Privacy Policy — VIP333

VIP333 ("we", "us", "our", "the Company") operates the online casino and sports betting platform accessible at vip333.casa. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered players, prospective users, and visitors to our website.

This Privacy Policy ("Policy") describes in full detail how VIP333 collects, processes, stores, shares, and protects personal information in the course of operating its services. It also sets out the rights available to you as a data subject and the mechanisms through which those rights may be exercised.

By registering an account on VIP333, accessing the platform, or otherwise providing personal information to us, you acknowledge that you have read this Policy, understood its contents, and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the VIP333 platform.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

VIP333 collects personal data through several channels in the course of providing our services. The categories of personal data we may collect are described below:

3.1 Account Registration Data

When you register a player account on VIP333, we collect information you provide directly, including:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (for age verification — minimum age is 21 years).
• Email address and contact telephone number.
• Residential address, including city and country of residence.
• Username and encrypted password.
• Preferred language and currency settings.

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect copies of:

• Government-issued photo identification (e.g., Malaysian National Identity Card / MyKad, passport).
• Proof of residential address (e.g., utility bill, bank statement dated within 3 months).
• Proof of payment method ownership.
• Source of funds documentation, where required for high-value transactions.

3.3 Financial Transaction Data

When you make deposits or withdrawals, we collect transaction records including:

• Payment method details (e-wallet identifiers, bank account reference numbers — full card or bank account numbers are never stored directly by VIP333).
• Transaction amounts in MYR or approved cryptocurrency.
• Transaction timestamps and reference numbers.
• Payment method types used (e.g., Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong).

3.4 Platform Usage & Behavioural Data

We automatically collect certain technical and behavioural information when you access or use the VIP333 platform, including:

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser version.
• Session duration, pages visited, and features accessed.
• Game session data including game titles played, bet amounts, and session outcomes.
• Referring URL and exit URL data.

3.5 Communications Data

When you contact VIP333 via live chat, email, or any other support channel, we retain records of that communication, including the content of messages and any attachments you provide, for support quality assurance and dispute resolution purposes.

VIP333 processes personal data only for defined, legitimate purposes. The primary purposes for which we use personal data are set out below:

VIP333 processes personal data on the following legal bases, consistent with applicable international data protection standards:

• Contractual Necessity: Processing is necessary to perform the contract between you and VIP333 — i.e., to provide you with the platform services you have registered to use.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, KYC verification mandates, and our international gaming licence conditions.
• Legitimate Interests: Processing is conducted for VIP333's legitimate business interests, such as fraud prevention, platform security, and service quality improvement, provided these interests are not overridden by your fundamental privacy rights.
• Consent: Where processing is based on your consent — such as for direct marketing communications — you retain the right to withdraw that consent at any time by contacting our support team or updating your account communication preferences.

VIP333 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may, however, share your personal data with carefully selected third parties where necessary to operate our platform and comply with our legal obligations:

6.1 Payment Processors

Personal data required to process transactions (such as account name and payment method reference) is shared with our approved payment processing partners, including operators of Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, and major Malaysian banking institutions (Maybank, CIMB, Public Bank, Hong Leong), solely for the purpose of executing the requested transaction.

6.2 Identity Verification Providers

Where automated KYC tools are used, identity documents and related personal data may be processed by third-party identity verification service providers contracted by VIP333. These providers are bound by strict data processing agreements and are prohibited from using your data for any purpose other than the specific verification service.

6.3 Regulatory & Law Enforcement Authorities

VIP333 may be required to disclose personal data to regulatory authorities, law enforcement agencies, or government bodies where compelled to do so by applicable law, court order, or our international gaming licence obligations. Such disclosures will be limited to the minimum information necessary to satisfy the lawful request.

6.4 Technology Service Providers

VIP333 engages third-party technology providers for services such as cloud infrastructure, platform hosting, analytics, and cybersecurity. These providers process personal data only in accordance with VIP333's instructions and under contractual data protection obligations.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a significant portion of VIP333's business, personal data held by VIP333 may be transferred to the successor entity as part of that transaction. Affected users will be notified of any such transfer and any material changes to the applicable privacy policy before the transfer takes effect.

VIP333 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytics data that helps us improve the user experience.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to use the VIP333 platform, including logging in and accessing your account. Analytics and preference cookies may be disabled without affecting core platform functionality.

VIP333 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations. Our general data retention standards are as follows:

• Active account data (name, contact details, account preferences) is retained for the duration of the active account relationship.
• Financial transaction records are retained for a minimum of five (5) years following the relevant transaction, in compliance with anti-money laundering record-keeping requirements.
• KYC documentation is retained for a minimum of five (5) years following account closure or the conclusion of the verification process, whichever is later.
• Customer support communications are retained for a maximum of three (3) years from the date of the communication.
• Platform usage and analytics data in anonymised or pseudonymised form may be retained indefinitely for platform improvement purposes, as it no longer constitutes identifiable personal data.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised, unless retention is required to defend against a pending legal claim or to comply with a specific regulatory directive.

VIP333 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• Transport Layer Security (TLS) / 256-bit SSL encryption on all data transmitted between your device and the VIP333 platform.
• Encrypted storage of passwords using industry-standard one-way hashing algorithms — VIP333 staff cannot view your password in plain text.
• Segregated hosting environments for player financial data, separated from general application infrastructure.
• Access controls limiting internal access to personal data on a strict need-to-know basis, enforced through role-based access management systems.
• Regular security audits and penetration testing conducted by independent third-party security assessors.
• Incident response procedures to detect, report, and respond to any personal data breach within required timeframes.

As a data subject, you hold certain rights over your personal data processed by VIP333. These rights are described below. To exercise any of these rights, please contact our support team with sufficient detail to allow us to identify your request and verify your identity.

VIP333 will respond to valid data subject rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it. We reserve the right to verify your identity before acting on any request to prevent unauthorised access to another person's data.

VIP333's services are strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. Our registration process requires users to confirm they are at least 21 years of age, and this declaration is verified through the KYC process before any withdrawal is processed.

If VIP333 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete the collected personal data in accordance with our retention obligations, and return any deposited funds (subject to fraud screening).

Parents or guardians who believe that a minor under their care has registered on VIP333 are encouraged to contact our support team immediately at [email protected] so that the matter can be addressed without delay.

VIP333 operates under international gaming licensing and may engage technology service providers located in jurisdictions outside Malaysia, including countries in Europe, Asia, and North America. As a result, your personal data may be transferred to, stored in, or processed in jurisdictions outside of Malaysia.

Where such international transfers occur, VIP333 ensures appropriate safeguards are in place to protect your personal data, including contractual obligations on data processors that impose data protection standards equivalent to those applicable under recognised international data protection frameworks.

VIP333 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the evolution of our platform and services.

When material changes are made to this Policy, we will notify registered players via the email address associated with their account and will update the "Last Updated" date at the top of this page. We encourage players to review this Policy periodically to remain informed of how their personal data is handled.

Your continued use of the VIP333 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree to any revised terms of this Policy, you may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or VIP333's data processing practices, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the VIP333 platform at vip333.casa. This is the fastest route for urgent privacy or account-related matters.
• Email: [email protected] — please include "Privacy Query" in the subject line and provide your registered account username and a clear description of your request.

VIP333 aims to acknowledge all privacy-related communications within 24 hours and provide a substantive response within 30 days. For complex data subject rights requests, we may require identity verification before processing the request to protect against unauthorised access to personal data.