Privacy Policy vworld — Personal Data Protection

Vworld (hereinafter referred to as "we", "the platform", or "vworld") operates as an online casino and sports betting platform based in Malaysia. We understand that member trust is our most valuable asset, and that trust begins with how we handle your personal data.

This Privacy Policy is drafted to ensure full compliance with Personal Data Protection Act 2010 (PDPA) Malaysia. It clearly explains the types of data we collect, why we need it, how it is used, and who can access it. We don't believe in lengthy, confusing terms — everything in this document is written in plain, easy-to-understand language.

This policy applies to all users accessing the vworld platform via the website vworld.pro or our official mobile app, regardless of the user's geographic location. By using our platform, you acknowledge that you have read and understood this Privacy Policy.

We only collect data that is genuinely necessary to operate the platform safely and efficiently. The following are the categories of data we collect:

Your personal data is collected through several transparent methods and with your knowledge:

• Account Registration — Information you provide directly during the registration process as a new vworld member.
• KYC Verification — Identity documents you upload for identity verification purposes, including copies of your national ID or passport.
• Financial Transactions — Data automatically generated each time you make a deposit, withdrawal, or any financial activity on the platform.
• Platform Usage — Technical information automatically collected via cookies, server logs, and tracking technologies as you browse and use the platform.
• Support Communications — Records of your conversations with our customer service team via live chat or email.
• Trusted Third Parties — Data we receive from identity verification providers, payment processors, or relevant authorities, within the limits permitted by law.

We do not collect data from public sources such as social media without your prior consent.

Your personal data is used solely for legitimate and necessary purposes in operating the vworld platform. The following are the primary purposes for which your data is used:

We will not use your data for purposes beyond those stated above without first obtaining your explicit consent.

Vworld does not sell or disclose members' personal data to third parties for commercial purposes. However, in the following limited situations, data sharing may be required:

• Technical Service Providers — Parties that provide technical infrastructure, server hosting, and cybersecurity services to vworld. They are bound by strict confidentiality agreements and may only access data required for their specific tasks.
• Payment Processors — Financial institutions and payment gateway providers that process your transactions. Sharing is limited strictly to data required to complete the transaction.
• Game Providers — Gaming software companies that operate games on the vworld platform may receive the minimum technical data required for game operation.
• Statutory Authorities — Government agencies, law enforcement bodies, or courts when we are required by Malaysian law to disclose information.
• Merger or Acquisition — Should vworld be involved in any corporate restructuring, user data may be transferred to the successor entity with appropriate notice given to members.

Protecting members' personal data is vworld's highest priority. We continuously invest in the latest security technologies and procedures to keep your data safe at all times:

• 256-bit SSL Encryption for all data transmitted between your device and our servers — the same standard used by leading banking institutions.
• Password storage using one-way hashing algorithms which ensures your password cannot be read even by our own staff.
• Two-Factor Authentication (2FA) available for all member accounts to add an extra layer of access protection.
• 24-hour security monitoring by our cybersecurity team, who detect any suspicious activity in real time.
• Data segregation — financial data is stored separately from gaming data and communications in a strictly controlled environment.
• Regular penetration testing by independent third parties to identify and patch any security vulnerabilities before they can be exploited.

While no system can guarantee 100% absolute security, we employ all reasonable measures available to protect your data from unauthorised access, disclosure, or destruction.

The vworld platform uses cookies and similar tracking technologies to ensure a smooth and secure user experience. The following are the types of cookies we use:

• Essential Cookies — Required for core platform functions such as login authentication and session management. These cookies cannot be disabled.
• Performance Cookies — Collects information on how you use the platform to help us improve speed and usability.
• Functional Cookies — Stores your preferences such as language, region, and display settings for a more personalised experience.
• Analytics Cookies — Helps us understand traffic patterns and platform usage on an aggregate basis without identifying individual users.

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by vworld:

Vworld retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by Malaysian law. The following are general retention period guidelines:

• Active Account Data — Retained for the duration your account is active, plus 5 years after account closure for legal compliance purposes.
• Financial Transaction Records — Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• Support Communication Logs — Retained for 2 years from the date of last communication for reference and service improvement.
• KYC Data — Retained for 5 years after account closure, or longer if required by the relevant authorities.
• Technical Data & Logs — Retained for 12 months for security and fraud detection purposes.

Once the retention period expires, your data will be securely deleted or anonymised using industry-standard procedures.

The vworld platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete the relevant data and close the associated account. Parents or guardians who believe their child may have registered on our platform are urged to contact our support team immediately.

Vworld reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the technologies we use. Any material amendments will be communicated to members via email or in-platform notification at least 14 days before the amendment takes effect.

The last updated date will always be displayed at the top of this document. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or wish to exercise any of your rights under this Privacy Policy, please contact our Data Protection Officer (DPO) through the following channels: