Privacy Policy

vbet12 ("vbet12", "we", "us", "our") operates the online gaming and sports betting platform accessible at vbet12.cam ("Platform"). We understand that privacy is a fundamental concern for our players, and we take our obligations as a data controller seriously.

This Privacy Policy ("Policy") explains in transparent, plain-English terms how vbet12 collects, uses, stores, shares, and protects the personal data of individuals ("Players", "Users", "you") who access or use the Platform. It applies to all data processing activities conducted by vbet12 in connection with account registration, gameplay, financial transactions, customer support interactions, and marketing communications.

This Policy should be read in conjunction with our Terms & Conditions, which are incorporated herein by reference. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, address, email address, date of birth, financial account details, and device identifiers.
• "Data Controller" means vbet12, which determines the purposes and means by which personal data is processed.
• "Data Processor" means any third party that processes personal data on behalf of vbet12 in accordance with our written instructions.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, disclosure, or deletion.
• "KYC Data" means identity verification documents and information collected as part of our Know Your Customer compliance obligations.
• "Cookies" means small text files stored on your device by the Platform to facilitate functionality, analyse usage, and support personalisation.
• "Platform" means the website vbet12.cam, including all sub-pages, gaming interfaces, mobile-optimised views, and associated services.

vbet12 collects only the personal data that is necessary for the purposes described in this Policy. The categories of data we collect are set out in the table below:

vbet12 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide voluntarily during account registration, KYC verification, deposit or withdrawal requests, contact form submissions, or when corresponding with our support team.
• Automated technical collection: Data collected automatically when you access the Platform, including IP addresses, session data, device fingerprints, and browsing behaviour captured through cookies and server logs.
• Payment providers: Transactional confirmation data received from payment processors operating Malaysian payment methods, including FPX gateway responses, DuitNow confirmation data, and eWallet provider references for Touch 'n Go eWallet, Boost, and GrabPay.
• Identity verification partners: Where third-party KYC service providers assist in verifying the authenticity of identity documents, we may receive verification outcomes and risk scores from those providers.
• Publicly available sources: In limited circumstances related to AML compliance, we may cross-reference data against publicly available sanctions lists, politically exposed person (PEP) registers, or adverse media sources.

vbet12 processes your personal data for the following specific, legitimate purposes:

• Account management: Creating, maintaining, and administering your vbet12 account, including authentication, password resets, and account status updates.
• Identity and age verification: Complying with our obligation to verify that all players are aged 21 and above before permitting access to gambling services, in line with responsible gambling best practices.
• Payment processing: Facilitating deposits and withdrawals through Malaysian payment channels including Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency gateways (BTC, ETH, USDT).
• Anti-money laundering (AML) and fraud prevention: Monitoring transactions for suspicious activity, maintaining AML records as required by applicable compliance obligations, and investigating suspected fraud.
• Responsible gambling monitoring: Tracking gameplay patterns to identify potentially problematic gambling behaviour and delivering responsible gambling interventions, deposit limits, or self-exclusion where appropriate.
• Customer support: Responding to account queries, technical issues, payment disputes, and formal complaints in a timely and documented manner.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have provided consent to receive such communications.
• Platform improvement: Analysing aggregated usage data to improve user experience, game selection, payment flows, and platform performance.
• Legal and regulatory compliance: Maintaining records as required by applicable law, responding to lawful requests from competent authorities, and defending legal claims.

vbet12 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between vbet12 and the Player — including account operation, payment processing, and delivery of gaming services.
• Legal obligation: Processing necessary for compliance with applicable law, including KYC and AML obligations, age verification requirements, and responses to lawful regulatory requests.
• Legitimate interests: Processing carried out in furtherance of vbet12's legitimate business interests, including fraud prevention, platform security, and internal analytics — where such interests are not overridden by the Player's fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have provided explicit, freely given consent that can be withdrawn at any time.

vbet12 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Data is shared only in the following strictly defined circumstances:

• Payment processors and banking partners: Transaction data is shared with payment service providers — including FPX gateway operators, DuitNow settlement partners, eWallet providers, and cryptocurrency exchange services — to the minimum extent necessary to complete your requested transaction.
• KYC and identity verification providers: Identity documents and verification requests may be shared with licensed third-party KYC platforms operating under equivalent data protection obligations to our own.
• Game studio partners: Limited gameplay session data may be transmitted to our licensed game studio partners to facilitate game delivery and resolve technical disputes. No financial account data is shared with game studios.
• Regulatory and law enforcement authorities: vbet12 will disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or lawful request — including disclosures required under AML regulations.
• Professional advisors: Legal, audit, and compliance advisors engaged by vbet12 may access personal data on a need-to-know basis under binding confidentiality obligations.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of vbet12's assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

vbet12 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the active Account relationship and for a minimum of five (5) years following Account closure, in accordance with standard AML record-keeping requirements.
• Financial and transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with applicable financial record-keeping standards.
• KYC documents: Retained for the period of the Account relationship plus five (5) years post-closure. Original documents are securely destroyed once the retention period expires.
• Customer support communications: Retained for three (3) years from the date of the last interaction, to support dispute resolution and quality assurance.
• Marketing preference and consent records: Retained for the duration of the Account relationship plus two (2) years, to demonstrate compliance with consent obligations.
• Technical and server log data: Retained for a maximum of twelve (12) months from collection, unless required to be preserved for a specific security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders it non-recoverable and permanently de-identified.

vbet12 uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device when you visit the Platform. They serve several functions depending on their type:

• Strictly necessary cookies: Required for the Platform to function properly. These enable you to navigate pages, log in to your Account, maintain your session, and use core features. They cannot be disabled without materially impairing Platform functionality.
• Functional cookies: Store your preferences — such as your chosen language, preferred display settings, and notification preferences — so you do not need to reset them each time you visit.
• Analytical cookies: Collect aggregated, anonymised data about how players interact with the Platform — such as pages visited, time spent, and click patterns — to help us understand and improve user experience. No personally identifiable information is captured via analytical cookies.
• Marketing and retargeting cookies: Used to deliver relevant promotional content and measure campaign effectiveness. These cookies are only deployed with your prior consent and may be managed through your Account preferences.

You may manage, restrict, or delete cookies through your browser settings at any time. Please be aware that disabling certain cookies may affect Platform functionality. For marketing cookies, you may withdraw consent at any time through your Account settings.

vbet12 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following controls:

• Encryption in transit: All data transmitted between your device and the Platform is encrypted using Transport Layer Security (TLS) 1.2 or higher with 256-bit encryption, protecting data from interception.
• Encryption at rest: Sensitive personal data fields — including identity document data, financial account references, and authentication credentials — are stored with AES-256 encryption at the database layer.
• Access controls: Access to personal data within vbet12's systems is restricted on a strict need-to-know basis. Staff access is role-based, logged, and subject to periodic review. All staff with access to personal data undergo mandatory data privacy training.
• Intrusion detection and monitoring: The Platform operates continuous threat monitoring and intrusion detection systems. Anomalous access patterns trigger automated alerts and investigation protocols.
• Secure password storage: Player passwords are never stored in plain text. Passwords are hashed using industry-standard cryptographic algorithms with salting, ensuring that even if database data were compromised, raw passwords could not be recovered.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their Account for an additional layer of login security.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected individuals, vbet12 will notify affected Players without undue delay and take all reasonable steps to mitigate the impact of the breach.

As a data subject, you hold a number of rights in relation to your personal data held by vbet12. These rights are described below, along with how to exercise them:

• Right of Access: You may request a copy of all personal data vbet12 holds about you, along with information about how it is processed, where it is stored, and with whom it has been shared.
• Right to Rectification: If you believe any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Basic contact and profile data can often be updated directly through your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that vbet12 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent. Note that this right is subject to overriding obligations under applicable law, including data retention requirements under AML regulations.
• Right to Restriction of Processing: You may request that vbet12 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful but you prefer restriction to deletion.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of vbet12's legitimate interests. You also have an unconditional right to object to processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please submit a written request to our support team using the contact details in Section 15. We will acknowledge your request within 3 business days and aim to fulfil it within 30 days, or advise you of any extension in complex cases.

The Platform integrates with third-party services to deliver game content, process payments, and support operational functions. These third parties operate as data processors under binding data processing agreements with vbet12 and are contractually required to process personal data only in accordance with our documented instructions and applicable data protection standards.

Categories of third-party processors engaged by vbet12 include:

• Game content providers: Licensed international game studios that supply slot, live dealer, and sports betting products accessible through the Platform. These providers may receive session-level gameplay data for technical functionality but do not receive identity or financial account data.
• Payment service providers: Gateway operators facilitating FPX transactions, DuitNow transfers, eWallet payments via Touch 'n Go eWallet, Boost, and GrabPay, and cryptocurrency processing. Transaction confirmation data is exchanged for the purpose of payment settlement only.
• KYC and identity verification platforms: Licensed compliance technology providers that assist in verifying identity documents and screening players against AML databases. These providers operate under equivalent data protection obligations.
• Cloud infrastructure and hosting providers: Secure, certified cloud infrastructure providers that host Platform data. All hosting environments apply industry-standard physical and logical access controls.

vbet12 does not permit any third-party processor to use Player data for their own independent purposes beyond the specific scope agreed in each data processing agreement.

vbet12 strictly prohibits the use of the Platform by individuals under the age of 21. The Platform is intended exclusively for adult entertainment and gaming purposes. We do not knowingly collect or process personal data relating to individuals below this age threshold.

If vbet12 determines, through age verification or otherwise, that personal data has been collected from an individual who is under 21 years of age, the associated Account will be immediately suspended, all data pertaining to that individual will be securely deleted (except where retention is required for regulatory compliance purposes), and any funds deposited will be returned net of any bonuses claimed.

vbet12 reserves the right to update or amend this Privacy Policy at any time. Any material changes will be reflected by an updated "Last updated" date at the top of this page. Where changes are significant and materially affect your rights or how your data is processed, vbet12 will provide additional notification through in-Platform messaging or email to your registered address.

Your continued use of the Platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically to remain informed of how your personal data is being managed.

If you disagree with any material change to this Policy, you should cease using the Platform and contact our support team to close your Account.

For any questions, concerns, or formal data rights requests relating to this Privacy Policy, please contact the vbet12 Data Privacy team through the following channels:

• Live Chat: Available 24/7 through the Platform. Suitable for general privacy queries and account data questions. Average response time: under 2 minutes.
• Email: [email protected] — for formal data subject access requests, erasure requests, rectification requests, and written complaints. We aim to acknowledge all email queries within 24 hours and provide a substantive response within 30 days.

When submitting a data rights request, please include your registered email address and Account ID to help us locate your records and respond promptly. For identity verification purposes, we may ask you to confirm additional identifying information before fulfilling access or erasure requests.