensitive personal data — including identity documents and payment references — is stored in encrypted form at rest. Encryption keys are managed separately from the encrypted data and are rotated on a scheduled basis.
- Access controls: Access to personal data within vaji's internal systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their specific role. Access is logged and monitored.
- Two-factor authentication (2FA): vaji strongly recommends that all registered players enable 2FA on their accounts to provide an additional layer of protection against unauthorised login attempts.
- Intrusion detection and monitoring: vaji's infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, and security vulnerabilities. Security incidents are triaged and responded to by a dedicated team.
- Penetration testing: vaji's platform undergoes periodic security assessments conducted by independent third-party security professionals to identify and remediate vulnerabilities before they can be exploited.
- Staff training: All vaji personnel who handle personal data receive regular training on data protection best practices, phishing awareness, and the procedures to follow in the event of a suspected data breach.
Despite the security measures described above, no online platform can guarantee absolute security. In the unlikely event of a data breach that affects your personal information and poses a risk to your rights and freedoms, vaji will notify you promptly by email to your registered address, providing details of what data was affected, what steps vaji has taken in response, and what you can do to protect yourself.
You also play an important role in keeping your account secure. vaji strongly advises all registered players to use a unique, strong password for their vaji account, to never share their login credentials with any third party, to log out of their account when using shared devices, and to contact vaji support immediately if they suspect any unauthorised access to their account.
vaji's security measures protect data on our side. You can strengthen your account security by using a strong, unique password, enabling 2FA, and never sharing your credentials. If you suspect your account has been compromised, contact vaji support via live chat immediately — available 24/7.
In the event of a data breach that poses a material risk to your personal data, vaji will notify affected players promptly by email. The notification will include details of the data affected, the steps taken to contain the breach, and guidance on protective actions you should take.
Your Rights Over Your Data
As a registered player on vaji.club, you have a number of rights in relation to the personal data vaji holds about you. vaji is committed to honouring these rights and processing all data-related requests within 30 calendar days of receipt. In cases of complexity or high volume, this period may be extended by a further 30 days, in which case you will be notified of the extension before the initial deadline expires.
Right of Access
Request a copy of all personal data vaji holds about you, including a description of how it is used and with whom it is shared.
Right of Rectification
Request correction of any personal data vaji holds about you that is inaccurate or incomplete. Some corrections may require supporting documentation.
Right of Erasure
Request deletion of your personal data where it is no longer needed for the purpose it was collected, subject to our legal retention obligations.
Right to Restrict Processing
Request that vaji limits the processing of your data in certain circumstances, for example while a rectification request is being resolved.
Right to Data Portability
Request a copy of your personal data in a structured, machine-readable format that can be transferred to another service provider.
Right to Object
Object to processing of your personal data carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring.
To exercise any of the rights described above, please submit a written request to vaji's support team by emailing [email protected] with the subject line "Data Rights Request". Please include your registered username and a description of the right you wish to exercise. vaji may request proof of identity before processing the request to ensure that data is not disclosed to an unauthorised third party.
Please note that certain rights are subject to limitations where vaji has overriding legal obligations. For example, vaji cannot delete financial transaction records during a mandatory regulatory retention period even if a deletion request is received. Where a request cannot be fulfilled in full, vaji will explain the reason in writing.
vaji processes all data rights requests within 30 calendar days of receipt. Complex requests may take up to 60 days. You will receive a written acknowledgement within 5 business days confirming receipt of your request and providing a reference number for tracking.
Some data rights are subject to legal limitations. vaji cannot delete data it is required by law to retain (e.g., AML transaction records). Where a request is refused or only partially fulfilled, vaji will provide a clear written explanation of the reason and the legal basis for the limitation.
Marketing Communications
vaji may send registered players promotional communications including information about new games, upcoming cricket and sports betting markets, seasonal bonus offers tied to events such as BPL, IPL, T20 World Cup, Eid, Pohela Boishakh, and other promotions relevant to Bangladesh players. These communications are sent only where you have given your explicit consent to receive them.
Marketing communications from vaji may be delivered via the following channels, subject to your consent preferences:
- Email to your registered address
- SMS to your registered mobile number
- WhatsApp message to your registered WhatsApp number (where provided)
- In-platform notifications displayed within the vaji.club interface when you are logged in
You may opt out of receiving marketing communications at any time by updating your notification preferences in your account settings panel, by clicking the unsubscribe link included in every marketing email, or by contacting vaji support directly. Opting out of marketing communications does not affect the delivery of transactional messages (such as deposit confirmations, withdrawal notifications, and account security alerts) which are sent on the basis of contractual necessity.
vaji does not share your contact details with third-party marketers. All promotional communications you receive in connection with vaji are sent by vaji directly. If you receive a communication purporting to be from vaji that you did not expect, please report it to [email protected] immediately as it may be a phishing attempt.
vaji sends promotional communications only to players who have explicitly opted in. Your consent is requested at registration and can be updated at any time through your account settings. Withdrawing marketing consent takes effect within 48 hours of the request.
Transactional messages — including deposit confirmations, withdrawal updates, security alerts, and KYC verification notices — are always sent regardless of your marketing preferences, as they are necessary for the operation of your account and cannot be opted out of while your account remains active.
Minors & Age Restriction
vaji is a strictly adult platform. The collection and processing of personal data from individuals under the age of 18 is not permitted under any circumstances. vaji does not knowingly collect personal data from minors, and the registration process includes an age declaration requirement that must be completed by all new accounts.
As part of the KYC verification process, vaji verifies the age of all registered players using government-issued identity documentation. Where vaji discovers or has reasonable grounds to suspect that an account belongs to an individual under the age of 18, the account will be immediately suspended and the associated personal data will be reviewed. If underage access is confirmed, the account will be permanently closed, all personal data collected in connection with that account will be deleted as promptly as technically possible (subject to any mandatory legal retention obligations), and any deposits made will be returned to the originating payment method.
If you are a parent or guardian and believe that a minor in your care has created an account on vaji.club, please contact vaji support immediately at [email protected]. vaji takes reports of underage access extremely seriously and will investigate and resolve such reports as a priority matter.
vaji does not knowingly collect personal data from anyone under 18 years of age. Age is verified during the KYC process. Underage accounts are immediately closed upon discovery, data is deleted, and deposits are returned. Report underage access to [email protected].
Changes to This Policy
vaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, changes to the platform's features or data processing practices, or improvements to the clarity of this document. The Effective Date at the top of this page will be updated each time a material change is made.
When material changes are made to this Privacy Policy, vaji will take reasonable steps to notify registered players. Notification may be delivered via an in-platform banner displayed on next login, an email to your registered address, or a prominent notice on the vaji.club homepage. For non-material changes — such as corrections to typographical errors or improvements to phrasing that do not affect the substance of the policy — vaji may update this page without specific notification.
Your continued use of vaji.club following the Effective Date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the platform and may request voluntary account closure and withdrawal of your balance by contacting vaji support.
vaji recommends that all registered players review this Privacy Policy periodically to remain informed about how their personal data is being handled. The most current version of this policy is always accessible at vaji.club/privacy-policy.
The current version of this Privacy Policy is always available at vaji.club/privacy-policy. The Effective Date shown at the top of the page indicates when the most recent version came into effect. Significant changes will be flagged via in-platform notification or email.
- Version2026.01
- Effective Date1 Jan 2026
- LanguageEnglish
- MarketBangladesh
- CurrencyTaka (৳ / BDT)
- Age Restriction18+ Only
Contact & Data Requests
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, want to report a suspected data breach, or have any concern about how vaji handles your personal information, please contact vaji's support team using the details below.
For all data rights requests — including access, rectification, erasure, portability, restriction, and objection requests — please email [email protected] with the subject line "Data Rights Request". Include your registered username and a clear description of the request you wish to make. vaji may ask you to verify your identity before processing the request.
For general privacy questions or concerns, you may contact vaji via live chat 24/7 through the vaji.club platform, or by emailing [email protected]. Our support team aims to respond to all privacy-related enquiries within 2 business days.
For urgent security concerns — such as suspected unauthorised access to your account or a potential data breach — please contact vaji via live chat immediately. Our security team operates around the clock and will respond to urgent security reports as a priority.
Email: [email protected] (subject: "Data Rights Request" for formal requests)
Live Chat: Available 24/7 via vaji.club
WhatsApp: +880 1700 000000 (for urgent account security concerns)
Response time: Within 2 business days for general enquiries; within 30 days for formal data rights requests.
vaji's support team is available around the clock via live chat on vaji.club. For data rights requests, emailing [email protected] with a clear subject line ensures your request is routed directly to the team responsible for data protection compliance.
vaji treats all privacy-related communications with strict confidentiality. Your data rights request and any personal details you provide in connection with it will be used solely to process your request and will not be shared with any party outside vaji's internal data protection team.
Questions About Your Data? We Are Here to Help
If any part of this Privacy Policy is unclear, our support team is available 24/7 to explain how your data is handled. You can also explore our FAQ for quick answers, or review our Responsible Gaming page for guidance on playing safely. 18+ only — play responsibly.