vip99 ("we", "us", "the Platform") is committed to protecting the privacy and personal data of all Members. This Privacy Policy applies to all personal information collected through the vip99 website at vip99.vu, the vip99 login portal, account registration and verification processes, customer support interactions, and all associated gaming and sportsbook services. This Policy should be read alongside the vip99 Terms & Conditions.
1. Data Controller
vip99 is the data controller responsible for your personal information collected through the vip99 Platform. As data controller, vip99 determines the purposes and means by which your personal data is processed. vip99 operates under international gaming authority licensing and is subject to the data protection requirements imposed by that regulatory framework.
For all data protection enquiries, Members may contact vip99 through the support team using the contact details set out at the end of this Policy. vip99 is committed to responding to data-related enquiries within 30 days of receipt.
2. Information We Collect
vip99 collects personal information in the following categories. The information collected is proportionate to the purpose for which it is required and is not collected in excess of what is necessary.
2.1 Information You Provide Directly
Identity InformationFull legal name, date of birth, nationality, and government-issued identity document number — collected during account registration and KYC verification.
Contact InformationEmail address and Malaysian mobile phone number — used for account communications, OTP delivery, and support correspondence.
Address InformationResidential address — collected as part of KYC verification for withdrawal processing above applicable thresholds.
Financial InformationTouch n Go eWallet account references, Boost wallet identifiers, bank account numbers for Maybank, CIMB, and Public Bank — collected for deposit and withdrawal processing. Full payment credentials are not stored on vip99 systems; payment processing is handled by PCI-DSS compliant third-party processors.
Verification DocumentsCopies of government-issued identity documents, selfie images for liveness verification, and proof of payment method ownership — submitted during the KYC process.
2.2 Information Collected Automatically
Device & Technical DataIP address, device type and operating system, browser type and version, screen resolution, and connection type — collected automatically when you access the vip99 Platform.
Usage DataLogin timestamps, pages visited, game sessions played (including game type, stake amounts, and outcomes), sportsbook bet history, session duration, and navigation patterns within the Platform.
Cookies & Similar TechnologiesSession cookies, preference cookies, and analytics identifiers — as detailed in the Cookies section of this Policy.
2.3 Information from Third Parties
vip99 may receive personal information from third parties including: identity verification service providers (for KYC processing); payment processors (for deposit and withdrawal confirmation); fraud detection services; and, where applicable, responsible gaming databases (for self-exclusion status verification). Information received from third parties is used only for the stated purposes and is handled in accordance with this Privacy Policy.
3. How We Use Your Personal Data
vip99 uses personal data collected from Members for the following purposes:
- Account Registration and Management — to create, verify, maintain, and administer your vip99 account, including processing your vip99 login credentials and managing account security settings.
- Identity Verification (KYC) — to verify your identity and age in compliance with international gaming authority regulatory requirements before processing withdrawals above applicable thresholds.
- Payment Processing — to process deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other accepted payment methods.
- Gaming and Sportsbook Services — to deliver and record the outcomes of casino games, live dealer sessions, and sportsbook bets; to calculate and credit winnings; and to maintain game and transaction history accessible to Members.
- Customer Support — to respond to enquiries, resolve disputes, assist with account access issues, and provide technical support.
- Fraud Prevention and Security — to detect and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the vip99 Platform.
- Regulatory Compliance — to meet obligations under international gaming authority licensing, anti-money laundering (AML) regulations, and other applicable legal requirements.
- Responsible Gaming — to monitor gaming behaviour for indicators of problem gambling, to apply deposit limits and self-exclusion settings requested by Members, and to fulfil obligations under responsible gaming regulatory frameworks.
- Communications and Promotions — to send you account notifications, transaction confirmations, promotional offers, and bonus alerts where you have opted in to marketing communications. You may withdraw consent to promotional communications at any time via your account settings.
- Platform Improvement — to analyse usage patterns, identify technical issues, and improve the vip99 Platform experience for Malaysian members.
4. Legal Basis for Processing
vip99 processes personal data on the following legal bases:
- Contractual Necessity — processing required to perform the vip99 Member agreement, including account management, payment processing, and service delivery.
- Legal Obligation — processing required to comply with AML regulations, gaming licence conditions, and other applicable regulatory requirements.
- Legitimate Interests — processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your fundamental rights.
- Consent — processing for marketing communications and certain non-essential cookies, where consent has been expressly obtained. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
5. Sharing Your Personal Data
vip99 does not sell your personal data to third parties. We share personal information only in the following circumstances and only to the extent necessary:
- Payment Processors — to process deposits and withdrawals via Touch n Go eWallet, Boost, and Malaysian banking partners. Payment processors operate under their own privacy policies and applicable PCI-DSS security standards.
- Identity Verification Providers — to conduct KYC checks using your submitted identity documents and verification data.
- Game Providers — licensed game studios supplying Games to the vip99 Platform may receive pseudonymised session data necessary to deliver their games. No directly identifying information is shared with game providers beyond what is operationally necessary.
- Fraud and AML Service Providers — to screen transactions and player activity against fraud and money laundering risk indicators.
- Regulatory Authorities — to comply with lawful requests from gaming regulators, law enforcement, or court orders. vip99 will notify Members of such disclosures where legally permitted to do so.
- Responsible Gaming Databases — to check and register self-exclusion requests against relevant responsible gaming exclusion schemes where required by vip99's licensing conditions.
All third-party service providers engaged by vip99 are contractually required to process personal data only for the specified purpose and in accordance with applicable data protection obligations.
6. Data Retention
vip99 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with regulatory retention obligations:
- Account data and transaction records are retained for a minimum of five (5) years following account closure in compliance with AML record-keeping requirements under international gaming authority licensing conditions.
- KYC documents are retained for the period required by applicable AML regulations, typically five years from the end of the customer relationship.
- Game session records and sportsbook bet history are retained for a minimum of 12 months and accessible to Members through the account transaction history feature during that period.
- Customer support communications are retained for three (3) years from the date of the last interaction.
- Marketing preference data is retained until you withdraw consent or close your account, whichever occurs first.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with vip99's data destruction procedures.
7. Data Security
vip99 implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. Specific security measures include:
- 256-bit TLS encryption for all data transmission between your device and the vip99 Platform — the same standard used by Malaysian banking applications;
- Encryption of sensitive data fields (including identity document data and payment references) at rest in vip99 databases;
- Role-based access controls ensuring that vip99 staff can only access personal data to the extent required for their specific operational role;
- Multi-factor authentication for administrative access to systems holding Member personal data;
- Regular security assessments and penetration testing of the vip99 Platform infrastructure;
- Incident response procedures for the identification, containment, and notification of personal data breaches.
While vip99 takes robust measures to protect your data, no internet-based service can guarantee absolute security. You are responsible for maintaining the security of your vip99 login credentials and for notifying vip99 immediately if you suspect any unauthorised access to your account.
8. Cookies & Tracking Technologies
vip99 uses cookies and similar technologies on the Platform for the following purposes:
Essential Cookies
These cookies are strictly necessary for the vip99 Platform to function. They include session authentication tokens that maintain your logged-in state during a vip99 session, security tokens that prevent cross-site request forgery, and load-balancing cookies that ensure consistent server routing. Essential cookies cannot be disabled without preventing core Platform functionality.
Functional Cookies
These cookies remember your preferences, such as your preferred language, deposit limit settings, and responsible gaming tool configurations. Functional cookies improve your vip99 experience by reducing the need to re-enter preferences on each visit.
Analytics Cookies
vip99 uses analytics tools to understand how Members navigate the Platform, which game categories are most visited, and where technical issues most commonly occur. Analytics data is used in aggregate and pseudonymised form. You may opt out of analytics cookies through your browser settings or the vip99 cookie preference centre.
You may manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from accessing your vip99 account and using Platform services.
9. Your Data Rights
Subject to applicable law and regulatory limitations, Members have the following rights in respect of their personal data held by vip99:
- Right of Access — you may request a copy of the personal data vip99 holds about you.
- Right to Rectification — you may request correction of inaccurate or incomplete personal data. Account contact details can be updated directly through the account settings section.
- Right to Erasure — you may request deletion of your personal data where vip99 no longer has a legitimate purpose or legal obligation requiring its retention. Note that regulatory AML retention requirements will override erasure requests for transaction and identity records within applicable retention periods.
- Right to Restriction — you may request that vip99 restrict processing of your personal data in certain circumstances, including while a data accuracy dispute is under investigation.
- Right to Data Portability — you may request a structured, machine-readable export of personal data you have provided to vip99 where processing is based on consent or contract.
- Right to Object — you may object to processing based on legitimate interests, including direct marketing. vip99 will cease direct marketing processing immediately upon receipt of an objection.
- Right to Withdraw Consent — where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of the above rights, contact vip99 support using the details provided in the Contact section. vip99 will respond to all data rights requests within 30 days. In complex cases, this period may be extended by a further 60 days, and you will be notified of any extension within the initial 30-day period.
10. Minors
The vip99 Platform is strictly restricted to individuals aged 21 years and above. vip99 does not knowingly collect personal data from individuals under the age of 21. In the event that vip99 discovers that an account has been registered by a person under 21, the account will be suspended immediately and all personal data collected will be deleted or anonymised in accordance with applicable legal requirements, subject to any overriding regulatory retention obligations.
If you are a parent or guardian and believe your child has registered a vip99 account, please contact our support team immediately so the account can be investigated and closed.
11. International Data Transfers
vip99 operates under international gaming authority licensing and may engage service providers located in jurisdictions outside Malaysia. Where personal data is transferred internationally, vip99 ensures that adequate safeguards are in place to protect your data, including contractual data protection clauses with all international service providers.
Personal data is only transferred to jurisdictions that provide an adequate level of data protection, or where appropriate contractual safeguards (equivalent to standard contractual clauses) have been implemented to ensure your data is protected to a standard consistent with this Privacy Policy.
12. Changes to This Privacy Policy
vip99 reserves the right to update or amend this Privacy Policy from time to time. When material changes are made, vip99 will notify Members by email to their registered address or via a prominent notice on the vip99 Platform at least 7 days before the revised Policy takes effect. The "Last updated" date at the top of this Policy reflects the most recent revision.
Your continued use of the vip99 Platform after the effective date of any revised Privacy Policy constitutes acceptance of the revised terms. If you do not accept the revised Policy, you should contact vip99 support to request account closure before the effective date.