Privacy Policy

VegasBet ("we", "us", "our", "the Company") operates the online gaming and sports betting platform accessible at vegasbet.lat (the "Platform"). We take the privacy and security of your personal data seriously, and this Privacy Policy has been prepared to help you understand exactly how your information is handled when you interact with our Platform.

This Privacy Policy applies to all individuals who visit, register on, or otherwise use the VegasBet Platform — including players based across Malaysia in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations. By using the Platform, you acknowledge that you have read, understood, and accepted the data practices described in this document.

This Privacy Policy should be read together with our Terms & Conditions, which govern your overall use of the Platform. In the event of any inconsistency between documents, this Privacy Policy shall govern matters relating to personal data.

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and online identifiers.
• "Data Subject" means the individual to whom the Personal Data relates — in this context, you as a registered Player or visitor of the Platform.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, VegasBet.
• "Third Party" means any natural or legal person other than the Data Subject, VegasBet, and persons authorised by VegasBet to process Personal Data.
• "KYC" means Know Your Customer — the identity and document verification process required under applicable anti-money laundering and responsible gambling obligations.
• "Cookies" means small text files placed on your device by the Platform to enable certain functionality and collect usage data.

VegasBet collects the following categories of personal data in the course of operating the Platform:

VegasBet collects personal data through the following channels:

• Direct Interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to promotions.
• Automated Technologies: Technical and usage data collected automatically as you navigate the Platform, via cookies, server logs, and similar tracking technologies.
• Third-Party Sources: Identity verification data from KYC service providers; fraud screening data from risk management partners; payment confirmation data from processors such as Maybank, CIMB, Public Bank, Hong Leong Bank, and e-wallet operators.
• Publicly Available Sources: In limited circumstances, publicly available information may be used to verify identity or assess risk, consistent with applicable data protection law.

VegasBet processes your personal data for the following purposes:

• Account Management: Creating, maintaining, verifying, and administering your Player account on the Platform.
• Service Delivery: Processing bets and casino wagers, administering bonuses and promotions, and providing all features of the Platform including live casino, sports betting, and Mix Parlay markets.
• Payment Processing: Facilitating deposits and withdrawals via your chosen payment method, verifying payment ownership, and processing refunds where applicable.
• KYC and Compliance: Verifying your identity and age (21+ requirement), complying with anti-money laundering obligations, and meeting any other applicable regulatory requirements.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorised access, and other security threats to the Platform and its players.
• Responsible Gambling: Monitoring gaming patterns for indicators of problem gambling, administering self-exclusion requests, deposit limits, and cool-off periods at your request.
• Customer Support: Responding to your enquiries, resolving complaints, and maintaining records of support interactions.
• Platform Improvement: Analysing usage patterns to improve Platform features, usability, and performance.
• Legal Obligations: Retaining records as required by applicable law and responding to lawful requests from regulatory or law enforcement authorities.

VegasBet processes your personal data on the following legal bases under applicable data protection law:

• Contractual Necessity: Processing necessary to perform the contract between you and VegasBet — including account operation, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering legislation, age verification requirements, and data retention mandates.
• Legitimate Interests: Processing necessary for our legitimate business interests — including fraud prevention, Platform security, and service improvement — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we process data for purposes not covered above (such as certain marketing communications), we will seek your explicit consent and provide a straightforward mechanism to withdraw it at any time.

VegasBet does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We may share your data in the following circumstances only:

• Service Providers: Trusted third-party vendors who process data on our behalf — including KYC verification providers, payment processors (such as Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX operators), fraud detection services, cloud hosting providers, and customer support platforms. All such providers are bound by contractual data processing agreements that restrict their use of your data.
• Group Companies: Members of the VegasBet corporate group where necessary for internal administrative, operational, or compliance purposes.
• Regulatory and Law Enforcement Authorities: Where we are required by law, court order, or regulatory direction to disclose personal data. We will notify you of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, personal data held by VegasBet may be transferred as part of that transaction, subject to equivalent privacy protections.

VegasBet retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or reporting requirements.

As a general guide, account and transaction records are retained for a minimum of five (5) years following account closure, in compliance with applicable anti-money laundering and financial record-keeping obligations. KYC documentation is retained for the same period.

Technical and usage data collected via cookies and server logs is typically retained for shorter periods — usually no more than 12 months — unless a longer period is required for security investigation or legal proceedings.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures.

VegasBet implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data fields (including financial information) at rest in our databases;
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented business need;
• Two-factor authentication options for Player accounts;
• Regular penetration testing and vulnerability assessments of Platform infrastructure;
• Documented incident response procedures for handling suspected data breaches.

VegasBet uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly Necessary Cookies: Essential for the Platform to function — including maintaining your session, remembering your login state, and enabling core betting and gaming features. These cannot be disabled.
• Functional Cookies: Enable enhanced features such as language preferences, display settings, and personalised Platform experiences.
• Analytics Cookies: Help us understand how players use the Platform, which pages are visited most frequently, and where improvements can be made. Data collected is aggregated and does not identify individuals directly.
• Security Cookies: Used to detect and prevent fraud, bot activity, and other security threats.

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect Platform functionality. A detailed cookie policy is available in the Platform's cookie settings panel.

Subject to applicable data protection law and any overriding legal obligations, you hold the following rights in relation to your personal data held by VegasBet. To exercise any of these rights, please contact us at [email protected]. We will respond to verified requests within 30 days.

The VegasBet Platform is strictly intended for use by individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21.

As part of our age verification and KYC process, VegasBet requires all Players to confirm their date of birth and may request supporting documentation (such as a MyKad or passport) to verify this information. Where we discover or have reasonable cause to believe that an individual under the age of 21 has registered an account, we will immediately suspend that account, delete any associated personal data collected, and void any transactions or winnings.

If you are a parent or guardian and believe that a minor in your care has registered on VegasBet, please contact us immediately at [email protected].

In the course of providing our services, your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, VegasBet ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection law.

Safeguards may include — but are not limited to — contractual data processing agreements with receiving entities that impose binding data protection obligations, and transfers only to jurisdictions deemed to provide an adequate level of data protection.

VegasBet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform operations. The date of the most recent revision is displayed prominently at the top of this page.

Where a material change is made to this Privacy Policy, we will notify registered Players via email or a prominent notice on the Platform prior to the change taking effect. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your data.

Your continued use of the Platform following the effective date of any revision constitutes your acknowledgement of the updated Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the VegasBet Data Protection team using the details below:

• Support Email: [email protected]
• Live Chat: Available 24/7 via the VegasBet Platform — average response time under 5 minutes
• Supported Languages: English, Bahasa Melayu, Chinese

We aim to acknowledge all data-related requests within 5 business days and to fully respond within 30 calendar days. For complex requests, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.