Privacy Policy

Vega888 (hereinafter "Vega888", "we", "us", "our") operates the online gaming and sports betting platform accessible at vega888.lat. As a platform that serves registered members across Malaysia — including players Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond — we handle personal information as a routine part of our operations.

This Privacy Policy (hereinafter "Policy") describes in detail how Vega888 collects, uses, stores, shares, and protects the personal data of individuals who access or use the Vega888 platform ("Members", "Users", "You"). It also sets out your rights as a data subject and explains how to exercise those rights.

This Policy is intended to be read in conjunction with our Terms and Conditions and our Responsible Gambling Policy, both of which are accessible via the navigation links on this site. Where those documents address matters of data privacy, this Policy shall take precedence.

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, payment information, and device identifiers.
• "Processing" — any operation or set of operations performed on personal data, including collection, recording, storage, retrieval, use, disclosure, alteration, or deletion.
• "Data Controller" — Vega888, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — any third-party entity that processes personal data on behalf of Vega888under a written data processing agreement.
• "KYC Data" — identity and address verification documents submitted by a Member to fulfil Vega888's Know Your Customer obligations prior to withdrawal processing.
• "Cookie" — a small text file placed on your device by the Vega888 platform to store session information, preferences, and analytics data.
• "PDPA" — the Personal Data Protection Act 2010 of Malaysia, which governs the processing of personal data of individuals in the course of commercial transactions.

Vega888 collects the following categories of personal data from Members and prospective Members:

Vega888 collects personal data through the following methods:

• Direct Submission: Data you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting our support team, or updating your account profile.
• Automated Collection: Technical and gameplay data collected automatically when you access or use the Vega888 platform, including IP address logging, session tracking, and browser fingerprinting for fraud prevention purposes.
• Payment Processors: When you transact via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or supported cryptocurrency networks, transaction confirmation data is transmitted to Vega888 by those payment providers.
• KYC Verification Partners: Where Vega888 uses third-party identity verification services, those providers may return verification outcome data and document authenticity assessments to Vega888 as part of the KYC process.
• Cookies and Similar Technologies: As described in Section 8of this Policy, certain data is collected passively via cookies, web beacons, and session tokens during your use of the platform.

Vega888 processes personal data for the following specific and legitimate purposes:

1. Account Management: To create, maintain, and administer your Vega888 member account, including authentication, profile management, and account preference settings.
2. Identity Verification (KYC): To verify your identity and age in compliance with our operating licence requirements and anti-money laundering obligations. KYC is mandatory prior to withdrawal processing.
3. Transaction Processing: To facilitate deposits and withdrawals via supported Malaysian payment channels including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong, as well as cryptocurrency networks.
4. Responsible Gambling Compliance: To monitor gaming behaviour and enforce responsible gambling tools including deposit limits, loss limits, session reminders, and self-exclusion. Vega888 is required to maintain records of responsible gambling interactions.
5. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account sharing, money laundering, and other prohibited activities outlined in our Terms and Conditions.
6. Customer Support: To respond to member queries, disputes, and support requests in a timely and accurate manner.
7. Regulatory Compliance: To fulfil our legal and contractual obligations under our operating licence, applicable data protection legislation, and anti-money laundering regulations.
8. Marketing Communications: To send promotional offers, bonus notifications, and platform updates to Members who have provided consent for such communications.
9. Platform Improvement: To analyse usage patterns, technical performance, and member behaviour in aggregate form to improve the Vega888 platform, game offering, and user experience.

Vega888 processes personal data only where a valid legal basis exists. The following legal bases apply to our data processing activities:

• Contractual Necessity: Processing required to perform our contract with you — the Terms and Conditions governing your Vega888 account — including account management, transaction processing, and KYC verification.
• Legal Obligation: Processing required for Vega888 to comply with applicable laws, our operating licence conditions, anti-money laundering obligations, and responsible gambling regulatory requirements.
• Legitimate Interests: Processing carried out in pursuit of Vega888's legitimate business interests, including fraud prevention, platform security, and aggregate analytics for service improvement, where such interests do not override your rights and freedoms.
• Consent: Processing based on your explicit consent, primarily in relation to marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Vega888 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Personal data may be shared with third parties only in the following strictly defined circumstances:

• Payment Processors: Financial institutions and e-wallet operators (including DuitNow, FPX, Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong) receive the minimum transaction data necessary to process your deposits and withdrawals. These parties are subject to their own regulatory data protection obligations.
• KYC and Identity Verification Providers: Specialist KYC service providers may receive identity documentation and personal information to facilitate the account verification process. All such providers operate under written data processing agreements with Vega888.
• Fraud Prevention and Security Services: Aggregated technical data including IP addresses and device fingerprints may be shared with fraud detection services to protect the platform and its members.
• Legal and Regulatory Authorities: Vega888 will disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required by applicable law, court order, or our operating licence obligations.
• Professional Advisers: Legal counsel, auditors, and compliance consultants who require access to data in order to provide professional services to Vega888 are bound by professional confidentiality obligations.

The Vega888 platform uses cookies and similar tracking technologies to provide, maintain, and improve our services. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without disrupting core platform functionality.
• Functional Cookies: These cookies remember your preferences, such as language settings, account display preferences, and responsible gambling tool configurations.
• Performance and Analytics Cookies: These cookies collect aggregated data about how Members use the platform, including which pages are visited most frequently and where technical errors occur. This data is used to improve platform performance and user experience.
• Security and Fraud Prevention Cookies: These cookies assist in detecting and preventing fraudulent access attempts, account sharing, and other security threats.

You may manage cookie preferences through your browser settings. Disabling certain categories of cookies may affect the functionality of specific platform features. Strictly necessary cookies cannot be disabled.

Vega888 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law, our operating licence, or legitimate business obligations. The following retention principles apply:

• Active Account Data: Personal data associated with an active member account is retained for the duration of the account's existence and for a minimum period of five (5) years following permanent account closure.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the closure of the member account to which they relate, in compliance with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Deposit, withdrawal, and wagering transaction records are retained for a minimum of seven (7) years to satisfy financial reporting and regulatory audit obligations.
• Support Communications: Customer support chat logs and email correspondence are retained for a period of three (3) years following the closure of the relevant support interaction.
• Marketing Preferences: Records of marketing consent and opt-out requests are retained indefinitely as evidence of your preferences, even if all other account data has been deleted.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

Vega888 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures in place include:

• SSL/TLS Encryption: All data transmitted between your device and the Vega888 platform is encrypted using industry-standard 256-bit SSL/TLS protocols, preventing interception in transit.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Employees with access to member data are subject to confidentiality obligations and regular security training.
• Secure Data Storage: Member data is stored on secured servers with physical access controls, regular vulnerability assessments, and intrusion detection monitoring.
• Password Security: Account passwords are stored using industry-standard one-way cryptographic hashing. Vega888 does not store passwords in plain text.
• Incident Response: Vega888 maintains a documented data breach response procedure. In the event of a significant data security incident, affected members will be notified in accordance with applicable data protection obligations.

While Vega888 implements robust security measures, no digital platform can guarantee absolute security. Members are encouraged to use strong unique passwords and to contact support immediately upon any suspicion of unauthorised account access.

As a data subject whose personal information is processed by Vega888, you hold the following rights. All rights requests should be submitted to our support team via live chat or email as detailed in Section 15 of this Policy.

The Vega888 platform is strictly for individuals aged21 years and above. Vega888 does not knowingly collect personal data from individuals under the age of 21, and the platform is not designed for or directed at minors.

If Vega888 becomes aware that personal data has been collected from a person under the age of 21 through any means, the relevant account will be immediately suspended, all associated funds will be investigated, and the collected personal data will be deleted in accordance with applicable data protection law.

If you believe that a minor has registered an account on the Vega888 platform, please contact our support team immediately via live chat so that appropriate action can be taken.

Vega888 may send promotional and marketing communications to Members who have provided their consent to receive such communications during registration or via account settings. Marketing communications may include bonus offers, platform updates, seasonal promotions, and VIP program notifications.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your Vega888 account settings.
• Contacting our support team via live chat and requesting removal from marketing communications.

Opting out of marketing communications does not affect the delivery of service-essential communications, such as transaction confirmations, security alerts, KYC requests, or updates to this Privacy Policy or our Terms and Conditions.

Vega888 does not engage in unsolicited bulk marketing (spam). All marketing communications are sent only to Members who have provided valid consent and maintain an active Vega888 account.

Vega888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operating procedures. The date of the most recent revision is displayed prominently at the top of this document.

In the event of material amendments — that is, changes that significantly affect how your personal data is collected, processed, or shared — Vega888 will notify registered Members via a platform notification or email at least fourteen (14) days prior to the amended Policy taking effect.

Your continued use of the Vega888 platform following the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the amended Policy, you must cease using the platform and contact support to close your account.

We encourage all Members to review this Privacy Policy periodically to remain informed of how Vega888 protects their personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy, the processing of your personal data, or the exercise of your data rights, please contact the Vega888 Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the Vega888 platform. Live chat is the fastest channel for time-sensitive data rights requests.
• Email (non-clickable): [email protected] — please include "Privacy Request" in the subject line for data-related enquiries to ensure prompt routing to the appropriate team.

All privacy-related enquiries are handled by our dedicated compliance team. Response times for data rights requests are governed by the timeframes set out in Section 11 of this Policy.