valo88 Privacy Policy

This Privacy Policy ("Policy") describes how valo88 ("valo88", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Player", "User") who access or use the valo88 website at https://valo88.club and all associated services, features, tools, and applications made available through it.

valo88 is an online casino and sports betting platform designed for players across Bangladesh. Our platform supports cricket betting on events including the BPL, IPL, and T20 World Cup, as well as live dealer casino games, slots from leading providers such as Pragmatic Play, Microgaming, NetEnt, and Spribe, and financial transactions denominated in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank.

This Policy applies to all personal data processed by valo88 in connection with the use of the platform, regardless of the device or method of access (desktop browser, mobile browser, or application). It does not apply to third-party websites, services, or applications that may be linked to or from the valo88 platform — those entities operate their own independent privacy policies for which valo88 bears no responsibility.

This Policy should be read in conjunction with valo88's Terms & Conditions and Responsible Gaming Policy. Capitalised terms used but not defined in this Policy have the meaning given to them in the Terms & Conditions.

valo88 collects personal data in several categories depending on how you interact with the platform. The following table summarises the categories of data collected, with examples of specific data points within each category:

valo88 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless such data is voluntarily included within documents submitted for identity verification, in which case it is handled with the highest level of care and is not processed for any purpose other than verification.

valo88 collects personal data through the following channels and mechanisms:

• Direct interactions: You provide data directly when you register an account via the valo88 Login page, complete your player profile, submit identity documents, make deposits or withdrawals through the cashier, contact support, or respond to surveys and promotions.
• Automated technical collection: Our platform automatically records technical and usage data each time you visit valo88.club. This includes IP address logging, session management, and analytics tools that track how users navigate the platform.
• Payment providers: When you initiate a transaction via bKash, Nagad, Rocket, Upay, or a partner bank, we receive confirmation data from the payment provider necessary to credit your account, including transaction reference numbers and wallet identifiers. We do not have access to your full mobile banking PIN or password.
• Identity verification partners: Where we engage a third-party identity verification service to confirm your identity, that service may share the result of the verification (pass/fail) and the verified data points back to valo88.
• Cookies and tracking technologies: As described in Clause 6, valo88 uses first-party cookies and similar technologies to collect session and preference data automatically during your visit.

valo88 processes your personal data only for clearly defined, legitimate purposes. The following table sets out the primary processing purposes, the data categories involved, and the legal basis on which each processing activity rests:

Where valo88 relies on consent as the legal basis for processing — for example, for sending promotional emails about Eid bonus offers, BPL season promotions, or Pohela Boishakh specials — you may withdraw that consent at any time by contacting support at [email protected] or by using the unsubscribe option in any marketing communication. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

valo88 does not sell, rent, or trade your personal data. We share data with third parties only in the following tightly controlled circumstances:

1. Payment processors: We share the minimum data necessary with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank to process your deposits and withdrawals. These providers operate under their own privacy frameworks and are bound by financial services regulations applicable to Bangladesh.
2. Identity verification services: We may engage a third-party KYC provider to assist with document verification. Such providers act as data processors on valo88's behalf under a binding data processing agreement and are not permitted to use your data for any other purpose.
3. Platform infrastructure providers: Hosting, cloud storage, content delivery, and database management services supporting the valo88 platform may be provided by third-party infrastructure partners. These partners process data only on documented instructions from valo88.
4. Analytics providers: valo88 uses first-party and selected third-party analytics tools to understand platform usage patterns. Where third-party analytics are involved, data is aggregated and anonymised wherever technically feasible.
5. Legal and regulatory authorities: valo88 may disclose personal data to law enforcement, financial intelligence units, or other regulatory bodies where required by applicable law, court order, or where disclosure is necessary to protect the safety and integrity of the platform and its players.
6. Business transfers: In the event of a merger, acquisition, or sale of assets involving valo88, personal data held by valo88 may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and given the opportunity to exercise your rights before the transfer is completed.

valo88 uses cookies — small text files placed on your device by your browser — and similar technologies including local storage objects and session tokens to operate and improve the platform. The cookies used by valo88 fall into the following categories:

• Strictly necessary cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account state across pages, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without preventing core platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting, display preferences, and cashier payment method — to personalise your experience on return visits.
• Analytics cookies: valo88 uses first-party analytics cookies to measure how players navigate the platform, which games and sports markets are most visited, and where users encounter friction. This data is used in aggregated form to improve platform design. Individual-level data from analytics cookies is not shared externally.
• Security cookies: These cookies support fraud detection and account security functions, including bot detection, rate limiting, and suspicious login pattern identification.

valo88 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on the valo88 platform. Players are not tracked across third-party websites by valo88.

Most browsers allow you to view, manage, and delete cookies through the browser settings menu. Please note that disabling strictly necessary cookies will impair or prevent your ability to log in and use the valo88 platform. Instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

valo88 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status and for a period of five (5) years following permanent account closure, to meet anti-money-laundering record-keeping requirements and to handle any post-closure disputes.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with standard financial services compliance obligations.
• Identity verification documents: Retained for the period of your active account plus five (5) years following closure, consistent with AML and KYC regulatory requirements.
• Support communications: Chat transcripts and support email threads are retained for three (3) years from the date of the interaction to support dispute resolution and quality assurance.
• Analytics and technical logs: Aggregated analytics data is retained indefinitely in anonymised form. Raw technical logs (server logs, session logs) are retained for a rolling period of twelve (12) months.
• Marketing preferences: Records of your consent to receive promotional communications are retained for the duration of your account plus three (3) years following closure or withdrawal of consent, whichever is later, to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Where anonymisation is not technically feasible, data is permanently deleted using industry-standard secure erasure methods.

valo88 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Encryption in transit: All data transmitted between your browser or device and valo88 servers is encrypted using 256-bit SSL/TLS. The valo88 website operates exclusively over HTTPS.
• Encryption at rest: Sensitive data stored in valo88 databases — including financial data and identity documents — is encrypted at rest using AES-256 encryption.
• Password hashing: User passwords are never stored in plain text. valo88 uses a salted bcrypt hashing algorithm to store password representations, ensuring that even in the event of a database breach, passwords cannot be recovered.
• Session security: Session tokens are cryptographically generated, short-lived, and rotated on each successful authentication. Concurrent session detection alerts are implemented to flag unusual access patterns.
• Access controls: Access to production data systems is restricted on a strict need-to-know basis. Internal access is logged, monitored, and subject to regular review.
• Regular security assessments: valo88 conducts periodic security reviews, vulnerability assessments, and code audits to identify and remediate potential weaknesses before they can be exploited.
• Incident response: valo88 maintains a documented data breach response plan. In the event of a confirmed breach affecting player personal data, affected players will be notified promptly with details of the nature of the breach, data affected, and steps taken to contain and remediate it.

As a player on the valo88 platform, you hold the following rights with respect to your personal data. These rights are exercisable by contacting valo88 support at [email protected] with a clear description of your request and sufficient information to verify your identity:

1. Right of access: You have the right to request a copy of all personal data valo88 holds about you, together with information about how it is being processed. valo88 will provide this within a reasonable period of receiving your verified request.
2. Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain data directly via your account profile settings.
3. Right to erasure: You may request that valo88 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you believe the data has been processed unlawfully. This right is subject to overriding legal obligations — for example, valo88 is required to retain financial transaction records for regulatory compliance and cannot delete them on request within the mandatory retention period.
4. Right to restriction of processing: You may request that valo88 restrict the processing of your data in certain circumstances — for example, while the accuracy of disputed data is being verified, or pending resolution of an objection to processing.
5. Right to data portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, machine-readable format (such as CSV or JSON) for transfer to another service.
6. Right to object: You may object to the processing of your personal data where valo88 relies on legitimate interest as the legal basis. valo88 will cease processing unless compelling legitimate grounds override your objection.
7. Right to withdraw consent: Where processing is based solely on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing that occurred prior to withdrawal.

valo88 will not charge a fee for processing your data rights requests unless a request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may apply. You will be informed of any such fee before it is charged.

The valo88 platform is strictly for adults aged 18 years and above. valo88 does not knowingly collect personal data from individuals under the age of 18. The registration process requires users to confirm their date of birth, and valo88 carries out age verification as part of the KYC process to ensure this restriction is enforced.

If valo88 becomes aware or reasonably suspects that personal data has been collected from a minor, the relevant account will be suspended immediately, any balance will be returned to the depositing payment method, and all personal data associated with the account will be deleted without undue delay.

If you are a parent or guardian and believe that a minor has registered an account on valo88 without your knowledge, please contact us immediately at [email protected]. We will investigate and resolve the matter promptly and with full confidentiality. valo88 takes child protection seriously and supports the responsible gaming principle that gambling is an adult entertainment activity.

valo88 operates primarily for players based in Bangladesh, and the majority of data processing activities take place on servers located in jurisdictions that maintain adequate data protection standards. However, some of valo88's third-party service providers — including payment infrastructure partners, cloud hosting providers, and identity verification services — may process your personal data on servers located outside Bangladesh.

Where personal data is transferred to a third country or international organisation, valo88 takes appropriate steps to ensure that your data receives a level of protection consistent with this Policy. Such steps may include:

• Selecting service providers located in jurisdictions that maintain recognised data protection frameworks;
• Entering into data processing agreements that include standard contractual clauses or equivalent data protection obligations;
• Conducting due diligence on third-party processors before engagement and on a periodic basis thereafter.

By using the valo88 platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Bangladesh in the circumstances described above, subject always to the safeguards set out in this clause.

valo88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will take reasonable steps to notify you, which may include:

• Displaying a prominent notice on the valo88.club homepage or within your account dashboard;
• Sending a notification to the email address associated with your account;
• Updating the "Last updated" date and version number at the top of this document.

We encourage you to review this Privacy Policy periodically. Your continued use of the valo88 platform following notification of any changes constitutes your acceptance of the revised Policy. If you do not agree with the revised Policy, you must discontinue use of the platform and contact support to request account closure.

Minor changes — such as formatting corrections, clarification of existing practices without substantive change, or updates to contact details — may be made without individual notification. The version number and "Last updated" date will be amended to reflect all changes, however minor.

If you have any questions, concerns, or requests relating to this Privacy Policy or to valo88's handling of your personal data, please contact the valo88 data support team using the details below. valo88 is committed to responding to all privacy-related enquiries promptly and in good faith.

When submitting a data rights request, please provide your full name as registered on your valo88 account, your registered email address, a description of your request, and any additional information that may help us verify your identity and locate your records. Failure to provide sufficient verification information may delay our ability to process your request.

valo88 is committed to resolving all privacy complaints internally in the first instance. If you are not satisfied with our response, you may have the right to escalate your complaint to an applicable supervisory or data protection authority in your jurisdiction.