Vega88 Privacy Policy – Malaysia Member Personal Data Protection

1 Privacy Policy Introduction & Scope

Vega88 is an online entertainment platform operating under a valid license, committed to providing a safe, transparent, and responsible gaming environment for all members in Malaysia. This Privacy Policy is an official document outlining our approach to personal data protection, in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy covers all your interactions with the vega88 platform — from your first visit to our website, account registration, gaming activity, financial transactions, through to communications with our customer support team. It applies across all access methods including desktop web browsers, mobile apps, and any other digital interface provided by vega88.

We want you to clearly understand that privacy is not merely a formality at vega88. It is a core value that shapes every data management decision we make. Our team is trained to handle personal data with the full respect and care that matches the trust you place in us.

2 Personal Data Collected

Vega88 only collects personal data that is necessary for clear and legitimate purposes. We practice the principle of minimal data collection — only information genuinely required to deliver quality services will be requested from you.

2.1 Data You Provide Directly

• Identity Information: Full name, identity card or passport number, date of birth, gender and nationality
• Contact Information: Email address, mobile phone number, and current residential address
• Financial Information: Bank account details, bank name, account number, and registered digital wallet information
• Verification Documents: Copies of identity cards, passports, or other identity documents submitted during the KYC process
• Communication: Records of conversations with the customer support team via Live Chat, email, or other channels

2.2 Data Collected Automatically

• Technical Data: Your IP address, web browser type, operating system, and device screen resolution
• Activity Data: Pages visited, time spent, games played and betting records
• Session Data: Login tokens, session timestamps, and device information used to log in
• Cookie Data: Session cookies and preferences stored in your browser to enhance your user experience

2.3 Data from Third-Party Sources

In certain cases, vega88 may receive your personal information from legitimate sources such as payment processors (for transaction verification), third-party identity verification agencies (for the KYC process), and voluntary self-exclusion databases (for responsible gaming protection). All such third-party sources are bound by strict data confidentiality agreements with vega88.

3 How Your Personal Data Is Used

Vega88 uses collected personal data solely for legitimate purposes that have been stated in advance. We will not process your data for any other purpose without obtaining your additional consent.

3.1 Account Management and Services

Your personal data is used to create and manage your vega88 account, process deposits and withdrawals securely, verify your identity through the KYC process, and provide effective customer support whenever you need assistance.

3.2 Security and Fraud Prevention

Your account's technical information and activity are continuously analyzed by our security systems to detect suspicious activity, prevent unauthorized access, identify fraud attempts and protect platform integrity from abuse. These are protective measures that directly benefit the security of your account.

3.3 Legal and Regulatory Compliance

As a licensed platform, vega88 is legally required to retain certain records and comply with regulatory directives. This includes obligations related to Anti-Money Laundering (AML), Know Your Customer (KYC), and transaction reporting as required by the relevant authorities.

3.4 User Experience Improvement

Your activity data and preferences help us understand how members use the platform, identify areas for improvement, personalise the display of relevant promotions and game recommendations, and develop new features that our member community truly wants.

4 Data Sharing with Third Parties

Vega88 understands that your trust is our most valuable asset. As such, we enforce strict policies regarding the sharing of personal data with external parties.

4.1 Approved Service Partners

In operating the platform, vega88 works with several carefully selected categories of third-party service providers:

• Payment Processors: FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, GrabPay, Boost and crypto processors to facilitate your financial transactions
• KYC Providers: Accredited identity verification companies that verify documents and conduct AML checks
• Cloud Computing Services: Server infrastructure providers that store data to international security standards
• Analytics Services: Analytics platforms that help us understand usage patterns in aggregate and anonymised form

All these third-party service providers are bound by comprehensive data protection agreements and are only permitted to process your data for the specific purposes defined by vega88.

4.2 Mandatory Disclosure to Authorities

Vega88 may be required to disclose your personal data to government authorities, law enforcement, or regulatory bodies when mandated to do so by applicable Malaysian law, a valid court order, or an official investigation conducted by a relevant agency. In such circumstances, we will endeavor to notify you to the extent permitted by law.

4.3 Absolute Prohibitions

Vega88 will not under any circumstances share your personal data with:

• Third-party advertisers or advertising networks
• Data brokers or direct marketing companies
• Social media platforms without your explicit consent
• Competitors or other gambling platforms

5 Data Security

Protecting your personal data from unauthorized access, loss or misuse is the top technical and operational priority at vega88. We continuously invest in the latest security infrastructure to ensure the strongest possible protection for every member.

5.1 Technical Safeguards

• 256-bit SSL/TLS Encryption: All communications between your device and vega88 servers are encrypted using the latest transport layer security protocols
• Data-at-Rest Encryption: Sensitive data stored in our databases is encrypted using AES-256 encryption algorithms
• Two-Factor Authentication (2FA): An additional security layer via SMS or authenticator app verification to protect your account
• 24/7 Monitoring: Intrusion detection systems (IDS) and advanced firewalls operating around the clock
• Penetration Testing: Regular security audits by independent cybersecurity experts to identify and address any vulnerabilities

5.2 Internal Access Controls

Access to member personal data within the vega88 system is strictly governed by the principle of minimum access rights. Only staff who require access to specific data to carry out their official duties will be granted the relevant permissions. All access is logged and periodically audited by our internal security team.

6 Cookies and Tracking Technologies

Vega88 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain the security of your login session, and understand how members use our services. Cookies are small text files stored in your browser or device when you visit our website.

6.1 Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login authentication, session security and language preferences. These cookies cannot be disabled without affecting platform functionality
• Performance Cookies: Collects information on how web pages are used to help us improve platform speed and usability
• Functional Cookies: Stores your preferences such as username, favorite game types and display settings to streamline your experience
• Analytics Cookies: Used to analyze aggregated usage patterns for the purpose of continuous platform improvement

6.2 Managing Your Cookie Preferences

You can manage cookies through your web browser settings at any time. Most browsers allow you to view, delete, or block cookies from specific sites. Please note that disabling essential cookies may affect the functionality of the vega88 platform and your overall gaming experience.

7 Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have certain rights protected by law. vega88 fully respects these rights and provides easy channels for you to exercise them.

• Right of Access: You have the right to request a copy of the personal data we hold about you. This request will be processed within 14 business days
• Right to Rectification: If any of your personal data is inaccurate or out of date, you have the right to request immediate correction
• Right to Erasure: In certain circumstances permitted by law, you may request that your personal data be deleted from our systems
• Right to Withdraw Consent: You may withdraw consent for data processing at any time, subject to legal obligations that require us to retain certain records
• Right to Object to Processing: You have the right to object to the processing of your data for specific purposes such as direct marketing
• Right to Data Portability: You may request that your data be delivered in a machine-readable format to yourself or a third party of your choosing

To exercise any of the above rights, please contact our Data Protection team via 24/7 Live Chat or email at [email protected] including your account number and request details. We will verify your identity before processing any data-related request.

8 Data Retention and Deletion Period

Vega88 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law. Once the designated retention period expires, data will be securely deleted or anonymized.

8.1 Standard Retention Period

• Active Account Data: For the duration your vega88 account is active, plus a defined retention period after closure
• Financial Transaction Records: Minimum 7 years in line with the requirements of the Financial Services Act and AML regulations
• KYC Documents: 5 years after account closure or as required by the relevant regulatory body
• Support Communication Logs: 2 years from the date of last interaction
• Session Cookie Data: Automatically deleted when the login session ends

8.2 Secure Deletion Procedures

When your data is due for deletion, vega88 applies secure deletion methods that ensure data cannot be recovered. This includes multiple-pass data overwriting for physical storage media and cryptographic erasure for encrypted data. Deletion records are retained as proof of compliance.

9 Children's Privacy

The vega88 platform is exclusively for adults aged 18 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18.

Should we become aware that a child's personal data has been collected without our knowledge, we will take immediate action to delete that data and close the associated account. vega88 employs a strict age verification process during registration and reserves the right to request proof of identity documentation at any time.

If you believe your child or any minor has successfully registered on our platform, please contact our support team immediately via 24/7 Live Chat or email at [email protected] for immediate action.

10 Privacy Policy Amendment

Vega88 reserves the right to review and amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or updated data protection technologies. We are committed to notifying you of any material amendments.

10.1 How We Notify You of Amendments

• In-platform notification when you log in for the first time after an amendment takes effect
• Notification email to your registered address for material amendments
• Update the "Last Updated" date at the top of this page

10.2 Effect of Amendments

Continued use of the vega88 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy terms. If you disagree with the changes made, you have the right to close your account and request deletion of your personal data, subject to applicable legal retention obligations.

For any enquiries regarding this Privacy Policy or to exercise your data rights, please contact the vega88 Data Protection Officer by email at [email protected] or via Live Chat on our platform, which operates 24 hours a day, 7 days a week.