VV99 Privacy Policy – Member Personal Data Protection

VV99 understands that member trust is our most valuable asset. In today's digital world, personal data protection is more than a legal obligation — it is a moral responsibility we take seriously. Every decision we make regarding data management always prioritises the interests and safety of our members.

The vv99 Privacy Policy is drafted in accordance with international data protection standards and complies with applicable legal requirements, including the Personal Data Protection Act (PDPA). We are committed to ensuring your personal data is managed in a transparent, secure, and responsible manner at all times.

We never sell, rent, or trade our members' personal data to any third party for marketing or commercial purposes. Your data is used solely for the purposes clearly stated in this Policy and nothing beyond that.

VV99 collects your personal data through various means — directly from you during registration, automatically through platform usage, and in some cases through trusted third parties. The following are the categories of data we collect:

We only collect data that is strictly necessary to provide a secure, efficient service that meets regulatory requirements. We do not collect irrelevant data or data beyond what is needed for the stated purposes.

The personal data we collect is used for specific and legitimate purposes. We will not use your data for any other purpose without your prior consent, unless required by law. The following are the purposes for which your data is used:

• Identity Verification (KYC): Verifying your identity during registration and when you submit withdrawal requests that require further review.
• Account Management: Creating and managing your member account, processing deposits and withdrawals, and resolving any account issues you report.
• Platform Security: Detecting and preventing fraud, money laundering, multi-account activity, and any security threats against the platform or other members.
• Regulatory Compliance: Fulfilling legal and regulatory obligations imposed by relevant regulatory bodies and authorities.
• Service Enhancement: Analyzing aggregate and anonymized usage patterns to improve platform features, user experience, and game offerings.
• Service Communications: Sending important notifications related to your account, policy updates, security information, and responses to your inquiries.
• Responsible Gaming Support: Monitoring betting patterns to identify signs of problem gambling and offer appropriate assistance.

VV99 takes a multi-layered approach to securing your personal data. Our security infrastructure is designed to the highest industry standards and is continuously updated to counter ever-evolving cyber threats.

Your data is stored on servers protected by:

Data retention periods depend on the type of data and applicable legal requirements. Generally, active account data is retained for the duration of account activity plus 5 years after account closure to meet anti-money laundering (AML) compliance requirements. Technical data and system logs are retained for 90 days.

Vv99 staff with access to personal data is limited to those who genuinely require such access to perform their duties. All such staff are bound by strict confidentiality agreements and undergo regular data protection training.

VV99 does not sell or transfer your personal data to third parties for their own commercial purposes. However, in the course of operating the platform, there are certain situations where we need to share your data with selected parties:

• Payment Service Providers: Required transaction information is shared with FPX, DuitNow, Touch 'n Go eWallet, GrabPay, and ShopeePay providers solely to securely process your deposits and withdrawals.
• Game Providers: Usernames and game history required by third-party game providers operating within the vv99 platform are shared to ensure a seamless gaming experience.
• Identity Verification Services: KYC data is shared with approved identity verification service providers to carry out document checks and digital facial verification.
• Authorities & Regulators: We will disclose required data to lawful authorities when mandated by law, court order, or regulatory compliance requirements.
• Analytics Services: Anonymised and aggregated usage data is shared with analytics providers to help us understand usage patterns and improve the platform.

All third parties that receive your data from vv99 are bound by strict data processing agreements. They are only permitted to use that data for the specific purposes stipulated and are required to protect it in accordance with the security standards set by vv99.

VV99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our website. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining login sessions, account security, and website navigation. These cookies cannot be disabled as they are critical to platform operations.
• Performance Cookies: Collecting information on how you use the platform — pages visited, time spent, and any errors encountered. This data is used to improve website performance.
• Functional Cookies: Allowing the platform to remember your preferences such as language, region, and display settings to deliver a more personalized experience.
• Analytics Cookies: Helping us understand traffic patterns and aggregate user behavior for analysis and continuous platform improvement.

You can manage or delete cookies through your browser settings. However, disabling certain cookies may affect platform functionality and your user experience. For more information on managing cookies in your browser, please refer to your browser's help documentation.

As a data subject, you have certain rights regarding the personal data we process. VV99 respects and fully facilitates the exercise of these rights:

We will process your privacy rights request within 30 business days. In complex cases, this period may be extended to up to 60 days with prior notice to you. No fees are charged for reasonable privacy rights requests.

Vv99 services are exclusively for adults aged 18 and above. We do not accept registrations from individuals under the age of 18 and do not knowingly collect personal data from minors.

All account registrations require strict age verification through the KYC process. Should we find that a minor's personal data has been collected without valid knowledge or consent, we will take immediate steps to delete that data and close the account in question.

In operating an international-standard platform, your personal data may be transferred to and stored outside the country where you reside. This includes transfers to servers located in countries that may have different data protection laws from Malaysia.

When we transfer your data outside Malaysia, we ensure adequate protection through the following mechanisms:

• Standard data transfer agreements incorporating internationally approved data protection clauses.
• Transfers only to countries or entities that have received equivalent or higher data protection certification.
• Data encryption in transit using TLS 1.3 or higher security protocols.
• Regular audits of third parties receiving data to ensure ongoing compliance with our security standards.

By using vv99 services, you consent to the transfer of your personal data as described in this section. This consent is necessary for us to provide you with a complete, secure, and efficient service.

If you have any questions, concerns or complaints regarding how vv99 handles your personal data, our data protection team is ready to assist. We take every privacy complaint seriously and are committed to resolving it promptly and professionally.

For privacy and data protection matters, you may contact us by email at [email protected] with the subject "Privacy Enquiry – [Your Username]". We aim to respond to all privacy enquiries within 3 working days.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your country. However, we encourage you to contact us first, as we are confident we can resolve most issues directly in a satisfactory manner.