vag88 Privacy Policy

1Introduction

1.1 This Privacy Policy ("Policy") describes how vag88 ("vag88", "we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("you", "your", "User") who access or use the vag88 online gaming platform available at vag88.win, including its website, mobile web interface, games, sportsbook, live casino, poker rooms, and all associated services (collectively, the "Platform").

1.2 vag88 is committed to protecting the privacy and personal data of its users in accordance with applicable data protection legislation, including the Personal Data Protection Act 2010 of Malaysia (PDPA 2010) and any other applicable regional or international data protection frameworks.

1.3 By registering an account or using the vag88 Platform, you acknowledge that you have read, understood, and consent to the collection and processing of your personal data as described in this Policy. This Policy is incorporated into and forms part of the vag88 Terms & Conditions.

2Data Controller

2.1 For the purposes of applicable data protection law, vag88 is the data controller responsible for personal data collected through the Platform. As data controller, vag88 determines the purposes and means of processing your personal data.

2.2 Where vag88 engages third-party service providers to process personal data on its behalf (for example, payment processors, identity verification providers, or customer support platforms), those parties act as data processors and are bound by contractual obligations requiring them to process data only in accordance with vag88's instructions and to maintain appropriate security measures.

3Personal Data We Collect

3.1 vag88 collects the following categories of personal data:

3.2 vag88 does not collect special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, or biometric data) except where strictly required to fulfil responsible gaming or self-exclusion obligations, and only with your explicit consent or where required by law.

4How We Collect Your Data

4.1 vag88 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, session data, and cookies (see Section 8).
• Third-party sources: Identity verification data from KYC and document verification providers; fraud risk signals from payment processors; data from regulatory databases where legally required for AML/CFT compliance.

5How We Use Your Personal Data

5.1 vag88 uses personal data for the following purposes:

• To create, verify, and manage your vag88 account;
• To process deposits, withdrawals, and all financial transactions on the Platform in Malaysian Ringgit (MYR);
• To verify your identity and age (21+) in compliance with KYC obligations;
• To detect and prevent fraud, money laundering, and other prohibited activities;
• To comply with applicable anti-money laundering (AML) and counter-terrorism financing (CTF) regulations;
• To provide customer support and resolve disputes;
• To administer bonuses, promotions, and loyalty programmes;
• To monitor gaming activity for responsible gaming purposes, including identifying players who may be displaying signs of problem gambling;
• To send transactional communications (deposit confirmations, withdrawal notifications, security alerts);
• To send marketing communications, subject to your consent and opt-in preferences;
• To improve the Platform through analysis of usage patterns and technical performance data;
• To fulfil any legal or regulatory obligations applicable to vag88.

5.2 vag88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

6Legal Basis for Processing

6.1 vag88 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to provide the services described in the vag88 Terms & Conditions, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws, including KYC, AML, CTF, and data retention obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, Platform improvement, and responsible gaming oversight — where vag88's legitimate interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications and non-essential cookies, which require your explicit opt-in consent. You may withdraw consent at any time.

7Data Sharing & Disclosure

7.1 vag88 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Visa, Mastercard — to process financial transactions;
• KYC and identity verification providers: To verify your identity and age in compliance with regulatory requirements;
• Game content providers: Pragmatic Play, PG Soft, Evolution, and other licensed gaming studios — to the extent necessary to deliver game sessions;
• Customer support platforms: Live chat and ticketing systems used to manage support interactions;
• Regulatory authorities: Where required by law, court order, or regulatory direction — including financial intelligence units, gaming regulatory authorities, or law enforcement agencies;
• Professional advisers: Legal, accounting, and auditing firms under confidentiality obligations.

7.2 vag88 does not disclose personal data to any other third parties without your explicit prior consent, except as required by law.

8Cookies & Tracking Technologies

8.1 The vag88 Platform uses cookies and similar tracking technologies to deliver and improve the Platform experience. Cookies are small data files stored on your device that help vag88 recognise returning users, maintain session state, and analyse Platform usage.

8.2 vag88 uses the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication, security tokens, and login state maintenance. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display options, and logged-in state. Disabling these may affect Platform functionality.
• Analytics cookies: Collect aggregated, anonymised data about how users interact with the Platform to help vag88 improve performance and user experience. These are enabled by default but may be opted out.
• Marketing cookies: Used to deliver relevant promotional content based on your interests and Platform behaviour. These require your explicit consent.

8.3 You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from using certain core Platform features, including logging in to your vag88 account.

9Data Retention

9.1 vag88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: For the duration of the account relationship, plus a minimum of 7 years after account closure, in compliance with AML and gaming regulatory obligations;
• Transaction and financial data: Minimum of 7 years from the date of each transaction;
• Gaming activity logs: Minimum of 5 years from the date of the session;
• Customer support records: Minimum of 3 years from the date of the interaction;
• Marketing consent records: For the duration of the consent, plus 1 year after withdrawal.

9.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with vag88's data disposal procedures.

10Data Security

10.1 vag88 implements technical and organisational security measures appropriate to the risk and nature of the personal data processed, including:

• Encryption of data in transit and at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of the Platform;
• 24/7 automated fraud and intrusion detection systems;
• Staff training on data protection and information security obligations.

10.2 In the event of a personal data breach that poses a risk to your rights and freedoms, vag88 will notify the relevant supervisory authority and, where required, affected individuals, in accordance with applicable data breach notification obligations.

11Your Data Rights

11.1 Subject to applicable law, you have the following rights in relation to your personal data held by vag88:

• Right of access: To request a copy of the personal data vag88 holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data, subject to vag88's legal retention obligations;
• Right to restriction: To request that vag88 restricts the processing of your data in certain circumstances;
• Right to data portability: To receive your personal data in a structured, commonly used, machine-readable format;
• Right to object: To object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: To withdraw consent for processing activities that rely on consent, without affecting the lawfulness of prior processing.

11.2 To exercise any of these rights, please submit a written request to [email protected] (plain text — not a clickable link). vag88 will respond within 30 calendar days. We may require you to verify your identity before processing your request.

12Cross-Border Data Transfers

12.1 In the course of operating the Platform, vag88 may transfer personal data to service providers and partners located outside of Malaysia. Where such transfers occur, vag88 ensures that appropriate safeguards are in place — including standard contractual clauses, adequacy decisions, or other legally recognised transfer mechanisms — to ensure that your personal data continues to receive a level of protection equivalent to that required under Malaysian law.

13Children & Minors

13.1 The vag88 Platform is strictly restricted to individuals aged 21 and above. vag88 does not knowingly collect personal data from any person under the age of 21. If vag88 becomes aware that personal data has been collected from a minor, that data will be immediately and permanently deleted and the associated account closed.

13.2 If you believe that a minor may have registered a vag88 account or submitted personal data to the Platform, please contact vag88 immediately at [email protected] so that the matter can be investigated and resolved promptly.

14Third-Party Links

14.1 The vag88 Platform may contain links to third-party websites or services, including game provider portals. vag88 has no control over and accepts no responsibility for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any third-party services you access via links from the vag88 Platform.

15Changes to This Privacy Policy

15.1 vag88 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via email to the address on file or via a prominent notice on the Platform at least 7 days before the changes take effect, except where an immediate change is required to comply with a legal obligation.

15.2 The "Last updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the vag88 Platform after the effective date of any change constitutes acceptance of the revised Policy.

16Contact & Data Protection Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or vag88's handling of your personal data, please contact us: