Privacy Policy VA999 —
Player Personal Data Protection

VA999 takes your privacy seriously. This Privacy Policy explains how VA999 ("we", "our platform") collects, uses, discloses, and protects your personal information when you use our gaming platform at va999.pw or through the VA999 mobile app.

This document is drafted in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and complies with international data protection best practice standards. By using the VA999 platform, you agree to the collection and use of information as described in this Privacy Policy.

We may update this Privacy Policy from time to time. Any significant changes will be communicated to you via the platform or your registered email. The "Last Updated" date at the top of this document will always reflect the latest version in effect.

VA999 collects various categories of personal information to enable us to provide a safe, fair, and responsible service to every player. Below is a breakdown of the data we collect:

We only collect data that is strictly necessary to provide our services. This "data minimisation" principle ensures we do not collect excessive or irrelevant information beyond the operation of the VA999 platform.

VA999 uses your personal data for the following purposes, all of which are necessary for operating a safe and responsible platform:

• Account Management — Creates, verifies, and manages your player account, including secure login and two-factor authentication.
• Transaction Processing — Processes deposits and withdrawals quickly and accurately via your chosen payment method.
• Identity Verification (KYC) — Verifies your identity and age to comply with legal requirements and prevent identity fraud.
• Platform Security — Detects and prevents fraudulent activity, money laundering, multiple account ownership, and any suspicious behaviour.
• Customer Support — Provides technical support and addresses your enquiries effectively through our support channels.
• Regulatory Compliance — Fulfils the reporting and record-keeping obligations set by the relevant authorities.
• Responsible Gaming — Monitors gameplay patterns to identify players who may need responsible gaming support and assistance.
• Service Improvement — Analyses aggregated usage data (without identifying individuals) to improve the platform and player experience.

VA999 does not sell or trade your personal data. However, there are limited situations where we need to share your information with certain parties to keep the platform running properly:

• Payment Processors — Payment gateway providers and financial institutions that process your deposit and withdrawal transactions. They are bound by strict confidentiality agreements.
• KYC Service Providers — Third-party identity verification companies that help us securely and accurately verify players' identity and age.
• Technical Infrastructure Providers — Cloud computing and cybersecurity service providers that operate and protect the VA999 platform.
• Authorities — Law enforcement agencies or regulatory bodies when required by Malaysian law or a valid court order.

In the event of a merger, acquisition, or sale of VA999 assets, player data may be transferred to the successor entity, subject to player notification and the continuation of equivalent privacy protection.

We implement comprehensive layers of technical and organisational safeguards to ensure your personal data remains secure within VA999's systems:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and VA999's servers.
• Hashed password storage using the bcrypt algorithm — your original password is never stored in our system.
• Two-Factor Authentication (2FA) available and recommended for all player accounts as an added layer of security.
• Firewall and intrusion detection systems monitoring all inbound and outbound traffic in real time, around the clock.
• Regular security audits by qualified independent cybersecurity firms to identify and address vulnerabilities.
• Role-based access control ensuring internal staff can only access data required for their specific role.
• Regular data backups stored at protected locations to ensure service continuity.

While we take all reasonable steps to protect your data, no data transmission over the internet can be guaranteed 100% secure. You also play an important role in your account's security by keeping your password confidential and never sharing your login credentials with anyone.

VA999 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the categories of cookies we use:

• Essential Cookies — Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies — Saves your preferences such as language and display settings to deliver a more personalised experience.
• Analytics Cookies — Helps us understand how players use the VA999 platform so we can improve its design and content. This data is collected in aggregate and does not identify individuals.
• Security Cookies — Used to detect suspicious login activity and protect your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality of the VA999 platform. For more information on managing cookies, refer to your browser's help documentation.

Under Malaysia's PDPA and data protection best practices, you have the following rights regarding your personal data held by VA999:

VA999 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations. Our general data retention guidelines are as follows:

• Active account data — Retained for the duration of the active account and at least 5 years after account closure for regulatory compliance purposes.
• Financial transaction records — Retained for a minimum of 7 years in line with accounting and anti-money laundering legal requirements.
• Security logs — Retained for 12 months for security incident investigation and fraud prevention purposes.
• KYC Records — Retained for the lifetime of the account and 5 years after account closure in accordance with compliance requirements.
• Customer support data — Support conversations and tickets are retained for 3 years for reference and service improvement purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or permanently anonymised so that it can no longer be linked to your identity.

The va999 platform is strictly for individuals aged 18 and above. va999 does not knowingly collect or process personal data of children under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to:

• Close the account immediately.
• Delete all personal data associated with the account.
• Return any related funds in accordance with established procedures.

If you believe that someone under the age of 18 has registered on the VA999 platform, please contact us immediately at [email protected] so that we may take the appropriate action.

VA999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. The "Last Updated" date at the top of this document will be revised whenever an amendment is made.

For material amendments — changes that significantly affect how we collect or use your data — VA999 will provide notice via:

• In-platform or va999 mobile app notifications.
• Email to your registered address at least 14 days before the changes take effect.
• A prominent banner or notice on the VA999 website homepage.

Continued use of the va999 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding how va999 handles your personal data, we encourage you to contact us directly:

• Privacy Email: [email protected] (for specific enquiries related to privacy and data protection)
• General Support Email: [email protected]
• Live Chat: Available 24/7 on the VA999 platform for immediate assistance

We are committed to responding to all privacy-related enquiries within 5 business days. For formal data rights requests (access, rectification, erasure), we will provide a full response within 30 business days as required by the PDPA.