Personal Data Protection

Privacy Policy vf238 – Personal Data Protection for Malaysian Members

Your personal data is a trust we take seriously. This document transparently explains how vf238 collects, uses, stores, and protects your information in accordance with the highest industry security standards.

Updated: 1 January 2026
Complying with PDPA 2010
256-bit SSL Encryption

Vf238's Privacy Commitment to You

Six core principles that underpin how vf238 handles the personal data of every member.

Full PDPA Protection

Vf238 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). All data processing is carried out lawfully, fairly, and transparently in accordance with the guidelines set by the Personal Data Protection Commissioner.

Highest-Level Encryption

All data transmitted between your device and vf238's servers is protected using 256-bit SSL encryption. Data stored in our databases is also encrypted using AES-256 standards for maximum protection.

No Unauthorised Sharing

Your personal data will not be sold, rented, or shared with any third party for marketing purposes without your explicit consent. We only share data when required by law or to fulfill your service needs.

Data Control in Your Hands

As a vf238 member, you have the full right to access, correct, delete, and restrict the processing of your personal data. Data rights requests will be processed within 14 business days.

Secure Data Storage

Your data is stored in enterprise-grade data centers equipped with multi-layered physical and digital access control systems. All vf238 staff who handle personal data have undergone rigorous data protection training.

Data Breach Notification

In the event of any data breach that may affect your personal information, vf238 will notify you within 72 hours of the breach being detected, in line with data protection industry best practices.

1 Introduction & Scope of Privacy Policy

Vf238 ("we", "Platform", or "vf238.wine") takes the privacy and security of your personal data extremely seriously. This Privacy Policy is provided to transparently and honestly explain how we collect, use, disclose, transfer, and store your personal information when you use the vf238 platform — including the vf238.wine website, Android and iOS mobile apps, and all related digital services.

This policy is drafted in accordance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia and international personal data protection best practices. By using the vf238 platform, you acknowledge that you have read and understood this Privacy Policy and agree to the data processing practices described herein.

This policy applies to all individuals who register as members, visit our website, use our mobile app, or interact with any vf238 service in any capacity.

Note: If you disagree with any part of this Privacy Policy, please contact us before continuing to use the platform. We are happy to clarify any concerns you may have.

2 Types of Personal Data We Collect

Vf238 collects various categories of personal data depending on how you interact with our platform. Below is a summary of the types of data we collect:

Data Category Example Information Requirements
Identity Data Full name, date of birth, IC/passport number, document image Mandatory (KYC)
Contact Data Email address, phone number, residential address Mandatory
Financial Data Bank account number, bank name, e-wallet details Mandatory (Transactions)
Technical Data IP address, device type, operating system, web browser Automatic
Usage Data Game history, betting records, login activity Automatic
Communication Data Support chat records, emails, feedback Where applicable

We does not collect sensitive data such as medical information, religious beliefs, political views, or biometric data unless specifically required and with your explicit consent.

3 How We Collect Personal Data

Vf238 collects your personal data through several different channels:

  • Account Registration: Information you provide when registering as a new member, including name, email, phone number, and date of birth.
  • KYC Verification: Identity documents and proof of address uploaded during the identity verification process prior to your first withdrawal.
  • Financial Transactions: Your bank account or e-wallet details registered for deposit and withdrawal purposes.
  • Platform Usage: Data collected automatically when you use our website or mobile app, including activity logs and game records.
  • Communications with Support: Information you share when contacting our support team via live chat or email.
  • Cookies & Tracking Technologies: Technical data collected through cookies, pixels, and similar technologies as you browse our platform.
  • Legitimate Third Parties: In certain cases, we may receive information from third-party payment service providers or identity verification agencies that we work with.

We only collect data that is genuinely necessary for the stated purpose. Data minimization is a core principle of vf238's approach to privacy.

4 Purpose of Personal Data Use

The personal data we collect is used solely for legitimate purposes related to the provision of vf238 services, including:

  • Account Management: Creating, verifying, and maintaining your member account on the vf238 platform.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and promptly.
  • Identity Verification (KYC/AML): Meeting legal requirements related to anti-money laundering and customer identity verification.
  • Service Provision: Ensuring a smooth, personalised, and relevant gaming experience for you.
  • Customer Support: Resolving enquiries, complaints, and technical issues you report to our support team.
  • Platform Security: Detecting and preventing fraud, account abuse, and other unlawful activities.
  • Service Communications: Sending important notifications regarding your account, transactions, and policy changes.
  • Platform Improvements: Analysing usage patterns to improve overall service quality, speed, and user experience.
  • Legal Compliance: Fulfilling reporting and compliance obligations to relevant authorities when required.

vf238 will not use your personal data for third-party marketing purposes or sell your data to any advertiser without your explicit consent.

5 Data Sharing & Disclosure

Vf238 understands that your trust is our most valuable asset. As such, we enforce strict policies regarding the sharing of personal data. Your data may only be shared in the following circumstances:

  • Payment Service Providers: Required transaction details are shared with payment providers (FPX, Touch 'n Go, GrabPay, and others) solely to process your transactions.
  • Third-Party KYC Providers: Identity document information is shared with the identity verification services we use to meet compliance requirements.
  • Legal Authorities: vf238 will disclose data when ordered by a court, law enforcement agency, or legitimate regulatory authority.
  • Technology Service Providers: Cloud infrastructure and cybersecurity providers involved in the operation of the vf238 platform are bound by strict confidentiality agreements.
  • Business Transfer: In the event of a merger, acquisition, or asset sale, user data may be transferred, provided the receiving party adheres to an equivalent privacy policy.

All third parties we work with are required to sign a data processing agreement and comply with the security standards set by vf238. We conduct regular reviews of all third-party partners to ensure ongoing compliance.

6 Security & Data Protection

Vf238 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

  • 256-bit SSL/TLS Encryption for all data transmitted between your device and our servers.
  • AES-256 Encryption for all sensitive data stored in our databases.
  • Two-Factor Authentication (2FA) available to all member accounts as an additional layer of security.
  • 24/7 Security Monitoring by a dedicated cybersecurity team to detect and respond to threats in real time.
  • Penetration testing (penetration testing) conducted periodically by independent third-party security firms.
  • Role-based access control (RBAC) ensures that only authorized personnel can access the personal data required for their specific roles.
  • Periodic data backups with tested disaster recovery procedures to ensure continuity of service.

While we take every reasonable measure to protect your data, no security system is 100% foolproof. We encourage you to play your part in keeping your account secure by using a strong password and not sharing your login credentials.

7 Cookies & Tracking Technologies

Vf238 uses cookies and similar tracking technologies to enhance the user experience, understand usage patterns, and ensure platform security. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled as they are essential to website operation.
  • Performance Cookies: Collecting anonymised data on how visitors use the platform to help us improve our services.
  • Functional Cookies: Saving your preferences such as language, currency, and display settings for a more personalised experience.
  • Analytics Cookies: Helping us understand which pages are most visited and how users interact with our content.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the vf238 platform. Continued use of our platform after being notified of cookie usage is considered your consent.

8 Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights, which you may exercise at any time:

Right of Access

Request a copy of the personal data we hold about you in a readable format.

Right to Rectification

Correct inaccurate or incomplete data by updating your account profile.

Right to Erasure

Request deletion of your personal data, subject to mandatory legal retention requirements.

Right to Restriction

Restrict the processing of your data in certain circumstances while an investigation or dispute is ongoing.

Right to Object

Object to the processing of your data for direct marketing purposes at any time, without any conditions.

Right to Data Portability

Receive your data in a structured, machine-readable format for transfer to another provider.

To exercise any of the above rights, contact the vf238 support team via live chat. All requests will be processed within 14 working days. We may require identity verification before processing your request to ensure data security.

9 Data Retention Period

Vf238 retains your personal data for as long as necessary to fulfil the original purpose of collection and to comply with applicable legal requirements. Our general data retention principles are as follows:

  • Active Account Data: Retained for as long as your account remains active on the vf238 platform.
  • KYC and Identity Data: Retained for a minimum of 5 years after account closure in accordance with anti-money laundering legal requirements.
  • Financial Transaction Records: Retained for a minimum of 7 years in line with financial reporting and tax compliance requirements.
  • Activity & Security Logs: Retained for 2 years for security audit and dispute resolution purposes.
  • Support Communications: Retained for 3 years for reference and service improvement purposes.
  • Marketing Data: Deleted within 30 days after you withdraw consent or close your account.

Once the designated retention period has expired, your personal data will be securely deleted or anonymised using methods that comply with industry standards.

10 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

  • Live Chat: Available 24/7 on the vf238 platform — the fastest way to get a response.
  • Email: [email protected] (response within 1–2 business days)

For formal complaints related to personal data protection that our team is unable to resolve, you have the right to lodge a complaint with Malaysia Personal Data Protection Commissioner under the Ministry of Communications and Digital.

Vf238 is committed to handling every privacy-related complaint fairly, transparently, and within a reasonable timeframe. Your trust is our priority.

This Privacy Policy will be updated from time to time to reflect changes in our practices or legal requirements. You will be notified via your registered email if any material changes are made.

Your Data Is Safe with vf238

Enjoy a safe, fair, and protected gaming experience. Register now and join over 500,000 vf238 Malaysia members who trust our platform every day.

Bahasa Melayu