Privacy Policy

This Privacy Policy ("Policy") issued by Vamos88 ("the Platform", "we", "us", "our") and applies to all personal data collected from users ("you", "your") who access or register on the website located at https://vamos88.lat and any associated mobile interfaces, applications, or services operated by Vamos88.

Vamos88 respects the privacy of every individual who interacts with our platform. We are committed to handling personal information responsibly, transparently, and in accordance with applicable data protection legislation and internationally recognised privacy standards. This Policy explains in clear and accessible terms what personal data we collect, the purposes for which we use it, the circumstances under which it may be disclosed, how long we retain it, and the rights available to you as a data subject.

This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and Vamos88. In the event of any conflict between this Policy and the Terms & Conditions, this Policy shall take precedence with respect to data protection matters.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or is capable of identifying a natural person, directly or indirectly, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction, whether by automated or manual means.
• "Data Controller" means Vamos88, which determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of Vamos88under a written data processing agreement, subject to our instructions and compliance requirements.
• "KYC" means Know Your Customer — the identity and address verification process required by anti-money laundering regulations before withdrawal services are enabled.
• "Consent" means a freely given, specific, informed, and unambiguous indication of a data subject's agreement to the processing of their personal data for a defined purpose.
• "Data Subject" means any living individual whose personal data is processed by Vamos88, including registered users, applicants, and visitors to the Platform.
• "Cookies" means small text files placed on your device by the Platform that store session information, preferences, and usage analytics data.

Vamos88 collects personal data across several categories depending on the nature of your interaction with the Platform. The categories of data collected are as follows:

We do not collect sensitive personal data (such as biometric data, health information, or political opinions) except where strictly required for KYC liveness verification, in which case such data is processed solely for identity authentication and deleted promptly thereafter.

Vamos88 collects personal data through the following channels and mechanisms:

• Direct collection: Information you actively provide during registration, KYC submission, deposit and withdrawal requests, support interactions, or any correspondence with Vamos88 personnel.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, pixel tags, server logs, and session tracking technologies.
• Third-party sources: Identity verification data received from licensed KYC and AML service providers during the account verification process. Financial confirmation data received from payment processors (including Touch 'n Go eWallet, DuitNow, Maybank, CIMB, Public Bank, and FPX operators) in connection with deposit and withdrawal transactions.
• Device permissions: Where you access Vamos88 through a mobile browser or application, the Platform may request access to device features necessary for security verification or enhanced functionality. Such access is always optional and subject to your device-level consent settings.

Vamos88 processes your personal data for the following defined purposes. We do not process personal data for any purpose beyond those listed below without first obtaining your explicit consent or as required by applicable law:

• Account management: To create, maintain, and administer your Vamos88 account, verify your identity, and ensure continued eligibility to use the Platform in accordance with our Terms & Conditions.
• Transaction processing: To process deposits, withdrawals, and in-platform transactions accurately and securely, including verification of payment methods such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency channels.
• Regulatory compliance: To fulfil obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) regulations, including the retention of mandatory compliance records.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct through automated screening and manual review processes.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance and compliance purposes.
• Responsible gambling: To monitor usage patterns for indicators of problem gambling behaviour, enforce deposit limits and self-exclusion instructions, and provide responsible gambling intervention where appropriate.
• Platform improvement: To analyse anonymised usage data in aggregate to improve platform performance, user experience, game selection, and the overall quality of our services.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have provided explicit consent to receive such communications. You may withdraw marketing consent at any time by contacting support.

Vamos88 processes your personal data one or more of the following legal grounds, depending on the specific processing activity in question:

• Contractual necessity: Processing is necessary to perform our contractual obligations to you as a registered user, including account administration, transaction processing, and customer support. Without this processing, we cannot provide you with the services you have requested.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including AML/CTF obligations, KYC regulatory requirements, and licensing conditions imposed on the Platform by its governing authorities.
• Legitimate interests: Processing is necessary for the legitimate interests of Vamos88 in operating a secure, fraud-free, and commercially viable platform, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud detection, security monitoring, and platform analytics.
• Consent: For marketing communications and the use of non-essential cookies, we rely on your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

Vamos88 does not sell, rent, or trade your personal data to third parties for commercial gain. We share personal data only in the following defined circumstances:

• Payment processors: Financial data necessary to process deposits and withdrawals is shared with licensed payment service providers, including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency processing partners. All payment processors operate under binding data processing agreements and are subject to industry-standard security requirements.
• Identity verification providers: KYC documentation is shared with licensed identity verification and AML screening service providers engaged by Vamos88 to fulfil our regulatory obligations. These providers process data solely under our instruction and may not use it for their own purposes.
• Regulatory authorities: We may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory direction. Such disclosures are made strictly as required and not beyond the scope of the legal obligation.
• Game and platform providers: Anonymised or pseudonymised usage data may be shared with licensed game providers (such as PG Soft, Pragmatic Play, or Evolution Gaming) for the purposes of game performance monitoring and RNG audit compliance. No directly identifiable personal data is shared with game providers without your consent.
• Group companies: Where Vamos88 operates as part of a corporate group, personal data may be shared with affiliated entities for consolidated compliance, fraud prevention, and operational management purposes, subject to equivalent data protection standards.

As Vamos88 operates under an international gaming licence and engages service providers located in various jurisdictions, your personal data may be transferred to and processed in countries other than Malaysia. This may include jurisdictions in Southeast Asia, Europe, or other regions where our technology infrastructure or service partners are located.

Where personal data is transferred outside of Malaysia to countries that may not offer an equivalent level of data protection, Vamos88 ensures that appropriate safeguards are in place to protect your data. These safeguards may include:

• Contractual data protection clauses in agreements with all data processors and sub-processors operating outside Malaysia;
• Engagement of service providers operating within jurisdictions recognised as providing adequate data protection under applicable international standards;
• Internal data governance policies that apply consistent protection standards regardless of the processing location.

By registering with Vamos88 and using the Platform, you acknowledge and consent to such international transfers of your personal data subject to the safeguards described above.

Vamos88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention framework applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

Vamos88 uses cookies and similar tracking technologies to ensure the Platform operates correctly, to secure your session, and to understand how users interact with our services. The types of cookies we use are described below:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing your ability to use the Platform.
• Performance and analytics cookies: Collect anonymised data about how pages are used, which features are most popular, and where errors occur. This data helps us improve platform performance and user experience. These cookies do not identify you personally.
• Functionality cookies: Remember your preferences such as language settings, display preferences, and previously entered information to improve your experience on return visits.
• Security cookies: Used to detect and prevent fraudulent activity, including flaging unusual login patterns, multiple account attempts, or suspicious transaction sequences.

You may manage non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of parts of the Platform. Vamos88 does not use third-party advertising cookies or cross-site tracking technologies for marketing profiling purposes.

As a data subject, you have the following rights with respect to your personal data held by Vamos88. To exercise any of these rights, please contact our Data Privacy team at [email protected] with your full name, registered email address, and a description of your request.

We will respond to all verified data rights requests within 30 days of receipt. Where a request is complex or high in volume, we may extend this period by a further 30 days with notice to you. We do not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive.

Vamos88 may be required to retain certain data despite an erasure request in order to comply with applicable AML, KYC, or other regulatory obligations. In such cases, we will inform you of the legal basis for continued retention and restrict processing of that data to the minimum necessary for compliance purposes.

Vamos88 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the Vamos88 platform is encrypted using TLS 1.2 or higher with256-bit SSL certificates. This protects your login credentials, financial data, and personal information from interception during transmission.
• Encryption at rest: Sensitive personal data and financial records stored on our servers are encrypted at the database level using industry-standard encryption algorithms.
• Access controls: Access to personal data within Vamos88's internal systems is restricted on a strict need-to-know basis. All internal access is logged, monitored, and subject to regular audits. Multi-factor authentication is required for all staff accounts with access to user data.
• Fraud detection systems: Automated systems monitor all account activity, login attempts, and transactions in real time to detect anomalous patterns indicative of fraud, unauthorised access, or money laundering.
• Penetration testing and audits: Vamos88 engages independent security specialists to conduct regular penetration testing and vulnerability assessments of our platform infrastructure.
• Incident response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, Vamos88 will notify affected users without undue delay and take immediate steps to contain and remediate the breach.

While Vamos88 takes extensive precautions to protect your personal data, no electronic transmission or storage system is entirely immune to risk. We encourage you to use a strong, unique password for your Vamos88 account and to enable two-factor authentication where available.

Vamos88 strictly prohibits the registration or use of the Platform by any individual under the age of 21. The Platform is designed for and directed exclusively at adults. We do not knowingly collect personal data from individuals under the age of 21.

Where we discover or have reasonable grounds to believe that personal data has been collected from a minor — whether through misrepresentation of age at registration or any other means — we will immediately suspend the relevant account, void any associated transactions, return any legitimately deposited funds, and securely delete all personal data associated with that account.

If you are a parent or legal guardian and believe that your child (under 21 years of age) has registered an account with Vamos88, please contact our support team immediately at [email protected] so that we can take the necessary action without delay.

Vamos88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legislation, regulatory requirements, or the nature of our services. The "Last Updated" date at the top of this page will be revised whenever a substantive change is made.

Where changes to this Policy are material — for example, changes to the categories of data collected, the purposes for which data is used, or the rights available to you — we will notify registered users by email and via an in-platform notification at least seven (7) days prior to the changes taking effect.

For non-material changes (such as editorial corrections, clarifications of existing practice, or updates to contact details), the revised Policy will take effect immediately upon publication. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically to stay informed about how Vamos88 handles your personal data. If you disagree with any material change, you have the right to close your account in accordance with our Terms & Conditions before the change takes effect.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how Vamos88 handles your personal information, please contact our Data Privacy team through the following channels:

• Email: [email protected] — Please include "Privacy Request" in the subject line and provide your full name and registered account email address to help us locate your record promptly.
• Live Chat: Available 24/7 on the Platform in English, Bahasa Melayu, and Chinese. Our support agents can assist with basic privacy queries and escalate data rights requests to our Privacy team on your behalf.
• Response Time: Privacy queries submitted by email are addressed within 5 business days. Formal data rights requests (access, erasure, rectification, portability) are actioned within 30 days of receipt of a verified request.

For matters relating to the overall terms governing your use of the Platform, please refer to our Terms & Conditions. For information about our responsible gambling tools and self-exclusion options, please visit our Responsible Gambling page.