Updated: January 2026

Vip2 Privacy Policy – Our Commitment to Protecting Malaysian Users' Data

Vip2 takes every user's privacy seriously. This document clearly explains what data we collect, how we use it, who can access it, and your rights as a vip2 platform user in Malaysia.

256-bit SSL Bahasa Malaysia Data Not Sold Version 2026
🔒
Your Privacy, Our Priority

12 sections covering data collection, usage, sharing, user rights, cookies, security, and how to contact us.

1Introduction & Scope of the vip2 Privacy Policy

This Privacy Policy explains how vip2 ("Platform", "we") collects, uses, stores, and protects the personal information you provide or that we collect automatically when you use the vip2.express platform.

This policy applies to all users of the vip2 platform in Malaysia – including registered players, website visitors, and anyone who interacts with our services through any channel. It covers all activities you carry out on vip2: account registration, deposits via Touch 'n Go, GrabPay, DuitNow or FPX, Sports Betting, Live Casino games, e-sports, lottery, and any communication with our support team.

Core commitments of vip2: Your personal data is never sold to third parties for marketing purposes. We use your data solely to provide and improve vip2 services, process financial transactions, and fulfil applicable legal obligations.

By registering an account or continuing to use the vip2 platform, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please stop using the platform. For further enquiries, contact us at support@vip2.express.

2Types of Personal Data We Collect

Vip2 collects personal data through two main methods: data you provide directly, and data collected automatically through your use of the platform.

Data you provide directly:

  • Identity information: Full name, Malaysian phone number, date of birth, and national ID number (required for identity verification during your first withdrawal).
  • Account information: Username, password (stored in encrypted form – we never have access to your actual password), and security questions if set.
  • Financial information: Bank account number, bank name, or e-wallet number (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) for deposit and withdrawal processing purposes only.
  • Communications: Any messages, complaints, or feedback you send to the vip2 support team via live chat, email, or other channels.

Automatically collected data:

  • Usage data: Pages visited, games played, bets placed, session duration, and in-platform actions.
  • Technical data: IP address, browser type, device operating system, screen resolution, and technical diagnostic data.
  • Location data: General location based on IP address to ensure compliance with regional restrictions and account security. vip2 does not access your device's GPS or precise location.
  • Cookie data: Information stored via cookies to maintain login sessions, preference settings, and usage analytics. See Section 8 for further details on cookies.
3How vip2 Uses Your Personal Data

Every piece of data vip2 collects has a specific and legitimate purpose. Below is a full list of how vip2 uses your data:

  • Account management: Creating and maintaining your vip2 account, verifying your identity, processing logins, and managing your account settings.
  • Transaction processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX online banking, and managing winnings withdrawals to your Malaysian bank account or e-wallet.
  • Gaming services provision: Running all games and betting on the platform — Live Casino, Sports Betting for the Malaysia Super League and EPL, MPL e-sports, lottery, and slots.
  • Fraud prevention: Identifying and preventing fraudulent activity, use of the platform by underage individuals, multiple account creation, and money laundering.
  • Legal compliance: Fulfilling reporting obligations to the relevant authorities in accordance with applicable Malaysian law.
  • Customer support: Processing and resolving enquiries, complaints, and requests submitted to the vip2 support team.
  • Service communications: Used to send important account notifications – including transaction confirmations, security alerts, and updates to our terms of service.
  • Platform improvements: Analyzing platform usage patterns on an aggregated basis (not at an individual level) to improve the user experience, fix technical bugs, and develop new features relevant to Malaysian users.
  • Marketing communications: Sending you information about promotions, bonuses, and new offers — but only if you have consented to receive marketing communications. You may withdraw this consent at any time.

Vip2 does not use your data to make automated decisions that materially affect you without human involvement. Any decision affecting your account — such as a suspension for investigation — involves review by our human team.

4Legal Basis for Data Processing

Vip2 processes your personal data on valid legal bases in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognized data protection principles:

  • Contract performance: The majority of data processing is necessary to fulfil the agreement between you and vip2 – including account management, payment processing, and the provision of gaming services you have subscribed to.
  • Consent: For marketing communications and non-essential cookie usage, vip2 requires your explicit consent. This consent may be withdrawn at any time without affecting your access to the platform's core services.
  • Legitimate interests: vip2 processes certain data based on legitimate business interests that do not override your privacy rights – including fraud prevention, platform security, and aggregated usage analytics.
  • Legal obligations: Certain data processing is required under applicable Malaysian law, including Anti-Money Laundering (AMLA) compliance obligations and financial reporting requirements.

If you would like to know the specific legal basis for any data processing activity carried out by vip2, you may contact us at support@vip2.express and we will provide a detailed explanation within 14 business days.

5Data Sharing & Disclosure to Third Parties

Vip2 does not sell or rent your personal data to any third party. However, there are limited situations where vip2 may need to share data with certain parties:

  • Payment service providers: Transaction information that must be shared with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and FPX banks (Maybank, CIMB, Public Bank, Hong Leong, RHB) solely for the purpose of processing your financial transactions.
  • Technical service providers: Companies that provide technical infrastructure, cloud computing, and cybersecurity services to vip2. All such providers are bound by strict confidentiality agreements and may only use data for specified purposes.
  • Regulatory authorities: vip2 complies with all legal reporting requirements under Malaysian law. Data may be shared with the relevant authorities when required by law, court order, or a valid official investigation.
  • Game service providers: Live casino game and e-sports platform providers we work with to operate games on vip2. Only the minimum data necessary for game operations is shared.

vip2 data sharing guarantees: All third parties that receive vip2 user data are contractually bound to protect that data to a security standard equivalent to or higher than that of vip2. They are prohibited from using the data for any purpose other than those specified, and may not share it with any other party without written consent from vip2.

6Data Security Measures at vip2

Vip2 continuously invests in security infrastructure to ensure your personal data is protected against unauthorized access, data breaches, and misuse. Key security measures we have in place:

  • 256-bit SSL encryption: All communications between your browser or app and vip2's servers are encrypted using industry-standard TLS/SSL protocols – the same standard used by major Malaysian banks such as Maybank and CIMB.
  • Data encryption at rest: Sensitive data including passwords, financial information, and identification numbers are encrypted at rest in our database. Your password is never stored in a readable format.
  • Two-factor authentication (2FA): vip2 offers 2FA via SMS OTP as an added layer of security. We encourage all users to enable this feature through their account settings.
  • 24/7 security monitoring: The vip2 security team monitors the platform around the clock to identify and respond to any security threats, intrusion attempts, or suspicious activity.
  • Internal access controls: Only vip2 staff with a legitimate business need may access user data, and only to the extent required for their role. All access is logged and regularly audited.
  • Regular penetration testing: vip2 conducts regular security tests carried out by independent third-party experts to identify and address any security vulnerabilities before they can be exploited.

While vip2 takes all reasonable steps to protect your data, no system is completely foolproof. If you suspect your account has been compromised, contact us immediately at support@vip2.express or via live chat. We will respond within 30 minutes for emergency security cases.

7Data Retention Period

Vip2 does not retain personal data longer than necessary for the purposes stated in this policy or as required by applicable Malaysian law:

  • Active account data: While your account remains active, your personal data is retained so you can make full use of the vip2 platform.
  • Financial transaction records: Retained for a minimum of 7 years from the transaction date, in line with financial record-keeping requirements under Malaysian law. This covers all deposit and withdrawal records.
  • Data after account closure: After you close your vip2 account, certain basic data is retained for 7 years for legal compliance, dispute resolution, and audit purposes. Data that is not required for these purposes will be deleted or anonymised.
  • Security logs: System and security logs are retained for 12 months for the purpose of security incident investigation and dispute resolution.
  • Support communications: Customer support conversation records are retained for 2 years for quality control and dispute resolution purposes.

Once the relevant retention period has lapsed, data is securely deleted using methods that ensure it cannot be recovered.

8Cookie Policy

Vip2 uses cookies — small text files stored in your browser — to enhance your experience on the platform. The following are the types of cookies we use:

Cookie Type Purpose Duration Can It Be Disabled?
Important Login sessions, CSRF security, language preferences Session / 30 days No – the platform cannot function without these
Functional Remembers display settings, game preferences, and odds settings 90 days Yes – without this, your experience will be less personalised
Analytics Page usage statistics, aggregated user navigation patterns 12 months Yes – does not affect core functionality

You can manage cookie settings through your browser. Most modern browsers such as Chrome, Firefox, Safari, and Edge allow you to view, delete, or block specific cookies. However, disabling essential cookies will affect the login functionality and security of the vip2 platform.

For information on how to manage cookies in your browser, search for "cookie settings" in the help menu of your browser.

9Your Rights as a vip2 User

As a vip2 platform user in Malaysia, you have the following rights regarding your personal data. All requests can be submitted to support@vip2.express and will be processed within 14 business days:

Vip2 User Rights Regarding Personal Data

You have full control over your personal data on the vip2 platform.

Right of Access

You have the right to request a copy of all personal data vip2 holds about you. Requests will be processed within 14 business days and provided in a readable format.

Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Any updates will be made within 7 business days.

Right to Erasure

You may request the deletion of your personal data under certain circumstances. Such requests are subject to legal retention obligations that may prevent complete deletion.

Right to Object

You have the right to object to the processing of your data for marketing purposes at any time. Once an objection is received, vip2 will immediately cease using your data for that purpose.

Right to Restrict Processing

In certain circumstances, you may request that vip2 restrict the processing of your data – for example, while we are reviewing a correction request or objection you have raised.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format (JSON or CSV) for transfer to another service provider if you wish.

To exercise any of the rights above, contact us at support@vip2.express stating the right you wish to exercise and your account information. We will respond within 14 business days.

10Protection of Children & Minors

The vip2 platform is strictly for individuals aged 18 and above. vip2 does not knowingly collect personal data from children or individuals under the age of 18.

  • All users are required to verify their age during registration. A false age declaration is a breach of vip2's Terms & Conditions and may result in immediate account termination.
  • If vip2 discovers that we have collected personal data from an individual under the age of 18, we will delete that data immediately and close the account in question.
  • Parents or guardians who suspect their underage child is using the vip2 platform are urged to contact us immediately at support@vip2.express. We will respond as a high priority within 24 hours.

Protecting minors from accessing the gambling platform is a responsibility vip2 takes very seriously. We use a combination of age verification at registration and usage pattern monitoring to identify and prevent underage access.

11Changes to This Privacy Policy

Vip2 reserves the right to modify this Privacy Policy at any time to reflect changes in our privacy practices, applicable laws, or improvements to how we handle user data.

  • Material changes: Any changes that materially affect how vip2 uses or protects your data will be communicated via in-platform notifications, email, or SMS at least 14 days before taking effect.
  • Minor changes: Minor amendments such as spelling corrections, clarification of terms, or updates to contact information may take effect without prior specific notice, but the "Updated" date at the top of this page will be changed.
  • Periodic review: We encourage you to review this Privacy Policy page periodically to stay informed about how vip2 handles your data.
  • Continued use as consent: Continued use of the vip2 platform after any changes take effect will be considered acceptance of the revised terms. If you do not agree, you have the right to close your account.

All previous versions of this Privacy Policy are retained and available upon request through our support team for reference purposes.

12Contact Us – vip2 Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how vip2 handles your personal data, please contact us:

  • Email: support@vip2.express – for privacy-related enquiries and data rights requests.
  • Live Chat: Available on the vip2 platform, 24 hours a day, 7 days a week – for general questions about privacy and data.
  • Response time: Privacy-related enquiries are prioritised and answered within 24 hours by email, or in under 3 minutes via live chat.

For formal requests relating to data rights (access, correction, deletion), please send an email with the subject line "Data Rights Request" along with your full name and vip2 account number. We will verify your identity before processing the request to ensure your privacy is fully protected.

This Privacy Policy takes effect from January 2026 and supersedes all previous versions. Prior versions remain available upon request for reference purposes.

Why Is User Privacy a Priority for vip2?

Six concrete ways vip2 protects the personal information of Malaysian users every day.

End-to-End Encryption

Every byte of data transmitted between your device and vip2's servers is encrypted with 256-bit SSL. This means that even if someone were to intercept your network traffic, they would be unable to read any of the information. This is the same standard used by Maybank and CIMB for online banking.

Data Not Sold, Not Rented

Vip2 never sells, rents, or shares users' personal data with marketing companies, third-party advertisers, or any other entity for marketing purposes. This is not merely a policy — it is a core value that vip2 has upheld without compromise since day one.

Strict Internal Access Controls

Not all vip2 staff have access to your data. Access to user data is divided according to job requirements — support agents can only view the information needed to assist you, not your entire profile. All access is logged and audited on a monthly basis.

Periodic Independent Security Audits

Vip2 engages independent third-party cybersecurity specialists to conduct regular penetration testing and security audits. This ensures that vulnerabilities not visible from within the organisation are identified and remediated before they pose any risk to user data.

Prompt Incident Notification

In the event of any security incident affecting your data, vip2 is committed to notifying you within 72 hours of the incident being identified — not weeks later. We believe transparency is an essential part of taking privacy seriously.

Privacy Controls in Your Hands

Through your vip2 account settings, you can manage marketing communication preferences, manage optional cookies, request a copy of your data, or initiate the account closure process – all without needing to contact support. We designed the platform so that you have full control over your own data.

Vip2 Data Practice Summary

A quick overview of how vip2 handles each key data category.

Data Type Purpose of Use Shared? Retention Period
Identity information (name, IC) Account verification & compliance Not Sold 7 years after account closure
Phone number OTP, customer support, account communications Not shared For the duration of the active account + 7 years
Bank / e-wallet information Deposit & withdrawal processing Payment processor only 7 years (financial requirement)
Betting & game records Match settlement, account history, audit Not shared 7 years
IP address & device data Security, fraud prevention Not shared 12 months
Platform usage data Experience improvement (aggregated) Not shared 12 months (anonymised)
Support communications Quality control, dispute resolution Not shared 2 years

FAQ – vip2 Privacy Policy

The most frequently asked questions by Malaysian users about data privacy at vip2.

Your bank or e-wallet information is shared only with the relevant payment service provider, strictly for the purpose of processing your transaction. For example, when you make a deposit via Touch 'n Go, the required transaction details are shared with Touch 'n Go to verify and complete the payment – the same applies to FPX Maybank2u or CIMB Clicks. These payment providers are bound by strict confidentiality agreements and may not use that information for any other purpose. vip2 does not share your financial information with advertisers, marketing companies, or any party not directly involved in processing your transaction.

Yes, you can request the deletion of your personal data by emailing support@vip2.express. However, full deletion requests are subject to the legal retention obligations applicable in Malaysia. Financial transaction records must be kept for 7 years under financial and anti-money laundering laws — these cannot be deleted even upon request. Data not subject to legal retention obligations — such as marketing preferences, personal analytics data, and support communications older than 2 years — can be deleted upon your request. We will clearly inform you which data can be deleted and which cannot, along with the relevant legal reasons.

vip2 uses multiple layers of protection to keep your account secure. On our end, this includes 256-bit SSL encryption for all communications, a real-time intrusion detection system, 24/7 security monitoring, and regular penetration testing by independent experts. Your password is stored in encrypted form using a one-way hashing algorithm — not even vip2's own technical team can view your actual password. On your end, you can strengthen your security by enabling two-factor authentication (2FA) in your account settings, using a strong and unique password, and never sharing your login credentials with anyone. If you suspect unauthorized access, change your password immediately and contact us — our security team will treat it as a priority.

vip2 only sends marketing communications – such as bonus promotions, personalised offers, and platform updates – to users who have opted in during registration or through their account settings. vip2 does not share your data with third-party advertisers for off-platform advertising purposes. You may withdraw your consent to receive marketing communications at any time by updating your preferences in your account settings, or by contacting our support team. Withdrawing marketing consent does not affect your use of the platform or any account functionality.

Once you close your vip2 account, most of your personal data will be deactivated from active use immediately. However, certain data must be retained for a specified period to meet legal obligations: financial transaction records are kept for 7 years, security logs for 12 months, and support records for 2 years. These are standard requirements that apply to all financial platforms in Malaysia. Data not subject to these obligations will be deleted or anonymized within 90 days of account closure. You may request a report on what data we still hold after closure by contacting support@vip2.express.
🔒 Your Data Is Safe with vip2

Play with Confidence – vip2 Protects Your Data the Same Way We Protect Your Winnings

Over 300,000 Malaysian players trust vip2 not only for a great gaming experience, but also for serious data protection. Register now and enjoy a platform that puts your privacy first from day one.

  • 256-bit SSL encryption – the same security standard used by Malaysian banks
  • Data is not sold or shared for marketing purposes
  • Secure deposits via Touch 'n Go, GrabPay, DuitNow & FPX
  • Full privacy controls within your own account settings

By registering, you agree to this Privacy Policy. For users aged 18 and above only.

🛡️
Register a Secure Account Log In to Your Account

T&C apply. Please gamble responsibly.

Bahasa Melayu