Privacy Policy vworld — Player Personal Data Protection

1. Introduction and Scope of This Policy

Vworld is committed to protecting the privacy and personal data security of every player using our platform at https://vworld.vin. This Privacy Policy is prepared to fulfil our obligations under applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA).

In this document, "personal data" refers to any information that can be used to identify you directly or indirectly — including your name, phone number, email address, bank account information, and platform usage data. "Processing" covers every action we take on your data, from collection through storage to deletion.

This policy applies to all individuals who register an account at vworld, visit our website without registering, or interact with our customer support channels. vworld acts as the data controller for the information you provide to us.

• This policy applies to all vworld services including our website, mobile app, and official communication channels.
• Any links to third-party sites from the vworld platform are subject to their respective privacy policies — vworld is not responsible for their privacy practices.
• We update this Privacy Policy from time to time. The latest version is always available on this page with a clearly stated update date.

2. Personal Data We Collect

Vworld only collects personal data that is strictly necessary to provide a safe, fair, and quality service. We do not collect excessive or irrelevant information beyond the scope of our service.

We may also collect data indirectly through trusted third-party sources such as licensed identity verification service providers and payment gateways, solely for verification and security purposes.

3. How vworld Uses Your Data

Every use of your personal data by vworld has a solid legal basis and a clear purpose. We will not use your data for any purpose unrelated to the provision of vworld's services.

• Account Management: Creating and maintaining your account, processing registration, verifying identity, and ensuring the security of your login.
• Transaction Processing: Securely processing deposits and withdrawals, detecting suspicious activity, and complying with anti-money laundering (AML) requirements.
• Service Delivery: Providing access to all games and features on the vworld platform, personalising your gaming experience based on your preferences.
• Communications: Sending important account-related notifications, security updates, relevant promotions, and customer support responses.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and ensure self-control tools are functioning effectively.
• Legal Compliance: Meeting reporting obligations to the relevant authorities, complying with court orders, and retaining transaction records as required by law.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the performance, security, and user experience of the vworld platform.

4. Information Sharing and Disclosure

Vworld does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, there are limited situations where we may need to share your information with certain parties:

• Trusted Service Providers: Companies that help us operate the platform — such as licensed payment gateway providers, identity verification service providers, and cloud infrastructure providers — are bound by strict confidentiality agreements.
• Legal Requirements: When required by Malaysian law or a valid order from a competent authority, including licensing authorities, financial crime prevention agencies, or courts.
• Security Protection: To prevent, detect, or investigate fraud, money laundering, or other illegal activities involving the vworld platform.
• Business Transfer: If vworld is involved in a merger, acquisition, or asset sale, your personal data may be transferred — you will be notified in advance and your rights will be upheld.

All third parties that receive your personal data from vworld are required to maintain data protection standards equal to or higher than those we practice.

5. Data Security Measures

The security of your personal data is a core technical and operational priority at vworld. We continuously invest in the latest security infrastructure to ensure your information is always protected to the highest standard.

• 256-bit SSL Encryption: All data transmitted between your device and vworld's servers is encrypted using TLS 1.3 protocol — the same standard used by Malaysia's leading banking institutions.
• Two-Factor Authentication (2FA): vworld supports two-factor authentication for account login, adding an extra layer of protection even if your password is compromised.
• Encryption of Stored Data: Sensitive data such as bank account information and identification numbers are stored in encrypted form within our secured database systems.
• 24/7 Monitoring: The vworld security team continuously monitors systems to detect any unauthorised access attempts, cyberattacks, or account activity anomalies.
• Internal Access Controls: Only vworld staff with a legitimate job requirement are permitted to access players' personal data, and all access is logged and audited.
• Regular Penetration Testing: vworld conducts regular security testing by independent security experts to identify and remediate any system vulnerabilities.

6. Cookies and Tracking Technologies

Vworld uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser when you visit our website.

• Essential Cookies: These cookies are required for the platform's core functions — such as maintaining your login session, securing transactions, and enabling key features to work. They cannot be disabled.
• Performance Cookies: Collecting information about how you use the vworld platform — pages visited, time spent, and errors encountered — to help us improve our services.
• Functional Cookies: Saving your preferences such as language, display settings, and game choices so you don't have to reconfigure them each time.
• Analytics Cookies: Helping us understand overall usage patterns to make data-driven decisions for the continuous improvement of the vworld platform.

You can manage or disable most cookie types through your web browser settings. However, disabling essential cookies may affect the functionality of the vworld platform. Continued use of the vworld platform is considered consent to the use of cookies as described here.

7. Your Rights Over Personal Data

As a data subject, you hold certain rights regarding the personal data we keep about you. vworld fully respects these rights and will process every request promptly and transparently.

To exercise any of the above rights, please contact the vworld support team via live chat or email at [email protected]. vworld will verify your identity before processing any request to protect your privacy.

8. Data Retention Period

Vworld retains your personal data for as long as necessary to fulfil the original purpose of collection, meet legal obligations, or resolve any potential disputes. Once data is no longer needed, we will securely delete or anonymise it.

• Active Account Data: Retained for the duration your account is active and for an additional 7 years after account closure, in accordance with Malaysian financial and tax legal requirements.
• Transaction Records: All deposit, withdrawal, and wagering records are retained for a minimum of 7 years after the transaction for audit, AML compliance, and dispute resolution purposes.
• Security Log Data: Access logs and security activity are retained for 2 years to support investigation of any security incidents that may arise.
• Communication Data: Customer support communication history is retained for 3 years for quality control and dispute reference purposes.
• Marketing Data: If you withdraw your marketing consent, we will delete your marketing data within 30 days, unless it is required for another legitimate purpose.

9. International Data Transfers

Vworld's technical infrastructure may involve storing or processing data outside Malaysia, particularly for cloud services and server infrastructure. In all such cases, vworld ensures equivalent protection is provided for your data.

• All international data transfers are protected by data transfer agreements that meet internationally recognised protection standards.
• The cloud service providers used by vworld hold internationally recognised security certifications such as ISO 27001 and SOC 2.
• vworld does not transfer data to countries without an adequate level of data protection without appropriate additional safeguards.

10. Minor Players

The vworld platform is strictly for individuals aged 18 and above. vworld does not intentionally collect or process personal data of individuals under the age of 18.

All account applicants are required to verify their age during the registration and identity verification (KYC) process. If vworld discovers that personal data of an individual under the age of 18 has been inadvertently collected, we will delete that data immediately and close the account in question.

11. Changes to This Privacy Policy

Vworld reserves the right to update this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or service improvements. Each new version will be published on this page with a clear effective date.

For significant and material changes — such as changes to how we use sensitive data or to your rights as a data subject — vworld will endeavour to notify you via in-platform notifications or email to the address registered with your account.

Continued use of the vworld platform after any changes to this Privacy Policy are published will be considered your acceptance of the updated version. If you disagree with the changes, please stop using the platform and contact us to close your account.

12. Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how vworld handles your personal data, our privacy team is ready to assist.

We are committed to responding to every privacy enquiry within 5 working days. For more complex complaints, we will provide regular updates until a resolution is reached. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Personal Data Protection Department.