vega88 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is published by vega88 ("vega88", "we", "us", or "our") and applies to all personal data collected, processed, and stored in connection with your use of the vega88 platform, including the website at vega88.win, any associated subdomains, and all services, features, and content accessible therein (collectively, the "Platform").

This Policy is intended to inform you — as a registered player, prospective player, or visitor to the Platform ("you" or "your") — of your rights regarding your personal data and of the practices vega88 employs to protect it. "Personal data" means any information that identifies or could reasonably be used to identify a natural person.

By registering an account on vega88, by using any feature of the Platform, or by submitting personal data through any channel associated with vega88, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you must discontinue use of the Platform.

2. Data Controller

vega88 is the data controller in respect of the personal data collected through the Platform. As data controller, vega88 determines the purposes and means by which your personal data is processed. Where vega88 engages third-party processors to handle personal data on its behalf, those processors act under written data processing agreements that impose obligations equivalent to or stricter than those described in this Policy.

3. Personal Data We Collect

vega88 collects personal data in the following categories, depending on the nature of your interaction with the Platform:

vega88 does not intentionally collect sensitive personal data (such as health, religious, or political data) except where directly relevant to a responsible gaming assessment conducted at the player's request or where required by applicable law.

4. Legal Basis for Processing

vega88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to provide vega88 services pursuant to the account agreement, including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and tax reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improvement of Platform functionality, where such interests are not overridden by your rights.
• Consent: Processing for marketing communications, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. How We Use Your Personal Data

vega88 uses the personal data it collects for the following purposes:

• To create, verify, maintain, and manage your vega88 account.
• To process deposits, withdrawals, and other financial transactions in MYR.
• To verify your identity and age in accordance with KYC requirements (mandatory for all withdrawal requests).
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
• To monitor gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling.
• To communicate with you regarding your account, transactions, platform updates, and support requests.
• To comply with legal and regulatory obligations applicable to vega88's operations.
• To improve Platform functionality, user experience, and game offerings based on aggregate usage analysis.
• To send you promotional communications and offers where you have consented to receive them.

vega88 does not use your personal data to make automated decisions that produce legal effects or similarly significant impacts on you, without human review where required.

6. Disclosure of Personal Data to Third Parties

vega88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may disclose your personal data to the following categories of recipients:

• Payment processors and e-wallet providers (including Touch n Go, Boost, GrabPay, Maybank, CIMB, Public Bank) solely for the purpose of processing your transactions.
• Identity verification and KYC service providers engaged to verify your identity and age on vega88's behalf.
• Game providers and platform technology suppliers where necessary to deliver the gaming services you access.
• Regulatory authorities, law enforcement, and courts where disclosure is required by law, court order, or regulatory direction.
• Fraud prevention and AML screening services engaged to detect and prevent financial crime.

All third-party recipients who process personal data on vega88's behalf are required to implement appropriate technical and organisational security measures and to process data only for the purposes specified by vega88.

7. International Data Transfers

Some of vega88's service providers and infrastructure are located outside Malaysia. Where personal data is transferred to recipients in jurisdictions that may not provide an equivalent level of data protection to that applicable in Malaysia, vega88 implements appropriate safeguards — including contractual clauses requiring the recipient to maintain equivalent data protection standards — prior to such transfer.

8. Data Retention

vega88 retains personal data for as long as your account remains active and for a minimum retention period of five (5) years following account closure. Transaction records are retained for a minimum of seven (7) years in compliance with applicable AML and financial record-keeping regulations. Where a legal obligation requires retention beyond these periods, vega88 will comply accordingly.

Once the applicable retention period expires and there is no legal basis for continued retention, your personal data is securely deleted or anonymised in accordance with vega88's data disposal procedures.

9. Cookies and Tracking Technologies

The vega88 Platform uses cookies and similar tracking technologies to support Platform functionality, maintain your session, remember preferences, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens and security cookies. These cannot be disabled.
• Functional cookies: Remember your language preferences, display settings, and other personalisation choices.
• Analytics cookies: Collect aggregated, anonymised data about how visitors use the Platform, used to improve performance and user experience.

You may configure your browser to refuse non-essential cookies. Note that disabling certain cookies may affect Platform functionality. vega88 does not use third-party advertising cookies or cross-site tracking for commercial advertising purposes.

10. Security of Personal Data

vega88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the Platform.
• Encryption of sensitive stored data, including financial data and identity documents.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability monitoring.
• Incident response procedures for detecting, reporting, and responding to data breaches within prescribed timescales.

While vega88 employs industry-standard security measures, no digital platform can guarantee absolute security against all threats. You are encouraged to maintain strong, unique passwords for your vega88 account and to enable two-factor authentication where available.

11. Your Data Subject Rights

Subject to applicable law and certain conditions, you have the following rights in respect of your personal data held by vega88:

• Right of access: To request a copy of the personal data vega88 holds about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of your personal data where there is no legitimate basis for continued retention, subject to legal retention obligations.
• Right to restriction: To request that vega88 restrict processing of your personal data in certain circumstances.
• Right to object: To object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact vega88's support team via live chat or email at support at vega88.win. vega88 will respond to verified requests within 30 days. Identity verification may be required before a request can be processed.

12. Children and Minors

The vega88 Platform is strictly for individuals aged 21 and above. vega88 does not knowingly collect personal data from individuals under the age of 21. If vega88 becomes aware that personal data has been collected from a minor, the account will be immediately closed and all associated data deleted. If you believe a minor has registered an account on vega88, contact support at vega88.win immediately.

13. Changes to This Privacy Policy

vega88 reserves the right to amend this Privacy Policy at any time. Where changes are material, we will provide notice via the Platform or by email to your registered address. The current version of this Policy is always accessible at vega88.win/privacy-policy. Continued use of the Platform following notification of any amendment constitutes your acceptance of the revised Policy.

14. Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by vega88, please contact our Data Protection team via live chat (available 24/7 on the Platform) or by email at support at vega88.win. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days.

If you are not satisfied with vega88's handling of your personal data or response to your request, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.