p2bvip Privacy Policy — How We Collect, Use & Protect Your Data

Introduction

This Privacy Policy ("Policy") describes how p2bvip ("p2bvip", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who access or use the website athttps://p2bvip.cam and all associated services ("Platform").

p2bvip is the data controller in respect of personal data collected through the Platform. We take our obligations regarding the privacy and security of your personal data seriously and have designed our data practices to align with internationally recognised data protection principles including data minimisation, purpose limitation, accuracy, storage limitation, and accountability.

Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, email address, IP address, payment details, and behavioural data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, p2bvip.
• "Data Processor" means a third party that processes Personal Data on behalf of p2bvip under contractual instruction.
• "User" / "You" means any individual accessing or using the p2bvip Platform.
• "KYC Data" means identity and age verification documents submitted as part of the Know Your Customer process, including government-issued identification and proof of address.
• "Cookies" means small text files stored on your device by your browser when you visit the Platform.

Data We Collect

p2bvip collects the following categories of Personal Data:

We apply the principle of data minimisation — we collect only the data that is necessary for the specific purpose for which it is collected.

How Data Is Collected

p2bvip collects Personal Data through the following channels:

• Direct submission: When you complete the registration form, submit KYC documents, contact our support team, or update your account profile.
• Automated technical collection: When you access the Platform, our servers automatically log Technical Data including your IP address, browser type, and session data. This occurs regardless of whether you hold a registered account.
• Payment processors: When you deposit or withdraw via Maybank2u, CIMB Clicks, Touch 'n Go eWallet, DuitNow, FPX, or other supported methods, the payment processor shares transaction confirmation data with us. We do not receive or store your full banking credentials.
• Cookies and tracking technologies: As described in Section 10of this Policy.
• Third-party identity verification services: Where we engage third-party KYC providers to assist with identity and age verification, those providers process your documents under data processing agreements with p2bvip.

Data Processing & Purpose of Use

p2bvip processes your Personal Data for the following specific purposes:

• Account creation and management: To register your account, verify your identity and age (21+), and maintain accurate account records.
• Service delivery: To provide access to casino games, sports betting markets, live dealer tables, and all other Platform services.
• Payment processing: To process deposits and withdrawals in MYR via your chosen Malaysian payment method, and to comply with anti-money laundering obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account abuse, bonus fraud, and other security threats.
• Regulatory compliance: To fulfil our obligations under our international gaming licence, including KYC, AML, and responsible gambling requirements.
• Customer support: To respond to your enquiries and resolve disputes or complaints.
• Responsible gambling: To monitor play patterns for indicators of problem gambling and to administer self-exclusion and limit-setting tools.
• Platform improvement: To analyse Usage Data in aggregate to understand how players use the Platform and to improve our product and user experience.
• Marketing communications: To send promotional emails and notifications regarding bonuses and offers, where you have provided consent to receive such communications. You may opt out at any time.

Legal Basis for Processing

p2bvip processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to enter into and perform our agreement with you — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and our licensing obligations, including KYC, AML record-keeping, and age verification.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregate analytics, where our legitimate interests are not overridden by your privacy interests.
• Consent: Processing for marketing communications, where you have given specific, informed, and freely-given consent. You may withdraw consent at any time by contacting our support team.

Data Sharing & Disclosure

p2bvip does not sell your Personal Data. We do not share your Personal Data with third parties for their own independent marketing or commercial purposes. We may share your data in the following limited circumstances:

• Payment processors: Maybank, CIMB, Touch 'n Go eWallet, DuitNow, FPX, and other payment providers receive transaction data necessary to process your deposit or withdrawal.
• Game providers and platform vendors: Our certified game providers (including live casino studios) may receive session identifiers necessary to deliver games. These providers operate under data processing agreements with p2bvip.
• KYC and identity verification providers: Third-party services receive the documents you submit for identity and age verification, under strict contractual data protection obligations.
• Regulatory and law enforcement authorities: We may be required to disclose Personal Data to licensing regulators, financial intelligence units, or law enforcement agencies where legally compelled to do so.
• Fraud prevention services: We may share technical identifiers with fraud detection services to protect the Platform and our player community.
• Business successors: In the event of a merger, acquisition, or sale of assets, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

Data Retention

p2bvip retains your Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable laws and our licensing obligations. Our general retention guidelines are as follows:

• Account data and transaction records: Retained for the duration of your account plus a minimum of five (5) years following account closure, as required under AML and licensing regulations.
• KYC documents: Retained for a minimum of five (5) years from the date of collection, in compliance with international regulatory standards.
• Communication records: Support chat logs and email correspondence are retained for up to two (2) years for quality assurance and dispute resolution purposes.
• Technical and session data: Retained for up to thirteen (13) months for security, analytics, and fraud detection purposes, then aggregated or deleted.
• Marketing consent records: Retained until you withdraw your consent, and for a further period as required to demonstrate compliance.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in manner that prevents reconstruction.

Security Measures

p2bvip implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data stored in our databases;
• Two-factor authentication (2FA) available for all player accounts;
• Regular external penetration testing and vulnerability assessments;
• Strict internal access controls — only authorised personnel can access Personal Data, on a need-to-know basis;
• Segregated storage for payment data to minimise exposure in the event of a breach;
• 24/7 monitoring and intrusion detection systems.

Notwithstanding our security measures, no internet transmission is entirely risk-free. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities in accordance with applicable legal timelines.

Cookies & Tracking Technologies

p2bvip uses cookies and similar technologies on the Platform for the following purposes:

• Strictly necessary cookies: Session management, authentication, and security. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remembering your preferences, language settings, and login state for a more seamless experience.
• Analytics cookies: Aggregate, anonymised data on how visitors use the Platform, used to improve our product. We do not link analytics data to your individual account without your consent.
• Fraud detection cookies: Technical fingerprinting used to detect suspicious activity, bot behaviour, and multiple-account attempts.

We do not use behavioural advertising cookies or third-party cross-site tracking cookies that build profiles of your browsing activity across unrelated websites. You may control cookies through your browser settings; however, disabling strictly necessary cookies may impair your ability to use the Platform.

Your Rights

Subject to applicable law and our legitimate regulatory obligations, you have the following rights in respect of your Personal Data held by p2bvip:

• Right of Access: You may request a copy of the Personal Data we hold about you at any time.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you have the right to request correction.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes collected, subject to our legal retention obligations (e.g., AML record-keeping requirements override erasure requests for the mandated retention period).
• Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing. Objections to direct marketing will always be honoured.

To exercise any of the above rights, please contact our support team via live chat on the Platform or by email at [email protected]. We will acknowledge your request within 5 business days and respond substantively within 30 calendar days.

Minors & Age Policy

The p2bvip Platform is strictly for individuals aged21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. Age is verified through our KYC process prior to withdrawal and at other risk-based trigger points.

If we become aware that Personal Data belonging to a person under the age of 21 has been collected — whether through misrepresentation at registration or any other means — we will immediately close the associated account, forfeit any balances in accordance with our Terms and Conditions, and delete the Personal Data in question.

If you believe a minor has registered an account on our Platform, please notify us immediately at [email protected] so that we can take prompt remedial action.

International Data Transfers

p2bvip operates internationally and your Personal Data may be processed in countries outside Malaysia, including the jurisdiction which we hold our primary gaming licence and jurisdictions where our technology vendors and game providers are based.

Where Personal Data is transferred internationally, we ensure that adequate safeguards are in place. These may include contractual clauses that require recipients to protect your Personal Data to the same standard required by this Policy, or reliance on the adequacy of the recipient country's data protection framework.

Policy Amendments

p2bvip reserves the right to amend this Privacy Policy at any time. We will publish the revised Policy on this page with an updated effective date. Where changes are material, we will endeavour to notify registered users via their registered email address prior to the changes taking effect.

Your continued use of the Platform following the publication of a revised Policy constitutes your acknowledgement and acceptance of the updated terms. We encourage you to review this page periodically.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our handling of your Personal Data, please contact the p2bvip Privacy team:

• Live Chat: Available24/7 directly on the Platform — our fastest response channel.
• Email: [email protected] (plain text — not a clickable link). Written enquiries are responded to within two business days.

For enquiries relating to your data rights (access, rectification, erasure), please include "Data Rights Request" in the subject line of your email and confirm your registered account email address to assist us in verifying your identity promptly.

For all other platform-related queries, including responsible gambling, self-exclusion, and account limits, please visit our dedicated Responsible Gambling page.