Vipibet Privacy Policy – How We Protect the Personal Data of Malaysian Players

Vipibet takes user privacy very seriously. We understand that your trust in us depends not only on the quality of the games and services we offer, but also on how we handle the personal information you entrust to us.

This Privacy Policy was drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and reflects our commitment to high data protection standards. We do not collect more data than necessary, and we do not use your data for purposes you would not expect.

This document clearly outlines: what data we collect, why we need it, who can access it, how long it is retained, and what rights you have as the data owner. If at any point something is unclear, our support team is available via live chat or email.

Vipibet collects several categories of data depending on how you interact with our platform:

For the KYC (Know Your Customer) process required for withdrawals and anti-money laundering compliance, you may be asked to submit a copy of your official identification document and proof of address. All such documents are processed with full security.

The data we collect is used solely for the following legitimate and stated purposes:

• Account management: Create and maintain your account, including identity verification processes
• Transaction processing: Handle deposits, withdrawals and fund transfers securely
• Service provision: Enables you to access all games and features of the vipibet platform
• Platform security: Detect and prevent fraud, money laundering and platform abuse
• Legal compliance: Meet reporting and compliance requirements with relevant regulatory bodies
• Customer support: Address your inquiries, complaints and assistance requests
• Platform improvements: Analyze usage patterns to improve overall user experience
• Marketing communications: Send notifications about promotions and offers — only if you have consented to receive them

We will not use your data to make automated decisions that significantly affect you without human involvement.

Vipibet processes your personal data on the following lawful bases under PDPA 2010:

• Consent: You have given consent for specific processing activities, such as marketing communications. You may withdraw this consent at any time.
• Performance of contract: Processing required to provide the services you registered for, including account management and payment processing.
• Legal obligations: Processing required to comply with applicable laws, including AML and KYC requirements.
• Legitimate interest: Processing for platform security purposes, fraud prevention and service improvement.

Vipibet does not sell, rent, or trade your personal data to any third party for their marketing purposes. Your data is only shared in the following limited situations:

• Third-party service providers: Companies that help us operate the platform, such as payment providers, identity verification services, and server operators. All such parties are bound by strict confidentiality agreements.
• Regulatory bodies and law enforcement: When required by law or a valid court order in Malaysia or a relevant jurisdiction.
• Fraud prevention: With recognised fraud prevention services to protect you and the platform from illegal activity.
• Business transfer: In the event of a company merger or acquisition, data may be transferred to the new entity — you will be notified in advance.

Protecting your data is a technical and organizational responsibility we take very seriously. The security measures we implement include:

• Transmission encryption: All data transmitted between your device and vipibet servers is protected with 256-bit SSL/TLS encryption — the same standard used by leading financial institutions.
• Storage encryption: Sensitive data is stored in encrypted form in our database
• Two-factor authentication (2FA): Account login is supported by 2FA for an extra layer of security
• 24/7 monitoring: Our systems are continuously monitored to detect any suspicious activity.
• Restricted access: Only authorised staff who require access to perform their duties may access player data
• Regular security testing: Penetration testing and security audits are conducted regularly by independent firms.

Despite all these measures, no system is 100% secure. In the event of a data breach that affects you, we will notify you within 72 hours in accordance with breach notification requirements.

Vipibet retains your data only for as long as necessary for the original purpose of collection or as required by law:

• Active account data: For as long as your account is active and for a period of 5 years after account closure (AML compliance requirement)
• Financial transaction records: 7 years as required by Malaysian law on financial records
• KYC Documents: 5 years after the business relationship ends
• Technical logs: Maximum 90 days, unless required for ongoing security investigations
• Customer support communications: 3 years from the date of communication

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

Under PDPA 2010 and our policy, you have the following rights regarding your personal data:

To exercise any of the above rights, contact us by email at [email protected] with the subject line "Personal Data Rights Request". We will respond within 30 business days. In complex cases, this period may be extended up to 60 days with prior notice to you.

Vipibet uses cookies and similar tracking technologies to enhance your experience on the platform. The cookies we use fall into the following categories:

• Essential cookies (mandatory): Required for core platform functions such as login verification and session security. Cannot be disabled.
• Performance cookies: Collect information about how you use the platform to help us improve performance and usability.
• Functional cookies: Store your preferences such as language and display settings so you don't have to reconfigure them each time.
• Analytics cookies: Helps us understand usage patterns in aggregate for platform improvement purposes.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality. Each time you visit the vipibet platform for the first time, you will be asked to consent to our use of cookies.

In operating the vipibet platform, some data may be stored or processed on servers located outside Malaysia. When this occurs, we ensure that protections equivalent to Malaysia's PDPA are upheld through:

• Binding data processing agreements with all overseas service providers
• Selection of server and cloud service providers that comply with internationally recognized data protection standards
• Security impact assessment before any new cross-border data transfer is implemented

The vipibet platform is strictly for individuals aged 21 and above. vipibet does not intentionally collect personal data from minors. If we discover that data belonging to a minor has been collected, we will take immediate steps to delete that data and close the account in question.

If you believe that someone under the age of 21 has created an account on vipibet, please contact us immediately at [email protected].

Vipibet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make material changes:

• The "Updated" date at the top of this document will be changed.
• We will display a clear notice on the platform for at least 30 days
• For material changes, we will send a notice to the email address you registered with.

Your continued use of the vipibet platform after any changes to this Privacy Policy take effect is considered your acceptance of those changes. We encourage you to review this page periodically.

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us through the following methods:

• Live Chat: Available 24/7 directly within the vipibet platform — the fastest way to get an immediate response.
• Email: [email protected] (mark the subject: "Data Privacy Enquiry")
• Response time: We aim to respond to all privacy enquiries within 5 business days

You may also refer data privacy complaints to the Department of Personal Data Protection Malaysia if you feel your rights have not been addressed after contacting us.