Vegas123 Privacy Policy – Our Commitment to Protecting Malaysian Players' Data

This Privacy Policy ("Policy") describes how Vegas123 ("we", "Platform") collects, uses, stores, protects, and shares your personal information ("Player", "you") when you use the Vegas123 website, mobile app, or any of its services. This Policy applies to all Vegas123 platform users in Malaysia and forms part of our Terms & Conditions.

We wrote this Privacy Policy in plain, straightforward language because we believe every player deserves to fully understand how their information is handled — not just lawyers. If you have any questions after reading this document, our team is happy to help via Live Chat or email.

1. Personal Data We Collect

Vegas123 only collects personal data that is strictly necessary to provide our services to you safely and efficiently. The following outlines the categories of data we collect and the purpose for each:

2. How Vegas123 Uses Your Data

The personal data we collect is used solely for legitimate purposes directly related to providing Vegas123's services to you. The following outlines the specific purposes for which your data is used:

• Account management: Creating and managing your Vegas123 account, including identity verification, password management, and essential account communications.
• Payment processing: Verifying and processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, ShopeePay, and other Malaysian payment methods, as well as processing your withdrawal of winnings.
• Legal compliance: Meeting KYC (Know Your Customer), AML (Anti-Money Laundering), and applicable Malaysian legal requirements.
• Platform security: Detecting and preventing fraud, account abuse, and other unlawful activities that could compromise the safety of other players.
• VIP programme and promotions: Calculating VIP points, determining promotional eligibility, and delivering benefits appropriate to your membership tier.
• Responsible gambling tools: Monitoring play patterns to identify players who may need support and providing effective self-management tools.
• Service improvement: Analysing platform usage patterns on an aggregated (not individual) basis to improve the user experience, enhance technical performance, and develop new features as needed.
• Service communications: Sending important notifications about your account, changes to our terms, security updates, and transaction information.

With your explicit consent, Vegas123 may also use your data to send promotional information about bonuses, new games, and special events. You may withdraw this marketing consent at any time through your account settings or by contacting our support team.

3. Sharing Data with Third Parties

Vegas123 does not sell, rent, or share your personal data with third parties for marketing or commercial purposes. Your data is shared only in the following limited circumstances:

• Payment processors: Payment service providers such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and Malaysian banks receive only the transaction information strictly necessary to process your deposits and withdrawals. They do not receive any additional data and are bound by strict confidentiality agreements with Vegas123.
• Gaming technology providers: Companies that provide live casino, slots, and Sports Betting software to Vegas123 may receive minimal game session data necessary for the games to function correctly. They do not have access to your payment information or full identity details.
• Legal requirements: Vegas123 will disclose personal data to Malaysian authorities where required by court order, a lawful law enforcement request, or other legal obligations. We will notify you of any such disclosure where permitted by law.
• Fraud investigation: In cases involving fraud investigations or money laundering, Vegas123 may be required to share relevant information with law enforcement agencies or the applicable regulatory bodies.

4. How Vegas123 Protects Your Data

The security of your personal data is a core technical and operational priority at Vegas123. We continuously invest in the latest security technologies and procedures to ensure your data remains protected at all times:

• Transit encryption: All communications between your device and Vegas123's servers are encrypted using TLS 1.3 protocol with a 256-bit SSL certificate, ensuring that data cannot be intercepted in transit.
• Stored data encryption: Sensitive data such as payment information and identification documents is stored in encrypted form on Vegas123 servers. Even in the hypothetical event of a server breach, this data cannot be read without the encryption key.
• Strict access controls: Only Vegas123 staff with a genuine operational need to access specific player data are permitted to do so. All access is automatically logged and monitored.
• Two-factor authentication (2FA): Vegas123 provides 2FA for player accounts and mandates it for all internal staff accounts with access to player data.
• Real-time threat monitoring: Vegas123's cybersecurity systems continuously monitor for intrusion attempts, unusual access patterns, and newly identified threats.
• Periodic security audits: Vegas123 conducts regular security audits and penetration testing by independent security experts to identify and address any vulnerabilities before they can be exploited.

While no security system can guarantee 100% protection under all circumstances, Vegas123 takes every reasonable and responsible measure to safeguard your data against unauthorised access, loss, or misuse.

5. Data Retention Period

Vegas123 retains your personal data only for as long as necessary for the purpose it was collected, or as required by Malaysian law. The following are our data retention guidelines:

• Active account data: Retained for the duration of your active Vegas123 account and for 7 years after account closure, in accordance with Malaysia's financial and AML legal requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Technical log data: Retained for 90 days for security and technical troubleshooting purposes.
• Support communication records: Retained for 2 years from the date of communication for quality control and dispute resolution purposes.
• Marketing data: Retained for as long as you have given consent and until you withdraw that consent.

When personal data is no longer needed and there is no legal obligation to retain it, Vegas123 will securely delete or anonymise that data in accordance with industry best practices.

6. Your Rights Under PDPA

As a Vegas123 player based in Malaysia, you have the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA) with respect to your personal data:

To exercise any of the rights above, contact the Vegas123 privacy team at support@vegas123.best, stating the right you wish to exercise and the details of your request. We will respond within 30 business days. In some cases, we may need to verify your identity before processing the request in order to protect the security of your account.

7. Use of Cookies

Vegas123 uses cookies and similar tracking technologies to keep the platform running smoothly and to deliver a better user experience. The following are the types of cookies we use:

• Essential cookies (required): These cookies are essential for the basic functioning of the Vegas123 platform, including login session management, security, and language preferences. The platform cannot operate properly without them and they cannot be disabled.
• Performance cookies: Collecting information on how players use the Vegas123 platform – including the most frequently visited pages, time spent in each section, and any technical errors encountered. This data helps us improve platform performance. All information is aggregated and non-identifiable.
• Functional cookies: Saving your preferences — such as language selection, last-used betting limits, and display settings — to provide a more personalised and comfortable experience on every visit.

Vegas123 does not use third-party cookies for advertising or cross-site tracking purposes. You may manage your cookie settings through your web browser; however, please note that disabling essential cookies may affect the functionality of the Vegas123 platform.

8. Protection of Children's Data

Vegas123 is a platform strictly intended for adults aged 21 and above. We do not knowingly collect or process personal data from minors. Should we discover that a minor's personal data has been collected without our knowledge, we will take the following steps immediately:

• Suspending the associated account immediately.
• Deleting all such children's personal data from our systems.
• Refunding any deposits made to their original source.
• Reporting cases to the relevant authorities where required.

If you believe a minor has registered a Vegas123 account, please contact us immediately at support@vegas123.best with any details you have so we can take prompt action.

9. Privacy Policy Updates

Vegas123 reserves the right to update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. When material changes are made to this Policy:

• We will update the "Last Updated" date at the top of this document.
• We will notify all registered players by email at least 14 days before any changes take effect.
• We will display a prominent notice on the Vegas123 homepage regarding any such changes.

Continued use of the Vegas123 platform after the effective date of any Privacy Policy changes will be considered your acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account and request deletion of your data before the changes take effect.

10. Contact Our Privacy Officer

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by Vegas123, please contact us through the following channels:

• Email: support@vegas123.best – include "Privacy Enquiry" in the subject line to ensure your message is directed to our privacy team.
• Live Chat: Available 24/7 on the Vegas123 website or app – for privacy enquiries requiring an immediate response.
• Response time: Privacy enquiries are responded to within 24 hours. PDPA rights requests are processed within 30 business days.