Privacy Policy V2 Online — How We Protect Your Personal Information

This Privacy Policy explains how V2 Online ("we", "the Company", or "the Platform") collects, uses, stores, and protects the personal information you provide when using the website, mobile app, and all services operating under the V2 Online brand.

We take your privacy seriously. Your trust is the foundation of our relationship, and we are committed to managing your personal data responsibly, transparently, and in full compliance with applicable laws, including Malaysia's Personal Data Protection Act (PDPA) 2010.

By registering or using the V2 Online platform, you consent to the collection and use of information as described in this Privacy Policy. If you do not agree, please stop using the platform and contact us to close your account.

V2 online only collects data that is strictly necessary for platform operations and to deliver the best experience to you. The data collected falls into several categories:

We do not collect sensitive data such as medical information, religion, political views, or biometrics unless required by law for specific identity verification purposes.

Your personal data is collected through several different channels:

• Account registration process — when you complete the registration form and fill in your profile;
• KYC (Know Your Customer) Process — during identity verification through submitted documents;
• Financial transactions — when you make a deposit or submit a withdrawal request;
• Platform usage — automatically via cookies, server logs, and other tracking technologies as you browse and play on the platform;
• Communication with the support team — when you contact us via Live Chat, email, or other channels;
• Public sources and third parties — in certain circumstances for verification and regulatory compliance purposes, we may obtain information from public sources or trusted business partners.

V2 online uses your personal data solely for legitimate and necessary purposes, including:

• Account management — creating, verifying, and managing your account on the platform;
• Transaction processing — processing deposits, withdrawals, and bonus payments accurately and securely;
• Identity verification (KYC) — ensuring you meet the minimum age requirement and verifying your identity for security and compliance purposes;
• Fraud prevention — detecting and preventing fraud, money laundering, and platform abuse;
• Legal compliance — fulfilling applicable legal and regulatory obligations;
• Customer support — responding to enquiries, resolving issues, and providing technical assistance;
• Experience personalisation — recommending relevant games and personalising promotional content based on your preferences;
• Platform improvements — analysing aggregated usage data (without identifying individuals) to improve platform features and performance.

V2 Online does not sell or rent your personal data to any party for third-party marketing purposes. However, we may share your data with certain parties in limited circumstances and for legitimate purposes:

• Payment service providers — to process deposits and withdrawals securely. They receive only the minimum data required for the transaction in question;
• Game software providers — game data is shared with providers such as Pragmatic Play and Playtech to the extent necessary for game operations;
• Technical service providers — companies that help operate our IT infrastructure, all bound by strict confidentiality agreements;
• Authorities and regulatory bodies — when required by law, court order, or valid regulatory requirement;
• Corporate sharing — in the event of a merger or acquisition, data may be transferred as part of the business assets, subject to prior notice to players.

Protecting your personal data is v2 online's top priority. We implement multiple layers of technical and organisational security to prevent unauthorised access, data breaches, or data loss:

• 256-bit SSL encryption for all data communications between your device and our servers;
• Encryption of data at rest — sensitive data is stored in encrypted form on our servers;
• Strict access controls — only staff who require access may view players' personal data, with full audit logs maintained;
• Two-factor authentication (2FA) available to all player accounts and mandatory for internal management accounts;
• 24/7 monitoring by our automated intrusion detection systems and security team;
• Penetration testing periodically by independent third parties to identify and address system vulnerabilities;
• Incident response plan to address any security breaches swiftly and effectively.

While no security system is perfect, v2 online continues to invest in the best security technologies and practices to minimise risk to your data.

V2 online uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device by your web browser. They help the platform to:

• Maintaining your login session so you do not need to log in repeatedly;
• Remembering your preferences such as language and display settings;
• Analysing usage patterns to improve platform performance and experience;
• Detecting and preventing fraudulent activity and unauthorised access.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect platform functionality. Cookies required for security and core operations cannot be fully disabled.

V2 online does not retain your personal data longer than necessary. Retention periods depend on the type of data and applicable legal requirements:

• Active account data — retained for the duration of the active account plus the period required by law following account closure;
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's financial legal requirements;
• KYC Documents — retained for a minimum of 5 years after the business relationship ends;
• Support communication logs — retained for 2 years for reference and dispute resolution purposes;
• Aggregated analytics data — may be retained indefinitely as it contains no personally identifiable information.

Once the required retention period has ended, personal data will be securely deleted or anonymised in accordance with our standard procedures.

As a v2 online player and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

To exercise any of the above rights, contact our support team via Live Chat on the platform or through our support email. We will process your request within 30 days of receipt.

The v2 online platform is strictly for individuals aged 18 and above. We do not knowingly collect any personal data from anyone under the age of 18.

If you discover that someone under the age of 18 has registered or used the V2 Online platform, please notify us immediately through our support team. We will take prompt action to delete the account and all associated data.

As a globally operating platform, your personal data may be stored or processed outside Malaysia in certain circumstances. This occurs when we use cloud infrastructure providers or game software vendors operating from other locations.

In all cases of cross-border data transfers, V2 Online ensures that:

• The recipient country has an equivalent or higher level of data protection;
• Appropriate data processing agreements are in place with all parties involved;
• Adequate technical and organisational measures are in place to protect data during transmission.

V2 online reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, new legal requirements, or changes to our services.

When significant amendments are made, we will notify you via:

• In-app notification upon next login;
• Email to your registered address (for amendments affecting your fundamental privacy rights);
• Update the "Last Updated" date at the top of this document.

Continued use of the platform after notification of any amendments constitutes acceptance of the updated policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our team via:

• Live Chat — available 24/7 within the v2 online platform;
• Support email — [email protected] (reply within 1–2 business days);
• FAQ Section — answers to frequently asked questions about privacy on the FAQ ours.

We are committed to handling all privacy enquiries seriously and within a reasonable timeframe. Our data protection team is ready to help you understand your rights and resolve any concerns you may have.