Compliant with Malaysia PDPA 2010 & International Standards

Privacy Policy vegawin — Personal Data Protection for Malaysian Members

Your privacy is not merely a legal obligation for vegawin — it is a trust we take seriously. This document clearly explains what we collect, how we use it, and the full rights you hold over your personal data.

vegawin Privacy Commitment

Six Data Protection Principles That We Uphold

Every data-related decision is made based on these principles.

Minimum Collection

We only collect data that is strictly necessary to provide the vegawin platform services. No excess data is collected on the basis of being "potentially useful in the future".

Bank-Grade Encryption

All data stored and transmitted via the vegawin platform is protected with 256-bit SSL encryption — the same technology used by major Malaysian financial institutions.

No Sale of Data

Vegawin has never and will never sell, rent, or disclose your personal information to third parties for commercial marketing purposes without your express consent.

PDPA 2010 Compliance

All vegawin data management practices fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

Full Control in Your Hands

You have the right to access, correct, delete, or transfer your personal data at any time. Your request will be processed within 14 working days.

Immediate Breach Notification

Should any security incident occur that affects your data, vegawin will notify you within 72 hours and take immediate remedial action.

This Policy should be read together with Terms and Conditions vegawin. Both documents form the complete agreement between you and the platform regarding respective rights and responsibilities.

1 Introduction

Vegawin ("we", "the platform") is committed to protecting the privacy of every member who uses our services at vegawin.fun and related mobile applications. This Privacy Policy describes the types of information we collect while you use the platform, how that information is used and protected, with whom it may be shared, and what choices and rights you have.

By registering an account or continuing to use the vegawin platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please stop using the platform and contact us to close your account.

This Policy applies to all information collected through the vegawin.fun website, the vegawin mobile app, email and chat communications with our support team, and any other services associated with the vegawin platform.


2 Personal Data We Collect

2.1 Information You Provide Directly

When you register an account or use the vegawin platform, we collect information you voluntarily provide, including:

  • Full name as stated on your official identification document.
  • Date of birth (to verify minimum age of 18 years).
  • Email address and mobile number.
  • Current residential address.
  • A copy of your identity card (MyKad) or passport during the KYC process.
  • Bank account or digital wallet information for deposit and withdrawal purposes.

2.2 Information Collected Automatically

While you use the vegawin platform, our systems automatically record technical information necessary for platform functionality, security, and user experience improvement:

Data Type Example Purpose
Device Data Device type, operating system, browser version Platform optimisation
Network Data IP address, ISP, country location Security & verification
Session Data Login time, session duration, pages visited Account security
Transaction Data Deposit, withdrawal, and wagering history Financial & compliance records
Cookie Data Session tokens, language preferences, user settings Seamless user experience

3 How We Use Your Personal Data

Vegawin uses collected information solely for legitimate purposes related to providing platform services. The following are the primary uses of your data:

3.1 Platform Operations

Your data is used to create and manage your account, process deposit and withdrawal transactions, verify your identity and fulfil KYC requirements, deliver effective customer support, and ensure a smooth and personalised gaming experience for you.

3.2 Security & Fraud Prevention

Technical information and usage patterns are analysed by vegawin's security systems to identify and prevent fraudulent activity, money laundering, unauthorised access, bonus abuse, and other security threats.

3.3 Legal Compliance

Vegawin is required to retain certain records to meet anti-money laundering (AML) legal requirements, financial reporting requirements, and directives from relevant authorities. Data is retained for the period required by applicable law.

3.4 Communications & Marketing

With your consent, vegawin may send you information about promotions, special offers, new games, and platform updates via email, SMS, or in-app notifications. You may withdraw this consent at any time through your account settings.

Vegawin does not make any automated decisions that have significant impact on you based solely on data processing. Every material account-related decision involves review by qualified human teams.


4 Data Sharing with Third Parties

Vegawin does not sell, rent, or trade your personal data. However, in certain limited situations, data may be shared with the following parties:

4.1 Third-Party Service Providers

Vegawin works with licensed service providers who assist in platform operations including payment processors, licensed game providers, cloud service providers, and anti-fraud services. All these partners are bound by strict confidentiality agreements and may only use your data for the specified service purposes.

4.2 Legal Authorities

Vegawin may be required to disclose personal data to legal authorities, law enforcement, or regulatory bodies if compelled by court order, legal directive, or applicable licensing compliance requirements.

4.3 Business Transfers

In the event of a merger, acquisition, or asset transfer, user data may be transferred as part of the business assets. You will be notified in advance and have the right to withdraw your consent to the use of your data.

Vegawin has never and will never disclose your personal information to advertisers, third-party marketing companies, or any entities for marketing purposes without your express prior consent.


5 Data Security

Vegawin continuously invests in world-class security infrastructure to ensure your personal data remains protected at all times. Our key security measures include:

  • 256-bit SSL Encryption for all communications between your device and vegawin servers.
  • Encryption of data at rest — sensitive data is stored in encrypted format and cannot be read without the correct key.
  • Two-factor authentication (2FA) available for all vegawin accounts for an additional layer of protection.
  • 24/7 threat monitoring by cybersecurity teams who monitor suspicious activity in real time.
  • Periodic penetration testing by independent security auditors to identify and patch vulnerabilities.
  • Strict internal access controls — only authorized staff with legitimate need can access member data.

While no system can guarantee absolute security, vegawin employs the highest industry standards to protect your data. In the event of a security incident, we are committed to notifying you within 72 hours.


6 Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. vegawin uses cookies and similar technologies to ensure the platform functions properly and to deliver a better user experience.

6.2 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled.
  • Performance Cookies: Collects statistical data on how users interact with the platform for improvement purposes, without identifying individuals personally.
  • Functional Cookies: Saves your preferences such as language, display settings, and frequently used information for your convenience.
  • Analytics Cookies: Helps us understand platform usage patterns to make meaningful improvements.

6.3 Managing Cookies

You can manage or delete cookies through your web browser settings. Please note that disabling essential cookies may affect certain vegawin platform features and you may need to log in more frequently.


7 Data Retention Period

Vegawin retains your personal data only as long as necessary for the purposes stated in this policy or as required by applicable law. Our data retention guidelines are as follows:

  • Active account data: Retained for as long as your account is active and for 7 years after account closure to meet legal compliance requirements.
  • Financial transaction records: Retained for 7 years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
  • KYC records: Retained for 5 years after the business relationship ends in accordance with Malaysia's AMLA requirements.
  • Customer support communication logs: Retained for 3 years for service quality and dispute resolution purposes.
  • Analytics cookie data: Deleted or anonymised after 24 months.

After the relevant retention period expires, your personal data will be securely deleted or anonymized so that it can no longer be associated with your identity.


8 Your Rights Under PDPA 2010

As a data subject under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have the following rights, which vegawin fully respects:

Right of Access

Request a copy of all personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request deletion of your data, subject to legal retention obligations.

Right to Restriction

Request that we restrict the processing of your data under certain circumstances.

Right to Data Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to the processing of your data for direct marketing at any time.

To exercise any of the above rights, contact our Data Protection Officer at [email protected]. We are committed to processing your request within 14 working days.


9 Children's Data

The vegawin platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

Should we discover that a minor's personal data has been collected without proper age verification, we will take immediate steps to delete that data and close the associated account. If you suspect such a situation has occurred, please contact us immediately at [email protected].


10 Cross-Border Data Transfers

In the course of its operations, vegawin may store or process your personal data on servers located outside Malaysia. In such cases, vegawin ensures adequate protections are in place through:

  • Data transfer agreements with internationally recognised standard protection clauses.
  • Use of cloud service providers that hold certified security and privacy standards (such as ISO 27001).
  • Regular audits of data processing partners to ensure ongoing compliance.

Your data will not be transferred to any country or territory without a comparable level of data protection unless appropriate additional safeguards are in place.


11 Amendments to the Privacy Policy

Vegawin reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform expansion. Any material amendments will be notified to you via:

  • A prominent pop-up notification within the vegawin platform upon your next login.
  • An email will be sent to your registered address at least 14 days before any amendment takes effect.
  • Updates are reflected on the "Last Updated" date at the top of this document.

Your continued use of the platform after any amendment takes effect constitutes your acceptance of the updated Privacy Policy.


12 Data Protection Officer & Contact Us

Vegawin has appointed a Data Protection Officer (DPO) responsible for ensuring the platform complies with all relevant privacy obligations and serving as the primary point of contact for all privacy-related inquiries.

📬 Contact vegawin Data Protection Officer
Live Chat — 24 hours a day, 7 days a week
Response time: within 14 working days for official data requests
All privacy communications are confidential and handled with the highest priority

If you believe vegawin has violated your privacy rights and are unsatisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications.

Your Data Is Safe With vegawin

Over 500,000 Malaysian members have entrusted their personal data to vegawin. We take your privacy seriously so you can focus entirely on an enjoyable gaming experience.

🔒 SSL 256-bit ✅ PDPA 2010 Compliant 🛡️ Data Not Sold ⚡ Response within 14 Days
Bahasa Melayu