Privacy Policy vipp33 — Personal Data Protection for Malaysian Players

Vipp33 ("we", "the platform") is the data controller for the personal information you provide when registering for and using the services at vipp33.pro and our official mobile app.

We take this responsibility seriously. This Privacy Policy was developed to meet the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international data security industry best practices.

This policy applies to all users of the vipp33 platform, including registered members, website visitors, and mobile app users. Continued use of our platform following any amendments to this Privacy Policy constitutes your acceptance of the changes made.

Vipp33 only collects data that is strictly necessary for platform operations and service delivery. Below are the categories of data we collect:

We do not collect data classified as sensitive, such as medical information, religious beliefs, or political views, unless you voluntarily disclose it to us through support channels.

The personal data we collect is used solely for the following purposes:

• Account Management: Create and maintain your user account, process registration and verify your identity through the KYC process.
• Transaction Processing: Securely and swiftly process deposits, withdrawals and all financial transactions on the vipp33 platform.
• Service Delivery: Grants access to all games, promotions and platform features you are eligible to use as a registered member.
• Customer Support: Handle your inquiries, complaints and support requests effectively.
• Security & Fraud Prevention: Detect and prevent fraudulent activity, money laundering and platform abuse.
• Legal Compliance: Meet the regulatory compliance and legal obligations applicable to our platform's operations.
• Platform Improvements: Analyze usage patterns to improve user experience, platform performance and game offerings.
• Marketing Communications: Send promotional information and exclusive offers — only if you have given consent to receive such communications.

Vipp33 processes your personal data on the following lawful bases in accordance with Malaysia's PDPA:

• Contractual Agreement: Processing required to carry out the agreement between you and vipp33 — including account management and transaction processing.
• Legal Obligations: Processing required to fulfil our legal obligations including anti-money laundering (AML) requirements and identity verification.
• Legitimate Interests: Processing for fraud prevention, platform security and service improvement purposes where our interests do not override your privacy rights.
• Consent: For optional marketing communications and certain cookie usage — you may withdraw this consent at any time.

Vipp33 does not sell, rent, or transfer your personal data to third parties for marketing purposes. However, we do share data in the following limited circumstances:

• Service Providers: We share necessary data with service providers acting on our behalf, such as payment gateway providers, gaming platform providers, and cloud services that support our platform operations. All third parties are bound by strict data confidentiality agreements.
• Regulatory Compliance: We disclose data to regulatory authorities, law enforcement agencies, or judicial bodies when required to do so under Malaysian law.
• Business Transfers: In the event of a merger, acquisition, or sale of vipp33 assets, user data may be transferred as part of the business transaction. You will be notified before your data becomes subject to a different privacy policy.

The vipp33 platform uses cookies and similar tracking technologies to enhance the user experience and analyze platform usage. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect information about how you use the platform — pages visited, time spent and errors encountered. This data is used to improve the platform.
• Functional Cookies: Remember your preferences such as language and display settings to provide a more personalized experience.
• Analytics Cookies: Helps us understand how users interact with the platform as a whole for product improvement purposes.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect your experience on the vipp33 platform.

Vipp33 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or to fulfill applicable legal requirements:

• Active Account Data: Retained for the duration your account remains active on the vipp33 platform.
• Financial Transaction Data: Retained for a minimum of 7 years from the transaction date in accordance with Malaysia's financial and tax legal requirements.
• KYC Verification Data: Retained for a minimum of 5 years after account closure in accordance with anti-money laundering (AML) requirements.
• Security Log Data: Retained for 90 days for fraud detection and security investigation purposes.
• Marketing Data: Retained until you withdraw consent or request deletion.

Once the designated retention period has elapsed, your data will be securely deleted or anonymized in accordance with our integrated data deletion procedures.

Under Malaysia's PDPA and our policy, you have the following rights regarding your personal data held by vipp33:

Vipp33 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, loss, destruction, or accidental disclosure:

• Data Encryption in Transit: All communications between your device and our servers are secured using TLS 1.3 protocol and 256-bit SSL encryption.
• Data Encryption at Rest: Sensitive data such as banking information and KYC documents are stored in encrypted format on our servers.
• Access Control: Only staff with a legitimate need have access to users' personal data. All access is logged and audited on a regular basis.
• 24/7 Security Monitoring: Our cybersecurity team continuously monitors the platform to detect any threats or unusual activity.
• Regular Penetration Testing: We conduct regular security testing by independent third parties to identify and address any potential vulnerabilities.
• Two-Factor Authentication (2FA): We provide and encourage the use of 2FA for all accounts as an additional layer of protection.

The vipp33 platform is strictly for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If you believe your child under the age of 18 has registered or provided personal data to vipp33 without your consent, please contact us immediately at [email protected]. We will take prompt action to delete the data and close the associated account.

Vipp33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technologies used, or applicable legal requirements.

When we make material changes, we will notify you through:

• A clear notice within the vipp33 platform (website and mobile app) at least 14 days before changes take effect.
• Email notification to your registered email address for significant changes.

The "Updated" date at the top of this document reflects when the last revision was made. Continued use of the platform after the amendment's effective date constitutes acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how vipp33 handles your personal data, please contact us through the following channels:

• Privacy Email: [email protected] — mark your email subject as "Data Privacy Inquiry" for faster assistance.
• Live Chat: Available 24/7 via the chat icon on the vipp33 platform or mobile app.
• Response Time: We aim for a response time of within 3 business days for general inquiries and 30 days for formal data subject rights requests.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, under the Ministry of Communications and Digital.