Official VG98 Documents

Privacy Policy VG98 – Our Commitment to Protecting Your Personal Data

Your privacy is our priority. This policy clearly explains how VG98 collects, uses, stores, and protects the personal data of all registered members in accordance with the Malaysian Personal Data Protection Act (PDPA) 2010. Please read this document in full before registering or using the VG98 platform.

Updated: 1 January 2026 Bahasa Melayu (ms-MY)

Our Commitment VG98 Privacy to You

Six core principles that underpin the personal data protection of every VG98 member in Malaysia.

🔒
Full PDPA 2010 Compliance

VG98 fully complies with the Malaysian Personal Data Protection Act (PDPA) 2010. All our data collection, processing, and storage practices are designed in accordance with Malaysian legal requirements applicable to data controllers operating within the country.

🛡️
256-bit SSL Encryption

All data transmitted between your device and VG98's servers is protected by 256-bit SSL encryption — the same level of protection used by Malaysia's leading commercial banks. Your identification details, bank account information, and transaction records cannot be intercepted by third parties.

🚫
No Sale of Data to Third Parties

VG98 has never and will never sell, rent, or transfer members' personal data to any third party for marketing or commercial gain. Your data belongs to you, and VG98 uses it solely for the purposes stated in this policy.

✅
Data Usage Transparency

VG98 clearly states the purpose of every data collection before or at the time the data is collected. There is no hidden or undisclosed use of data. You know what we collect, why we need it, and how long it is retained before deletion.

🔑
Full Control in Your Hands

As a VG98 member, you have the full right to access, correct, or request deletion of your personal data at any time. You may also withdraw your marketing consent, update your profile information, and request a complete copy of the data we hold about you.

📋
Time-Limited Data Retention

VG98 does not retain personal data longer than necessary for the stated purpose or as required by law. Once the defined retention period expires, data is securely deleted using irreversible deletion procedures.

1Information We Collect

VG98 collects various types of personal information from members during registration, platform use, and interactions with our support team. All data collection is conducted on a minimum necessity basis – we only collect what is genuinely required to provide you with quality service.

Information you provide directly:

  • Full name as per identity card or passport
  • Malaysian identity card number (MyKad) or passport number
  • Date of birth for age verification
  • An active, reachable email address
  • A Malaysian mobile number registered in your name
  • Current residential address in Malaysia
  • Malaysian bank account number or eWallet details for withdrawal purposes
  • Account password (stored in encrypted form and unreadable by any VG98 staff member)

Automatically collected information:

  • IP address and general location information based on IP
  • Web browser type, operating system, and device information
  • Login and logout timestamps
  • Records of all gaming activity including bets placed, winnings, and losses
  • Complete financial transaction records including deposits and withdrawals
  • Game session data including duration and frequency of use
  • Cookie data and other web tracking technologies (further details in Section 5)
Personal Data Contact Data Financial Data Game Data Technical Data Location Data
VG98 does not directly collect sensitive information such as credit or debit card details. All financial transactions are processed through licensed third-party payment gateways – Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks – each of which maintains its own privacy and security policies.

2How We Use Your Data

VG98 uses collected personal data solely for legitimate, reasonable purposes directly related to the provision of our platform services. All data usage is subject to the limited purpose principle established under PDPA 2010 — data will not be used for any purpose other than those stated below without your explicit consent.

  • Account Management: Creating, verifying, and maintaining your VG98 account, including processing registration, identity verification (KYC), and password management.
  • Transaction Processing: Securely and accurately processing deposits, withdrawals, and all financial transactions on the VG98 platform.
  • Game Service Providers: Enabling you to access and enjoy all games on the VG98 platform, including slots, live casino, poker, lottery, and Sports Betting.
  • Platform Security: Detecting and preventing fraud, money laundering, bot usage, collusion, and any activity that violates VG98's Terms & Conditions.
  • Legal Compliance: Meeting regulatory compliance obligations including KYC requirements, AML (Anti-Money Laundering), and reporting to relevant authorities under Malaysian law.
  • Customer Support: Processing enquiries, complaints, and assistance requests submitted to the VG98 support team.
  • Product Improvement: Analysing usage patterns on an aggregate (not individual) basis to improve the user experience and develop more useful new features.
  • Essential Communications: Sending important notifications related to your account, security, policy changes, and other essential information you need to know as a VG98 member.
  • Marketing (with consent): Sending promotional offers, bonuses, and new game information exclusively to members who have given consent to receive marketing communications.
VG98 does not make fully automated decisions that materially affect you based solely on personal data processing without human involvement. Any decision affecting your account — such as suspension or closure — involves a review by qualified members of the VG98 management team.

3Sharing of Data with Third Parties

VG98 does not sell, rent, or trade members' personal data to any third party for their own commercial marketing purposes. This is an unwavering and non-negotiable commitment. However, there are limited situations where VG98 needs to share personal data with certain parties in order for our services to function properly.

  • Payment Service Providers: Payment gateways such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, and CIMB Clicks receive only the minimum information required to process your financial transactions. These providers are bound by strict data protection agreements and have their own privacy obligations.
  • Game Software Providers: International-standard game providers partnering with VG98 may receive anonymised player IDs solely for game processing purposes. They do not receive your name, identification number, or any other personal information.
  • Government Authorities: VG98 complies with all lawful requests from Malaysian law enforcement authorities, courts, or other regulatory bodies pursuant to a valid legal order. We will notify you of any such disclosure unless prohibited by law.
  • Identity Verification Services: Licensed third-party identity verification providers may be engaged to conduct KYC checks as required by compliance regulations. They receive only the minimum data necessary to verify your identity.
  • Business Transfer: If VG98 undergoes a merger, acquisition, or sale of assets, members' personal data may be transferred as part of that transaction. You will be notified in advance and your privacy rights will continue to be protected by the acquiring entity.
All third parties that receive personal data of VG98 members are required to sign a Data Processing Agreement that binds them to data protection standards equivalent to or higher than those practiced by VG98 itself.

4Data Security & Storage

The security of members' personal data is VG98's highest technical priority. We invest heavily in cybersecurity infrastructure to ensure your data is always protected against unauthorised access, loss, destruction, or misuse.

The technical and organisational measures we have implemented include:

  • In-transit data encryption using TLS 1.3 and 256-bit SSL protocols for all communications between your browser and VG98 servers
  • Static data encryption (data-at-rest) for all personal and financial information stored in the VG98 database
  • Role-based access control (RBAC) ensuring that only staff who require access to specific data are able to view it
  • 24/7 security monitoring with active intrusion detection (IDS) and intrusion prevention (IPS) systems
  • Regular data backups and disaster recovery procedures to ensure continuity of service
  • Regular penetration testing conducted by independent third-party security experts
  • Two-factor authentication (2FA) is available for all member accounts and mandatory for all VG98 internal staff accounts

Your personal data is stored on secure servers located in certified data centre facilities. Data retention periods are as follows:

  • Active account data: Retained for the duration your account is active and for up to seven (7) years after account closure for financial regulatory compliance purposes
  • Transaction records: Retained for seven (7) years in accordance with Malaysia's anti-money laundering legislation
  • Security logs: Retained for twelve (12) months for security investigation purposes
  • Marketing data: Deleted within thirty (30) days after you withdraw your marketing consent
In the event of a data breach affecting the security of your personal information, VG98 will notify you within 72 hours of becoming aware of the breach, in line with industry best practices. The notification will include details of the breach, the data affected, and steps you should take to protect yourself.

5Cookies & Tracking Technologies

The VG98 website uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how members use our platform. Cookies are small text files stored in your browser when you visit the VG98 website.

The following are the types of cookies used by VG98:

You can manage your cookie settings through your web browser settings. Most browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling essential cookies may affect the functionality of the VG98 platform and could prevent you from logging in or using certain services. VG98 does not use third-party cookies for cross-site advertising tracking.

6Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding the personal data VG98 holds about you. VG98 is committed to facilitating the exercise of these rights without obstruction or undue burden.

👁️
Right of Access
You have the right to request a copy of all personal data VG98 holds about you. Requests will be processed within 21 working days. A nominal fee may apply for excessive or repeated requests made within a short period.
✏️
Right to Rectification
If you find that any personal data VG98 holds about you is inaccurate, incomplete, or out of date, you have the right to request a correction. We will update the data within 14 working days following verification.
🛑
Right to Restrict Processing
You may request that VG98 cease processing your personal data for specific purposes, particularly direct marketing. Such requests will take effect immediately for marketing communications and within 30 days for other purposes permitted by law.
🗑️
Right to Erasure
You may request the deletion of your personal data. VG98 will process such requests subject to mandatory legal data retention requirements (such as financial transaction records for 7 years). Data not subject to retention obligations will be deleted within 30 days.
📦
Data Portability Rights
You have the right to receive your personal data in a structured, machine-readable format (such as CSV or JSON) for transfer to another data controller. Requests will be fulfilled within 21 working days.
📣
Complaints Rights
If you believe VG98 has violated your privacy rights, you are entitled to file a complaint with the Department of Personal Data Protection Malaysia or contact the VG98 Data Protection Officer directly at support@vg98.express.
To exercise any of the rights stated above, please submit a written request to support@vg98.express specifying the type of right you wish to exercise and sufficient details for us to identify your account. Identity verification may be required before the request is processed to safeguard your data security.

7Cross-Border Data Transfers

VG98 operates primarily from Malaysia and prioritises storing member personal data on servers located in Malaysia or the Asia-Pacific region, where comparable data protection laws apply. However, in certain operational situations, personal data may need to be accessed or processed from locations outside Malaysia.

Situations where cross-border data transfers may occur include:

  • International game software providers that process game data for analytics and game improvement purposes
  • Cloud infrastructure services whose backup servers or disaster recovery facilities are located in another country within the same region
  • Technical support staff who may need to access systems from other locations in the event of a critical technical emergency

All cross-border data transfers carried out by VG98 are subject to adequate safeguards in accordance with the PDPA 2010 standards. This includes implementing standard contractual clauses, ensuring the recipient country has an adequate level of data protection, or obtaining your specific consent where required. VG98 does not transfer members' personal data to countries that lack an internationally recognised data protection framework.

8Marketing & Communications

VG98 sends members two categories of communications: essential account-related communications (which do not require your consent as they are necessary for service delivery) and marketing communications (which require your explicit consent).

Important communications that we will send to you without requiring additional consent, including:

  • Account registration confirmation and security notifications
  • Notifications related to deposit and withdrawal transactions
  • Security alerts such as suspicious login attempts
  • Notifications of material changes to the Terms & Conditions or Privacy Policy
  • Important account-related information that requires your attention

Marketing communications that requires your consent includes:

  • Notifications on new VG98 promotions and bonuses
  • Information on new games added to the platform
  • VG98 tournament schedules and special events
  • Personalised offers based on your gaming patterns
  • VG98 weekly newsletter

You may withdraw your marketing consent at any time by clicking the "Unsubscribe" link in any marketing email you receive, or by updating your communication preferences in your VG98 account settings. Withdrawal of consent will take effect within 5 working days. Withdrawing marketing consent does not affect the receipt of important communications related to your account.

9Children & Privacy

The VG98 platform is strictly for adults aged 18 and above. VG98 expressly prohibits registration and use of the platform by individuals under the age of 18. This is not merely a legal requirement — it is our moral responsibility towards the protection of Malaysian children and young people.

VG98 does not intentionally collect or process personal data from individuals under the age of 18. All new registrants are required to verify their age during the registration process. In addition, our identity verification (KYC) procedures serve as an extra layer of protection to prevent underage use of the platform.

If VG98 discovers or becomes aware that personal data has been collected from an individual under the age of 18, we will take immediate action to:

  • Close the associated account immediately
  • Delete all related personal data as promptly as possible
  • Returning any deposited funds, subject to the appropriate verification procedures
  • Notifying relevant parties, including parents or guardians where identifiable

Parents or guardians who discover that a minor has registered a VG98 account are urged to contact our support team immediately at support@vg98.express. We will handle such cases with the utmost priority and full accountability.

10Policy Amendments & Contact Us

VG98 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. You will be notified of any material amendments via your registered email or an in-platform notification at least 14 days before the changes take effect.

The "Updated" date shown at the top of this document indicates when this Privacy Policy was last modified. We encourage you to review this page periodically. Your continued use of the VG98 platform after any amendments take effect will be considered acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding your privacy and personal data protection at VG98, please contact us through the following channels:

  • Privacy Email: support@vg98.express (please include "Privacy Enquiry" in the email subject line)
  • Live Chat: Available 24 hours a day, 7 days a week, directly on the VG98 platform
  • Response Time: Under 2 minutes for live chat, under 24 hours for email
  • Language Support: Bahasa Melayu & English
This Privacy Policy, together with VG98's Terms & Conditions and Responsible Gaming Policy, forms a comprehensive protection framework for all platform members. In the event of any conflict between a translated version and this Malay version, the Malay version shall prevail and take precedence.

Document Related VG98

Also read these other important policies that complement this Privacy Policy for a full understanding of VG98's rules and commitments to its members.

⚖️
Terms & Conditions

Full rules governing accounts, deposits, withdrawals, bonuses, member conduct, and VG98's platform liability limits.

Read Terms & Conditions
❤️
Responsible Gaming

Deposit limits, self-exclusion, loss limits, and support resources to keep your gaming experience enjoyable and in control.

Read This Policy
❓
Frequently Asked Questions (FAQ)

Answers to the most frequently asked questions about accounts, deposits, withdrawals, bonuses, and gaming at VG98.

View FAQ
VG98 Data Protection Officer

VG98 has appointed a Data Protection Officer responsible for ensuring the platform's compliance with PDPA 2010 and our internal privacy policies. For any serious privacy concerns or formal requests relating to your data rights, you may contact our Data Protection Officer directly at support@vg98.express with "Data Protection Officer" stated in your message subject line. All enquiries will be treated as confidential and processed in accordance with established PDPA compliance procedures.

Officially Licensed
256-bit SSL
PDPA Compliant
24×7 Support
No Data Sale
7 Years in Operation

FAQ – VG98 Privacy Policy

The most frequently asked questions by members regarding privacy and personal data protection on the VG98 platform.

No, absolutely not. VG98 has never sold, rented, or shared member personal data with any advertiser or third-party marketing company. This is a core commitment that has remained unchanged since VG98 first began operations. Your personal data is used solely for the purposes stated in this Privacy Policy – to provide platform services, process transactions, ensure security, and meet legal obligations. We do not build marketing profiles for sale to third parties, nor do we share your information with any entity not directly involved in the operation of the VG98 platform.

You may submit a data access request by emailing support@vg98.express with the subject line "Data Access Request – PDPA". In your email, include your full name, VG98 account number, and the type of data you wish to access. Identity verification will be required before your request is processed to ensure the security of your data. VG98 will process your request within 21 business days and deliver a copy of your data in a readable format. Data will be sent securely via encrypted email or through a password-protected download link. No fee is charged for the first data access request within any 12-month period.

When you voluntarily close your VG98 account, we will initiate a phased data deletion process. Data not subject to legal retention obligations — such as marketing data, communication preferences, and older gameplay session records — will be deleted within 30 days. However, financial transaction records must be retained for seven (7) years in accordance with Malaysia's anti-money laundering legislation, even after account closure. Basic identity information is also retained for a defined period for KYC compliance purposes. Once all mandatory retention periods have elapsed, all remaining data will be permanently deleted. You may request written confirmation of your data deletion once the process is complete.

Yes, absolutely. You can stop receiving marketing communications from VG98 at any time without having to close your account. There are several ways to do this: first, click the "Unsubscribe" link found at the bottom of any marketing email you receive from VG98. Second, log in to your VG98 account and go to your Notification or Communication settings to update your preferences. Third, contact the VG98 support team via live chat or email and request to be removed from the marketing list. Marketing consent withdrawal requests will be processed within 5 business days. Please note that you will still receive important account-related communications such as transaction confirmations and security notifications, as these are necessary service communications and not marketing.

VG98 maintains a comprehensive Data Breach Response Plan. In the event of a data security breach, we will take immediate action within 72 hours: isolating affected systems, conducting a digital forensic investigation to determine the scope and cause of the breach, notifying affected members via their registered email with specific details about the data potentially exposed and steps they should take to protect themselves, and reporting to the relevant authorities where required by law. We will also issue a public statement if the breach involves a significant number of members. The VG98 security team monitors systems 24/7 using advanced threat detection tools to enable the fastest possible detection and response to any security threat.
🔒 Your Data Is Safe with VG98

Play with Peace of Mind at VG98

Your privacy is protected. Your transactions are secure. Your games are fair. Register for free today and enjoy Malaysia's best online casino experience, backed by bank-grade data security.

256-bit SSL protected PDPA 2010 Compliant No data sales 24/7 Malay Support
Bahasa Melayu