Privacy Policy Vega168 – Personal Data Protection for Malaysian Members

01Introduction & Scope of Privacy Policy

Vega168 is an online digital entertainment platform operating under the domain vega168.click, offering Live Casino, online slots, Sports Betting, lottery, and e-sports services exclusively for Malaysian users. As a responsible platform operator, Vega168 is fully committed to protecting the privacy and personal data security of every member who uses our services.

This Privacy Policy applies to all individuals who access the Vega168 website, register an account, make deposits or withdrawals, use any gaming service, or interact with our customer support team through any channel. This includes users on all platforms – desktop web browsers, mobile browsers, and any other interface provided by Vega168.

The Vega168 Privacy Policy is built on the core principles of Malaysia's Personal Data Protection Act 2010 (PDPA) – the primary legislation governing personal data processing in a commercial context in Malaysia. We take a "privacy by design" approach, meaning data protection is considered from the outset in every technical and operational decision we make, not treated as an afterthought.

Vega168 believes transparency is the foundation of trust. This policy is written in plain, straightforward language – not complex legal jargon – so every Malaysian member can know exactly how their data is handled. If anything is unclear, our support team is available 24 hours a day.

02Personal Data Collected by Vega168

Vega168 only collects data that is necessary for legitimate purposes in operating a digital entertainment platform. We do not collect excessive or irrelevant data. The categories of data collected are as follows:

2.1 Account Registration Data

When you register a Vega168 account, we collect the following information:

• Full name as stated on your Malaysian identity card (MyKad).
• Mobile phone number active Malaysian mobile number for OTP verification and important communications.
• Email address that is active for notifications, account verification, and official communications.
• Username that you have selected to log in to the platform.
• Password stored in hashed form that cannot be read by anyone, including Vega168 staff.
• Date of birth to verify that you meet the minimum age requirement of 18 years.

2.2 Identity Verification Data (KYC)

For withdrawals above a certain threshold, or when required by our compliance process, Vega168 may request:

• A copy of your MyKad (front and back) or other valid Malaysian identity document.
• Proof of local address (utility bill or bank statement) dated within the last 3 months.
• Additional information required to meet applicable legal compliance obligations.

2.3 Platform Activity Data

When you use Vega168, our systems automatically record:

• Records of all transactions – deposits, withdrawals, bets, and winnings.
• Gaming history – games played, dates, times, and outcomes.
• Account activity records – logins, logouts, settings changes, and support interactions.
• Technical data – IP address, browser type, device type, and operating system.

03How Your Personal Data Is Used

Vega168 uses members' personal data for the following legitimate purposes:

Vega168 will not use your personal data for any purpose beyond those stated above without obtaining your fresh consent. If you no longer wish to receive marketing communications, you may withdraw your consent at any time through your account settings or by contacting our support team.

04Data Storage & Security Measures

4.1 Where Data Is Stored

All Vega168 members' personal data is stored on servers located in Southeast Asia, maintained to high physical and digital security standards. Our data centres feature strict physical access controls, redundant cooling systems, uninterruptible power supplies (UPS) and round-the-clock monitoring by security personnel.

4.2 Technical Safeguards

Vega168 implements multiple layers of technical protection to keep your data secure:

• 256-bit SSL/TLS Encryption – all data transmitted between your browser and Vega168's servers is encrypted using the same standard adopted by Malaysian banking institutions.
• Data encryption at rest – sensitive data such as payment information and identity documents are stored in encrypted form, even within internal databases.
• Hashed passwords – your password is never stored in plain text; it is converted into an irreversible cryptographic hash value.
• Multi-layered firewall – a multi-layered protection system that blocks unauthorised external access.
• 24/7 security monitoring – Vega168's security team monitors suspicious activity in real time and responds promptly.
• Regular penetration testing – Vega168 systems undergo regular security testing by independent third parties to identify and address any vulnerabilities.

4.3 Internal Access Controls

Access to members' personal data within the Vega168 organisation is restricted to staff who genuinely require it to perform their duties – the "need-to-know" principle. All staff with access to sensitive data undergo background checks, data protection training, and are bound by strict confidentiality agreements.

05Third-Party Data Sharing

Vega168 does not sell, rent or trade member personal data to any third party for marketing or commercial purposes. This is an absolute commitment. That said, in certain circumstances Vega168 may need to share data with selected third parties:

5.1 Trusted Service Providers

Vega168 works with a carefully vetted selection of third-party service providers to handle specific functions. These include payment processing providers (for deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, FPX, and others), game providers (Evolution Gaming, Pragmatic Play, Microgaming, and other partners), as well as technical infrastructure providers.

All these service providers are bound by strict data protection agreements. They are only permitted to process Vega168 members' data for specified purposes and are not authorised to use that data for any other reason.

5.2 Legal Requirements

Vega168 may be required to disclose members' personal data to the relevant authorities where mandated by Malaysian law, such as:

• A valid court order or search warrant.
• Official requests from Malaysian law enforcement agencies.
• Reporting obligations under anti-money laundering legislation (AMLA).
• Compliance requirements from relevant regulatory bodies.

5.3 International Data Transfers

Should data need to be transferred outside Malaysia — for example, to technical service providers or game providers in other countries — Vega168 ensures that such transfers are protected by appropriate safeguards, including data processing agreements that meet international standards equivalent to Malaysia's PDPA.

06Cookies & Tracking Technologies

The Vega168 website uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. The following types of cookies are in use:

• Essential Cookies – required for core platform functions such as maintaining login sessions, saving language preferences, and securing sessions. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies – allows the platform to remember your preferences such as display settings, your last played game, and other personal preferences, delivering a more personalised experience.
• Analytics Cookies – helps Vega168 understand how members use the platform so we can improve its features and content. This analytics data is collected in aggregated, anonymised form and is not used to identify any individual.
• Security Cookies – used to detect and prevent fraudulent activity, automated bots, and other security threats on the Vega168 platform.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of the Vega168 platform. Essential cookies cannot be disabled as they are required for platform security and core functionality.

07Financial Data & Payment Information

Vega168 members' financial information receives an additional layer of protection beyond standard personal data. This includes bank account details, e-wallet account numbers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay), transaction history, and winnings records.

7.1 Financial Data Protection

• Vega168 does not store credit or debit card details directly. All card transactions are processed through a PCI-DSS certified payment gateway.
• The bank account numbers and e-wallet details you register are stored in encrypted and used solely to process withdrawals to an account verified in your name.
• Your complete transaction history is stored and accessible to you via the "Transaction History" section in your Vega168 account.
• Transaction records are retained for the minimum period required under Malaysian law – at least 7 years for compliance and audit purposes.

7.2 Supported Payment Methods

Vega168 processes financial transactions exclusively through licensed and legitimate Malaysian payment methods, including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks, and other Malaysian banks). All these payment methods operate under their own security infrastructure, fully compliant with Malaysian financial security standards.

08Your Rights as a Vega168 Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Vega168:

To exercise any of the above rights, submit a written request to support@vega168.click with the subject line "Personal Data Rights Request". Please include your account number and full name for identity verification. Vega168 will respond within 21 business days.

09Data Retention Period

Vega168 retains members' personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law. Our general data retention guidelines are as follows:

• Active account data – retained for the duration of the active account period and 12 months after account termination.
• Financial transaction records – retained for a minimum of 7 years in compliance with Malaysian financial regulations and tax reporting requirements.
• Customer support communication logs – retained for 2 years for historical reference and dispute resolution.
• Identity verification (KYC) data – retained for 5 years after the business relationship ends, in accordance with anti-money laundering legal requirements.
• Security and audit logs – retained for 2 years for fraud detection and security compliance purposes.
• Marketing data – retained until you withdraw consent or close your account.

Once the retention period has expired, data is securely deleted or anonymised using methods that ensure it cannot be recovered.

10Children & Minors

The Vega168 platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Vega168 uses a combination of automated verification (age checks based on the date of birth provided during registration) and manual review (KYC document verification where required) to ensure all members meet the minimum age requirement.

Should Vega168 discover that personal data of an underage individual has been collected inadvertently, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe their child has registered with Vega168 without authorisation are encouraged to contact our support team immediately at support@vega168.click.

11Amendments to This Privacy Policy

Vega168 reserves the right to review and update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological developments. When significant amendments are made, Vega168 will:

• Displaying a clear notice on the Vega168 homepage at least 7 days before the changes take effect.
• Sending email notifications to all registered members regarding changes made.
• Updating the "Last updated" date at the top of this document.

Continued use of the Vega168 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your personal data (subject to applicable legal obligations).

Vega168 maintains an archive of previous versions of this Privacy Policy. If you wish to refer to an earlier version, please contact our support team.

12Contact Us – Data Protection Officer

For any enquiries, concerns, or requests relating to this Privacy Policy or the management of your personal data at Vega168, please reach us through the following channels:

If you are dissatisfied with how Vega168 has handled your personal data after contacting us, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under PDPA 2010.