Privacy Policy VIP22 — Your Data Protection Is Our Priority

Vip22 is a leading online gaming platform in Malaysia operating under a valid international license. We are committed to protecting the privacy and security of every member's personal data. This Privacy Policy is designed to give you a clear and transparent overview of our data handling practices.

This policy applies to all personal data collected through the VIP22 website at vip22.bar, the VIP22 mobile app, and all related services provided by our platform — including email communications, Live Chat, and any other interactions with the VIP22 team.

We comply with international data protection standards, including Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable GDPR requirements. Every data processing action we carry out has a valid legal basis — whether that's your consent, contractual necessity, the platform's legitimate interests, or a legal obligation we are required to fulfil.

Vip22 collects various types of personal data depending on how you interact with our platform. The following are the main categories of data we collect and their purposes:

Technical data is collected automatically each time you access our platform via the website or app. This includes your IP address, web browser type and version, device operating system, pages visited, time and duration of visits, and referral links. This data is used for security, technical troubleshooting, and improving the user experience.

For identity verification (KYC), we may request copies of identification documents such as a valid national ID, passport, or driving licence to verify your identity and age. All KYC documents are handled with the highest level of security and confidentiality.

Vip22 uses your personal data only for legitimate and necessary purposes. We do not process your data beyond the purposes stated below without obtaining your prior consent:

• Account Management: Creating, managing and maintaining your account, including the registration process, login and two-factor authentication.
• Identity Verification (KYC): Verifying your identity and age to ensure compliance with responsible gambling legal requirements.
• Transaction Processing: Processing deposits, withdrawals and any financial transactions you carry out through the vip22 platform.
• Platform Security: Detecting and preventing fraud, money laundering, multi-account use and any other suspicious activity.
• Customer Support: Helping you resolve technical issues, account enquiries and any complaints submitted through our support channels.
• Service Communications: Sending important account notices, security updates and changes to terms of service.
• Platform Improvements: Analysing usage patterns to improve the functionality, performance and overall experience of the vip22 platform.
• Marketing (with consent): Sending information about promotions, bonuses and exclusive offers — only if you have given consent to receive marketing communications.
• Legal Compliance: Fulfilling the legal and regulatory obligations applicable to the operation of a licensed online gaming platform.

Vip22 treats your personal data as confidential information that must be protected. We only share your data under the limited circumstances outlined below, and all data sharing is based on genuine necessity or legal obligation:

• Payment Service Provider: Transaction data that must be shared with payment providers such as FPX, Touch 'n Go, GrabPay, Boost, and DuitNow to securely process your deposits and withdrawals.
• Identity Verification Provider: KYC information may be shared with trusted third parties for identity verification purposes to ensure platform compliance.
• Technology Partners: Technical infrastructure and cloud computing providers that support the operation of the vip22 platform — all bound by strict confidentiality agreements.
• Regulatory & Enforcement Body: Government authorities or regulatory bodies when required by law, court order, or a legitimate criminal investigation.
• Auditors & Legal Advisors: In limited circumstances for internal audit, risk assessment, or obtaining legal advice.

In all cases of data sharing with third parties, VIP22 ensures that those parties are bound by confidentiality and data protection obligations equal to or higher than the standards we ourselves uphold. We do not permit third parties to use your data for their own purposes beyond the agreed scope.

Protecting your personal data from unauthorised access, breaches or misuse is vip22's top priority. We employ a multi-layered protection framework that combines the latest technology with strict operational procedures:

• 256-bit SSL Encryption: All data transmitted between your device and vip22 servers is encrypted using 256-bit TLS/SSL technology, ensuring no third party can intercept or read your information in transit.
• Two-Factor Authentication (2FA): Our 2FA system adds an extra layer of security to the login process, ensuring only you can access your account even if your password is compromised.
• 24/7 Monitoring: Our security system continuously monitors platform activity to detect any signs of intrusion, fraud, or unusual access.
• Internal Access Controls: Only vip22 staff who require access to specific data to perform their authorised duties are permitted to access that data — strictly on a need-to-know basis.
• Secure Data Storage: All personal data is stored on servers protected by multi-layered firewalls, physical access controls, and encrypted backup systems.
• Regular Security Testing: vip22 conducts regular penetration testing and security audits through independent third parties to identify and address any vulnerabilities.

While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. In the event of a data breach that affects you, we will notify you within the timeframe required by applicable law and take immediate action to minimise any damage.

Vip22 uses cookies and similar tracking technologies to enhance your experience on our platform, analyse website performance, and maintain the security of your login session.

The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for core platform functions such as maintaining your login session, processing transactions and ensuring account security. The platform cannot function properly without them.
• Performance Cookies: Collecting information about how you use the platform — pages visited, time spent and any errors encountered — to help us improve our services.
• Functional Cookies: Allowing the platform to remember your preferences such as language, display settings and login details to deliver a more personalised experience.
• Analytics Cookies: Used to understand overall platform usage patterns in aggregate and anonymised form for continuous improvement purposes.

You can manage your cookie settings through your web browser at any time. Please note, however, that disabling certain cookies — especially essential cookies — may affect the functionality and security of the VIP22 platform for your session.

As a vip22 member and data subject under applicable data protection laws, you have the following rights regarding your personal data. vip22 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the vip22 support team via Live Chat or email. We will process your request within the timeframe required by applicable law, typically within 30 days of receiving your request.

Vip22 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable laws and regulations. Once data is no longer needed, it will be securely deleted or anonymised.

• Active Account Data: Retained for the duration of your active account at VIP22 and for the period required after account closure in accordance with legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years to comply with applicable financial, tax, and anti-money laundering legal requirements.
• KYC Documents: Retained for the duration of your membership and for at least 5 years after account closure for regulatory compliance purposes.
• Security & Technical Logs: Typically retained for 90 days to 12 months for troubleshooting and security investigation purposes.
• Support Communications: Live Chat conversation records and support emails are retained for 2 years for service quality and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent to receive marketing communications from VIP22.

The vip22 platform is an adult service designed exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that we have collected personal data from an individual under the age of 18 without proper age verification, we will take immediate steps to:

• Closing the account in question immediately.
• Deleting all personal data associated with that account.
• Refunding any deposits made where this can be reasonably verified.

Vip22 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or platform improvements. Any material amendments will be communicated to you via:

• Notices prominently displayed on the vip22 platform homepage.
• Notification emails sent to your registered email address.
• Pop-up notices at login to ensure you are aware of any changes that have taken place.

The date of the most recent amendment will always be displayed at the top of this document. Your continued use of the vip22 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your privacy.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, the vip22 Data Protection Officer (DPO) team is here to help.

You may reach us through the following channels:

• Privacy Email: [email protected]
• Live Chat: Available 24/7 via the vip22 platform
• Response Time: We aim to respond to all privacy enquiries within 3–5 business days.

When contacting us regarding privacy, please provide your full name, VIP22 member ID, details of your request or concern, and any relevant supporting documents (if applicable) so we can process your request promptly and accurately.