Last reviewed: January 2026 | Effective immediately upon publication
1. Introduction
vega88 ("vega88", "we", "us", "our") operates the online gaming platform accessible at https://vega88.cam (the "Platform"). We are committed to handling the personal data of our users with care, transparency and in accordance with applicable data protection principles.
This Privacy Policy ("Policy") applies to all individuals who visit, register on or otherwise interact with the vega88 Platform, including Malaysian users accessing the service from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other locations across Malaysia.
By using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue use of the Platform immediately.
This Policy should be read alongside the vega88 Terms & Conditions and Responsible Gambling policy, both of which are incorporated by reference.
2. Definitions
For the purpose of this Privacy Policy, the following terms carry the meanings set out below:
- "Personal Data" means any information that directly or indirectly identifies a living individual, including name, identification number, contact details, financial information and device identifiers.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer or deletion.
- "Data Controller" means vega88, which determines the purposes and means of processing Personal Data collected through the Platform.
- "Data Subject" means any identifiable individual whose Personal Data is processed by vega88 — this includes registered users and site visitors.
- "KYC" means Know Your Customer — the identity and age verification process conducted before certain Platform functions are activated.
- "Third Party" means any natural or legal person other than the Data Subject, vega88 or its authorised processors.
3. Data We Collect
3.1 Registration and Account Data
When a user creates a vega88 account, we collect personal information including but not limited to: full legal name, date of birth, residential address, email address, phone number and chosen username. This information is required to establish and administer the account.
3.2 Identity Verification (KYC) Data
To comply with age verification and anti-fraud obligations, vega88 may collect copies of government-issued identity documents such as a Malaysian MyKad, passport or driving licence, along with proof of address documents such as utility bills or bank statements, and biometric data in the form of a selfie photograph taken alongside the identity document.
3.3 Financial and Transaction Data
We collect records of all financial transactions made on the Platform, including deposit amounts, withdrawal requests, payment method identifiers (such as FPX reference codes, DuitNow transaction IDs or eWallet account references associated with Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank or Hong Leong) and associated timestamps.
3.4 Usage and Activity Data
We may collect data about your interactions with the Platform, including pages visited, games accessed, bets placed, session duration, feature usage and clickstream data. This data helps us understand how the Platform is used and identify areas for improvement.
3.5 Technical and Device Data
We collect technical data automatically when you access the Platform, including IP address, device type, browser type and version, operating system, screen resolution, language settings and referring URL.
3.6 Communications Data
Any messages you send to vega88 via support channels, including the content of those messages and associated metadata, may be retained for quality assurance, fraud prevention and regulatory purposes.
4. How Data Is Collected
vega88 collects personal data through the following means:
- Direct input — information you actively provide during registration, account updates, KYC submissions or support interactions;
- Automated collection — technical and usage data collected automatically when you access the Platform via cookies, web beacons and server logs;
- Third-party sources — identity verification partners, payment processors and fraud detection services may supply supplementary data to assist in account verification or security reviews;
- Public sources — where lawfully permissible, we may cross-reference publicly available data to verify information or detect fraudulent activity.
5. Data Processing
vega88 processes personal data for the following purposes:
- Establishing and managing user accounts on the Platform;
- Verifying user identity and age in accordance with KYC obligations;
- Processing deposits, withdrawals and other financial transactions;
- Detecting, investigating and preventing fraud, money laundering and other prohibited activity;
- Providing customer support and resolving account-related queries;
- Sending account-related communications such as transaction confirmations, security alerts and policy update notices;
- Analysing Platform usage to improve the user experience and operational efficiency;
- Complying with legal, regulatory and contractual obligations applicable to vega88;
- Enforcing the vega88 Terms & Conditions and this Privacy Policy.
Note for Malaysian users: vega88 does not sell your personal data to advertising networks or unrelated third parties for marketing purposes. Data shared with external parties is limited to what is operationally necessary for the purposes listed above.
6. Lawful Basis for Processing
vega88 relies on the following lawful bases when processing personal data, depending on the nature of the activity:
- Contractual necessity — processing is required to fulfil our obligations under the account agreement, including payment processing, KYC verification and account administration;
- Legal obligation — processing is required to comply with applicable laws and regulations, including anti-money-laundering requirements and age verification obligations;
- Legitimate interests — processing is carried out to protect the security and integrity of the Platform, prevent fraud and improve service quality, provided such interests do not override user rights;
- Consent — where processing is based on your consent, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
7. Sharing Personal Data
7.1 Service Providers
vega88 may share personal data with third-party service providers who assist in the operation of the Platform. These include payment processors (including those handling FPX, DuitNow, Touch 'n Go eWallet and other Malaysian payment channels), identity verification partners, IT infrastructure providers, customer support platforms and data analytics providers. Such parties are required to handle data only for the specific purposes for which it is shared and under appropriate confidentiality obligations.
7.2 Legal and Regulatory Disclosure
vega88 may disclose personal data to regulatory bodies, law enforcement agencies or courts where required to do so by applicable law, court order or regulatory instruction. Such disclosures are made only to the extent necessary and proportionate to the legal obligation.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring or sale of vega88 or its assets, personal data held at the time of the transaction may be transferred to the successor entity. Users will be notified of any such transfer and the applicable privacy arrangements in advance where reasonably practicable.
7.4 No Unauthorised Sale
vega88 does not sell, rent or trade personal data to unrelated third parties for their own marketing or commercial purposes.
8. Data Retention
vega88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention considerations apply:
- Account registration and KYC data is retained for the duration of the account relationship and for a further period as required by anti-money-laundering and identity verification regulations;
- Transaction records are retained for the period required by applicable financial recordkeeping obligations;
- Support communications are retained for a reasonable period following resolution of the query, typically up to two years;
- Usage and technical data may be retained in aggregated or anonymised form for analytical purposes beyond the individual retention period.
When personal data is no longer required for the purposes stated in this Policy, vega88 will securely delete or anonymise it in accordance with applicable standards.
9. Data Security
vega88 implements technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, destruction or loss. These measures include encrypted data transmission via HTTPS, access controls limiting data visibility to authorised personnel, secure storage protocols and periodic security reviews.
However, no digital platform can guarantee absolute security. Users are advised to take reasonable precautions on their own devices: use a unique, strong password for your vega88 account, enable any available two-factor authentication, keep devices updated and never share login credentials, OTPs or banking PINs with any other person.
If you believe your vega88 account has been compromised, contact support immediately at the email address listed in this Policy.
10. Cookies and Tracking Technologies
10.1 What Are Cookies
Cookies are small text files placed on your device when you visit a website. vega88 uses cookies and similar tracking technologies to support Platform functionality, maintain session continuity, analyse traffic patterns and detect potential fraud or abuse.
10.2 Types of Cookies Used
- Essential cookies — required for the Platform to function correctly, including session management and security checks;
- Analytical cookies — used to collect anonymised data about how users navigate the Platform, helping us improve layout and performance;
- Functional cookies — used to remember preferences such as language settings and display options.
10.3 Managing Cookies
Most browsers allow you to view, block or delete cookies through their settings. Disabling essential cookies may affect the functionality of the vega88 Platform. For full instructions on managing cookies, refer to your browser's help documentation.
11. User Rights
Subject to applicable law, you may hold the following rights in relation to your personal data processed by vega88:
- Right of access — you may request a copy of the personal data we hold about you;
- Right to rectification — you may request correction of inaccurate or incomplete personal data;
- Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations;
- Right to restrict processing — you may request that processing be restricted in certain circumstances, such as during a dispute over accuracy;
- Right to data portability — where processing is based on consent or contract and carried out by automated means, you may request a structured, machine-readable copy of your data;
- Right to object — you may object to processing based on legitimate interests where your individual circumstances justify doing so;
- Right to withdraw consent — where processing is consent-based, you may withdraw consent at any time without affecting prior lawful processing.
To exercise any of the above rights, please contact vega88 at the email address provided in the Contact Us section of this Policy. We will respond to all valid requests within a reasonable timeframe, typically 30 days. Requests that are manifestly unfounded or excessive may be declined or may attract a reasonable administrative fee.
12. Minors
The vega88 Platform is strictly intended for individuals aged 21 years or above. vega88 does not knowingly collect personal data from individuals below this age. If we become aware that an Account has been created by or on behalf of a person under 21, we will suspend the account, delete the associated data and, where appropriate, report the matter to the relevant authorities.
Parents or guardians who believe a minor has submitted personal data to vega88 should contact us immediately using the details provided in Clause 14 of this Policy.
13. Policy Amendments
vega88 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated by posting a revised version on the Platform with an updated effective date. Continued use of the Platform following the publication of an amended Policy constitutes acceptance of the revised terms. Users are encouraged to review this Policy periodically to remain informed of how their personal data is handled.
14. Contact Us
If you have questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by vega88, please contact our support team using the details below.
Website email: [email protected]
When contacting us regarding a data rights request, please include your registered username, the nature of your request and, where applicable, supporting documentation to assist in verifying your identity. We aim to acknowledge all requests within 5 business days and to respond in full within 30 days.