vboss99 Privacy Policy

This Privacy Policy ("Policy") describes how vboss99 ("we", "us", "our", "the Company") collects, processes, stores, and protects the personal data of users ("you", "the User") who access or use the vboss99 online gaming platform at https://vboss99.cam (the "Platform"), including all associated services, features, and mobile interfaces.

vboss99 operates as an English-language online casino and sports betting platform serving the Malaysian market, including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. In doing so, we collect and process certain categories of personal data as described in this Policy. We are committed to handling that data responsibly, transparently, and in accordance with applicable data protection laws and regulations.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies, or could reasonably be used to identify, a living natural person, directly or indirectly. Examples include your name, email address, identification number, and device IP address.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — vboss99, which determines the purposes and means of processing your personal data.
• "Data Processor" — a third party that processes personal data on behalf of vboss99, under our instruction and subject to contractual data protection obligations.
• "KYC" — Know Your Customer, the mandatory identity verification process applied to all Platform users prior to full account activation and withdrawal processing.
• "Cookies" — small data files stored on your device by your browser that help us recognise returning users and analyse platform usage.
• "Account" — your registered user profile on the Platform, created upon completing the registration process.

vboss99 collects personal data in several categories, each serving a distinct operational or compliance purpose. The categories of personal data we process are set out below:

vboss99 collects personal data through the following channels and methods:

• Direct submission: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or submit feedback, you provide data to us directly;
• Automated technical collection: When you browse or use the Platform, our servers and analytics systems automatically record technical data such as IP address, browser fingerprint, session activity, and device information;
• Payment providers: When you transact via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or other supported Malaysian payment channels, our payment processing partners transmit relevant transaction confirmation data to us;
• Cookies and tracking technologies: We use cookies, web beacons, and similar technologies to collect usage data and recognise returning users (see Section 8);
• Third-party identity verification services: Our KYC and AML compliance providers may supply supplementary identity verification signals when processing your KYC submission.

vboss99 processes your personal data only where a valid legal basis exists. The applicable legal bases are:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the Terms and Conditions — including account creation, payment processing, and providing access to Platform Services;
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) mandates, and record-keeping obligations;
• Legitimate interests: Processing necessary for vboss99's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and business analytics — provided such interests are not overridden by your privacy rights;
• Consent: Where you have expressly consented to specific processing activities, such as receiving marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

The personal data collected is used for the following purposes, in accordance with the legal bases identified in Section 5:

• Creating, managing, and maintaining your Account on the Platform;
• Verifying your identity and age as required by our KYC process (minimum age: 21 years);
• Processing deposits and withdrawals via supported Malaysian payment methods including Touch 'n Go eWallet, DuitNow, FPX, and major local banks;
• Detecting, investigating, and preventing fraudulent activity, account abuse, and AML violations;
• Monitoring gameplay data to support our responsible gambling obligations, including identifying patterns indicative of problem gambling behaviour;
• Communicating with you regarding your Account, transactions, security alerts, and platform updates;
• Sending promotional and marketing communications where you have consented to receive them;
• Analysing Platform usage patterns to improve game selection, user experience, and operational performance;
• Complying with applicable legal, regulatory, and licensing obligations;
• Handling customer support requests, disputes, and formal complaints.

vboss99 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share personal data with the following categories of recipient in connection with the lawful purposes described in this Policy:

• Payment processors and financial service providers: To facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and other supported methods;
• KYC and identity verification providers: Third-party compliance service providers engaged to assist with identity, age, and document verification as part of our KYC and AML obligations;
• Technology and infrastructure providers: Cloud hosting, platform security, analytics, and software service providers who process data on our behalf under contractual data processing agreements;
• Game content providers: To the extent technically necessary, gameplay session data may be shared with our certified game content providers for the purpose of delivering and auditing game functionality;
• Regulatory and law enforcement authorities: Where required or permitted by applicable law, including anti-money laundering regulators, courts, or law enforcement agencies — disclosure in these circumstances is made only to the extent strictly required;
• Affiliated group entities: Where vboss99 operates as part of a wider corporate group, relevant data may be shared with group entities under appropriate data sharing agreements for operational and compliance purposes.

All third-party service providers that process personal data on our behalf are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than that specified in their engagement with vboss99.

The Platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain session state, and gather analytics data. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for Platform functionality, including session management, login state maintenance, and security. These cannot be disabled without affecting Platform usability;
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — including pages visited, session duration, and navigation paths — to help us improve the user experience;
• Functional Cookies: Store your Platform preferences, such as language settings and display options, so these do not need to be re-entered on each visit;
• Marketing Cookies: Where applicable and with your consent, used to track engagement with promotional content and tailor marketing communications to your activity profile.

You may control your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform, but may affect the availability of certain personalisation features. Please note that our Platform does not currently respond to "Do Not Track" browser signals.

vboss99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, as described in this Policy, or for as long as required by applicable legal, regulatory, or compliance obligations.

In practice, the following retention principles apply:

• Active Account data: Retained for the duration of your Account and for a minimum period thereafter as required by applicable AML, gaming, and financial record-keeping regulations;
• Transaction records: Financial and payment records are typically retained for a minimum of five (5) years from the date of the transaction, consistent with standard AML record-keeping requirements;
• KYC documentation: Identity and address verification documents are retained in accordance with applicable regulatory retention periods, typically five (5) years following Account closure;
• Support and communications records: Customer service correspondence and complaint records are retained for a reasonable period following resolution, typically three (3) years;
• Marketing consent records: Records of marketing opt-in and opt-out are retained indefinitely to evidence consent compliance, even if the Account itself is subsequently closed.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

vboss99 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the Platform;
• Encrypted storage of sensitive personal data, including KYC documents and financial records, on access-controlled infrastructure;
• Access controls limiting internal access to personal data to authorised personnel with a defined operational need;
• Regular security audits and penetration testing of Platform infrastructure;
• Two-factor authentication options for User Accounts to reduce the risk of unauthorised access;
• Data minimisation practices ensuring only data that is strictly necessary for each purpose is collected and retained.

As a user whose personal data is processed by vboss99, you hold the following rights with respect to your personal data. These rights are subject to applicable legal limitations and identity verification requirements before we can action a request:

To exercise any of the above rights, please contact us in writing at [email protected] with the subject line "Data Rights Request". We will respond to all verified requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it.

We may require you to verify your identity before processing a rights request to ensure the security of your personal data.

The Platform is strictly intended for persons aged 21 years or older. vboss99 does not knowingly collect, process, or retain personal data from individuals under the age of 21. We apply age verification as a mandatory step in the registration and KYC process to enforce this restriction.

If we become aware that personal data has been collected from a person under the minimum age of 21, we will take immediate steps to delete that data and close the associated Account without notice. Any funds held in such an Account will be handled in accordance with our Terms and applicable law.

If you believe a minor is using the Platform or that a minor's data has been submitted to us, please notify us immediately at [email protected].

The Platform may integrate with or reference third-party services, including payment processors, game providers, and analytics tools. vboss99 is not responsible for the privacy practices of third-party services. Where you interact with third-party systems — for example, when completing a payment via Touch 'n Go eWallet or Boost — you are subject to that third party's own privacy policy and terms of service in addition to this Policy.

We encourage you to review the privacy policies of any third-party services you use in connection with the Platform. vboss99 exercises reasonable due diligence in selecting third-party providers with appropriate data protection standards but cannot guarantee the practices of external parties beyond our contractual arrangements with them.

vboss99 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy will be communicated to registered users via email notification or a prominent notice within the Platform prior to the changes taking effect.

The most current version of this Policy will always be accessible at this URL with the effective date clearly indicated. Your continued use of the Platform following notification of updates constitutes acceptance of the revised Policy. If you do not accept the updated Policy, you may request Account closure by contacting our support team.

We recommend reviewing this page periodically to stay informed about how vboss99 protects your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by vboss99, please contact us through the following channels:

When contacting us regarding a data rights request, please use the subject line "Data Rights Request — [Your Username]" to ensure your enquiry reaches the correct team promptly. We may require identity verification before processing your request to protect the security of your personal data.

Our support team operates 24 hours a day, 7 days a week for general account and payment queries. Formal data protection requests are handled by our dedicated compliance team during standard business hours.