1. What Information We Collect

We collect only the information necessary to operate your VVCasino account, process your transactions, comply with legal obligations, and protect against fraud. No marketing data is collected for sale to third parties.

1.1 Information you provide at registration

• Full legal name as it appears on government-issued ID.
• Date of birth (for age verification — must be 18 ).
• Residential address in Malaysia or your country of residence.
• Contact email address and phone number.
• Username and securely hashed password.
• Preferred currency (default MYR) and language preference.

1.2 Identity verification documents

Before your first withdrawal, we collect:

• A scan or photograph of your government-issued photo ID (MyKad, passport, or driving licence).
• A recent proof of address (utility bill or bank statement dated within 3 months).
• A clear photograph of you holding your ID, if requested for enhanced verification.
• Source-of-funds documentation for large transactions where legally required.

1.3 Financial & transaction information

• Deposit and withdrawal payment method details (account/card numbers are tokenised — we never store full card data).
• Complete transaction history: deposits, withdrawals, wagers, wins, losses, bonus credits.
• Game play history: which games played, when, stake sizes, outcomes.
• Sportsbook bet history: events bet on, markets, stakes, settlement results.

1.4 Technical & device information

• IP address and approximate geographic location (city-level only, used for fraud prevention).
• Device type, operating system, browser type and version.
• Login timestamps, session durations, and pages viewed.
• Referral source (which website or link brought you to VVCasino).

1.5 Communications

• Records of customer support conversations (live chat transcripts, email correspondence, WhatsApp/Telegram messages).
• Marketing preferences and opt-in/opt-out status for promotional emails.
• Notes added by our team during account reviews or KYC verification.

2. How We Use Your Information

Every piece of data we collect is used for one or more of the following purposes, and never for purposes outside this list.

2.1 Operating your account

• Creating and maintaining your account profile.
• Processing deposits, withdrawals, and balance updates.
• Calculating and applying bonuses, cashback, and promotional rewards.
• Providing customer support and responding to your questions.

2.2 Verifying identity & preventing fraud

• Confirming you are 18 and legally entitled to use our services.
• Verifying that deposit accounts belong to the registered account holder.
• Detecting and preventing duplicate accounts, identity fraud, chargebacks, and money laundering.
• Investigating suspicious activity patterns flagged by automated monitoring.

2.3 Legal & regulatory compliance

• Meeting anti-money-laundering (AML) and know-your-customer (KYC) obligations.
• Responding to lawful requests from regulators, courts, or law enforcement.
• Maintaining records required by gaming licence conditions.
• Detecting and reporting suspicious financial transactions where legally required.

2.4 Improving our service

• Analysing aggregate (anonymised) usage patterns to improve game selection and platform features.
• Testing new features and measuring their performance.
• Identifying technical issues, crashes, and performance bottlenecks.
• Conducting customer satisfaction research, with your consent.

2.5 Communications

• Sending essential account notifications (deposit confirmations, withdrawal status, security alerts).
• Sending promotional offers, bonus announcements, and product updates — only if you have opted in.
• Sending responsible gambling resources and check-in messages if behavioural indicators suggest concern.

3. Who We Share Information With

VVCasino does not sell, rent, or trade player information to third parties for marketing purposes — full stop. The only third parties who ever receive any portion of your data are listed below, and only for the specific operational purposes outlined.

3.1 Game providers

When you play a slot, live casino game, sportsbook bet, or cock fighting bet, the relevant game provider (Pragmatic Play, Evolution Gaming, Playtech, Mega888, 918Kiss, WBET, SBOBET, SABA Sports, SV388, AWC, etc.) receives the minimum data needed to operate the game: a unique session identifier, bet amount, and game outcome. Providers do not receive your name, email, address, or contact details.

3.2 Payment processors & banks

To process deposits and withdrawals, we share necessary transaction details (amount, currency, transaction ID, account holder verification) with payment processors and banking partners including DuitNow, Touch 'n Go, FPX, GrabPay, Boost, and direct banking partners. These parties operate under their own privacy policies and Malaysian banking regulations.

3.3 KYC and fraud prevention services

We work with regulated third-party identity verification services to confirm submitted ID documents are genuine and unaltered. These services receive your ID document and verification photograph for the sole purpose of authenticity checking, and they operate under strict data protection agreements.

3.4 Legal & regulatory authorities

We will share information when required by law, court order, valid regulatory request, or for the protection of legitimate interests including investigation of fraud or harm. All such disclosures are documented internally and reviewed by our legal team for lawful basis.

3.5 Internal service providers

Cloud hosting providers, email delivery services, customer support platforms, and analytics tools may process your data on our behalf. All such service providers are bound by data processing agreements requiring confidentiality, security, and limited use of data solely for the purposes we direct.

4. How We Secure Your Data

Data security is built into every layer of our infrastructure, not bolted on afterwards. The following measures protect your information continuously.

4.1 Encryption

• Transport layer security: All data in transit is encrypted with bank-grade 256-bit SSL/TLS — the same standard used by Maybank, CIMB, and Public Bank for online banking.
• At-rest encryption: All sensitive data stored in our databases is encrypted using AES-256 encryption keys, with key rotation policies in line with industry best practices.
• Tokenisation: Payment card numbers are never stored in full; tokens replace card data immediately after authorisation.

4.2 Access controls

• Staff access to player data is granted on a strict need-to-know basis with role-based permissions.
• All access to player data is logged and auditable.
• Two-factor authentication is required for all internal admin access.
• Background checks and confidentiality agreements apply to every team member with potential data access.

4.3 Infrastructure security

• Servers hosted in Tier-3 certified data centres with 24/7 physical security and redundant power.
• Network protected by enterprise firewalls, intrusion detection systems, and DDoS mitigation.
• Regular penetration testing by independent security firms.
• Automated vulnerability scanning and patch management.

4.4 Your responsibilities

While we secure our side, account security also depends on you:

• Use a strong, unique password not used on other websites.
• Enable two-factor authentication on your account.
• Never share your login credentials with anyone, including family or our support team.
• Log out completely after using shared or public computers.
• Report any suspicious account activity to our support team immediately.

5. Cookies & Tracking Technologies

VVCasino uses cookies and similar technologies to operate our website and provide a personalised experience. You can control cookie behaviour through your browser settings, though disabling certain cookies may prevent some features from working correctly.

5.1 Types of cookies we use

• Essential cookies: Required for the website to function — login sessions, language preference, security tokens. These cannot be disabled if you wish to use your account.
• Functional cookies: Remember your preferences (game favourites, display settings, currency display). Disabling these will reset your preferences each session.
• Analytics cookies: Help us understand how players use the site (which games are popular, where users get stuck, what features are most used). All analytics data is aggregated and anonymised.
• Marketing cookies: Used only if you have opted into marketing communications. Allow us to send relevant promotional offers based on your interests.

5.2 Managing cookies

You can review and adjust cookie settings at any time through your browser preferences. Major browsers (Chrome, Firefox, Safari, Edge) all provide cookie controls. Disabling essential cookies will require you to log in fresh each visit and may disable some features.

5.3 Do Not Track signals

We honour browser "Do Not Track" signals by limiting tracking to essential and functional cookies only when DNT is enabled. Analytics and marketing cookies are not set on browsers signalling DNT.

6. Your Privacy Rights

Regardless of where you reside, VVCasino respects fundamental privacy rights. You have the right to:

6.1 Access your data

You may request a complete copy of the personal information we hold about you. Requests are processed within 30 days. The first request per calendar year is free; additional requests may incur a reasonable processing fee.

6.2 Correct inaccurate data

If any information we hold about you is incorrect or out of date, you may request correction. Some changes (name, address, payment methods) require manual verification and supporting documentation.

6.3 Delete your data

You may request deletion of your personal information ("right to be forgotten"). However, certain data must be retained to meet legal obligations (anti-money-laundering record-keeping, tax records, dispute resolution evidence). Where retention is legally required, we will inform you of the specific obligation and retention period.

6.4 Restrict processing

You may ask us to limit how we use your data — for example, by opting out of marketing communications while keeping your account active. Marketing opt-outs take effect within 7 business days.

6.5 Data portability

You may request a portable copy of your data in a structured, machine-readable format (CSV or JSON). This allows you to transfer your data to another service if you choose to close your VVCasino account.

6.6 Withdraw consent

Where data processing is based on consent (e.g. marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.

6.7 Object to processing

You may object to certain types of data processing, including direct marketing and automated decision-making. Objections to marketing are honoured immediately; other objections are reviewed and resolved within 30 days.

To exercise any of these rights, contact us via the contact page with your request and account verification details.

7. Data Retention

We keep your personal information only as long as necessary for the purposes outlined in this policy, plus any period required by law.

7.1 Active accounts

Data is retained throughout the life of your active account. This includes profile, transaction history, game play records, and communications.

7.2 Closed accounts

After voluntary account closure, most data is deleted within 90 days. However, the following must be retained for the periods specified, as required by anti-money-laundering and tax record-keeping regulations:

• Transaction records: 5-7 years post-closure (AML record-keeping).
• KYC documents: 5 years post-closure.
• Tax-related records: 7 years per regulatory requirements.
• Dispute documentation: Retained until resolution plus 2 years.
• Self-exclusion records: Retained indefinitely to honour exclusion across re-registration attempts.

7.3 Marketing data

If you have opted into marketing, your contact details are retained until you opt out. Opt-out preferences are honoured permanently — once unsubscribed, you will not receive marketing communications even if your account remains active.

7.4 Anonymised data

Aggregated and fully anonymised data (game popularity statistics, peak usage patterns, etc.) may be retained indefinitely for analytics purposes. This data cannot be linked back to individual players.

8. Privacy Questions & Complaints

If you have any questions, concerns, or complaints about how VVCasino handles your personal information, please contact our Data Protection Officer through the contact page. All privacy inquiries are reviewed personally and answered in writing within 14 business days.

8.1 Escalation

If you are not satisfied with our response to a privacy concern, you may escalate the matter to:

• Internal escalation: Request review by senior management through the formal dispute process outlined in our Rules & Regulations.
• Regulatory complaint: Contact the data protection authority in your jurisdiction. For Malaysia, this is the Personal Data Protection Department (PDPD) of the Ministry of Communications and Multimedia Malaysia.
• Independent review: Submit the complaint to an independent gaming arbitration body in the jurisdiction where we hold licensing.

8.2 Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. Significant changes will be communicated via email and in-platform notification at least 14 days before taking effect. The "last updated" date at the top of this policy indicates when the current version became effective.