Privacy Policy vip88 — Your Information Is Always Protected

1. Information We Collect

When you register and use the vip88 platform, we collect various types of information to ensure our services run smoothly, securely, and in compliance with legal requirements. The information collected falls into three main categories:

1.1 Information You Provide Directly

This is information you provided directly during registration, account verification, or when using our customer support services:

• Full name as stated on your Malaysia identity card (MyKad).
• Identity card number (MyKad) or passport for foreign nationals.
• Date of birth to verify that you are 18 years of age or older.
• An active email address used for official account communications.
• Malaysian mobile phone number registered in your name.
• Current residential address, including state and postcode.
• Bank account or digital wallet details for processing financial transactions.

1.2 Automatically Collected Information

When you access the vip88 platform, our systems automatically record certain technical information required to ensure a smooth and secure user experience:

• The IP address of the device you use when logging in.
• Your device type, operating system, and browser version.
• General geographic location based on IP address (not GPS).
• Session data including login time, logout time, and active session duration.
• Records of gaming activity, wagering, and financial transactions on the platform.
• Cookie data and device identifiers for ongoing security verification.

1.3 Information from Third-Party Sources

In certain cases, vip88 may receive information about you from trusted third-party sources, including payment service providers (FPX, DuitNow, Touch 'n Go eWallet) for transaction verification purposes, as well as identity verification agencies to fulfil KYC requirements as required by law.

2. How We Use Your Data

Vip88 uses collected personal information solely for legitimate, stated purposes listed below. We do not process your data beyond the scope required for each respective purpose:

For marketing communications, you may withdraw your consent at any time through the notification settings in your account. Withdrawing marketing consent will not affect the normal operation of your core vip88 services.

3. Data Encryption & Security

Vip88 continuously invests in the latest security infrastructure to ensure your personal data is protected at every stage — during transmission, during processing, and during long-term storage.

3.1 Data Encryption in Transit

All communications between your device and vip88 servers are protected using TLS 1.3 protocol with AES-256 encryption. This means that even if someone were to intercept your network traffic, they would be unable to read or exploit the data transmitted.

3.2 Data Encryption at Rest

Sensitive data such as identification card numbers, bank account information, and KYC documents are stored encrypted using military-grade AES-256 encryption. Account passwords are never stored in plain text — they are hashed using bcrypt with a unique random salt for each account.

3.3 Access Control & Monitoring

Internal access to member data is strictly controlled through a role-based access control (RBAC) system. All access to sensitive data is automatically logged and monitored. Any unusual or suspicious access immediately triggers an alert to our IT security team, which operates 24 hours a day.

3.4 Security Incident Response

In the event of a data breach involving members' personal information, vip88 is committed to notifying affected members within 72 hours of the incident being confirmed, in line with industry best practices and applicable legal requirements in Malaysia.

4. Data Sharing with Third Parties

Vip88 does not sell or rent your personal data to anyone. However, to ensure the platform operates properly and complies with legal requirements, we share limited data with certain third parties only in the following circumstances:

4.1 Payment Service Providers

Data required to process deposits and withdrawals is shared with approved payment providers such as FPX, DuitNow, and Touch 'n Go eWallet. Such data sharing is kept to a minimum and limited strictly to information necessary to complete the transaction. All our payment providers are bound by strict confidentiality agreements.

4.2 Game Providers

To enable you to play third-party games within the vip88 platform, basic account information (such as member ID and account balance) is shared with the relevant game providers via a secure, encrypted API. Game providers do not receive your full personal identification details.

4.3 Regulatory Authorities

Vip88 will disclose members' personal information to government agencies, law enforcement bodies, or judicial authorities when required by Malaysian law or a valid court order. In such cases, we will notify the member concerned unless prohibited from doing so by law.

4.4 Unauthorised Sharing

Vip88 will not share your personal data with third-party advertisers, data brokers, external analytics companies, or any party not mentioned above without first obtaining your explicit consent.

5. Cookies & Tracking Technologies

Vip88 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how members use our platform. Below is a full explanation of the types of cookies we use:

5.1 Essential Cookies (Non-Deniable)

These cookies are essential for the vip88 platform to function correctly. They include authentication session tokens, CSRF security cookies, and language preference cookies. Without them, certain core platform functions will not operate.

5.2 Performance & Analytics Cookies

We use internal analytics tools to understand overall platform usage patterns — including the most visited pages, average session duration, and user navigation flows. This data is collected anonymously and used solely to improve the vip88 user experience.

5.3 Preference Cookies

These cookies save your preferences such as interface language, display theme, and favourite game selections so you do not need to reconfigure them each time you log in to vip88.

5.4 Managing Your Cookies

You can manage or delete cookies at any time through your web browser settings. Please note that disabling essential cookies may affect certain features of the vip88 platform and the security of your login session.

6. Your Rights as a vip88 Member

As a vip88 member and data subject under Malaysian data protection law, you have the following rights regarding your personal information that we hold:

To exercise any of the above rights, please contact our Data Protection Officer at [email protected] or through your account settings. We will process your request within 14 business days of receipt.

7. KYC Data Management

The Know Your Customer (KYC) process is a legal requirement that all legitimately operating online entertainment platforms must fulfil. vip88 handles your KYC data with the highest standards of confidentiality and security.

7.1 Required Documents

To complete your KYC process, vip88 may require the following documents depending on the level of verification needed:

• Copy of your Malaysian identity card (MyKad) — front and back.
• A selfie holding your MyKad for visual facial verification.
• Recent bank statement (not older than 3 months) for payment method verification.
• Proof of residential address, such as a utility bill or official letter, for applicable cases.

7.2 KYC Document Processing

All submitted documents are stored in separate, encrypted storage systems accessible only by trained compliance staff. These documents are not used for any purpose other than identity verification and regulatory compliance.

7.3 KYC Document Retention Period

In accordance with Malaysia's Anti-Money Laundering (AML) legal requirements, KYC documents are retained for a minimum of 5 years from the date of account closure. After this period, documents will be securely deleted using non-recoverable deletion methods.

8. Data Retention & Deletion

Vip88 only retains your personal data for as long as necessary to fulfil the original purpose of collection or to meet applicable legal requirements. The following are our key data retention guidelines:

• Active account data — Retained for the duration your account is active and for 5 years after account closure.
• Financial transaction records — Retained for 7 years in compliance with Malaysia's Tax Act requirements.
• Security & session logs — Retained for 12 months for investigation purposes if required.
• Support communication records — Retained for 2 years from the date of last interaction.
• Marketing data — Deleted immediately upon withdrawal of consent.
• KYC Documents — Retained for 5 years after account closure as required under AML law.

Once the retention period ends, your data will be automatically deleted or anonymised using established procedures. You may request early data deletion by contacting our privacy team, subject to any legal obligations that may require us to continue retaining certain data.

9. Privacy Policy Amendments

Vip88 reserves the right to amend this Privacy Policy at any time to reflect changes in our business practices, new legal requirements, or improvements in how we protect your data.

When any material amendments are made to this policy, we will:

• Displaying a clear notice on the vip88 homepage at least 7 days before an amendment takes effect.
• Sending a notification to your registered email address informing you of key changes made.
• Updating the "Updated" date at the top of this page.

Continued use of the vip88 platform after an amendment's effective date constitutes your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account before they take effect.

10. Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how vip88 handles your personal data, our Data Protection Officer (DPO) team is ready to assist.