Privacy Policy — Vega168

Introduction

Vega168 ("we", "us", "our", "the Platform", "the Operator") is committed to protecting the privacy and personal data of all individuals who interact with our online casino and sports betting platform accessible at vega168.cam (the "Website"). This Privacy Policy ("Policy") sets out in full how Vega168 collects, processes, stores, shares, and protects your personal data when you register as a member, use our Services, or otherwise interact with us.

This Policy applies to all registered players and visitors to the Website, wherever they are located, including Malaysian players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other cities across Malaysia. By creating an account or using any Service on the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions, which govern the overall terms of your use of the Platform. References to "personal data" in this Policy mean any information relating to an identified or identifiable natural person, as understood under applicable data protection legislation.

Definitions

In this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — Any information that relates to an identified or identifiable individual, including name, contact details, identification numbers, location data, online identifiers, and financial information.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. Vega168 is the data controller for the personal data of its registered members.
• "Data Processor" — A third party that processes personal data on behalf of Vega168, such as payment processors, KYC verification providers, and cloud hosting services.
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement by a data subject to the processing of their personal data for a stated purpose.
• "KYC" — Know Your Customer; the identity verification process that Vega168 is required to conduct under applicable compliance frameworks before permitting withdrawals from player accounts.
• "Third Party" — Any natural or legal person other than the data subject, Vega168, or authorised processors acting under Vega168's direct authority.

Personal Data We Collect

Vega168 collects only the personal data that is necessary for us to provide our Services, fulfil our legal obligations, and maintain the integrity of the Platform. The categories of personal data we may collect include:

• Identity and Verification Data: Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents (Malaysian MyKad / NRIC, passport, or driving licence) required for KYC and age verification purposes (strictly 21+).
• Contact Information: Email address, mobile telephone number, and residential address (including city and postcode within Malaysia or your country of residence).
• Financial Transaction Data: Deposit and withdrawal amounts denominated in Malaysian Ringgit (MYR / RM), the payment method used (DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, Maybank, CIMB, Public Bank, USDT TRC20, or other), transaction reference numbers, and processing timestamps.
• Technical and Device Data: IP address, device identifier, browser type and version, operating system, time zone setting, screen resolution, and session log data generated when you access the Website.
• Gambling and Usage Data: Game history, betting activity, wager amounts, gaming session frequency and duration, sportsbook markets accessed (including Liga Super Malaysia, EPL, and other events), and VIP programme tier activity.
• Communications Data: Records of your interactions with our customer support team via live chat or email, support ticket history, and any documentation submitted to us in connection with a query or dispute.
• Marketing Preference Data: Your opted-in or opted-out status for promotional communications, and your preferences regarding bonus offers and platform notifications (where separately consented to).

How We Collect Your Data

We collect personal data through the following channels and interactions:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your account profile.
• Automated Technical Collection: Data collected automatically when you access the Website, including IP address, device identifiers, browser information, session timestamps, and activity logs. This data is collected through server logs, cookies, and similar tracking technologies as described in Section 11.
• Payment Providers: Confirmation and status data returned by payment processors (such as DuitNow, FPX, or e-wallet providers) in connection with your deposit or withdrawal transactions.
• KYC and Identity Verification Partners: Results of identity, age, and address verification checks conducted through our authorised KYC service providers.
• Fraud and Risk Detection Tools: Data received from our fraud prevention and risk-scoring partners to identify and prevent irregular account activity.

Purposes of Processing Your Data

Vega168 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your player account, including verifying your identity, managing your account balance, and processing requests related to your account settings.
• Payment Processing: Facilitating deposits and withdrawals in MYR through your chosen Malaysian payment method, recording transaction history, and resolving payment disputes.
• KYC and Compliance: Verifying your identity and age (minimum 21 years) in accordance with our compliance obligations, screening against applicable sanction and watchlists, and reporting as required by applicable law.
• Platform Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, account takeovers, money laundering, and other prohibited conduct on the Platform.
• Responsible Gambling: Monitoring player activity to identify indicators of problem gambling behaviour, enforcing self-imposed deposit limits and self-exclusions, and supporting our responsible gambling programme.
• Customer Support: Responding to your enquiries, resolving complaints, and maintaining records of your interactions with our support team.
• Platform Improvement: Analysing anonymised aggregated usage data to improve game selection, website functionality, mobile performance, and the overall user experience.
• Legal and Regulatory Compliance: Retaining records and responding to requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction as required under applicable law.
• Marketing Communications (Consent Only): Sending you information about promotions, bonuses, new games, or platform updates where you have provided separate opt-in consent. You may withdraw marketing consent at any time.

Legal Bases for Processing

Every instance of personal data processing at Vega168 is grounded in one or more of the following lawful bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and Vega168 — including account operation, payment processing, and customer support — is carried out on this basis.
• Legal Obligation: Processing required to comply with applicable law, including KYC/AML obligations, regulatory reporting requirements, and data retention mandates mandated by applicable gaming compliance frameworks.
• Legitimate Interests: Processing carried out in furtherance of Vega168's legitimate interests — such as fraud prevention, platform security, and improving user experience — where those interests are not overridden by your rights and interests.
• Consent: Processing for optional purposes such as marketing communications and non-essential cookies, which occurs only where you have provided a clear, affirmative, and freely given consent that you may withdraw at any time.

Disclosure and Data Sharing

Vega168 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your personal data with third parties only in the following circumstances:

• Payment Service Providers: Your financial data is shared with authorised payment processors (such as DuitNow, Touch 'n Go, Boost, GrabPay, FPX-linked banks, and cryptocurrency exchange partners) strictly to process your requested transactions.
• KYC and Identity Verification Providers: Your identity documents and verification data may be transmitted to our authorised KYC partners to complete the verification process required before withdrawals are permitted.
• Fraud Detection and Security Partners: Technical and behavioural data may be shared with fraud risk-scoring services to identify and prevent irregular account activity and protect the integrity of the Platform.
• Regulatory Authorities and Law Enforcement: Where required by applicable law, court order, or regulatory direction, Vega168 will disclose personal data to the relevant authority. We will notify you of such disclosures where legally permitted to do so.
• Professional Advisers: Legal, accounting, or auditing firms engaged by Vega168 may access personal data on a need-to-know basis and subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of Vega168's assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

International Data Transfers

To deliver our Services, Vega168 may transfer your personal data to servers, processors, or affiliated entities located in jurisdictions outside Malaysia. Where such transfers occur, we implement appropriate safeguards to ensure that your data receives a level of protection consistent with this Policy, including:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into our agreements with data processors;
• Transfers to jurisdictions recognised as providing an adequate level of data protection equivalent to applicable standards;
• Technical measures including end-to-end encryption of data in transit across international networks.

By using the Vega168 Platform, you acknowledge and consent to the transfer of your personal data as described above, subject to the safeguards set out in this Policy.

Data Retention

Vega168 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by applicable legal, regulatory, and compliance obligations. The following indicative retention periods apply:

Following the expiry of the relevant retention period, personal data is securely deleted, anonymised, or archived in accordance with our internal data lifecycle procedures, unless a longer retention period is required or permitted by applicable law.

Security Measures

Vega168 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational safeguards designed to protect your information against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and the Vega168 Platform is protected using TLS 1.3 / 256-bit SSL encryption. Look for the padlock icon in your browser address bar when accessing our Website.
• Encryption at Rest: Sensitive data stored on our servers — including KYC documents, financial data, and account credentials — is encrypted at rest using AES-256 encryption standards.
• Access Controls: Personal data is accessible only to authorised Vega168 personnel who have a legitimate need to access it for their role. Access is governed by role-based access control (RBAC) policies and reviewed regularly.
• Two-Factor Authentication (2FA): We strongly encourage all players to enable 2FA on their accounts. Internal system access by Vega168 staff is mandatorily protected by multi-factor authentication.
• Penetration Testing: Our infrastructure is subject to regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: Vega168 maintains a documented data breach response plan. In the event of a confirmed data security incident affecting your personal data, we will notify you promptly in accordance with our legal obligations.

Cookies & Similar Technologies

Vega168 uses cookies and similar tracking technologies to ensure the proper functioning of the Platform, enhance your experience, and collect analytical data to improve our Services. A cookie is a small text file placed on your device when you visit a website.

We use the following categories of cookies on the Vega168 Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies, authentication tokens, and security cookies. These cannot be disabled without breaking core Platform functionality.
• Analytical / Performance Cookies: Used to collect anonymised data about how visitors use the Website — including pages visited, session duration, and error logs — to help us improve Platform performance. This data is not used to identify individual users.
• Functional Cookies: Remember your preferences, such as language settings and preferred payment methods, to provide a more personalised experience during your session.

We do not use third-party advertising or behavioural tracking cookies. You may control cookie settings through your browser preferences. Disabling certain functional cookies may affect your experience on the Platform.

Your Data Subject Rights

Subject to applicable data protection laws, you hold the following rights in relation to your personal data held by Vega168. To exercise any of these rights, please contact us using the details in Section 15. We will respond to verified requests within 30 days.

Note that certain rights are subject to limitations. For example, we may be unable to erase data that we are legally required to retain under AML, KYC, or financial record-keeping obligations. We will explain any such limitation clearly when responding to your request.

Children's Privacy and Underage Access

Vega168 operates an online gambling platform that is strictly for individuals aged 21 years and above. We do not knowingly collect, solicit, or process personal data from anyone under the age of 21. Our registration process includes age verification checks, and we conduct additional KYC verification prior to permitting withdrawals to ensure that no underage individual is able to gamble on the Platform.

If we become aware that we have inadvertently collected personal data from an individual under the age of 21, we will immediately suspend the account, initiate a review, delete the personal data concerned (subject to any legal retention requirements), and take appropriate steps to prevent recurrence.

If you are a parent or guardian and have reason to believe that a minor under your care has registered an account on Vega168, please contact our support team immediately at the contact details in Section 15.

Changes to This Privacy Policy

Vega168 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or the Services we offer. When we make material changes to this Policy, we will notify registered members by posting a notice on the Platform and, where appropriate, sending a notification to the email address associated with your account, at least 14 days before the changes take effect.

The effective date at the top of this page will be updated whenever a revision is made. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the Platform following notification of changes constitutes your acceptance of the updated Policy.

Contact Us — Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or need to report a privacy concern, please contact the Vega168 Data Protection contact as follows:

• Email: [email protected] (plain text only — not a clickable link)
• Method: 24/7 live chat support via the Platform widget
• Subject Line (for email): Include "DATA SUBJECT REQUEST" or "PRIVACY ENQUIRY" for faster routing to our data protection team
• Response Time: We target a response to all data subject requests within 30 days of receipt, extendable by a further 60 days in complex cases (with prior notification)

For account closure, self-exclusion requests, or responsible gambling support tools, please visit our dedicated Responsible Gambling page.