vega77 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") applies to all personal data collected and processed by the operator of the vega77 platform ("vega77", "we", "us", "our") through the website vega77.asia and all associated services. It governs the relationship between vega77 and any individual ("Member", "you", "your") who accesses or registers an account on the Platform.

By registering a vega77 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy is incorporated by reference into the vega77 Terms & Conditions. In the event of conflict between this Policy and a specific data processing agreement, the specific agreement shall prevail.

vega77 takes the privacy of Malaysian members seriously. We are committed to compliance with applicable data protection laws and international best practices for the handling of personal information in the online gaming sector.

2. Data We Collect

2.1 Registration & Identity Data

When you create a vega77 account, we collect the following information:

• Full legal name (as it appears on your government-issued identification);
• Date of birth (to verify the 21+ age requirement);
• Email address and mobile telephone number;
• Residential address;
• Chosen username and encrypted password credential.

2.2 Identity Verification (KYC) Data

As part of mandatory Know Your Customer (KYC) verification, we collect copies of:

• Government-issued photo identification (MyKad, passport, or equivalent);
• Proof of residential address (utility bill, bank statement dated within three months);
• Where required under anti-money laundering (AML) obligations, documentation of the source of funds.

2.3 Financial & Transaction Data

We collect and retain records of all financial transactions processed through your vega77 account, including deposit amounts, withdrawal requests, payment method identifiers (masked account numbers, e-wallet identifiers), processing timestamps, and transaction reference numbers. We do not store full card numbers or complete bank account credentials on our servers.

2.4 Gaming Activity Data

All gaming activity is logged, including games played, bet amounts, outcomes, session durations, bonus activity, and responsible gaming tool interactions. This data is retained for regulatory compliance, dispute resolution, and anti-fraud monitoring purposes.

2.5 Technical & Usage Data

We automatically collect technical information when you access the Platform, including IP address, browser type and version, operating system, device identifiers, referring URL, pages visited, session duration, and clickstream data. This information is used for platform security, fraud detection, and performance optimisation.

2.6 Communications Data

Records of your communications with vega77 customer support — including live chat transcripts, email correspondence, and support ticket records — are retained for service quality assurance and dispute resolution purposes.

3. How We Use Your Data

Purpose	Data Used
Account creation and authentication	Registration data, device/session data
Age and identity verification (KYC)	Identity documents, registration data
Processing deposits and withdrawals	Financial data, identity data
Anti-money laundering (AML) monitoring	Transaction data, identity data, source of funds
Fraud detection and account security	Technical data, transaction data, gaming data
Customer support and dispute resolution	Communications data, gaming data, transaction data
Responsible gaming monitoring	Gaming activity data, account data
Personalisation and marketing (with consent)	Gaming preferences, usage data
Regulatory reporting obligations	Identity data, transaction data, gaming data
Platform performance and analytics	Technical data, usage data

4. Legal Basis for Processing

vega77 processes your personal data under the following legal bases:

• Contractual necessity — processing required to fulfil our obligations under the Member Account Agreement, including account management, payment processing, and game delivery;
• Legal obligation — processing required to comply with AML, KYC, and gaming regulatory requirements applicable to the vega77 platform;
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your data protection rights;
• Consent — processing for direct marketing communications and personalisation, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing & Disclosure

vega77 does not sell your personal data to any third party. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors and e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX network banks, and cryptocurrency processing partners) — for the purpose of processing deposits and withdrawals;
• Identity verification and KYC service providers — for the purpose of fulfilling age and identity verification obligations;
• Game content providers (licensed studios and aggregators supplying games to the vega77 lobby) — for the purpose of game delivery, fairness certification, and jackpot processing where applicable;
• Fraud detection and cyber-security service providers — for the purpose of protecting Member accounts and platform integrity;
• Gaming regulators and law enforcement — where vega77 is legally required to disclose information in response to a lawful request, court order, or regulatory demand;
• Professional advisers (lawyers, auditors, and compliance consultants) — under strict confidentiality obligations, for legal, financial, and compliance advice purposes.

All third-party data processors engaged by vega77 are bound by data processing agreements that restrict their use of Member data to the specified purpose and require implementation of appropriate technical and organisational security measures.

6. Cookies & Tracking Technologies

6.1 Types of Cookies Used

vega77 uses the following categories of cookies on the Platform:

• Strictly necessary cookies — required for core Platform functionality, including session authentication, load balancing, and security. These cannot be disabled without impairing Platform use;
• Performance and analytics cookies — used to measure Platform performance, page load times, and usage patterns to support technical improvements;
• Functional cookies — used to remember your preferences such as language settings, display preferences, and responsible gaming configuration;
• Marketing cookies — used to personalise content and, where consent has been given, to deliver relevant promotional communications. These are only activated with your explicit consent.

6.2 Managing Cookies

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use core Platform features including account login. Your marketing cookie consent preference can be updated through the Platform's cookie settings panel at any time.

7. Data Retention

vega77 retains personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulatory obligation. The following general retention periods apply:

• Account and identity data — retained for the duration of the account and for a minimum of 5 years following account closure, in accordance with AML record-keeping obligations;
• Transaction records — retained for a minimum of 5 years from the date of the transaction;
• KYC documentation — retained for a minimum of 5 years following the end of the customer relationship;
• Gaming activity logs — retained for a minimum of 3 years from the date of each session;
• Customer support records — retained for a minimum of 2 years from the date of the last interaction;
• Marketing preference records — retained until consent is withdrawn or for 2 years from last engagement, whichever is earlier.

Upon expiry of the applicable retention period, data is securely deleted or anonymised in accordance with vega77's data destruction procedures.

8. International Data Transfers

vega77 operates on server infrastructure and engages service providers located in multiple jurisdictions. Where your personal data is transferred outside of Malaysia, vega77 ensures that appropriate safeguards are in place, including contractual clauses that impose equivalent data protection standards to those applicable under Malaysian law. By using the Platform, you consent to such international transfers as described in this Policy.

9. Your Rights Over Your Personal Data

As a Member of vega77, you hold the following rights in relation to your personal data, subject to applicable legal limitations:

• Right of access — you may request a copy of the personal data vega77 holds about you;
• Right to rectification — you may request correction of inaccurate or incomplete personal data;
• Right to erasure — you may request deletion of your personal data where processing is no longer necessary and no legal obligation requires its retention;
• Right to restrict processing — you may request that vega77 limit the processing of your data in certain circumstances;
• Right to data portability — you may request a machine-readable copy of personal data you have provided to vega77;
• Right to withdraw consent — where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to object — you may object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes.

To exercise any of the above rights, contact vega77 via live chat or email at [email protected]. We will respond to all verifiable data rights requests within 30 days. Complex requests may require an additional 60-day extension, of which we will notify you in advance.

10. Children's Privacy

The vega77 Platform is strictly for individuals aged 21 and above. vega77 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will immediately suspend the associated account, delete the collected data, and forfeit any balances in accordance with our age verification policy. If you believe an underage individual has registered an account on our Platform, please contact us immediately at [email protected].

11. Security Measures

vega77 implements a layered set of technical and organisational security measures to protect Member personal data against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption on all data transmitted between Member devices and vega77 servers;
• Encrypted storage of passwords and sensitive account credentials — plain-text passwords are never stored;
• Two-factor authentication (2FA) available to all Members for account login protection;
• Automated fraud and anomaly detection monitoring for suspicious account activity, including unrecognised login locations and unusual transaction patterns;
• Role-based access controls restricting employee access to Member data on a strict need-to-know basis;
• Regular security assessments and penetration testing of the Platform infrastructure.

Despite these measures, no online platform can guarantee absolute security. Members are responsible for maintaining the confidentiality of their login credentials and should immediately notify vega77 of any suspected unauthorised access to their account.

12. Changes to This Privacy Policy

vega77 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to Members via email to their registered address and/or via a prominent notice on the Platform at least 14 days before the amended Policy takes effect. The "Last Updated" date at the top of this page will be revised with each update. Continued use of the Platform after the effective date of the updated Policy constitutes acceptance. Where the amendment involves a new processing purpose that requires consent, vega77 will seek your consent before commencing such processing.

13. Contact Us

For all data protection inquiries, rights requests, and privacy-related concerns, please contact the vega77 Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please use "Privacy Request – [Your Username]" for data rights matters
• Live Chat: Available 24/7 via the support widget on the vega77 Platform

vega77 aims to acknowledge all privacy correspondence within 2 business days. We are committed to resolving all data protection matters transparently and in good faith, in compliance with applicable data protection regulations.