Privacy Policy VPBet — Your Personal Data Protection

01Introduction

Welcome to VPBet's Privacy Policy. This document is published by VPBet ("we", "Platform") and applies to all users who access or use our services through the website vpbet.bz and the VPBet mobile app.

We understand that privacy is more than a legal obligation — it is the trust you place in us every time you register, make a deposit, or play a game on this platform. We take that trust seriously. This policy was created not merely to comply with Malaysia's Personal Data Protection Act 2010 (PDPA), but because we genuinely believe every user has the right to know how their data is managed.

This Privacy Policy clearly and transparently outlines the types of information we collect, why we collect it, how it is used, with whom it may be shared, how long it is retained, and your rights as the owner of that data. We update this document periodically to reflect changes in our practices or new legal requirements.

02Information We Collect

VPBet collects various types of information depending on how you interact with our platform. Generally, this information falls into three main categories:

A. Information You Provide Directly

• Full name as per identity card or passport.
• Date of birth (for age verification).
• Email address and mobile phone number.
• Current residential address.
• Identity card number (MyKad) or passport number.
• Bank account or digital wallet details for deposits and withdrawals.
• KYC verification documents such as copies of identification cards and bank statements.

B. Information Collected Automatically

• IP address and country-level geolocation data.
• Device type, operating system, and web browser version.
• Session data including pages visited, visit duration, and actions taken.
• Wagering and financial transaction history within the platform.
• Technical error logs and crash reports.

C. Information from Third-Party Sources

• Identity verification information from the KYC service providers we use.
• Credit check data or financial records required for AML (Anti-Money Laundering) compliance.
• Publicly available information lawfully obtained from sources such as government gambling blacklists.

03How We Use Your Information

The information we collect is used for specific and lawful purposes. vpbet does not use your data for any purpose not stated in this policy without obtaining your consent first.

• Account Management: Creating, verifying, and maintaining your account on the vpbet platform.
• Transaction Processing: Processing deposits, withdrawals, and any financial transactions you carry out.
• Identity Verification (KYC): Meeting legal requirements to verify user identity in order to prevent fraud and money laundering.
• Customer Support: Providing assistance when you contact our support team, as well as resolving any disputes or complaints.
• Platform Security: Detecting and preventing fraudulent activity, account breaches, and any misuse of the platform.
• Personalisation: Personalising content, offers, and game recommendations based on your habits and preferences.
• Marketing Communications: Sending notifications about promotions, bonuses, and exclusive offers — only if you have agreed to receive them.
• Regulatory Compliance: Fulfilling all reporting obligations to the relevant authorities in accordance with applicable laws.
• Service Improvement: Analysing platform usage patterns to continually improve the quality and usability of our services.

04Legal Basis for Data Processing

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), VPBet only processes your personal information on valid legal grounds, as follows:

• Contract Performance: Processing required to fulfill the agreement between you and VPBet, including account management and transaction processing.
• Legal Obligation: Processing required to comply with Malaysian law, including AMLA (Anti-Money Laundering Act) and relevant gambling regulations.
• Legitimate Interest: Processing for platform security purposes, fraud prevention, and service improvement that does not affect your fundamental rights.
• Consent: For opt-in marketing communications and the use of certain cookies, we require and respect your explicit consent. You may withdraw this consent at any time.

05Sharing Information with Third Parties

VPBet does not sell, rent, or disclose your personal information to third parties for their own commercial purposes. However, there are limited situations where we need to share your data with certain parties in order to deliver our services:

• Payment Service Providers: Payment providers such as DuitNow, FPX, and digital wallet providers that process your financial transactions. They only receive the data necessary to process your payment.
• KYC and AML Providers: Trusted third-party identity verification companies that assist us in verifying your identity and complying with anti-money laundering regulations.
• Game Providers: Gaming software companies (such as slot and live casino providers) that require minimal session information to deliver the gaming experience to you.
• Authorities and Regulatory Bodies: When required by law or by court order, we will disclose the necessary information to the relevant authorities.
• Technical Service Providers: Hosting companies, CDN providers, and cloud service providers that help us operate the platform infrastructure securely.

06Cookie Policy

VPBet uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our website.

Types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login, session security, and game cart management. These cookies cannot be disabled without affecting website functionality.
• Performance & Analytics Cookies: Helping us understand how users interact with our platform, which pages are most popular, and where users encounter issues. This data is collected anonymously.
• Functional Cookies: Saving your preferences such as language, display settings, and game preferences to provide a more personalised experience.
• Marketing Cookies: Used to display relevant ads and promotions based on your interests and activity. These cookies are only activated with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the VPBet platform.

07Data Retention Period

VPBet retains your personal information only for as long as it is needed for the stated purposes or as required by law. Retention periods vary by data type:

• Active Account Data: Retained for as long as your account is active and for 7 years after account closure, in accordance with Malaysian legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with AMLA requirements and Malaysian tax laws.
• KYC Documents: Retained for 6 years after the business relationship ends, or longer if required by a regulatory body.
• Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes.
• Analytics Data: Deleted or anonymised after 2 years.

Upon expiry of the retention period, your data will be securely deleted or anonymised so that it can no longer be associated with you.

08Your Rights Under PDPA

As a VPBet user residing in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA):

To exercise any of the above rights, contact our Data Protection team via VPBet customer support. We will process your request within 30 working days. In complex cases, this period may be extended to up to 60 days with prior notice to you.

09Data Security Measures

VPBet continually invests in security infrastructure to ensure your personal data is protected against unauthorised access, loss, destruction, or disclosure. The technical and organisational security measures we implement include:

• Data-In-Transit Encryption: All communications between your browser or app and our servers are protected with TLS 1.3 encryption — the latest security protocol that fully encrypts all transmitted data.
• Data-At-Rest Encryption: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using AES-256.
• Two-Factor Authentication (2FA): All administrative access to our internal systems requires two-factor authentication. We also encourage users to enable 2FA for their accounts.
• Role-Based Access Control (RBAC): Our staff only have access to the data they need to carry out their specific duties.
• Regular Penetration Testing: We conduct regular penetration testing and security audits through independent security experts to identify and address any vulnerabilities before they can be exploited.
• 24/7 Monitoring: Our security system continuously monitors the platform around the clock to detect any suspicious or unusual activity.
• Incident Response Plan: We have tested incident response procedures in place to address any security breaches quickly and effectively.

10Links to Third-Party Websites

The VPBet platform may from time to time contain links to third-party websites or services. This Privacy Policy applies solely to the VPBet platform and does not cover the privacy practices of other websites.

We are not responsible for the content, privacy policies, or security practices of any third-party websites. We encourage you to read the privacy policy of every website you visit. The presence of links to other websites does not mean vpbet endorses or supports those websites.

11Child Protection

VPBet is an online entertainment platform that restricted to users aged 18 and above only. We do not knowingly collect or process any personal information from individuals under the age of 18.

All users are required to verify their age during the registration process and during KYC procedures. Should we discover that personal information of a person under the age of 18 has been inadvertently collected, we will promptly delete that information and close the associated account.

If you have information that a minor has registered on our platform, please contact our support team immediately so we can take the appropriate action.

12Amendments to This Privacy Policy

VPBet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. Any amendments will take effect immediately upon publication on this website.

When we make material changes to this policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications to you via your registered email for significant changes.
• Displaying a clear notice on the platform's home page for a minimum of 14 days.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the VPBet platform after any amendments are published will be considered your acceptance of the updated terms.

13Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, do not hesitate to contact us. Our team is ready to assist you.