Privacy Policy

01 Introduction

p2bvip ("we", "us", "the Company") is committed to protecting the privacy and security of the personal data of our Members and website visitors. This Privacy Policy sets out in clear terms how p2bvip collects, uses, stores, discloses, and protects personal information obtained through the p2bvip platform and any associated services.

This Policy is to be read in conjunction with the p2bvip Terms & Conditions. By registering an account or accessing the p2bvip platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

p2bvip serves a primarily Malaysian audience, with Members concentrated in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, and across all Malaysian states. This Policy reflects our obligations under applicable data protection frameworks and our genuine commitment to treating your personal data with the care it deserves.

02 Personal Data We Collect

p2bvip collects only the personal data necessary for the legitimate purposes described in this Policy. The categories of personal data we collect include:

2.1 Identity & Contact Data

• Full legal name
• Date of birth (for age verification purposes)
• Residential address
• Email address
• Mobile phone number
• Copies of government-issued identity documents (e.g., MyKad, passport) where required for KYC verification

2.2 Account & Transaction Data

• Username and encrypted account credentials
• Deposit and withdrawal history
• Betting, wagering, and gaming activity records
• Bonus and promotional activity records
• Payment method details (bank name, e-wallet type — not full account numbers in plaintext)

2.3 Technical & Usage Data

• IP address and approximate geolocation at login
• Device type, operating system, and browser information
• Session timestamps and duration
• Pages visited and features accessed within the platform
• Referral source (where applicable)

2.4 Communications Data

• Records of customer support interactions (live chat transcripts, email correspondence)
• Responses to surveys or feedback forms where voluntarily submitted

03 How We Collect Your Data

p2bvip collects personal data through the following methods:

• Direct submission: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technical collection: Technical data collected automatically when you access the Platform, including via cookies, server logs, and similar tracking technologies (see Section 7 for full cookie details).
• Third-party verification services: Identity and age verification data obtained through authorised KYC service providers where you have consented to such verification.
• Payment processors: Transaction confirmation data received from payment processors and financial institutions involved in processing your deposits and withdrawals.

04 How We Use Your Personal Data

p2bvip uses personal data for the following purposes:

• Account management: Creating, maintaining, and securing your p2bvip Account, including authentication, password reset, and session management.
• Service delivery: Processing deposits and withdrawals, crediting winnings, applying bonuses, and providing access to gaming and sportsbook services.
• Identity and age verification: Verifying that Members are at least 21 years of age and confirming identity in connection with KYC and anti-money laundering obligations.
• Fraud prevention and security: Detecting and investigating suspicious account activity, preventing multiple account registrations, and protecting against unauthorised access.
• Regulatory compliance: Maintaining records and producing reports as required by applicable gaming, financial, and data protection regulations.
• Customer support: Responding to queries, complaints, and dispute resolution requests.
• Responsible gaming: Monitoring gaming activity for indicators of problem gambling and administering self-exclusion or deposit limit requests.
• Service improvement: Analysing aggregated, anonymised usage data to improve Platform features, performance, and user experience.
• Marketing communications: Sending promotional communications where you have opted in to receive them. You may opt out at any time via the Account settings panel or by contacting support.

05 Legal Basis for Processing

p2bvip processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between p2bvip and the Member — including account creation, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML obligations, age verification requirements, and gaming regulatory reporting duties.
• Legitimate interests: Processing necessary for p2bvip's legitimate interests in fraud prevention, platform security, and service improvement, where such interests are not overridden by the Member's privacy rights.
• Consent: Processing carried out on the basis of your explicit consent — most notably in relation to direct marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time.

06 Data Sharing & Disclosure

p2bvip does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipient, only to the extent necessary for the stated purpose:

• KYC and identity verification providers: Authorised third-party providers engaged to perform age and identity verification in compliance with regulatory requirements.
• Payment processors and financial institutions: Entities involved in the processing of your deposits and withdrawals, including FPX operators, e-wallet providers (Touch 'n Go, Boost, GrabPay), and affiliated banks.
• Game software providers: Licensed game providers whose software is integrated into the p2bvip platform. Providers receive only the technical session data necessary to deliver game functionality; they do not receive your identity or financial information.
• Customer support platforms: Third-party live chat and ticketing platforms used to deliver customer support services. These providers are contractually bound to process data only as instructed by p2bvip.
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory direction, p2bvip may disclose personal data to the relevant authority. We will endeavour to notify affected Members of such disclosure where legally permitted to do so.

07 Cookies & Tracking Technologies

The p2bvip platform uses cookies and similar tracking technologies to enable core platform functionality, improve the user experience, and support security and fraud detection. The categories of cookies used are as follows:

• Strictly necessary cookies: Essential for the operation of the Platform. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without materially impairing the Platform's functionality.
• Functional cookies: Used to remember your preferences — such as language settings, preferred game categories, and login persistence where "Remember me" is selected.
• Analytics cookies: Aggregated, anonymised data used to understand how Members interact with the Platform, which pages are most visited, and where performance improvements should be focused. No individual member behaviour is sold or shared with advertisers.
• Security cookies: Used to detect and prevent suspicious login activity, CSRF attacks, and other security threats.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling functional or analytics cookies will not prevent you from accessing the Platform but may affect the quality of your experience.

08 Data Security

p2bvip implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the p2bvip platform.
• Encryption at rest for databases containing personal data and financial records.
• Industry-standard salted hashing for all stored account passwords — plaintext passwords are never stored.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular third-party security audits and penetration testing.
• Login anomaly detection and suspicious activity alerting.

Notwithstanding the above, no security system is impenetrable. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, p2bvip will notify affected Members without undue delay and take all steps required by applicable law to mitigate the impact of the breach.

09 Data Retention

p2bvip retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or regulatory reporting requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of the Member's Account plus a minimum of five (5) years following Account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable gaming and financial record-keeping regulations.
• Customer support records: Retained for a period of three (3) years following resolution of the relevant query or complaint.
• Technical and usage data: Typically retained in aggregate anonymised form for up to twenty-four (24) months for analytics purposes; non-anonymised logs are retained for shorter periods as required for security and fraud investigation purposes.
• Marketing consent records: Retained for the duration of the Member's Account and for three (3) years thereafter as evidence of consent status.

10 Your Privacy Rights

Depending on applicable law, you may have the following rights in relation to your personal data held by p2bvip. To exercise any of these rights, please contact us at the details provided in Section 13.

p2bvip will respond to data subject access requests within thirty (30) days of receipt. Where the volume or complexity of requests requires additional time, we will notify you within the initial thirty-day period and provide an expected completion date. We reserve the right to charge a reasonable fee for requests that are manifestly unfounded or excessive.

11 Children's Privacy

The p2bvip platform is strictly for individuals who are 21 years of age or older. p2bvip does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under 21, we will promptly delete that data and close the associated Account.

If you believe that a minor may have accessed or registered on the p2bvip platform, please contact our support team immediately at the contact details provided in Section 13. We take underage access seriously and will investigate and act on all credible reports promptly.

12 Changes to This Privacy Policy

p2bvip reserves the right to update or amend this Privacy Policy at any time. Where amendments are material, we will notify registered Members by displaying a notice on the Platform or by sending a notification to the registered email address. The "Last Updated" date at the top of this Policy will be revised to reflect the date of any changes.

Your continued use of the p2bvip platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed of how p2bvip protects your personal data.

13 Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a privacy-related complaint, please contact the p2bvip data privacy team. All privacy-related queries are handled by a dedicated team and are treated with strict confidentiality.

Our 24/7 live chat support is accessible from within the Platform for general queries. For formal data subject access requests or written complaints, please use the contact email displayed below. We aim to acknowledge all written privacy requests within two business days and to provide a substantive response within thirty days.