Vina88 Privacy Policy – Data Protection & Personal Information

1 Introduction

Vina88 ("we", "Platform", or "vina88") is fully committed to protecting the privacy and security of the personal information of all members and users of our platform. This Privacy Policy has been established to provide complete transparency on how we handle your data.

As an online entertainment platform serving users in Malaysia, we understand the importance of the trust you place in us when you register and share your personal information. We do not take this responsibility lightly.

This policy outlines the types of data we collect, the purposes for which it is used, the parties who may receive it, how long it is retained, and your rights as a data subject. We encourage you to read this document in full and to contact us if you have any questions.

2 Types of Personal Data We Collect

Vina88 only collects data that is strictly necessary to deliver our services safely and efficiently. The data we collect can be categorised as follows:

We may also collect data you voluntarily provide through preference forms, customer satisfaction surveys, or responsible gaming programs. Each data category is collected on a valid legal basis — whether consent, contract, legitimate interest, or legal obligation.

3 How We Use Your Data

Every piece of data we collect is used solely for legitimate, stated purposes. vina88 will not use your data beyond the permitted scope without obtaining fresh consent from you. The following are the primary purposes for which your personal data is used:

• Account Management: Creating, verifying, and managing your account on the vina88 platform, including secure login and two-factor authentication (2FA).
• Transaction Processing: Processing all deposits, withdrawals, and fund transfers between accounts securely and accurately.
• Identity Verification (KYC): Complying with identity verification requirements to prevent money laundering, fraud, and other illegal activities.
• Customer Support: Responding to inquiries, resolving complaints, and providing technical support through various channels.
• Platform Security: Detecting and preventing fraud, unauthorized access, multiple account usage, and other security threats.
• Service Improvement: Analyzing usage patterns to improve platform functionality, user interface, and overall experience.
• Marketing Communications: Sending promotional information, exclusive offers, and product updates — only to users who have consented to receive them.
• Legal Compliance: Fulfilling reporting obligations to the relevant regulatory authorities in accordance with applicable laws.

You may withdraw consent to receive marketing communications at any time by contacting our support team or using the unsubscribe option in any email you receive.

4 Data Sharing with Third Parties

Vina88 understands that sharing your personal data with external parties is a sensitive matter. We only share data in limited and legitimate situations as follows:

• Payment Service Providers: Required financial data is shared with FPX, DuitNow, Touch 'n Go, GrabPay, and Boost solely for the purpose of processing your transactions.
• Game Software Providers: The minimum information required to operate games is shared with casino and betting platform providers integrated with vina88.
• Identity Verification Provider: KYC documents are shared with approved third-party identity verification providers for regulatory compliance purposes only.
• Authority & Regulator: vina88 will disclose data when required by law, court order, or direction from a lawful authority.
• Analytics Services: Anonymised data is shared with analytics providers to help us understand usage patterns and improve the platform.

All third parties that receive your data are bound by strict confidentiality agreements and are only permitted to use that data for the stated purpose. They are prohibited from using your data for any other purpose, including their own marketing.

5 Cookies and Tracking Technologies

The vina88 platform uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and analyse platform performance. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as staying logged in, saving language preferences, and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use our platform, such as the most frequently visited pages and response times. All data is anonymized.
• Functional Cookies: Saving your preferences such as font size, display theme, and game preferences to deliver a more personalized experience.
• Analytics Cookies: Helping us understand how visitors interact with our platform through approved analytics services.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality and security of the platform. For more information on managing cookies, please refer to your web browser's help section.

6 Data Security

Vina88 continuously invests in robust security infrastructure to ensure your personal data remains protected at all times. The security measures we implement include:

• 256-bit SSL Encryption: All data communications between your device and our servers are protected with industry-grade encryption.
• Two-Factor Authentication (2FA): An additional security layer available for all accounts to prevent unauthorized access even if your password is compromised.
• Regular Security Scanning: Our systems undergo regular penetration testing and security audits conducted by independent third parties.
• 24/7 Monitoring: Our security team monitors platform activity around the clock to detect and respond to any threats promptly.
• Internal Access Control: Internal staff access to user data is restricted on a need-to-know basis and is subject to regular audits.
• Data Backup: Your data is securely and regularly backed up to ensure service continuity and recovery in emergency situations.

While we take all reasonable measures, no security system is entirely perfect. We encourage you to play your part by using a strong password, enabling 2FA, and never sharing your login details with anyone.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices, you have the following rights regarding your personal data held by vina88:

To exercise any of the above rights, please contact our support team via live chat or email. We will process your request within 30 calendar days from the date of receipt. In complex cases, this period may be extended up to 60 days with prior notification to you.

8 Data Retention Period

Vina88 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

• Active Account Data: Retained for the duration your account remains active and used for ongoing account management purposes.
• Financial Transaction Data: Retained for a minimum of 7 years in accordance with anti-money laundering (AML) compliance requirements and tax legislation.
• KYC Records: Retained for a minimum of 5 years after the account closure date in accordance with regulatory requirements.
• Communication Logs: Retained for 2 years for dispute resolution and customer service improvement purposes.
• Technical Data & System Logs: Retained for 12 months for security purposes and technical troubleshooting.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity. The deletion process is carried out in accordance with strict security procedures to ensure the data cannot be recovered.

9 Children's Privacy

The vina88 platform is strictly restricted to users aged 18 years and above. We do not intentionally collect, store, or process any personal data from individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will immediately delete that data and close the associated account. Parents or guardians who become aware that their child has registered an account on our platform without permission are asked to contact our support team immediately.

10 Changes to This Privacy Policy

Vina88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other legitimate operational reasons.

When we make significant changes, we will:

• Updating the "Last Updated" date at the top of this Privacy Policy.
• Sending a notification to your registered email address if any changes directly affect your rights.
• Displaying a clear notice on our platform's home page for a minimum period of 30 days.

Continued use of the vina88 platform after amendments take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request data deletion.

11 How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, our Data Protection Officer (DPO) team is ready to assist you.

You can reach us via:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom right corner of the platform.
• Email: [email protected] – for specific enquiries relating to privacy and data protection.
• General Support: [email protected] – for general enquiries relating to your account and services.

We aim to respond to all privacy-related inquiries within 5 working days. For more complex data subject requests, processing may take up to 30 calendar days.