Privacy Policy

1Introduction

vworld20 ("vworld20", "we", "us", "our") operates the online gaming platform accessible at vworld20.cam (the "Platform"). We are committed to safeguarding the privacy and personal data of all users, including registered players, visitors, and prospective members (collectively, "you", "User").

This Privacy Policy ("Policy") describes in detail how vworld20 collects, uses, stores, shares, and protects personal data in connection with your use of the Platform. It has been prepared in alignment with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and any other applicable data protection legislation.

By registering an account on the Platform, making a deposit, or using any of our services — including live casino games, sports betting on Liga Super Malaysia and EPL markets, or any payment facility — you acknowledge that you have read and understood this Policy and consent to the data processing practices described herein.

2Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information that relates to an identified or identifiable individual, including name, identification number, contact details, financial information, and online identifiers such as IP addresses.
• "Processing" means any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, alteration, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means vworld20, which determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of vworld20 under a written contractual agreement.
• "Sensitive Personal Data" means Personal Data relating to identity documents, financial account details, and any other categories of data that attract heightened protection under applicable law.
• "KYC Data" means identity and verification documents collected during the Know Your Customer (KYC) process, including copies of the Malaysian MyKad / NRIC, Driver's Licence, Passport, proof of address, and selfie photographs.
• "Cookies" means small text files stored on your device by the Platform for the purposes described in Section 8 of this Policy.

3Personal Data We Collect

vworld20 collects only the Personal Data that is necessary for the legitimate purposes set out in this Policy. The categories of data we collect include:

3.1 Registration Data

• Full legal name;
• Date of birth (for age verification — 21+ requirement);
• Email address;
• Mobile phone number;
• Residential address (which may include addresses in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or other Malaysian locations);
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (Malaysian MyKad / NRIC, Driver's Licence, or Passport);
• Proof of current residential address (utility bill, bank statement, or official correspondence dated within three months);
• Selfie photograph holding the identification document;
• Proof of payment method (where required by our compliance team).

3.3 Financial Data

• Payment method details (e.g., Touch 'n Go eWallet account reference, DuitNow registered number, Maybank2u account identifier, CIMB Clicks account, Public Bank PBe account, Hong Leong Connect account, Boost, GrabPay, or FPX-linked bank details);
• Deposit and withdrawal transaction records, including amounts in MYR and timestamps;
• Account balance history.

3.4 Gaming Activity Data

• Game history, wager records, sports betting selections, and betting outcomes;
• Bonus and promotion claim history;
• Session duration and frequency of play.

3.5 Technical and Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session identifiers and log data;
• Referral source (where applicable).

3.6 Communications Data

• Records of communications with our customer support team via live chat or email;
• Feedback, complaints, and survey responses you submit to us.

4How We Collect Personal Data

vworld20 collects Personal Data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access or use the Platform, including through Cookies and server-side logging (see Section 8);
• Third-party payment processors: Transaction confirmation data received from our payment processing partners when you transact via Touch 'n Go eWallet, DuitNow, FPX, or other supported Malaysian payment methods;
• Identity verification services: Where we engage third-party KYC service providers to assist with document verification, we may receive verification outcomes and flags from such providers;
• Fraud prevention tools: Device fingerprinting and risk-scoring data from third-party fraud detection services used to protect the Platform and its players.

5Purposes of Data Processing

vworld20 processes your Personal Data for the following purposes:

6Legal Basis for Processing

vworld20 processes your Personal Data on the following legal bases under the Personal Data Protection Act 2010 (PDPA) and applicable data protection principles:

• Contractual necessity: Processing required to perform our contractual obligations to you, including account management, payment processing in MYR, and delivery of gaming services;
• Legal obligation: Processing necessary to comply with applicable Malaysian law, including anti-money laundering obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA), and KYC obligations;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and improvement of services, where such interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing communications, where we have obtained your explicit prior consent. You may withdraw this consent at any time by contacting our support team.

7Data Sharing and Disclosure

vworld20 does not sell, rent, or trade your Personal Data. We may share your Personal Data with the following categories of recipients, strictly limited to what is necessary for each purpose:

7.1 Payment Processing Partners

To facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank PBe, and Hong Leong Connect, we share transaction data with the relevant payment service providers. These providers process your data in accordance with their own privacy policies and applicable financial regulations.

7.2 Identity Verification Providers

KYC Data (identity documents and verification information) may be shared with third-party identity verification service providers engaged to assist with our compliance obligations. Such providers are contractually bound to process your data only for verification purposes.

7.3 Game and Technology Providers

Technical game data may be shared with our game content licensors and platform infrastructure providers to the extent necessary for service delivery. These providers operate under strict data processing agreements.

7.4 Regulatory and Law Enforcement Authorities

We may disclose Personal Data to competent authorities — including regulators, law enforcement agencies, and courts — where required by applicable Malaysian law or a valid legal order. We will notify you of such disclosure where legally permitted to do so.

7.5 Fraud Prevention Networks

In the context of fraud prevention and AML compliance, certain technical and transactional data may be shared with fraud detection networks and financial intelligence systems as required by law or for legitimate risk management purposes.

8Cookies and Tracking Technologies

vworld20 uses cookies and similar tracking technologies to operate the Platform, enhance your user experience, and gather aggregated analytics data. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences (such as language settings and login status) to personalise your experience on the Platform.
• Analytics cookies: Collect aggregated, anonymised data about how Users navigate and use the Platform, enabling us to identify performance improvements.
• Security cookies: Assist in detecting and preventing fraudulent activity, including unusual login patterns and account takeover attempts.

You may adjust cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair Platform functionality, including your ability to log in or complete transactions.

9Data Retention

vworld20 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Active account data: Retained for the duration of your account relationship with vworld20, plus a post-closure retention period as described below;
• KYC and identity verification data: Retained for a minimum of five (5) years following account closure, in accordance with AML and regulatory record-keeping obligations under Malaysian law;
• Financial transaction records: Retained for a minimum of five (5) years following the date of the transaction, or longer where required by applicable financial regulations;
• Customer support communications: Retained for a period of two (2) years from the date of the communication, unless a longer period is required for the resolution of a dispute;
• Technical and device data: Retained for up to twelve (12) months unless required for fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

10Data Security

vworld20 implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Role-based access controls ensuring that Personal Data is accessible only to authorised personnel with a legitimate business need;
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure;
• Secure data centre facilities with physical access controls and environmental protections;
• Staff training on data protection obligations and information security best practices.

11International Data Transfers

vworld20 primarily processes and stores Personal Data within secure facilities. Where it is necessary to transfer Personal Data to third-party service providers or infrastructure partners located outside Malaysia — for example, in connection with cloud hosting or international game providers — such transfers are conducted under appropriate safeguards, including contractual data protection clauses that impose obligations equivalent to those required under Malaysian law.

We will not transfer your Personal Data to a jurisdiction that does not provide an adequate level of data protection without implementing appropriate safeguards, and will notify you of any material changes to cross-border data transfer arrangements that affect your data.

12Your Data Subject Rights

Under Malaysia's Personal Data Protection Act 2010 and applicable data protection principles, you have the following rights in respect of your Personal Data held by vworld20:

To exercise any of the above rights, please submit a written request to our support team using the contact details in Section 16. We will acknowledge your request within three (3) business days and respond substantively within twenty-one (21) days or within the period prescribed by applicable law.

13Children's Privacy and Minors

The vworld20 Platform is strictly intended for persons who are at least 21 years of age. We do not knowingly collect Personal Data from individuals under the age of 21.

We enforce this age requirement through mandatory KYC verification on every registered account. If we become aware that Personal Data has been collected from a person under 21 years of age, we will take immediate steps to delete that data, close the associated account, and refund any deposited funds to the payment source.

If you are a parent or guardian and believe that a person under 21 in your care has registered on our Platform, please contact us immediately using the details in Section 16.

14Third-Party Links and Services

The Platform may reference or integrate third-party payment service providers (such as Touch 'n Go eWallet, DuitNow, Maybank2u, CIMB Clicks, Public Bank PBe, Hong Leong Connect, GrabPay, Boost, and FPX) for the purposes of processing financial transactions. These third-party services operate under their own terms of service and privacy policies, which are independent of vworld20.

vworld20 is not responsible for the privacy practices of any third-party service. We encourage you to review the privacy policies of any third-party payment providers before initiating transactions through their platforms.

15Changes to This Privacy Policy

vworld20 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Where changes are material, we will notify registered players via email or an in-platform notice at least seven (7) days before the changes take effect.

Your continued use of the Platform following the notification period constitutes your acknowledgement of, and agreement to, the revised Policy. If you do not agree to the revised Policy, you must discontinue use of the Platform and contact us to close your account.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We recommend reviewing this page periodically.

16Contact Us — Data Protection Enquiries

For any questions, concerns, or requests related to this Privacy Policy or your Personal Data, please contact vworld20 through the following channels. All data protection enquiries are handled by our designated privacy team.

For information about the terms governing your use of the Platform, please refer to our Terms & Conditions. For information about responsible gambling tools and support, please visit our Responsible Gambling page.