Vf3i Privacy Policy – Personal Data Protection for Malaysian Players

This Privacy Policy applies to all personal information collected, processed, and stored by vf3i through the vf3i.my platform, including all interactions via the website, customer service, and financial transactions related to your use of our platform.

By registering an account with vf3i, you agree to the collection and use of your personal information as described in this Privacy Policy. If you do not agree with any part of this policy, please do not register or continue using the platform vf3i.

vf3i acts as the data controller under Malaysia's Personal Data Protection Act 2010 (PDPA), meaning we are responsible for ensuring your personal data is handled in accordance with applicable law.

vf3i collects personal data from members through various methods, including during account registration, platform usage, and financial transactions. The following are the categories of data we collect:

Data you provide directly to vf3i:

• Full name as stated on your Malaysian identification card
• An active email address used for communications
• A registered Malaysian mobile phone number
• Date of birth for age verification (must be 21 years of age or older)
• Identification card number (MyKad) for the KYC (Know Your Customer) process where required
• Payment method details such as e-wallet account numbers or FPX information for processing deposits and withdrawals

Data collected automatically during your use of the vf3i platform:

• IP address and geolocation data for security and compliance purposes
• Web browser type, operating system, and device information
• Platform activity logs, including pages visited and visit timestamps
• Gaming history, bets placed, and game outcomes
• Complete deposit and withdrawal transaction history
• Cookie data and similar tracking technologies (subject to your consent)

vf3i uses collected personal data solely for the following purposes, and for no other purpose without your consent:

• Account management: To create, verify, and manage your member account on vf3i, including identity and age verification processes
• Service provision: Allows you to access and enjoy all games and features available on the vf3i platform
• Payment processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, and CIMB Clicks, as well as managing your withdrawal requests
• Customer support: Responding to enquiries, resolving complaints, and providing technical support to vf3i members
• Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, and unauthorised account access
• Legal compliance: Fulfilling legal and regulatory obligations under applicable Malaysian legislation
• Platform improvements: Analysing usage patterns to improve the user experience on vf3i (in aggregated and anonymised form)
• Service communications: Sending important notifications about your account, transactions, and vf3i policy updates

vf3i will not use your personal data for third-party marketing, will not sell it to other companies, and will not use it for advertising profiling without your explicit consent. This is our promise.

vf3i does not share members' personal data with third parties except in the following limited and necessary circumstances:

Contracted service providers: vf3i may share personal data with third-party service providers that assist us in operating the platform, including payment service providers (Touch 'n Go, GrabPay, FPX), licensed game providers, and cloud technology infrastructure providers. All such providers are bound by strict confidentiality agreements and are permitted to use your data solely for the purposes we specify.

Legal and regulatory requirements: vf3i may be required to disclose members' personal data to Malaysian authorities such as Bank Negara Malaysia, the Royal Malaysia Police, or the courts when mandated by law, court order, or official investigation. In such cases, vf3i will disclose only the minimum information necessary and will notify the affected member unless prohibited from doing so by law.

Business restructuring: In the event of an acquisition, merger, or sale of vf3i's business, member data may be transferred to the new entity, provided that entity adheres to the same or stricter Privacy Policy standards.

vf3i implements multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or improper disclosure:

• 128-bit SSL Encryption: All data transmitted between your browser and vf3i's servers is protected with industry-standard TLS/SSL encryption
• Secure password storage: Member passwords are never stored in plain text — they are secured using cryptographic hashing
• Internal access controls: Only vf3i staff who require access to specific data to carry out their assigned duties are granted permission, based on the principle of least privilege
• 24/7 security monitoring: vf3i's systems are continuously monitored to detect any suspicious activity or unauthorised access attempts
• Regular security audits: vf3i conducts regular internal and external security assessments to identify and address system vulnerabilities
• Database protection: Member data is stored on servers protected by firewalls, multi-layered access controls, and secure backup systems

Although vf3i takes all reasonable steps to protect your data, no security system can be guaranteed to be 100% secure. In the event of a data breach that affects your rights, vf3i is committed to notifying you within a reasonable timeframe in accordance with Malaysia's PDPA requirements.

vf3i only retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by Malaysian law:

• Active account data: Retained for the duration your account remains active on vf3i and for a reasonable period following account closure
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements
• Platform activity logs: Retained for 12 months for security and dispute resolution purposes
• Customer support communication records: Retained for 3 years for reference and service improvement purposes
• KYC verification data: Retained for the period required under Malaysia's anti-money laundering (AML) requirements

Once the retention period has elapsed, vf3i will securely delete or anonymise your personal data in a manner that ensures it cannot be recovered or re-identified.

Under Malaysia's PDPA and our core privacy principles, every member vf3i have the following rights regarding their personal data:

To exercise any of the rights above, please contact the privacy team vf3i via email at [email protected], clearly stating the right you wish to exercise and any relevant information. vf3i will provide a response within 21 working days from the date the request is received.

vf3i will not discriminate against or impose any penalty on members who exercise their legitimate privacy rights. Exercising your rights is entirely reasonable, and we always respect that.

vf3i uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored in your browser when you visit a website.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the platform vf3i and your gaming experience. Session and security cookies are essential for the platform to function properly and cannot be disabled.

Member personal data vf3i is stored and processed primarily on servers located in Malaysia or within the Asian region that meet equivalent data protection standards. In certain circumstances, data may need to be transferred to other locations for technical processing purposes, such as the use of cloud services or game provider infrastructure.

When data transfers occur outside of Malaysia, vf3i ensures that:

• The recipient country provides an adequate level of data protection, or
• Appropriate contractual agreements have been put in place to ensure equivalent data protection standards are upheld
• Transfers are made only to parties that require the data for the stated purpose

vf3i does not transfer Malaysian members' personal data to parties in countries that do not provide adequate data protection without appropriate additional safeguards in place.

vf3i is a platform intended exclusively for adults aged 21 and above. We do not knowingly collect or process personal data of individuals under the age of 21.

If vf3i discovers that personal data belonging to an individual under the age of 21 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Parents or guardians who discover that their child has registered an account with vf3i are required to notify us immediately at [email protected] so that appropriate action can be taken without delay.

vf3i reserves the right to amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or improvements in how we protect your information. All amendments will be published on this page with a clear update date.

For amendments that involve material changes to how we use your personal data, vf3i will notify you via your registered email or in-platform notification at least 14 days before the changes take effect. Continued use of the platform vf3i after the amendment's effective date will be considered your acceptance of the revised policy.

We encourage you to review this Privacy Policy page periodically so you remain informed about how vf3i protecting your information.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way vf3i handles your personal data, do not hesitate to get in touch. We take every privacy enquiry seriously and will provide a clear and timely response:

• Email: [email protected] — for privacy enquiries that require a written response
• Live Chat: Available 24/7 on the vf3i.my platform — for urgent enquiries
• Email response time: Within 24 working hours for general enquiries; 21 working days for formal data rights requests

If you are not satisfied with how vf3i handles your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant authority under the PDPA 2010.