Last updated: January 2026
1. Who We Are
This Privacy Policy explains how Whitebox B.V., the operator of V.Vegas ("we", "us", "our"), processes personal data of Players and visitors. We act as the data controller for the information described below. You can reach our data team at [email protected].
2. Data We Collect
- Account data: name, date of birth, email, phone, address, currency, password (hashed).
- Verification data: ID document, proof of address, proof of payment, source-of-funds documents.
- Transaction data: deposits, withdrawals, bets, balances, bonus history.
- Technical data: IP address, device, browser, operating system, referral URL, session timestamps.
- Marketing data: communication preferences, promotion responses, segmentation tags.
- Support data: chat transcripts, emails, call recordings (where applicable).
3. Why We Process Your Data
- To register and manage your account (contractual necessity).
- To process deposits, bets, and withdrawals (contractual necessity).
- To meet anti-money-laundering, KYC, and licensing obligations (legal obligation).
- To prevent fraud, multi-accounting, and bonus abuse (legitimate interest).
- To send service messages and, where you opt in, marketing communications (consent).
- To improve the platform and our games (legitimate interest, anonymised analytics where possible).
4. Cookies
We use first-party and third-party cookies for session management, security, analytics, and marketing measurement. You can manage cookie preferences through the banner shown on your first visit, and at any time via the link in our footer. Strictly necessary cookies cannot be disabled because the site will not function without them.
5. Sharing
We share data only with parties who help us deliver the service or who we are legally required to inform:
- Game providers and platform partners (under data-processing agreements).
- Payment-service providers, including T&C Whitebox CY Limited (HE 419583, Cyprus).
- KYC, AML and fraud-prevention vendors.
- Cloud and hosting providers within the EEA, UK, and Curaçao.
- Regulatory bodies, including the Curaçao Gaming Control Board.
- Law enforcement, when required by valid legal process.
We do not sell your personal data to third parties.
6. International Transfers
Some of our processors are based outside the EEA. In those cases we rely on Standard Contractual Clauses or other safeguards approved by the relevant data-protection authority to keep your data protected to a comparable standard.
7. Retention
We keep account and transaction data for at least 5 years after the closure of your account, in line with anti-money-laundering law. Marketing data is kept for as long as you remain opted in. Support records are kept for up to 24 months. Backup copies are securely deleted on a rolling schedule.
8. Your Rights
If you are based in the EEA, UK, or another jurisdiction with similar law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of data we no longer need to hold.
- Restrict or object to certain types of processing.
- Receive a portable copy of the data you provided.
- Withdraw consent at any time, where consent is the basis for processing.
- Lodge a complaint with the data-protection authority of your country.
To exercise any of these rights, write to [email protected]. We respond within 30 days.
9. Security
We use TLS encryption on all connections, hash and salt all stored passwords, segregate Player funds in dedicated accounts, and apply role-based access controls inside the company. Penetration testing is performed every six months by an independent security firm.
10. Updates
If we make material changes to this Policy we will notify you by email at least 14 days before the changes take effect. The date at the top of this page always shows the most recent revision.