Privacy Policy —
How vegas969 Protects Your Data

This Privacy Policy (hereinafter referred to as the "Policy") issued by vegas969 (hereinafter referred to as "vegas969", "we", "us", or "the Platform") and governs the collection, use, processing, storage, and disclosure of personal data relating to individuals (hereinafter "you", "the Player", or "the User") who access or use the services available at https://vegas969.cam.

vegas969 is committed to protecting the privacy and personal data of all players, in particular those accessing our services from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations across Malaysia. This Policy explains in clear terms what personal information we hold, how it is used, and how we keep it secure.

By registering an account on the Platform, accessing's services, or otherwise submitting personal information to us, you acknowledge that you have read, understood, and agreed to the practices described in this Policy. This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform generally.

For the purposes of this Policy, the following definitions apply:

vegas969 collects the following categories of personal data in the course of providing its services:

Personal data is collected through the following means:

• Direct submission: Information you provide when creating an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in promotions.
• Automated technical collection: IP addresses, device fingerprints, session data, and usage analytics collected automatically as you interact with the Platform via cookies and server-side logging systems.
• Third-party payment processors: Transaction confirmation data and account validation signals received from Malaysian payment providers including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and RHB when processing deposits or withdrawals.
• KYC and identity verification services: Results and match scores from third-party identity verification providers engaged to assist with document validation and age confirmation.
• Publicly available sources: In limited circumstances related to fraud prevention or AML checks, data from publicly available registries or databases may be cross-referenced against account information.

vegas969 processes personal data only where a lawful basis for doing so exists. The lawful bases we rely upon, and the corresponding purposes, are as follows:

• Performance of a contract: Processing necessary to open and manage your account, process transactions, verify your identity, and provide access to gaming and betting services as described in our Terms & Conditions.
• Legal obligation: Processing required to comply with KYC and AML regulations, respond to lawful requests from regulatory or law enforcement authorities, and maintain mandatory financial records.
• Legitimate interests: Processing carried out for fraud detection, platform security monitoring, responsible gambling pattern analysis, and internal service improvement — where such interests are balanced appropriately against your privacy rights.
• Consent: Where you have provided explicit consent for optional processing activities, including the receipt of promotional communications and the use of non-essential analytics cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

vegas969 does not sell, lease, or trade your personal data to third parties. Disclosure of personal data to third parties occurs only in the circumstances described below, and in each case only to the minimum extent necessary:

• Payment service providers: Financial data is shared with verified Malaysian payment processors (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and licensed banking partners) solely for the purpose of processing your deposits and withdrawals in MYR.
• Identity verification providers: KYC documentation and identity data are shared with contracted third-party verification services engaged to assist with document authentication and age confirmation.
• Technology and hosting providers: Platform infrastructure, data storage, and security service providers who process data on our behalf under strict contractual data processing agreements.
• Regulatory and law enforcement authorities: Personal data and transaction records may be disclosed to competent authorities where required by law, court order, or regulatory direction applicable to the Platform's licensing jurisdiction.
• Business succession: In the event of a merger, acquisition, or asset sale involving vegas969, personal data held at that time may be transferred to the relevant successor entity, subject to equivalent privacy protections.

All third-party Data Processors engaged by vegas969 are contractually required to implement appropriate technical and organisational security measures and to process personal data only in accordance with our documented instructions.

In the course of providing services to players across Malaysia and operating an internationally licensed platform, your personal data may be transferred to and processed in jurisdictions outside your country of residence. Such transfers occur only where adequate data protection safeguards are in place, including:

• Standard contractual clauses or equivalent data transfer mechanisms prescribed by applicable international data protection frameworks.
• Transfers to jurisdictions that maintain an adequate level of data protection as recognised by relevant international standards.
• Binding corporate rules or certification frameworks where applicable to the receiving entity.

By using the Platform, you acknowledge and consent to the transfer of your personal data to servers and processing facilities located outside Malaysia where operationally necessary, provided such transfers comply with the safeguards described above.

vegas969 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following retention principles:

• Active account data: Retained for the duration of your active account relationship with vegas969, and for a minimum period of five (5) years following account closure, in accordance with AML and financial record-keeping obligations.
• KYC and verification documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, as required under applicable licensing and AML regulations.
• Transaction records: Financial transaction records are retained for a minimum of five (5) years to satisfy regulatory and tax reporting obligations.
• Support and communication records: Customer support correspondence is retained for a period of three (3) years to facilitate dispute resolution and service quality monitoring.
• Technical and usage data: Anonymised or aggregated analytics data may be retained indefinitely for platform improvement purposes, provided it can no longer be linked to any identifiable individual.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

vegas969 uses cookies and similar tracking technologies to enable core Platform functionality, maintain session security, and optionally improve your experience. The following cookie categories are in use:

You can manage or disable non-essential cookies at any time through your browser's settings. Please note that disabling strictly necessary cookies may impair the functionality of your account and the security of your gaming sessions. vegas969 does not use cookies for third-party advertising or behavioural retargeting purposes.

vegas969 implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or disclosure. Our security measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and the Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Data-at-rest encryption: Sensitive data stored on our servers, including KYC documentation and financial information, is encrypted using strong cryptographic standards.
• Access controls: Strict role-based access controls ensure that personal data is accessible only to authorised personnel with a legitimate operational need.
• Security monitoring: Continuous server-side monitoring for unauthorised access attempts, anomalous login patterns, and potential data breaches.
• Staff training: All personnel with access to personal data receive regular data protection and security awareness training.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, vegas969 will notify you without undue delay through the contact details held on your account, and will take all reasonable remedial steps to mitigate the impact of the breach.

Subject to applicable law and any overiding legitimate interests or legal obligations, you have the following rights in respect of the personal data we hold about you:

To exercise any of the above rights, please contact our support team via the email address provided in Section 14 of this Policy. We will respond to all valid requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days and will notify you accordingly.

The services provided by vegas969 are strictly intended for adults aged21 and above. We do not knowingly collect, process, or store personal data relating to individuals under the age of 21.

During the account registration process, all users are required to confirm their age. Additionally, KYC verification — which includes submission of government-issued photo identification — is performed for all accounts prior to the processing of withdrawals. Any account found to be held by a person under the age of 21 will be immediately suspended, all associated data will be retained only as required by law, and any funds present in the account will be dealt with in accordance with our licensing obligations and applicable regulations.

If you have reason to believe that a minor has registered an account on vegas969, please contact our support team immediately via the contact details provided in Section 14 below.

vegas969 reserves the right to update or amend this Privacy Policy at any time. Where amendments are material — for example, changes that significantly affect how we use your personal data or alter your rights — we will provide advance notice via the email address registered to your account or through a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this Policy reflects the date of most recent revision. Your continued use of the Platform following the publication of an updated Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes, you should cease using the Platform and contact us to close your account.

We recommend that you review this Policy periodically to stay informed about how we protect your data. Archived versions of previous policies are available upon request by contacting our support team.

For any privacy-related enquiries, data subject access requests, or concerns regarding the way in which vegas969 handles your personal data, please contact our Data Protection team using the following details:

For questions relating to the broader terms governing your use of our platform, including account eligibility, betting rules, and bonus conditions, please refer to our Terms & Conditions. For responsible gambling tools and support, please visit our Responsible Gambling page.