Rujukan Laman

Privacy Policy – How We Handle Your Information

We collect minimal personal data to verify your account, process deposits through Touch 'n Go, GrabPay, Boost dan FPX, and keep your wallet secure.

Account verification onlyPayment data encryptedCookie consent controlsRetention limits appliedRequest access or deletion
Explore Lobby Read FAQ
vtbet88 Privacy Policy – How We Handle Your Information
PRIVACY CONTACT

Reach Our Data Protection Team

If you want to request a copy of the personal data we hold, ask us to correct an error, or delete your account and all associated records, contact our data protection officer…

Email privacy team Send your request to [email protected] with your registered email address and account display name. Include the specific action you want—access, correction, or deletion—and attach a photo ID if you're asking for full account closure so we can verify ownership before we erase records.
Live chat data request Open the chat widget in the lobby footer and tell the agent you need data protection assistance. The agent will escalate your request to the privacy team and give you a ticket reference. You'll receive an email update within two business days confirming next steps and any documents we need.
Postal data request Write to our registered office including your full name, account email, and a signed statement of the action you want. Processing postal requests takes up to twenty-one days from the date we receive your letter because we verify signatures offline before actioning erasure or access requests.
DATA HANDLING

How We Protect and Manage Your Information

We encrypt personal data in transit with TLS certificates and at rest with AES keys stored in a separate vault. Session tokens expire after thirty minutes of inactivity.

Encryption and secure storage

All personal data—email addresses, contact details, IP logs—sits in an encrypted database. Transport encryption uses TLS during sign-in and deposit flows. We rotate encryption keys every quarter and limit database access to two senior engineers who pass annual security audits, so your data stays protected even if a laptop is lost.

Cookie types and opt-out

Essential cookies keep you signed in and remember your language choice; you can't disable those without losing session state. Analytics cookies track page load speed and lobby navigation paths—these are opt-in and you can withdraw consent anytime in account settings. We don't use advertising or tracking cookies from third-party networks.

Account security practices

Your password is hashed with bcrypt and never stored in plain text. If you enable two-factor authentication we store your TOTP secret encrypted under your account key. We detect concurrent sign-ins from different countries and prompt a password reset if the pattern looks suspicious, so stolen credentials can't drain your wallet unnoticed.

Retention timelines

Gameplay records—spin outcomes, bet timestamps, win amounts—are kept for twelve months then rolled into anonymised aggregate stats. Payment transaction logs stay for seven years to meet audit and dispute requirements. If you close your account we delete personal identifiers immediately but keep a hashed email in the anti-fraud list to block repeat abuse.

Who can access your data

Support agents see your email and transaction history when you open a ticket. Payment processors receive a transaction ID and amount but never see your password or gameplay logs. We never share personal data with game studios or analytics vendors—they only receive anonymised aggregates like total spins per region or average session length.

Request changes or deletion

Email [email protected] to request a copy of every record we hold, correct a misspelled name, or delete your account entirely. We confirm your identity with the registered email and a security question, process the request within fourteen days, and send a final confirmation once complete. Deletion is permanent and can't be undone.

Common Questions About Data Protection

Players in Melaka and across Malaysia ask how we handle deposits, where data is stored, and what rights they have under local privacy frameworks. These answers cover the requests we see most often—if your question isn't here, contact our privacy team and we'll respond within two business days.

We ask for an email address, a display name for your account, and a password. During your first deposit via Touch 'n Go, GrabPay, Boost or FPX the payment gateway passes us a transaction reference but not your full bank details. We also log IP addresses and device fingerprints each time you sign in to detect suspicious login patterns.

We never sell personal data. Payment processors see transaction amounts and references but not gameplay history. Game studios receive anonymised aggregate statistics like total spins per region. Support ticket platforms store your email and message history so agents can track your requests, but we don't share your data with advertising or social networks.

Gameplay logs—spin outcomes, bet timestamps—are kept for twelve months then aggregated and anonymised. Payment transaction records stay for seven years to meet financial audit requirements. If you close your account we delete personal identifiers immediately but keep a hashed email in the anti-fraud list to prevent repeat misuse.

Yes. Email [email protected] with your registered email and account name. We'll send a JSON export within fourteen days containing account details, deposit history, gameplay logs, and IP logs. The export is encrypted and sent to your registered email so only you can open it.

Email [email protected] and include your registered email, account display name, and a photo ID so we can verify ownership. We process deletion requests within fourteen days, erase all personal identifiers, and send final confirmation. A hashed email stays in the anti-fraud list to block repeat abuse but contains no personally identifiable information.

Essential cookies keep you signed in and remember your language choice—you can't disable those without breaking the session. Analytics cookies track page load speed and lobby navigation so we can optimise performance; these are opt-in and you can withdraw consent in account settings. We don't use third-party advertising or tracking cookies.

Personal data sits in an encrypted database hosted in a secure data centre. Transport encryption uses TLS during sign-in and deposit flows. Database access is limited to two senior engineers who pass annual security audits. Support agents see email and transaction history when you open a ticket but cannot access your password or payment methods.

Related Pages

vtbet88 Malaysia vtbet88 Login vtbet88 Casino Football Studio Valley of Gods