Vegasgg Privacy Policy – Data Protection & Privacy Malaysia Members

Welcome to the Privacy Policy vegasgg. We, vegasgg.net ("Platform," "we"), understand how important privacy is to every digital user in Malaysia today. This document has been written with clarity and transparency so you know exactly what happens to your personal information every time you interact with our platform.

This Privacy Policy applies to all information collected through the vegasgg.net website, including during the account registration process, deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX, while playing slots or live casino games, while placing bets on the Malaysia Super League or EPL, and when interacting with our customer support team.

We are fully compliant with the Malaysian Personal Data Protection Act (PDPA) 2010 and its subsidiary regulations. This compliance commitment is more than a legal obligation for vegasgg — it is part of our core values to provide every Malaysian member with a safe and trustworthy gaming experience.

vegasgg collects personal information in a number of different situations. The following are the main categories of data collected:

a) Account Registration Information

• Full name as per Malaysian identity card (MyKad)
• Malaysian mobile number (for OTP and communications)
• Email address (for notifications and official communications)
• Date of birth (for 18+ age verification)
• Account password (stored in an unreadable hashed format)

b) Identity Verification Information (KYC)

• Copy of MyKad (front and back)
• Proof of current address (TNB bill, Syabas, Indah Water, or bank statement)
• Selfie with identity document (in cases requiring further verification)

c) Financial Transaction Information

• Deposit records via TNG eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX
• Withdrawal records to Malaysian bank accounts or eWallets
• Betting and gaming history (slots, Live Casino, Sports Betting)
• Current account balance and fund movements

d) Technical & Usage Information

• IP address of the device used to access the platform
• Web browser type and operating system
• In-platform activity logs (pages visited, games played, session duration)
• Approximate location data based on IP address (state or city in Malaysia)

vegasgg uses the information collected solely for legitimate purposes directly related to providing our services to you. These purposes are:

• Account management: Creating, verifying, and maintaining your vegasgg member account.
• Transaction processing: Verifying and processing deposits and withdrawals in Malaysian Ringgit (RM) via Malaysian eWallets and banks.
• Identity verification (KYC): Meeting legal requirements related to anti-money laundering (AML) and age verification for 18+.
• Customer support: Helps you resolve account, transaction, or technical issues via live chat, email, or WhatsApp.
• Platform security: Detecting and preventing fraudulent activity, unauthorized access, or the use of multiple accounts.
• Platform improvements: Analysing usage patterns in aggregate (not individually) to improve the user experience.
• Promotional communications: Sending information about promotions, bonuses and new games to members who have agreed to receive such communications.
• Legal compliance: To fulfil legal obligations under Malaysia's PDPA 2010 and other applicable regulations.

vegasgg do not use your data for purposes beyond the above scope without first obtaining your explicit consent.

vegasgg does not sell, rent or transfer members' personal data to third parties for their own marketing or commercial purposes. This is an unconditional commitment with no exceptions.

However, there are limited situations in which vegasgg may need to share your data with certain parties:

• Technical service providers: Companies that help us operate the platform, such as cloud server providers and payment system operators, are bound by strict confidentiality agreements and may only access the data necessary to perform their specific functions.
• Licensed game providers: Pragmatic Play, NetEnt, Evolution Gaming, Playtech, PG Soft, and other providers receive the session data necessary to operate their games. This data is used solely for technical gaming purposes.
• Legal authorities: vegasgg fully complies with official requests from legally authorised Malaysian authorities, including for the purposes of financial crime investigations or AML.
• Corporate processes: In the event of a business merger or acquisition, member data may be transferred to the new entity subject to equivalent privacy protections.

vegasgg continuously invests in security infrastructure to ensure member data is protected to the highest industry standards. The key security measures we have implemented are:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and vegasgg's servers are encrypted using TLS 1.3 protocol — the same standard used by Malaysia's leading banks.
• Hash-encrypted password storage: Member passwords are never stored in plain text. We use a one-way, irreversible hashing algorithm.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA using SMS OTP for an additional layer of protection when logging in.
• 24/7 Monitoring: vegasgg's cybersecurity team continuously monitors all platform activity to detect unauthorised access attempts and suspicious activity patterns.
• Data segregation: Sensitive financial data is stored on servers that are isolated from the main application servers, with separate layers of access controls.
• Regular security audits: Independent security audits are conducted periodically by accredited third parties to identify and address any vulnerabilities.
• Staff training: All vegasgg staff with access to member data are required to complete mandatory data security and privacy training.

Despite all these security measures, no system can guarantee 100% protection in the digital world. That is why your role matters too — use a strong password, never share your login credentials, and report any suspicious activity to us immediately.

Platform vegasgg uses cookies and similar tracking technologies to enhance your user experience. The following are the types of cookies used:

• Essential Cookies: Required for core platform functionality, such as maintaining your login session and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting data on how you use the platform — pages visited, time spent, and buttons clicked — to help us improve the user experience. Data is collected in aggregate and anonymised form.
• Functional Cookies: Remembers your preferences such as commonly used bet limits, favourite game selections, and display settings to deliver a more personalised experience.
• Security Cookies: Helps detect and prevent fraudulent activity, and ensures that login sessions are legitimate and secure.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality or your experience on the platform. vegasgg. For more information on how to manage cookies in your browser, please refer to your browser's documentation.

vegasgg retains members' personal data only for as long as necessary for the purpose for which it was collected, or as required by Malaysian law. The following is a general guide to data retention periods:

Once the retention period has expired or the data is no longer required, vegasgg will securely delete or anonymise that data. The deletion process uses methods that ensure the data cannot be recovered.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you as a data subject have the following rights regarding your personal data held by vegasgg:

• Right to Access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.
• Right to Rectification: If any of your data is inaccurate or out of date, you have the right to request a correction. Most profile information can be updated directly in your vegasgg account settings.
• Right to Erasure: You may request the deletion of your personal data, subject to legal requirements that mandate the retention of certain data (such as financial records for 7 years).
• Right to Restrict Processing: In certain circumstances, you may request that we restrict how we process your data while a dispute is pending resolution.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time. A simple notice is sufficient to stop marketing communications.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting any processing that took place prior to your withdrawal.

To exercise any of the rights above, submit your request in writing to support@vegasgg.net with the email subject "Data Privacy Rights Request." Please include your full name and registered phone number for identity verification purposes. vegasgg will respond within 30 business days from the date the request is received.

Platform vegasgg is intended exclusively for Malaysians aged 18 years and above only. We take the protection of children and minors extremely seriously.

vegasgg does not knowingly collect, store or process any personal data from individuals under the age of 18. During the registration process, we require date of birth verification and, in certain cases, identity document verification to ensure compliance with age restrictions.

If we discover that personal data belonging to someone under the age of 18 has been collected inadvertently, we will take immediate steps to:

• Immediately closing the associated account.
• Deleting all personal data belonging to that individual from our systems.
• Returning any outstanding financial balance to the original payment source.

If you are aware of or suspect that someone under the age of 18 is using the vegasgg, please contact us immediately at support@vegasgg.net so that appropriate action can be taken.

vegasgg reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or technological developments.

When material changes are made to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending a notification via the member's registered email address or an in-platform notification at least 14 days before the changes take effect.
• In the event of highly material changes, seeking members' renewed consent before data processing continues under the updated terms.

Continued use of the platform vegasgg after the effective date of any changes constitutes acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account and request deletion of your data in accordance with the procedure outlined in Section 8.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle vegasgg managing your personal data, we encourage you to reach out to us through the following channels:

• Email: support@vegasgg.net — use the subject line "Data Privacy Enquiry" for faster processing.
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the platform. Please indicate that your enquiry relates to privacy so it can be directed to the appropriate officer.

We are committed to responding to all privacy-related enquiries within 5 business days. For formal requests such as data access or deletion, response times are up to 30 business days in accordance with Malaysia's PDPA 2010 requirements.

If you have contacted us and are still unsatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital Malaysia.