This Privacy Policy explains in detail how Vega168 ("we", "Platform", or "Vega168") collects, processes, stores, and protects your personal data when you use our website, mobile app, or any services we provide. We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related legislation.
1 Introduction and Scope of This Policy
Vega168 takes user privacy seriously. As an online entertainment platform serving over 500,000 active members in Malaysia, we understand how sensitive the personal information entrusted to us can be. Our commitment to privacy is not merely a legal obligation — it is a core value that builds trust between us and every member.
This Privacy Policy applies to all information collected through the vega168 website at vega168.fun, the Vega168 mobile app, our customer support services, and any official communication channels we operate. By using any of these services, you agree to the collection and use of information as described in this policy.
We recommend reading this document in full and reviewing it periodically, as it may be updated from time to time. If you disagree with any part of this policy, please discontinue use of the platform and contact us for further assistance.
2 Types of Personal Data We Collect
Vega168 collects various categories of information depending on how you interact with our platform. Below is a summary of the types of data we collect and their sources:
| Data Category | Example Information | Resources |
|---|---|---|
| Identity Data | Full name, date of birth, identity card number, passport | Account registration, KYC process |
| Contact Data | Email address, phone number, residential address | Account registration, profile updates |
| Financial Data | Bank account details, digital wallet information, transaction history | Deposits, withdrawals, payment reversals |
| Technical Data | IP address, device type, web browser, operating system | Collected automatically during platform use |
| Activity Data | Game history, betting patterns, promotions used | Collected automatically during game sessions |
| Communication Data | Support chat records, emails, feedback | Interactions with the support team |
We also collect certain information automatically when you access the platform, including server log data, session cookies, login and logout timestamps, and general location information based on your IP address. This data is collected solely for security and user experience improvement purposes.
3 How We Use Your Data
Every piece of information we collect has a clear and legitimate purpose. vega168 uses your personal data for the following purposes:
- Account Management: Create and maintain your account, process login requests, and ensure the security of your account at all times.
- Transaction Processing: Process deposits and withdrawals securely, verify your identity for anti-money laundering (AML) compliance, and resolve any financial disputes.
- Service Delivery: Provide access to all games and platform features, personalise the user experience based on your preferences, and ensure optimal platform performance.
- Communications: Send important account notifications, transaction confirmations, security updates, and promotional information (subject to your notification preferences).
- Legal Compliance: Fulfil applicable legal and regulatory obligations, including KYC requirements, suspicious transaction reporting, and PDPA compliance.
- Fraud Prevention: Identify and prevent fraudulent activity, money laundering, and platform abuse through analysis of account activity patterns.
- Platform Improvements: Analyse aggregated, non-identifiable data to understand how users interact with the platform, for the purpose of improving our products and services.
Vega168 never sell, rent, or transfer your personal data to third parties for marketing purposes without your explicit consent. Your privacy is a line we will never cross.
4 Data Sharing and Disclosure
Vega168 only shares your personal data under very limited and lawful circumstances. We do not disclose your information to any external party except in the following situations:
- Trusted Service Providers: We work with carefully selected third-party service providers — such as payment processors, identity verification providers, and technical infrastructure partners — who require limited access to your data solely to perform their functions on our behalf. All such providers are bound by strict confidentiality agreements.
- Legal Requirements: We may disclose your data when required by law, court order, or lawful request from government authorities, including law enforcement agencies and financial regulatory bodies.
- Protection of Interests: In circumstances where it is necessary to protect the safety of other users, prevent ongoing fraud, or defend Vega168's legal rights.
- Your Consent: In any other situation requiring data sharing, we will obtain your explicit consent before any disclosure is made.
All data transfers involving entities outside Malaysia are carried out with adequate safeguards in accordance with PDPA requirements and applicable international standards, ensuring your data protection remains consistent regardless of where it is processed.
5 Our Data Security Measures
Vega168 invests seriously in enterprise-grade security infrastructure to ensure your personal data is always protected. Below are the layers of protection we maintain:
- 256-bit SSL Encryption: All data transmitted between your device and our servers is protected by industry-leading 256-bit SSL/TLS encryption protocol.
- Secure Password Storage: Your password is never stored in plain text. We use strong cryptographic hashing algorithms with random salting to protect your login credentials.
- Two-Factor Authentication (2FA): We offer an additional layer of protection through two-factor authentication, which you can enable to prevent unauthorized access even if your password is compromised.
- 24/7 Security Monitoring: Our automated monitoring system operates around the clock to detect and respond to any suspicious activity in real time.
- Internal Access Controls: Access to user data within Vega168 is restricted on a least-privilege basis — only staff who require access to carry out their duties are permitted.
- Regular Security Audits: Our platform undergoes regular security assessments and penetration testing by independent third parties to ensure no vulnerabilities go unaddressed.
While we take all reasonable precautions, no system can guarantee absolute security. We encourage you to also protect your account by using a strong and unique password and never sharing your login credentials with anyone.
6 Cookies and Tracking Technologies
Vega168 uses cookies and similar tracking technologies to enhance the functionality and experience of the platform. Cookies are small text files stored on your device that help us recognize you on future visits.
We use several types of cookies for different purposes:
- Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting key platform functionality.
- Performance Cookies: Collect aggregated and anonymised information about how you use the platform, helping us identify areas that require improvement.
- Functional Cookies: Save your preferences such as language, display settings, and login information to streamline your use of the platform in the future.
- Analytics Cookies: Helps us understand overall usage patterns through internal analytics tools, for the purpose of continuously improving the user experience.
You can manage your cookie preferences through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the platform.
7 Your Rights Regarding Personal Data
As the owner of your personal data, you have certain rights under Malaysia's Personal Data Protection Act 2010 (PDPA). vega168 fully respects and facilitates the exercise of these rights:
Right to Access
You have the right to request a copy of the personal data we hold about you at any time.
Right to Rectification
You may request correction of any inaccurate or incomplete personal data in our records.
Right to Erasure
Under certain circumstances, you may request the deletion of your personal data from our systems.
Right to Restriction
You may request that we restrict the processing of your data in certain situations as provided by law.
Right to Data Portability
You have the right to receive your personal data in a structured format for transfer to another provider.
Right to Object
You may object to the processing of your data for direct marketing purposes or other applicable purposes.
To exercise any of the above rights, please contact our Data Protection Officer by email at [email protected]. We will process your request within 30 business days. Requests may require identity verification beforehand to ensure data security.
8 Data Retention Period
Vega168 retains your personal data only for as long as necessary to fulfill the original purpose for which it was collected, or as required by applicable laws and regulations.
- Active Account Data: Retained for the duration your account is active and for an additional period following account closure for legal compliance purposes.
- Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with applicable financial and tax regulations in Malaysia.
- KYC Documents: Retained for the period stipulated by applicable AML/CFT requirements, generally no less than five (5) years after termination of the business relationship.
- Communication Logs: Support chat records and emails are retained for two (2) years for service quality and dispute resolution purposes.
- Technical Data & Logs: System logs and analytics data are retained for no more than twelve (12) months unless required for ongoing security investigation purposes.
When data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise it using industry-accepted methods.
9 Children's Privacy
The vega168 platform is strictly for individuals aged 18 and above. We do not intentionally collect, store, or process any personal data from anyone under the age of 18.
If we find that we have collected information from someone under the age of 18 without proper age verification, we will take immediate steps to delete that information from our records and close the relevant account.
If you are a parent or guardian who believes your child has provided personal information to us, please contact us immediately at [email protected] so that we can take the appropriate action.
10 Amendments to This Privacy Policy
Vega168 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technology improvements we implement. All amendments will be published on this page with an updated "Last Updated" date.
For significant and material amendments, we will endeavour to provide advance notice via in-platform notifications or email to the address registered on your account. Continued use of the platform after any amendment is published will be deemed your acceptance of the revised policy.
We encourage you to review this page regularly to stay informed about how we protect your information. A history of previous amendments can be requested from our support team if needed.
11 Contact Our Data Protection Officer
If you have any questions, concerns, or complaints regarding how we handle your personal data, or if you wish to exercise any of your rights under the PDPA, please contact our Data Protection Officer (DPO) through the following channels:
- Data Protection Email: [email protected]
- General Support Email: [email protected]
- Live Chat: Available on the vega168 platform, 24 hours a day, 7 days a week
- FAQ: Visit page FAQ us for privacy-related frequently asked questions
We are committed to handling all privacy-related inquiries with the utmost seriousness and professionalism. Our team will respond within 14 business days for general inquiries, and within 30 business days for formal requests relating to personal data rights.
Document Contents
End-to-End Encryption
Every transaction and sensitive data is protected with 256-bit SSL encryption, ensuring your information cannot be intercepted by any party.
Secure KYC Verification
Our KYC process uses certified identity verification technology to protect your identity and prevent account misuse.
Zero Data Sales
Vega168 has never and will never sell your personal data to advertisers or third-party companies for any marketing purpose.
Full Control in Your Hands
Manage your privacy settings, cookies, and notification preferences directly through your vega168 account profile page at any time.
PDPA Compliance
Our platform is fully designed and operated in compliance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) currently in force.
Fast Response
All personal data requests will be processed within 14–30 business days by our dedicated Data Protection Officer team.