Vclub Privacy Policy – Malaysian User Data Protection and Privacy

1 Introduction

Vclub ("we", "our platform") values the privacy of every user who uses our services. This Privacy Policy has been prepared to explain clearly and transparently how we manage your personal data — from the way it is collected to the way we protect it.

As an online gaming platform operating in Malaysia, we comply with the Personal Data Protection Act 2010 (PDPA) and all applicable related legislation. We believe that user trust is the foundation of a healthy relationship between the platform and its members — and that trust begins with transparency in data management.

If you have any questions regarding this Privacy Policy, you may contact our team through the support channels available within the vclub platform.

2 Data We Collect

Vclub collects various types of personal data in the context of providing our services. The data collected can be categorised as follows:

• Identity Data: Full name, date of birth, identity card or passport number, email address, phone number and residential address.
• Financial Data: Bank account details, bank name, e-wallet information, and deposit and withdrawal transaction history.
• Platform Activity Data: Game history, total bets, wins and losses, session duration, and platform usage patterns.
• Technical Data: IP address, browser type and version, device operating system, screen resolution, and other technical diagnostic data.
• KYC Data: A copy of a valid identity document, such as a national ID card, passport, or driving licence, for identity verification purposes.
• Communication Data: Records of your correspondence with the vclub support team, including live chat logs and emails.

3 How We Collect Data

Vclub collects personal data through various methods, including:

• Directly from You: When you register an account, complete your profile, make a deposit or withdrawal, contact customer support, or fill in any form on the platform.
• Automatically: Through cookies, tracking pixels and similar technologies that record how you interact with our platform.
• From Third Parties: In certain situations, we may receive data from payment service providers, business partners, or identity verification agencies that we engage.
• Identity Verification: During the KYC process, you are required to submit supporting documents that will be verified by our system or qualified team.

4 Purpose of Data Use

The personal data we collect is used for the following purposes:

• Create and manage your vclub user account.
• Securely process deposits, withdrawals and other financial transactions.
• Carry out KYC procedures and age verification to meet our legal obligations.
• Provide effective and responsive customer support.
• Send important notifications relating to your account, security and policy changes.
• Prevent and detect fraud, money laundering and other illegal activities.
• Improve the user experience and develop better platform features.
• Comply with applicable legal requirements, regulations and directions from relevant authorities.
• Send marketing communications related to vclub offers – only with your consent.

5 Data Sharing with Third Parties

Vclub does not sell, rent, or disclose your personal data to third parties for independent marketing purposes. However, in certain limited situations, we may share your data with:

• Service Providers: Companies that assist us in operating the platform, such as payment service providers, cloud computing service providers, and gaming software suppliers — all bound by strict confidentiality agreements.
• Legal Authority: Government agencies, law enforcement bodies, or regulatory authorities when we are required to do so under applicable law.
• Verification Partners: Third-party identity verification agencies we engage for KYC and fraud prevention purposes.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of that transaction, subject to appropriate notice being given to users.

In all data sharing arrangements, we ensure that the receiving party maintains data security protections equivalent to the standards we uphold.

6 Data Security

The security of your personal data is vclub's top priority. We implement multiple layers of technical and organisational security measures to protect your data from unauthorised access, alteration, disclosure or destruction:

• 256-bit SSL encryption for all data communications between your device and our servers.
• Passwords are stored in a protected form using strong cryptographic hashing algorithms – we ourselves have no access to your password in plain text.
• Intrusion detection systems (IDS) and firewalls that continuously monitor for suspicious activity.
• Strict internal access controls – vclub staff can only access data required for their specific roles.
• Regular security audits by independent experts to identify and address any system vulnerabilities.
• Established incident response procedures to address any data security breaches promptly.

7 Cookies and Tracking Technologies

The vclub platform uses cookies and similar tracking technologies to enhance the user experience and understand how our platform is used. The types of cookies we use include:

• Essential Cookies: Required for core platform functions such as login and session security. These cookies cannot be disabled.
• Performance Cookies: Gather information on how visitors use the platform, such as the most frequently visited pages, to help us improve the platform.
• Functional Cookies: Remember your preferences and settings so you don't have to re-configure them on every visit.
• Analytics Cookies: Help us understand aggregate user behaviour for platform improvement purposes.

You can manage your cookie settings through your browser. However, disabling certain cookies may affect the functionality of the vclub platform.

8 Data Storage and Retention

Vclub retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, including compliance with applicable legal and regulatory obligations.

Generally, active account data is retained for the duration your account remains active. Once an account is closed, certain data may be kept for an additional period as required by laws relating to anti-money laundering, taxation, or audit requirements.

Data that is no longer required will be securely deleted or anonymised in accordance with vclub's established data disposal procedures.

9 Your Rights as a User

Under Malaysia's PDPA and the privacy principles we uphold, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data under certain circumstances.
• Right to Object: Object to the processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Withdraw your consent to data processing at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the vclub support team through the channels available within the platform. We will process your request within a reasonable timeframe in accordance with applicable legal requirements.

10 Children's Data

The vclub platform is not intended for individuals under the age of 18. We do not knowingly collect or process personal data of children.

Should we find that personal data of a child has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question.

11 Cross-Border Data Transfers

In the course of operating the platform, your personal data may be transferred to, and processed in, countries outside Malaysia where our servers or service partners are located.

In all cases of cross-border data transfers, vclub ensures that:

• The recipient country provides a level of data protection equivalent to or higher than that of Malaysia.
• Appropriate data processing agreements have been put in place with all third-party data processors.
• Adequate technical and organisational protective measures are in place to safeguard your data during transfer and processing.

12 Changes to the Privacy Policy

Vclub reserves the right to amend or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the technologies we use.

Any significant changes will be communicated to users via a notice on the platform or by email to your registered address. The "Updated" date at the top of this document will be revised to reflect the effective date of the updated policy.

Your continued use of the vclub platform after changes to this Privacy Policy take effect constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed.