Vegas888 Privacy Policy — Protection Personal Data Malaysian Members

Vegas888 values the privacy of every member on our platform. This Privacy Policy has been carefully crafted to clearly and transparently explain how vegas888 handles your personal data — from the moment you register through every gaming session you enjoy on our platform.

As an online entertainment platform operating for users in Malaysia, vegas888 is bound by the Personal Data Protection Act 2010 (PDPA), the primary legislation governing personal data processing in Malaysia. We do not merely meet the minimum legal requirements — we actively strive to exceed them and make privacy protection a core pillar of how our platform operates.

This Privacy Policy applies to all users who access the Vegas888 website, use the Vegas888 mobile app, or interact with any service provided by the Vegas888 platform, including Live Casino, sports betting, fish shooting games, bingo, and all related promotions.

Vegas888 only collects personal data that is strictly necessary to deliver platform services effectively and securely. Below is a detailed summary of the types of data collected:

Vegas888 does not collect sensitive data such as health information, religious beliefs, or members' political views under any circumstances.

Personal data collected by Vegas888 is used solely for the following purposes directly related to platform operations and member interests:

• Identity Verification & KYC: Ensuring every vegas888 member is a verified individual aged 18 and above, and preventing identity fraud and unauthorised account use.
• Financial Transaction Processing: Enabling deposits and withdrawals to be processed accurately, quickly and securely via members' preferred payment methods such as DuitNow, FPX, Touch 'n Go eWallet, and others.
• Account Management: Managing your vegas888 account, processing customer support requests, sending important account-related notifications, and enabling a personalised gaming experience.
• Fraud Prevention & Security: Detecting and preventing suspicious activity, money laundering, unauthorised access, and other security breaches that could affect the platform or vegas888 members.
• Regulatory Compliance: Meeting the reporting and compliance requirements set by the relevant authorities in Malaysia, including PDPA requirements, anti-money laundering laws, and applicable financial regulations.
• Service Improvement: Analysing platform usage patterns on an aggregated, anonymised basis to help vegas888 improve the user experience, enhance platform features, and develop more relevant promotions.
• Marketing Communications: Sending information about vegas888 promotions, bonuses, and exclusive offers — but only to members who have given their consent to receive such marketing communications.

Vegas888 does not sell, rent, or disclose members' personal data to external parties for their own marketing purposes. However, in the normal course of platform operations, there are limited situations where vegas888 may need to share data with certain parties:

• Payment Service Providers: Required transaction information is shared with authorised payment processors (such as banks and digital wallet providers) solely to facilitate the processing of deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Game Providers: Minimum data required to run games is shared with Vegas888's licensed game providers such as Live Casino platforms, slot providers, and sports operators. This data is limited to game session information only.
• Regulatory Authority: vegas888 will disclose data to Malaysian authorities or relevant regulatory bodies when required by law, court order, or valid legal process.
• Technical Service Providers: Cloud infrastructure providers, cybersecurity services, and analytics platforms used by vegas888 may process minimal technical data as part of their services, all subject to strict data processing agreements.

In all data sharing situations described above, Vegas888 ensures that recipients are bound by data protection obligations equivalent to Vegas888's own standards.

The vegas888 website and app use cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the vegas888 platform.

Vegas888 uses several types of cookies for different purposes:

• Essential Cookies: Required for core Vegas888 platform functions such as login, session management, and security. These cookies cannot be disabled as they are critical to platform operations.
• Functional Cookies: Remembering your preferences such as language, display settings, and game preferences to provide a more personalised experience each session.
• Analytics Cookies: Helping vegas888 understand how members use our platform through aggregated, anonymised usage data. This information is used solely for platform improvement.
• Security Cookies: Detecting suspicious activity such as unauthorised login attempts and helping protect your account from security threats.

Under Malaysia's PDPA and Vegas888's internal policies, you have the following rights regarding your personal data held by our platform:

To exercise any of the above rights, contact the vegas888 customer support team via our support email. vegas888 will process your request within a reasonable timeframe in accordance with PDPA requirements.

Vegas888 implements comprehensive technical and organizational security measures to protect members' personal data from unauthorized access, misuse, loss, or destruction:

• Data Encryption: All personal data stored in the vegas888 database is encrypted using the industry-recognized AES-256 encryption algorithm. Data transmitted between servers and clients is protected with TLS 1.3.
• Access Control: Access to Vegas888 member data is strictly limited to staff with a legitimate business need, following the principle of least privilege.
• Continuous Monitoring: The vegas888 system is continuously monitored 24 hours a day, 7 days a week to detect any security threats, intrusion attempts, or suspicious activity anomalies.
• Security Audits: vegas888 conducts regular penetration testing and security audits by accredited independent parties to identify and address any vulnerabilities in our systems.
• Staff Training: All vegas888 staff who handle personal data undergo comprehensive data protection and information security training on a regular basis.
• Incident Response Plan: vegas888 has a clear security incident response procedure. In the event of any data breach affecting members' information, vegas888 will notify the relevant authorities and affected members in accordance with legal requirements.

Vegas888 does not retain members' personal data longer than necessary for the purposes stated in this Privacy Policy. Retention periods depend on the type of data and applicable legal requirements:

• Active Account Data: For as long as your vegas888 account remains active, your personal data will be retained to ensure full platform functionality.
• After Account Closure: Upon account closure, vegas888 will retain the minimum necessary records for a period of no less than 7 years, in accordance with Malaysia's anti-money laundering laws and financial regulations.
• Financial Transaction Records: All financial transaction records are retained for a minimum of 7 years from the transaction date, in accordance with Malaysia's financial regulatory requirements.
• Security Log Data: Security logs and activity records are retained for 12 months for security investigation and fraud detection purposes.

Once the specified retention period has lapsed, vegas888 will securely delete or anonymize the relevant data using industry-approved methods.

Vegas888 is an online entertainment platform exclusively intended for adults aged 18 and above. vegas888 does not knowingly collect, store, or process personal data from individuals under the age of 18 under any circumstances.

Should vegas888 discover that personal data belonging to an individual under the age of 18 has been collected inadvertently, immediate action will be taken to permanently delete that data and close the account without delay.

Parents and guardians are advised to monitor their dependents' online activity at all times and ensure that children in their care do not access or register an account on the Vegas888 platform.

Vegas888 reserves the right to update or amend this Privacy Policy from time to time in response to legislative changes, technological developments, or changes in platform operating practices. The latest version of the vegas888 Privacy Policy will always be available on this page with a clearly indicated update date.

For material changes — that is, changes that significantly alter how vegas888 processes your personal data — vegas888 will notify you via an in-platform notification or registered email at least 14 days before the changes take effect.

Your continued use of the vegas888 platform after the effective date of any changes will be deemed as your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Vegas888 handles your personal data, you may reach our dedicated privacy team through the following channels:

The vegas888 privacy team is committed to responding to all enquiries within 3 business days. For cases requiring further investigation, we will keep you informed of your request's progress within 14 business days in accordance with Malaysia's PDPA requirements.

For more information about your rights under Malaysia's PDPA, you may also visit the official website of the Department of Personal Data Protection Malaysia or contact them directly through their official channels.