Vega338 Privacy Policy – Protecting Your Personal Data in Malaysia

As an online entertainment platform operating in Malaysia, vega338 needs to collect certain categories of personal information from its members. This is done solely for the purpose of providing a safe, efficient service that complies with legal requirements. The following are the categories of data we collect:

Data collected is used solely for legitimate purposes disclosed to members. The following are the primary uses of personal data at vega338:

• Account management and maintenance: Creating, verifying and managing member accounts securely.
• Financial transaction processing: Processing all deposits and withdrawals accurately and securely.
• Identity verification (KYC): Ensuring all members meet age and identity requirements in accordance with compliance obligations.
• Fraud prevention and security: Detecting and preventing suspicious activity, system manipulation and account abuse.
• Customer support: Providing accurate and efficient assistance to members who need it.
• Service communications: Sending important notifications related to your account, security and policy changes.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate assistance.
• Platform improvements: Analyzing usage data in aggregate (without identifying individuals) to improve the overall user experience.

Vega338 processes your personal data on one or more legal bases recognised under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: You provide explicit consent during the registration process. You may withdraw this consent at any time, though this may affect our ability to provide certain services.
• Contract performance: Processing necessary to fulfill the service agreement between vega338 and you as a member.
• Legal obligation: Processing required to comply with applicable Malaysian legal requirements including KYC requirements and transaction monitoring.
• Legitimate interest: Processing for security, fraud prevention and service improvement purposes that does not override your rights and freedoms.

Every data processing activity at vega338 has a documented legal basis. If you wish to know the legal basis for any specific processing activity, please contact us through our official support channels.

Vega338 does not sell members' personal data. However, there are limited situations where we need to share certain information with carefully selected third parties:

• Payment service providers: To securely process your deposits and withdrawals. These providers only receive the information required for transaction purposes.
• Licensed game software providers: Minimum information required to enable access to games from providers such as Pragmatic Play, PG Soft and others. No personal identification data is shared unless strictly necessary.
• Authorities and regulatory bodies: When required by Malaysian law or by order of a valid court.
• Technical service providers: Such as hosting and cybersecurity providers who have signed strict data confidentiality agreements with vega338.

Data security is an ongoing investment at vega338. We implement multiple layers of technical and operational protection to keep your data safe at all times:

• 256-bit SSL encryption for all data transmitted between your device and vega338 servers.
• Secure password storage using a one-way cryptographic hashing method — meaning even our staff cannot view your actual password.
• Two-factor authentication (2FA) available to all accounts as an additional security layer that is strongly recommended.
• 24/7 Monitoring by an automated anomaly detection system that monitors login patterns and suspicious activity in real time.
• Data segregation between production and development environments to ensure real data is not exposed during technical maintenance.
• Regular security audits by an independent party that evaluates all aspects of our data protection.

In the event of a security incident involving your personal data, vega338 is committed to notifying affected members within a reasonable timeframe and taking immediate remedial action.

Vega338 does not retain personal data longer than necessary. Retention periods are determined by the following requirements:

• Active account data: Retained for as long as your account is active and for a reasonable period after account termination for dispute resolution and audit purposes.
• Financial transaction records: Retained for a minimum of 7 years as required by Malaysian accounting and taxation laws.
• KYC records: Retained for a minimum of 5 years after the service relationship ends, in accordance with anti-money laundering compliance requirements.
• Support communication logs: Retained for 2 years for quality control and dispute resolution purposes.
• Marketing data: Deleted when you withdraw consent or request deletion.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by vega338:

Vega338 uses cookies and similar tracking technologies to enhance your experience on our platform. The following types of cookies are used:

• Essential Cookies (Required): Required for the platform to function properly — including login session verification, security, and page loading. These cookies cannot be disabled.
• Functional Cookies: Saving your preferences such as language, display settings and favorite game types to make future sessions more convenient.
• Analytics Cookies: Helping us understand how users interact with the platform in aggregate for improvements. This data does not identify you individually.
• Security Cookies: Helping detect and prevent fraudulent activity and unauthorized access to your account.

You can manage cookie settings through your browser or via the privacy settings panel in your vega338 account. However, disabling certain cookies may affect platform functionality.

If you have any questions, concerns, or wish to exercise any of your privacy rights, our team is ready to help. We take every privacy inquiry seriously and are committed to providing meaningful responses — not template replies.

The fastest way to reach us is through the live chat feature available on the vega338 platform, which operates 24 hours a day, 7 days a week. For written inquiries that require record-keeping, you can use the contact form in your account or email our privacy team at the address listed in your account.

This Privacy Policy may be updated from time to time to reflect changes in our privacy practices or applicable legal requirements. Any material changes will be communicated to members via email or in-platform notification at least 14 days before changes take effect.