VIP188 Privacy Policy

This Privacy Policy ("Policy") describes how VIP188 ("VIP188", "we", "us", "our") — the operator of the online gaming platform located at https://vip188.lat — collects, uses, stores, shares, and protects the personal data of users ("Player", "you", "your") who access or use the VIP188 Platform.

VIP188 is designed to serve Malaysian players, including those based in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and other locations across Malaysia. We understand that privacy expectations in Malaysia are shaped by both cultural norms and applicable legal frameworks, and we have designed our data practices accordingly.

By registering an account, depositing funds, using any feature of the Platform, or accepting our Terms & Conditions, you consent to the data practices described in this Policy. This Policy is incorporated by reference into our Terms & Conditions.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, email address, phone number, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means VIP188, which determines the purposes and means of processing Personal Data collected via the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of VIP188 under a contractual arrangement, such as payment processors or identity verification providers.
• "KYC" means Know Your Customer — the identity and age verification process applicable to all Players before withdrawals are processed.
• "Cookies" means small text files placed on your device by a website to store preferences and track session activity.
• "Platform" means the VIP188 website and associated services accessible at https://vip188.lat.

VIP188 collects the following categories of personal data from Players:

VIP188 collects personal data through the following channels:

4.1 Directly from You

• When you register an Account on the Platform;
• When you complete identity and age verification (KYC);
• When you make a deposit or request a withdrawal through any of our supported Malaysian payment channels, including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, or Hong Leong Connect;
• When you contact our customer support team via live chat or email;
• When you respond to a survey, participate in a promotion, or update your account preferences.

4.2 Automatically

• Through cookies and similar tracking technologies when you browse and use the Platform (see Section 10);
• Through server logs that record IP addresses, access times, and pages viewed;
• Through gameplay and wagering systems that record game sessions, bet placements, and outcomes for account integrity and responsible gambling monitoring purposes.

4.3 From Third Parties

• Identity verification providers who confirm the authenticity of KYC documents submitted;
• Payment processors who confirm transaction outcomes;
• Fraud detection services that flag suspicious account or transaction patterns;
• Publicly available sources where permitted by applicable law for AML screening purposes.

VIP188 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing that is required to perform our obligations to you under the Terms & Conditions — including account management, deposit and withdrawal processing, and customer support.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money-laundering (AML) obligations, counter-terrorism financing (CTF) requirements, and identity verification mandates under our licensing framework.
• Legitimate Interests: Processing that serves VIP188's legitimate business interests where those interests are not overridden by your fundamental rights — including fraud detection, platform security, responsible gambling monitoring, and service improvement analytics.
• Consent: Processing for purposes such as sending promotional communications, where you have expressly opted in to receive such communications. You may withdraw this consent at any time by updating your account preferences or contacting support.

VIP188 uses the personal data it collects for the following specific purposes:

• Account Administration: Creating, maintaining, and managing your Player Account on the VIP188 Platform;
• Identity & Age Verification: Confirming that you are a natural person aged 21 or above, as required by our licensing obligations and responsible gambling commitments;
• Transaction Processing: Facilitating deposits via Malaysian payment methods (DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, FPX) and processing withdrawal requests to your nominated payment method;
• Regulatory Compliance: Fulfilling our anti-money-laundering (AML), counter-terrorism financing (CTF), and KYC obligations under applicable licensing requirements;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover attempts, and prohibited gameplay behaviours;
• Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and, where appropriate, proactively engaging with Players or activating protective measures;
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining support records;
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Players who have opted in to receive such communications;
• Platform Improvement: Analysing aggregated usage data to improve the user experience, game selection, and platform performance;
• Legal Proceedings: Preserving and using data as necessary in connection with any legal claims, regulatory investigations, or dispute resolution processes.

VIP188 does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for each purpose.

7.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers to assist in delivering the Platform, including:

• Payment processors — to facilitate deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels;
• Identity verification providers — to perform KYC checks on submitted documents;
• Fraud and AML screening services — to assess transaction and account risk;
• Cloud infrastructure providers — to host Platform data with enterprise-grade security;
• Customer support platforms — to manage live chat and email support communications.

All third-party processors are bound by data processing agreements that require them to handle your data securely and only for the specified purpose.

7.2 Regulatory & Legal Disclosure

VIP188 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or our licensing obligations. We will notify you of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring of VIP188's business, your personal data may be transferred to the successor entity, subject to equivalent privacy protections. You will be notified of any such transfer that materially affects the processing of your data.

VIP188 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory obligations. The following indicative retention periods apply:

Following the expiry of the applicable retention period, data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures.

VIP188 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Encryption in Transit: All data exchanged between your device and VIP188's servers is encrypted using TLS 1.2 or higher (256-bit SSL);
• Encryption at Rest: Sensitive personal data stored in our databases is encrypted using AES-256 encryption;
• Access Controls: Access to personal data is restricted on a strict need-to-know basis, with multi-factor authentication required for all administrative access;
• Intrusion Detection: Automated systems monitor for anomalous access patterns and potential breaches in real time;
• Regular Security Audits: Our infrastructure undergoes regular internal and external security assessments;
• Two-Factor Authentication: Optional 2FA is available to all Players to enhance Account login security.

In the event of a personal data breach that poses a risk to your rights and freedoms, VIP188 will notify affected Players and relevant authorities in accordance with applicable obligations, without undue delay.

VIP188 uses cookies and similar technologies to operate the Platform effectively and improve the user experience. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as session management, login persistence, and security token validation. These cookies cannot be disabled without impairing Platform functionality.

10.2 Functional Cookies

These cookies remember your preferences — such as language settings and display preferences — to provide a more personalised experience. They are not required for basic Platform operation.

10.3 Analytics Cookies

VIP188 uses first-party analytics cookies to understand how Players interact with the Platform in aggregate — which pages are visited most frequently, where users encounter friction, and how features are used. This data is anonymised and used solely to improve Platform performance.

10.4 Managing Cookies

You may control cookie settings through your browser preferences. Note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Disabling analytics or functional cookies will not prevent Platform access but may reduce your experience quality.

VIP188 respects your rights over your personal data. You may exercise any of the following rights by contacting us through the in-platform support channel or via email at [email protected]:

• Right of Access: You have the right to request a copy of the personal data that VIP188 holds about you, along with information about how it is processed.
• Right of Rectification: You have the right to request correction of inaccurate or incomplete personal data held about you.
• Right of Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (see Section 8).
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold about you.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request a machine-readable export of the personal data you have provided to us.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gambling monitoring, in which case VIP188 will assess whether compelling grounds exist to continue processing.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

VIP188 will respond to all valid data subject requests within 30 days of receipt. In complex cases, this period may be extended by up to an additional 60 days, in which case you will be informed of the extension and its reason.

VIP188 is strictly for players aged 21 years and above. We do not knowingly collect or process personal data from individuals under 21 years of age. Age verification is a mandatory step in our KYC process, and accounts found to belong to individuals below the minimum age will be closed immediately and any deposited funds returned.

If VIP188 becomes aware that personal data has been collected from a player who did not meet the minimum age requirement at the time of registration, that data will be deleted as promptly as possible, subject only to any applicable legal obligations that require retention.

Parents and guardians are encouraged to monitor the online activities of individuals in their care. If you believe a minor has registered an account on VIP188, please contact our support team immediately at [email protected].

VIP188 operates under international licensing and may use cloud infrastructure, KYC verification services, or fraud detection systems that involve the storage or processing of personal data in jurisdictions outside Malaysia. Where such international transfers occur, VIP188 takes appropriate measures to ensure that your data receives a level of protection equivalent to the standards described in this Policy.

These measures include:

• Contractual clauses in agreements with all international data processors that impose equivalent data protection obligations;
• Use of service providers that operate in jurisdictions with recognised data protection frameworks;
• Encryption of data in transit across all international transfers.

VIP188 does not transfer data to countries that lack appropriate data protection mechanisms without first implementing safeguards designed to protect your rights.

VIP188 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable legal obligations. The effective date of the current version of this Policy is displayed at the top of this page.

Where changes are material — meaning they significantly affect how we process your personal data or alter your rights — we will notify affected Players via email or an in-platform notification prior to the changes taking effect, where practicable.

Your continued use of the VIP188 Platform following notification of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you may request Account closure in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by VIP188, please contact us through any of the following channels:

• Data Enquiries Email: [email protected] — please include "Privacy Request" in the subject line
• In-Platform Live Chat: Available 24 hours a day, 7 days a week to all registered Players via the in-platform support interface
• Support Hours: Malaysia Standard Time (MYT), around the clock

We aim to acknowledge all privacy-related enquiries within 3 business days and to provide a substantive response to data subject requests within 30 days as noted in Section 11.

For general information about VIP188's platform, values, and commitment to Malaysian players, please visit our About Us page. For questions about your account, bonuses, or gameplay, please visit our FAQ page.