Vipp66 Privacy Policy – Malaysia Player Data Protection

1 Introduction and Our Commitment

Vipp66 ("we", "our platform") values the privacy of every player who uses our services. This Privacy Policy clearly and transparently explains how we collect, use, store, protect, and in certain circumstances, share your personal data when you use the vipp66 platform.

We understand that trust is the foundation of our relationship with players. That is why we ensure every aspect of your personal data handling complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest industry standards. We will never sell your personal data to third parties for marketing purposes, and we do not share your information without a clear and legitimate need.

This policy applies to all users of the vipp66 platform, including registered players, guests browsing our website, and anyone interacting with any vipp66 service. If you do not agree with any part of this Privacy Policy, please discontinue use of our platform.

2 Personal Data We Collect

We collect your personal data through several means — directly when you register or use the platform, automatically through tracking technologies, and in some cases, from legitimate third-party sources. Below is a detailed breakdown of the types of data we collect:

We only collect data that is necessary for specific and legitimate purposes. You are not required to provide all requested information, but failing to do so may restrict your access to certain platform features, particularly the withdrawal process which requires full identity verification.

3 Data Collection and Usage Purpose

Vipp66 uses collected personal data solely for legitimate purposes directly related to providing our services to you. The primary purposes for which data is used are:

• Account Management: Create, verify, and maintain your player account, including the required identity verification (KYC) process.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions you make on the platform securely and efficiently.
• Platform Security: Detect and prevent fraud, money laundering, multiple account usage, and other suspicious activities.
• Legal Compliance: Meet our obligations under anti-money laundering (AML) laws, gambling legislation, and applicable regulatory requirements.
• Service Improvement: Analyse usage patterns to improve the interface, performance, and overall gaming experience on the vipp66 platform.
• Service Communications: Send transaction notifications, account updates, security alerts, and promotional information you have opted in to receive.
• Customer Support: Handle your enquiries, complaints, and support requests effectively and in a timely manner.
• Responsible Gaming: Monitor gaming patterns to identify signs of problem gambling and offer appropriate assistance.

4 Data Sharing with Third Parties

Vipp66 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, in the course of operating the platform, we may share your information with the following categories of third parties, solely to enable us to provide services to you:

• Payment Processors: Payment service providers such as DuitNow, FPX, Touch 'n Go eWallet, and our partner banks to securely process your deposits and withdrawals.
• Identity Verification Providers: Third-party services used to verify identity documents during the KYC process, subject to strict confidentiality agreements.
• Technology Service Providers: Hosting companies, cloud computing, and technical infrastructure providers that enable the vipp66 platform to operate securely and smoothly.
• Legal Authority: Law enforcement agencies, courts, or regulatory bodies when we are required to do so under applicable law.
• Auditors and Professional Advisors: Audit firms, legal advisors, and consultants bound by strict confidentiality obligations.

All third parties we work with are required to comply with data protection standards equal to or higher than our own. Binding data processing agreements are signed with every service provider before any data is shared.

5 Data Security and Protection Measures

Protecting your personal data is vipp66's highest priority. We implement a range of technical and organisational security measures to prevent unauthorised access, loss, alteration, or disclosure of your data:

• 256-bit SSL Encryption: All communications between your device and vipp66 servers are protected by industry-standard SSL/TLS encryption, ensuring sensitive data cannot be intercepted during transmission.
• Layered Access Controls: Access to player data is restricted to staff with a legitimate operational need only, and is continuously monitored through an audit log system.
• Two-Factor Authentication (2FA): We encourage players to enable 2FA on their accounts for an additional layer of protection against unauthorised access.
• 24/7 Security Monitoring: Our systems are monitored around the clock by a cybersecurity team to detect and respond to any threats promptly.
• Regular Penetration Testing: vipp66 conducts regular security testing by independent experts to identify and address any vulnerabilities before they can be exploited.
• Secure Data Backup: Data is regularly backed up to a secure, isolated location to ensure service continuity and data recovery in the event of an incident.

While we take all reasonable precautions, no system can be guaranteed 100% secure against all cyber threats. In the event of a data security breach affecting you, we will notify you as soon as possible in accordance with applicable legal requirements.

6 Cookies, Tracking and Similar Technologies

Vipp66 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled as the platform will not function properly without them.
• Preference Cookies: Save your preferences such as language and display settings for a more personalised experience on future visits.
• Analytics Cookies: Help us understand how players use the platform through anonymised statistical data, for the purpose of continuous improvement.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage or block cookies through your browser settings at any time. Please note that blocking certain cookies may affect the functionality of some parts of the vipp66 platform. For more information on managing cookies, refer to your browser's help documentation.

7 Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our own policy, you have the following rights regarding the personal data we hold:

• Right to Access: You have the right to request a copy of the personal data we hold about you. We will provide this information within 21 working days of receiving a valid request.
• Right to Rectification: If any data we hold is inaccurate or outdated, you have the right to request immediate correction. You may also update your personal information directly through the account settings within the platform.
• Right to Deletion: You may request deletion of your personal data when it is no longer required for the original purpose of collection, subject to mandatory retention requirements under applicable law.
• Right to Object to Processing: You have the right to object to the processing of your data for certain purposes such as direct marketing. We will honour such objections promptly.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.
• Right to Complain: If you believe your privacy rights have been violated, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, please contact our support team via live chat within the vipp66 platform. We may require identity verification before processing any personal data request.

8 Data Retention Period

Vipp66 retains your personal data for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable law. The following is a general guide to our data retention periods:

• Active Account Data: Retained for as long as your account is active and for a reasonable period after account closure to resolve any outstanding issues.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction date, in line with Malaysia's anti-money laundering and tax reporting legal requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure or termination of the business relationship, in accordance with applicable regulatory requirements.
• Security Logs: Retained for 2 years for security incident investigation and fraud prevention purposes.
• Support Communication Data: Retained for 3 years for reference purposes and service quality improvement.

When data is no longer needed and there is no legal obligation to retain it, we will securely delete it using methods that ensure it cannot be recovered.

9 Changes to This Privacy Policy

Vipp66 reserves the right to amend this Privacy Policy from time to time to reflect changes in business practices, technological requirements, or relevant legal developments. Whenever we make significant changes, we will:

• Update the "Last Updated" date at the top of this page.
• Display clear in-platform notifications on vipp66 to inform registered players.
• Send email notifications to registered users regarding changes that significantly affect their privacy rights.

We encourage you to review this Privacy Policy periodically. Your continued use of the vipp66 platform after any changes are published will be considered your acceptance of the updated policy.

10 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by vipp66, please contact us through the following channels:

• Live Chat: The fastest channel – available 24 hours a day, 7 days a week, directly within the vipp66 platform.
• Privacy Email: [email protected] – for formal inquiries regarding personal data and the right to erasure.
• Help Center: Visit page FAQ us for answers to frequently asked questions about privacy and account security.

Our privacy team will endeavour to respond to all enquiries within 3 working days. For official requests related to data rights under the PDPA, please clearly state the type of request to help expedite the process.