VIPHoki Privacy Policy

Introduction

VIPHoki ("we", "us", "our") is committed to protecting the privacy and personal data of every player who registers or interacts with our platform. This Privacy Policy describes the types of personal data we collect, the purposes for which we use it, the parties with whom we may share it, the safeguards we apply, and the rights available to you as a data subject.

This policy applies to the VIPHoki website, mobile-optimised interface, support channels, payment flows, and related services. By registering an account or submitting personal data through any VIPHoki channel, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision, please do not create an account or submit personal information.

Definitions

The following terms have the stated meanings throughout this Privacy Policy:

• "Personal Data" — any information that identifies or can reasonably identify a natural person, including name, identification number, contact details, IP address, and financial information.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, or deletion.
• "Data Controller" — VIPHoki, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of VIPHoki under a contractual obligation.
• "Player" or "you" — any individual who has registered, attempted to register, or otherwise interacted with VIPHoki.
• "KYC" — Know Your Customer verification, encompassing identity, age, address, and source-of-funds checks.
• "Services" — all casino, sports betting, payment, support, and promotional features offered through VIPHoki.

Data Collection

VIPHoki collects Personal Data through several channels: registration forms, KYC document submissions, deposit and withdrawal requests, live chat and email communications, responsible gambling tool requests, and standard server-side logging when you access the platform. The specific categories collected include:

Where you choose to submit documents such as a MyKad, passport, utility bill, or bank statement for KYC purposes, those documents are processed solely for identity and payment verification. Copies are retained only as long as required by applicable compliance obligations.

Purpose and Legal Basis for Processing

VIPHoki processes Personal Data only where a lawful basis applies. The primary purposes and corresponding bases are as follows:

• Account registration and management — necessary to perform the contract between VIPHoki and the player.
• Identity and age verification (KYC) — necessary for legal compliance with anti-money laundering, fraud prevention, and age restriction obligations. VIPHoki strictly enforces the 21+ age requirement.
• Payment processing — necessary to fulfil deposit and withdrawal transactions through FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and supported cryptocurrency channels.
• Fraud and security monitoring — legitimate interest in protecting the platform, other players, and financial systems from abuse, collusion, and unauthorised access.
• Responsible gambling controls — legal obligation and legitimate interest in player welfare, including administering deposit limits, cooling-off periods, and self-exclusion.
• Customer support — contract performance and legitimate interest in resolving queries and disputes fairly.
• Marketing communications — consent, where you have opted in to receive promotional emails or notifications. Consent may be withdrawn at any time.
• Platform improvement and analytics — legitimate interest in improving service quality, game performance, and user experience using aggregated or anonymised data where possible.
• Legal and regulatory compliance — necessary to comply with applicable laws, respond to lawful authority requests, and defend legal claims.

Data Sharing and Disclosure

VIPHoki does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We may share data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment service providers — banks, e-wallet operators (including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay), and cryptocurrency network facilitators, solely to process your transactions.
• Identity verification providers — KYC and age verification service partners who process submitted documents on our behalf under strict data processing agreements.
• Game software suppliers — licensed studio partners who may receive pseudonymised session data necessary to deliver their games, resolve disputes, or audit RNG outcomes.
• IT and security infrastructure providers — hosting, content delivery, and cybersecurity vendors who process data to maintain platform availability and integrity.
• Fraud prevention and analytics services — third-party providers that assist with detecting suspicious patterns, device fingerprinting, and account security.
• Regulatory and law enforcement authorities — where VIPHoki is legally required to disclose data by a competent authority, court order, or applicable regulation.
• Professional advisers — legal, audit, and compliance professionals bound by professional confidentiality obligations, where disclosure is necessary for legitimate business purposes.

All third-party Data Processors engaged by VIPHoki are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with VIPHoki's documented instructions.

Retention Periods

Personal Data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The general retention principles applied by VIPHoki are:

• Active account data — retained throughout the period your account remains open and for a defined period following account closure, to support dispute resolution and regulatory audits.
• Transaction records — financial and betting transaction logs are retained for the period required by applicable anti-money laundering and gaming record-keeping obligations.
• KYC documents — identity and address verification documents are retained for the minimum period mandated by compliance requirements and deleted thereafter.
• Support communications — live chat transcripts and email correspondence are retained for a reasonable period to support ongoing or potential dispute resolution.
• Marketing consent records — consent logs are retained to demonstrate compliance; marketing data associated with withdrawn consent is suppressed promptly.
• Technical and access logs — server logs and session data are retained for a short period for security monitoring and are then routinely purged or anonymised.

Where retention beyond the standard period is required for a specific legal claim, regulatory investigation, or dispute, the relevant data will be held until the matter is resolved and then deleted in line with our standard process.

Security Measures

VIPHoki applies layered technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and VIPHoki servers.
• Encryption and hashing of sensitive stored credentials, including account passwords.
• Segregated database architecture to separate player funds data from operational systems.
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
• Continuous monitoring and alerting for anomalous login patterns, brute-force attempts, and suspicious transaction activity.
• Regular vulnerability assessments and security reviews of platform infrastructure.

Cookies and Tracking Technologies

VIPHoki uses cookies and similar tracking technologies to operate the platform correctly, remember your session, prevent fraud, and understand how players interact with the site. The main categories of cookies used are:

• Essential cookies — required for login sessions, security tokens, and core platform functionality. These cannot be disabled without preventing the platform from working correctly.
• Functional cookies — store your preferences such as language settings, game display options, and responsible gambling reminder intervals.
• Analytics cookies — collect aggregated, anonymised data about pages visited, session duration, and device types to help improve platform performance and navigation.
• Fraud prevention cookies — assist in identifying suspicious access patterns, device consistency checks, and potential account abuse.

VIPHoki does not use third-party advertising or behavioural tracking cookies that share your data with external ad networks. You may adjust cookie preferences through your browser settings. Disabling essential cookies may impair platform functionality or prevent login.

Your Data Rights

Subject to applicable law, you have the following rights in relation to your Personal Data held by VIPHoki. Requests may be submitted via the support email or live chat. VIPHoki will respond without undue delay and may ask for identity verification before actioning a request.

Where your request cannot be fulfilled in full — for example because retention is required by a legal obligation — VIPHoki will explain the reason and confirm what action has been taken with respect to the remainder of the request.

Minors and Age Policy

VIPHoki is strictly for individuals aged 21 and above. We do not knowingly collect Personal Data from persons below the minimum age. Registration requires submission of date of birth and is subject to identity verification through KYC checks. If VIPHoki becomes aware that an account has been created by or on behalf of an underage person, the account will be suspended, any balance reviewed in line with legal requirements, and the data handled in accordance with our obligations and the relevant circumstances.

Parents or guardians who believe a minor may have accessed VIPHoki should contact support immediately. Privacy obligations may limit the account details we can disclose, but we will act promptly on verified welfare concerns involving minors.

International Data Transfers

VIPHoki may use service providers and infrastructure located outside Malaysia. Where Personal Data is transferred internationally, VIPHoki takes steps to ensure that an appropriate level of data protection applies, including through contractual clauses, data processing agreements, or the use of providers operating under recognised security frameworks.

Where a transfer takes place to a jurisdiction that does not provide equivalent data protection to that applicable in Malaysia, VIPHoki will implement supplementary safeguards proportionate to the risk and the sensitivity of the data being transferred.

Policy Changes and Updates

VIPHoki reserves the right to update this Privacy Policy to reflect changes in applicable law, regulatory guidance, platform Services, or data processing practices. Material changes will be communicated to registered players via the email address associated with their account, or by a prominent notice on the VIPHoki platform, prior to the effective date of the change.

The document reference code and effective date at the top of this page will be updated with each revision. Continued use of VIPHoki after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. Players who do not accept a material change should close their account and request deletion of their data in accordance with Clause 09 before the effective date.

Contact Us

If you have a question about this Privacy Policy, wish to exercise a data right, or need to report a privacy concern, please contact the VIPHoki support team using the details below. Include your registered account identifier, the nature of your request, and any relevant reference information so we can respond efficiently.