Privacy Policy VV99 —
Protection Personal Data Malaysian Members

Vv99 is an online gaming platform operating exclusively for the Malaysian market. We understand that member trust is our most valuable asset, and we will not handle the personal information you entrust to us carelessly. This Privacy Policy covers all aspects of data collection and use within the vv99 platform, including the website, mobile app and all related services.

As a platform operating in Malaysia, vv99 complies with the provisions of the Personal Data Protection Act 2010 (PDPA) and all relevant data protection regulations. We take every obligation imposed by this legislation seriously and consistently strive to exceed the minimum requirements set out, ensuring our members' privacy is fully upheld.

This Policy applies to all vv99 users regardless of the access method used — whether via web browser, Android or iOS app, or any other official vv99 channel. In the event of a conflict between different language versions of this document, the Bahasa Malaysia version takes precedence for users in Malaysia.

Vv99 only collects data that is strictly necessary to provide a safe, seamless and responsible service to members. We do not collect excessive information that is unrelated to the operation of the platform.

A. Data You Provide Directly

• Full name as stated on your Malaysian identity card or passport
• Date of birth for age verification (18 years and above)
• Active email address and Malaysian mobile number
• Current residential address in Malaysia
• Malaysian bank account details for deposit and withdrawal purposes
• KYC verification documents such as a copy of MyKad or passport

B. Data Collected Automatically

• IP address and geographic location information (region/state level)
• Device type, operating system, and web browser version used
• Session activity logs including games played, wagering, and time spent
• Financial transaction history including deposits and withdrawals
• In-platform navigation and interaction data

Every piece of data we collect has a clear and lawful purpose. The following table details how your data is used within the vv99 platform:

We will not use your data for any purpose other than those stated in the table above without first obtaining your consent. If you do not wish to receive marketing communications from vv99, you may withdraw your consent at any time through your account settings or by contacting our support team.

Vv99 takes data sharing very seriously and will not sell, exchange or disclose your personal information to any third party for their own commercial purposes. Data sharing only occurs in limited and specific circumstances as follows:

• Payment processors: Information required to process deposits and withdrawals is shared with the payment gateways we use, including approved FPX, e-wallet, and crypto providers.
• Game software providers: Minimal game session information is shared with licensed game providers to ensure game integrity and fairness.
• Relevant authorities: vv99 will disclose information to law enforcement authorities, regulatory bodies or relevant government agencies when required by law or court order.
• Technical service providers: Hosting companies, CDN providers and analytics services that assist in platform operations may process some of your data, but are bound by strict confidentiality agreements with vv99.

Vv99 uses cookies and similar tracking technologies to enhance user experience, ensure account security and understand how members interact with our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled as they are necessary for the platform to function properly.
• Performance Cookies: Collecting information about how you use the platform — pages visited, time spent, and errors encountered — to help us improve platform performance.
• Functional Cookies: Saving your preferences such as language, display settings, and login information to provide a more personalized experience on future visits.
• Security Cookies: Helps identify suspicious activity and protects your account from unauthorized access.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect platform functionality. For more information on managing cookies in popular browsers such as Chrome, Safari, and Firefox, please refer to your respective browser's help section.

Vv99 does not retain your personal data for longer than is necessary for the purposes stated in this Privacy Policy, or as required by applicable laws in Malaysia. The general principles we follow are:

• Active account data is retained for the duration your account remains active, plus any mandatory retention period required by law
• Financial transaction records are retained for a minimum of seven (7) years in accordance with the requirements of the Income Tax Act and anti-money laundering regulations
• Customer support communication logs are retained for two (2) years from the date of last interaction
• Cookie and session data is automatically deleted when the session ends or according to the retention period set for each cookie type
• KYC documents are retained for the period required by the relevant regulatory authority

Once the designated retention period expires, your data will be securely deleted or anonymised so that it can no longer be associated with you. The deletion process we employ ensures that data cannot be recovered once the process is complete.

As a vv99 member and data subject under the Personal Data Protection Act 2010, you have legally guaranteed rights regarding your personal data that we hold. We fully respect and uphold the following rights:

Vv99 continually invests in security infrastructure to protect member data from unauthorised access, disclosure, alteration or destruction. The technical and organisational security measures we employ include:

• Data encryption in transit using TLS 1.3 and at rest using AES-256
• Two-factor authentication (2FA) is available for all member accounts and mandatory for all internal staff access
• Regular security audits by certified independent third parties to identify and address vulnerabilities
• Strict role-based access control (RBAC) for internal staff — each staff member may only access the data necessary for their specific role
• A tested incident response plan to ensure swift and effective action in the event of a data breach
• Regular privacy and security awareness training for all vv99 staff

While we take all reasonable precautions, no system can guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities within the timeframe required by law.

You also play an important role in securing your account. Please ensure you use a strong, unique password, do not share your login credentials with anyone, and report to us immediately if you suspect your account has been accessed without authorisation.

Vv99 strictly prohibits users under the age of 18 from registering or using our platform. We do not knowingly collect any personal information from children or minors under the age of 18.

Our KYC verification process is specifically designed to identify and reject registrations from underage individuals. Every applicant is required to submit valid identification documents and a verifiable date of birth during the registration process.

The vv99 platform may contain links or references to third-party websites or services such as game providers, payment gateways, or other service providers. This Privacy Policy applies solely to the vv99 platform and does not cover the privacy practices of any third party.

We encourage you to read the Privacy Policy of each website or service you visit separately. vv99 is not responsible for the privacy practices or content of third-party websites even where links or integrations with our platform exist. Licensed game providers integrated with vv99 have their own privacy policies governing how they handle game data.

Vv99 reserves the right to modify or update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, new technologies or other purposes we deem necessary and reasonable. We are committed to notifying you of any material changes.

When we make changes to this Privacy Policy, we will:

• Updating the "Last Updated" date shown at the top of this document
• Displaying a clear notice on the platform's home page for a minimum period of 14 days
• Sending email notifications to all registered members when changes are material in nature
• In some cases, seeking your consent again if the changes require using your data in a materially different way

Your continued use of the vv99 platform after the effective date of the updated Privacy Policy will be considered as your acceptance of those changes. If you do not agree with the changes, you have the right to close your account and request deletion of your personal data in accordance with the procedures set out.

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, the vv99 privacy team is ready to assist you.

• Privacy email: [email protected]
• 24/7 live chat available directly on the vv99 platform
• Email response time: within 2 hours on business days, maximum 24 hours for all other days
• Data rights request resolution period: within 30 calendar days from the date the request is received

For enquiries related to responsible gaming, account limits or self-exclusion, please visit the Responsible Gaming us. For general questions about the platform, visit the FAQ we have answers to most common questions. You can also review our Terms and Conditions to fully understand your rights and responsibilities as a vv99 member.