vf338 Privacy Policy

Introduction and Scope

vf338 operates an online gaming and sports betting platform that serves Malaysian players and users accessing the service from other locations. This Privacy Policy explains how vf338 collects, processes, stores, discloses, and retains personal data in connection with account registration, identity verification, payment processing, gaming activity, customer support, marketing communications, fraud prevention, responsible gambling, and regulatory compliance.

This policy applies to all personal data that vf338 processes as a data controller, including information provided directly during registration, data generated through platform use, and information obtained from third parties such as payment providers, identity verification services, and fraud-prevention agencies.

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, including name, identification number, contact details, financial data, device identifiers, and online behavioural data.
• "Processing" means any operation applied to personal data, including collection, storage, use, disclosure, transfer, erasure, and all intermediate steps.
• "Controller" means vf338, which determines the purposes and means of processing personal data collected through the platform.
• "Member" / "User" means any individual who registers for, accesses, or uses vf338 services in any capacity.
• "KYC" means Know Your Customer — the identity and document verification process required before withdrawals or account upgrades are processed.
• "Third-Party Processor" means a company or service engaged by vf338 to process data on vf338's behalf, under contractual confidentiality and security obligations.
• "Cookies" means small text files placed on a device to recognise returning visitors, maintain session state, and support analytics functions.

Personal Data We Collect

vf338 collects different categories of personal data depending on how you interact with the platform. These categories include:

3.1 Registration and Identity Data

Full legal name, date of birth, residential address, email address, mobile number, and a unique username selected during account creation. This information is required to open and maintain a vf338 account.

3.2 Identity Verification Documents

Where KYC is required, vf338 may collect a copy of a valid government-issued identification document such as a Malaysian MyKad, driving licence, or passport. A current proof of address such as a utility bill or bank statement and a selfie holding the identification document may also be requested.

3.3 Payment and Financial Data

Deposit and withdrawal records, the payment method used (for example, DuitNow QR, Touch 'n Go eWallet, Boost, GrabPay, FPX, Maybank, CIMB, Public Bank, or Hong Leong), transaction amounts in MYR, timestamps, and reference identifiers. Full payment credentials such as bank account or card numbers are generally handled directly by the relevant payment provider rather than stored by vf338.

3.4 Gaming and Betting Activity Data

Wager history, game sessions, bet slips, live table participation, tournament entries, cashback and rewards activity, session durations, and responsible gambling tool settings including deposit limits and self-exclusion status.

3.5 Technical and Device Data

IP address, browser type and version, operating system, device model, screen resolution, referring URL, session duration, pages visited, error logs, and geolocation data at a country or city level where lawfully obtained.

3.6 Communications Data

Records of live chat conversations, email correspondence with our support team, feedback submissions, and any other content you send to vf338.

Purposes and Legal Basis for Processing

vf338 processes personal data only where there is a lawful basis to do so. The applicable bases and associated purposes are described below.

• Contract Performance: Processing your registration data, payment details, game history, and support communications is necessary to provide the vf338 service you agreed to when opening an account.
• Legal Obligation: Identity verification, anti-money laundering checks, age verification (21+), fraud investigation, and records retention are required by applicable law, regulatory guidance, and responsible gambling standards.
• Legitimate Interests: Security monitoring, fraud prevention, network protection, platform improvement, and responsible gambling intervention are carried out where vf338's interests or the interests of other members are not overridden by member privacy rights.
• Consent: Where vf338 sends optional marketing communications by email, SMS, or push notification, consent is the processing basis. You may withdraw consent at any time by contacting support or adjusting communication preferences in your account settings.

Data Sharing and Third-Party Processors

vf338 does not sell or rent personal data to third parties for marketing purposes. Data may be shared only in the circumstances described below.

• Payment Processors: Transaction data is transmitted to Malaysian payment providers including DuitNow, FPX operators, Touch 'n Go eWallet, Boost, GrabPay, and banking partners such as Maybank, CIMB, Public Bank, and Hong Leong to facilitate deposits and withdrawals in MYR.
• Identity Verification Services: Name, identification document images, and related data may be passed to third-party KYC and anti-fraud platforms to fulfil verification obligations.
• Game and Technology Providers: Technical session data and bet records may be shared with game servers and studio platforms necessary to deliver and audit gaming results.
• Regulatory and Law Enforcement Authorities: vf338 may disclose personal data when required by a court order, legal process, regulatory investigation, or other lawful authority.
• Security and Fraud Prevention: Device and behavioural data may be shared with cyber-security partners and industry fraud-sharing networks to protect the platform and its members.

All third-party processors engaged by vf338 are required to maintain appropriate technical and organisational security measures and to process data only for the specific purpose authorised by vf338.

Cookies and Tracking Technologies

vf338 uses cookies, session tokens, local storage, and similar technologies to maintain login sessions, remember language and display preferences, detect suspicious access patterns, and compile anonymous analytics about platform usage.

Categories of Cookies Used

• Strictly Necessary: Session management, login authentication, and security tokens required for the platform to function. These cannot be disabled.
• Functional: Preferences such as display settings and communication preferences stored to improve your experience between visits.
• Analytics: Aggregated data about pages visited, time on site, and navigation paths used to improve platform design and performance. Where third-party analytics tools are used, data is anonymised before transmission.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the vf338 platform, including login persistence and session continuity.

Data Retention

vf338 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by law, regulation, ongoing investigation, or unresolved dispute.

• Active account data is retained for the duration of the account relationship.
• KYC and identity documents may be retained for a minimum of five years following account closure to satisfy anti-money laundering obligations.
• Transaction records are typically retained for seven years to support financial and tax compliance.
• Support communications are retained for up to three years for quality assurance and dispute resolution purposes.
• Marketing consent records are retained until consent is withdrawn plus a reasonable additional period to demonstrate compliance.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

User Rights

Subject to applicable law, members may exercise the following rights in relation to their personal data held by vf338:

Security Measures

vf338 implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Measures in place include:

• TLS/SSL encryption for all data in transit between member devices and vf338 servers.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Multi-factor authentication options for member accounts and internal administrative systems.
• Regular security assessments, penetration testing, and vulnerability management.
• Incident response procedures including breach notification protocols where required by law.

Members are encouraged to use a strong, unique password for their vf338 account, enable available two-factor authentication, and report any suspected unauthorised access to support immediately. Security is a shared responsibility between the platform and its members.

Responsible Gambling and Data

vf338 processes gaming activity data, account history, and responsible gambling tool settings to support player protection obligations. This includes identifying patterns that may indicate gambling harm, applying limit settings requested by members, honouring self-exclusion periods, and preventing new account registrations by self-excluded individuals through identity matching.

Data used for responsible gambling purposes is processed on the basis of legal obligation and legitimate interests in protecting member welfare. The vf338 platform is available only to players aged 21 and above. Age verification processing is integral to this obligation and cannot be opted out of as a condition of account access.

Children and Minors

vf338 does not knowingly collect or process personal data from individuals under the age of 21. The platform employs age verification during registration and KYC to enforce this restriction. If vf338 becomes aware that personal data has been collected from a person under 21 without proper verification, the relevant account will be suspended and the data will be deleted or retained only to the extent required by anti-fraud and legal obligations.

Parents or guardians who believe a minor has accessed vf338 should contact support immediately at [email protected] so that the account can be reviewed and appropriate action taken promptly.

International Data Transfers

vf338's primary operations are focused on the Malaysian market. Some data processing activities — for example, cloud infrastructure, game server hosting, or identity verification services — may involve data being processed in other countries. Where personal data is transferred outside Malaysia, vf338 applies appropriate contractual safeguards to ensure that the data receives a standard of protection consistent with this Privacy Policy.

By registering an account and using vf338 services, you acknowledge that your personal data may be transferred to and processed in locations outside Malaysia as described in this clause, subject to the safeguards described above.

Changes to This Privacy Policy

vf338 may update this Privacy Policy from time to time to reflect changes in the law, regulatory requirements, platform features, or internal data practices. The effective date at the top of this page will be updated when changes are published.

Material changes that significantly affect how personal data is processed may be communicated through a notice on the vf338 platform or to your registered email address. Continued use of vf338 after the effective date of an updated policy constitutes acceptance of the revised terms. Members who do not agree with a material change should contact support to discuss their options, including account closure.

Contact Us

For any questions about this Privacy Policy, to exercise a data right, to withdraw marketing consent, or to raise a privacy concern, please contact the vf338 Data Support Team using the details below. Communications should be sent from your registered email address and include your username to help us locate and verify your account.