Legal Documents
Privacy Policy
At vip88, your privacy is taken seriously. This Privacy Policy explains in plain, structured terms what personal data we collect, why we collect it, how it is used, who it may be shared with, and the rights you hold over your information. Please read this document carefully before using the vip88 platform.
Our Commitment to You
Privacy at a Glance
These cards summarise our core privacy principles. They do not replace the full legal text below, which governs our data practices in their entirety.
Data Security
All personal data transmitted between your device and vip88 is protected by 256-bit SSL/TLS encryption. Data at rest is stored in secured, access-controlled environments. We conduct regular security audits and penetration testing to maintain a high standard of protection.
No Data Selling
vip88 does not sell, rent, or commercially trade your personal data to any third party. Data shared with payment processors — such as Maybank, CIMB, Touch 'n Go eWallet, or DuitNow operators — is strictly limited to what is necessary to process your transactions.
Your Rights Matter
You have the right to access, correct, and request deletion of your personal data. You may also object to certain processing activities or withdraw consent where processing is consent-based. Requests can be submitted to our support team at any time.
Minimal Data Collection
vip88 collects only the personal data that is strictly necessary to operate the platform, comply with regulatory KYC and AML obligations, and provide customer support. We do not collect data beyond what is described in this Privacy Policy.
Cookie Transparency
We use cookies and similar tracking technologies for session management, security, and platform performance analytics only. We do not use third-party advertising cookies or cross-site tracking technologies. You can manage cookie preferences through your browser settings.
Defined Retention Periods
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal and regulatory retention obligations. Account data is retained for a minimum of five years following account closure in accordance with AML compliance requirements.
Scope of This Policy: This Privacy Policy applies to all personal data collected and processed by vip88 in connection with your use of the vip88 platform at vip88.casa, including all associated features, services, and communications. By registering an account or using the platform, you acknowledge that you have read and understood this Privacy Policy. For transaction and service terms, please also refer to our Terms & Conditions.
Introduction
vip88 ("we", "us", "our", "the Platform") is committed to safeguarding the privacy of all users ("you", "User") who access and use the online casino and sports betting services offered at vip88.casa. This Privacy Policy has been prepared to communicate, in a clear and transparent manner, how we handle your personal data.
We recognise that users in Malaysia — whether in Kuala Lumpur, Penang, Johor Bahru, Shah Alam, Petaling Jaya, or elsewhere — place significant trust in us when they share their personal information. We take that responsibility seriously, and every data practice described in this Policy is designed to reflect that.
This Privacy Policy is informed by applicable data protection principles and international best practices for online gaming operators. It is reviewed and updated periodically to reflect changes in our services, technology, and applicable regulatory obligations.
Your Consent: By creating an account on vip88, completing the KYC verification process, or otherwise providing us with personal data, you consent to the collection and processing of that data as described in this Privacy Policy. Where processing is based on consent, you may withdraw your consent at any time, though this will not affect the lawfulness of processing conducted prior to withdrawal.
Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings specified below:
- "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, either alone or in combination with other information.
- "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
- "Data Controller" means vip88, the entity that determines the purposes and means of processing your Personal Data.
- "Data Processor" means any third party engaged by vip88 to process Personal Data on its behalf under written instructions.
- "KYC" (Know Your Customer) means the identity verification process required to confirm user identity and comply with anti-money laundering (AML) obligations.
- "Cookies" means small text files stored on your device by your browser when you visit the vip88 platform.
- "Sensitive Personal Data" means data revealing racial or ethnic origin, political opinions, religious beliefs, biometric data, health data, or data concerning criminal convictions — vip88 does not intentionally collect this category of data.
Personal Data We Collect
vip88 collects the following categories of personal data in connection with your use of the platform:
Identity & Contact Data
- Full legal name as it appears on your identity document
- Date of birth (to verify the 21+ age requirement)
- Malaysian NRIC number, Passport number, or Driver's Licence number
- Email address and, where provided, mobile phone number
- Residential address (as verified by proof of address documents)
Financial Data
- Payment method details (e.g., bank account references, eWallet account identifiers for Touch 'n Go, Boost, GrabPay)
- Transaction history — deposits and withdrawals in MYR and cryptocurrency equivalents
- Cryptocurrency wallet addresses used for deposits or withdrawals (BTC, ETH, USDT, LTC)
Usage & Technical Data
- IP address and approximate geographic location derived from IP
- Device type, operating system, and browser type
- Session logs — login times, pages visited, game sessions, bet history
- Communication records — live chat transcripts, email correspondence, and support ticket history
KYC Verification Documents
- Copies of government-issued identity documents (MyKad, Passport, Driver's Licence)
- Proof of address documents (utility bills, bank statements from Maybank, CIMB, Public Bank, or Hong Leong)
- Selfie photographs submitted during the identity verification process
What We Do Not Collect: vip88 does not knowingly collect sensitive personal data including health information, biometric data beyond the selfie submitted for identity verification, political affiliations, or data relating to criminal convictions unless specifically required by applicable AML regulations.
How Personal Data Is Collected
vip88 collects personal data through the following means:
| Collection Method | Examples |
|---|---|
| Direct submission | Registration form, KYC document upload, support enquiry, bonus claim request |
| Automated technical collection | Cookies, server logs, session tokens, device fingerprinting for fraud prevention |
| Payment processor data | Transaction confirmation data from DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay operators, or cryptocurrency network confirmations |
| Third-party identity verification | Data returned by third-party KYC verification service providers engaged by vip88 to validate documents |
| Communications | Live chat sessions, email correspondence, feedback submissions |
Purposes of Processing
vip88 processes your personal data for the following specific, legitimate purposes:
- Account creation and management — to register, verify, and maintain your user account on the Platform.
- Identity verification (KYC) — to comply with anti-money laundering obligations and verify that users meet the 21+ age requirement.
- Transaction processing — to process deposits, withdrawals, and bonus allocations in MYR or cryptocurrency equivalents.
- Fraud prevention and security — to detect and prevent fraudulent activity, multi-accounting, money laundering, and unauthorised access.
- Customer support — to respond to enquiries, resolve disputes, and provide platform assistance via live chat or email.
- Regulatory compliance — to fulfil obligations under applicable gaming regulations, AML/CFT requirements, and tax reporting requirements.
- Platform improvement — to analyse usage patterns, identify performance issues, and enhance the user experience based on aggregated, anonymised data.
- Responsible gambling — to monitor for signs of problem gambling behaviour, enforce self-exclusion requests, and apply deposit or loss limits set by users.
- Promotional communications — to send transactional notifications and, where you have opted in, promotional communications about vip88 offers. You may opt out of marketing communications at any time.
Legal Basis for Processing
Each data processing activity conducted by vip88 rests on one or more of the following legal grounds:
- Contractual necessity: Processing required to fulfil the Terms & Conditions you agreed to upon registration — including account management, transaction processing, and support services.
- Legal obligation: Processing required to comply with applicable laws — including KYC verification, AML record-keeping, and regulatory reporting obligations.
- Legitimate interests: Processing carried out in the legitimate interests of vip88, such as fraud prevention, platform security, and responsible gambling monitoring — provided these interests are not overridden by your rights.
- Consent: Processing where you have provided explicit, informed consent — primarily for marketing communications. Consent may be withdrawn at any time without affecting prior processing.
Data Sharing & Third Parties
vip88 does not sell your personal data. Data is shared with third parties only to the extent strictly necessary for the purposes described in this Policy, and only with parties who are contractually bound to maintain appropriate data protection standards.
Categories of Third Parties
- Payment processors and financial institutions — DuitNow, FPX gateway operators, Touch 'n Go eWallet, Boost, GrabPay, and participating Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong) — for transaction processing only.
- KYC and identity verification providers — licensed third-party providers engaged to validate identity documents submitted during account verification.
- IT and platform infrastructure providers — cloud hosting, database management, and cybersecurity vendors who process data on our behalf under strict data processing agreements.
- Regulatory and law enforcement authorities — where required by applicable law, court order, or lawful request from a competent regulatory or enforcement body.
- Game studios and content providers — limited usage data may be shared in aggregated, anonymised form for the purpose of game performance analysis.
All Data Processors engaged by vip88 are required to process personal data only on documented instructions from vip88, and to implement appropriate technical and organisational security measures.
Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and identity data | Duration of account plus 5 years following account closure (AML compliance minimum) |
| Financial transaction records | Minimum 5 years from transaction date |
| KYC verification documents | Duration of account plus 5 years following closure |
| Customer support communications | 3 years from last interaction |
| Session and technical logs | 12 months from the log date |
| Marketing consent records | Until consent is withdrawn plus 2 years |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data deletion procedures.
Security Measures
vip88 implements a multi-layered security programme to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your browser and the Platform
- Encryption at rest for sensitive data stored in our databases, including KYC documents and payment information
- Access controls — strict role-based access restrictions ensuring that only authorised personnel with a legitimate operational need may access personal data
- Regular security audits and penetration testing conducted by independent third-party security specialists
- Anomaly detection systems monitoring for unusual login patterns, account access from new devices, and suspicious transaction activity
- Incident response procedures for detecting, containing, and reporting data security incidents within required timeframes
Your Responsibility: While vip88 implements robust technical safeguards, you are also responsible for maintaining the security of your account. Use a strong, unique password for your vip88 account, do not share your credentials with any other person, and contact our support team immediately if you suspect any unauthorised access to your account.
Cookies & Tracking Technologies
vip88 uses cookies and similar technologies to operate the platform, maintain session security, and analyse platform performance. We do not use third-party advertising cookies, behavioural tracking, or cross-site tracking technologies.
Types of Cookies Used
- Strictly necessary cookies — required for the platform to function, including session authentication tokens, security tokens, and load balancing cookies. These cannot be disabled without preventing access to the platform.
- Performance cookies — used to collect anonymised analytics about how users navigate the platform, enabling us to identify and resolve usability issues. Data collected is aggregated and non-identifiable.
- Preference cookies — used to remember your language preference and other platform settings between sessions.
You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to or using the platform. For full instructions, consult your browser's help documentation.
Your Data Rights
Subject to applicable law and certain limitations that may arise from our legal obligations (such as AML record-keeping requirements), you hold the following rights with respect to your personal data held by vip88:
Right of Access
Request a copy of the personal data vip88 holds about you, along with information about how it is being processed.
Right of Rectification
Request correction of inaccurate or incomplete personal data held about you. You may update some details directly through your account settings.
Right to Erasure
Request deletion of your personal data, subject to our legal retention obligations. Data subject to AML record-keeping requirements cannot be deleted within mandatory retention periods.
Right to Object
Object to processing based on legitimate interests, including profiling for responsible gambling monitoring purposes. We will assess your objection and respond accordingly.
Right to Portability
Request that your personal data be provided to you in a structured, commonly used, machine-readable format where technically feasible and lawfully permissible.
Right to Restrict Processing
Request that we limit how we use your personal data in specific circumstances, such as while a correction request or an objection is being evaluated.
To exercise any of the above rights, please contact our Data Protection team via the support email listed in Section 15. We will acknowledge your request within five business days and aim to respond substantively within 30 days. Some requests may require identity verification before we can act.
Minors & Age Restriction
The vip88 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is an integral part of our KYC process, and registration is not permitted where we have reason to believe an applicant does not meet the minimum age requirement.
If vip88 discovers that personal data has been collected from a user who is under 21 years of age, we will take immediate steps to close the account, delete all associated personal data, and return any deposited funds to the payment source where technically feasible.
Parents and guardians who believe that a minor may have registered or used the vip88 platform should contact our support team without delay so that the matter can be investigated and resolved promptly.
International Data Transfers
vip88 operates using cloud infrastructure and third-party service providers whose servers may be located outside of Malaysia. Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to applicable standards, vip88 ensures that appropriate safeguards are in place, including:
- Standard contractual clauses in data processing agreements with third-party vendors
- Binding corporate rules where applicable within our group structure
- Transfer only to jurisdictions assessed as providing adequate protection by relevant regulatory guidance
By using the vip88 platform and providing your personal data, you acknowledge that your data may be processed in jurisdictions outside Malaysia as described above.
Updates to This Privacy Policy
vip88 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, platform services, or applicable legal requirements. The "Last Updated" date at the top of this page will be revised whenever material changes are made.
Where changes are significant, we will make reasonable efforts to notify active users through on-platform notifications or email to the registered address. However, we recommend that you review this Privacy Policy regularly. Your continued use of the vip88 platform following the posting of updates constitutes your acknowledgement of and agreement to the revised terms.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact the vip88 Data Protection team using the details below. We are committed to responding to all data-related enquiries promptly and transparently.
Contact Details
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24 hours a day, 7 days a week via the platform. Average first-response time: under 2 minutes.
- Privacy Requests: Please include "Privacy Request" in your subject line when contacting us about data rights, and provide your registered account email address for verification purposes.
- Response Time: Privacy-related requests will be acknowledged within 5 business days and substantively addressed within 30 days.
For responsible gambling queries — including self-exclusion, deposit limits, and problem gambling support — please visit our Responsible Gambling page.
This Privacy Policy was last updated on 1 January 2026. Prior versions are superseded in their entirety by this document.
Your Data Is Safe With vip88
We handle your personal information with the same care we give to your winnings — securely, transparently, and on your terms. Ready to explore the platform?
For players aged 21 and above only. Play responsibly and within your means.