vcity888 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") applies to the vcity888 online gaming platform, accessible at vcity888.win, including all associated mobile applications, sub-domains, and related services (collectively, the "Platform"). vcity888 ("we", "us", "our") is committed to protecting the personal data of all persons who access, register with, or use the Platform ("you", "Member").

This Policy describes in detail how vcity888 collects, uses, stores, shares, and protects personal data in connection with the operation of the Platform. It has been prepared with reference to applicable data protection principles and the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs the processing of personal data of individuals in Malaysia.

By registering an account on the vcity888 Platform or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

2 Data Controller

vcity888 is the data controller in respect of the personal data collected and processed through the Platform. As data controller, vcity888 determines the purposes for which and the means by which your personal data is processed.

For all data protection enquiries, requests to exercise your rights, or concerns about vcity888's handling of your personal data, please contact the vcity888 Data Protection team via the support channels described in Section 15 of this Policy.

3 Personal Data We Collect

vcity888 collects the following categories of personal data in connection with the operation of the Platform:

3.1 Identity and Contact Data

• Full legal name
• Date of birth
• Gender
• Residential address (including postcode, city, and state within Malaysia or country of residence)
• Email address
• Mobile phone number
• Copies of identity documents (such as MyKad, passport, or other government-issued identification) where required for identity verification

3.2 Account Data

• Username and encrypted password
• Account registration date and history
• Account preferences and settings
• Responsible gaming limit settings

3.3 Financial Data

• Deposit and withdrawal transaction records
• Payment method identifiers (e.g., Touch 'n Go eWallet account reference, Boost reference, DuitNow identifier, bank account number — stored in accordance with applicable payment industry standards)
• Transaction amounts, dates, and currency
• Source of funds documentation where required for regulatory compliance

3.4 Gaming and Usage Data

• Game play history, wagering records, and betting activity
• Session start and end times
• Platform features accessed
• Bonus claims, promotions used, and wagering records related to bonus activity

3.5 Technical Data

• IP address
• Device type, operating system, and browser type
• Device identifiers
• Geolocation data (general, not precise GPS location)
• Log files and access records

3.6 Communications Data

• Records of your communications with the vcity888 support team, including live chat transcripts and email correspondence
• Survey responses and feedback submitted through the Platform

4 How We Collect Your Data

vcity888 collects personal data through the following means:

• Directly from you: When you complete the registration form, update your account profile, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically: Through the use of cookies, web beacons, server logs, and similar tracking technologies as you navigate and interact with the Platform. See Section 8 for further detail on cookies.
• From third parties: From identity verification providers, payment processors, fraud detection services, and, where applicable, publicly available sources and government databases used for regulatory compliance purposes.

5 How We Use Your Personal Data

vcity888 uses the personal data it collects for the following purposes:

• To register and maintain your vcity888 account and verify your identity;
• To process deposits, withdrawals, and other financial transactions in MYR;
• To provide, operate, and improve the Platform and all associated services;
• To personalise your experience on the Platform, including game recommendations and promotional offers tailored to your activity;
• To administer bonuses, promotions, and loyalty programmes;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To comply with applicable legal obligations, including age verification, anti-money laundering requirements, and regulatory reporting;
• To respond to your enquiries, complaints, and support requests;
• To send you marketing communications about vcity888 products, promotions, and services, where you have consented to receive such communications or where we have a legitimate interest in doing so;
• To enforce our Terms & Conditions and other applicable policies;
• To monitor responsible gaming indicators and apply account interventions where required by our responsible gaming obligations; and
• To maintain Platform security and integrity.

6 Legal Basis for Processing

vcity888 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account registration, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including identity verification, anti-money laundering obligations, and regulatory reporting.
• Legitimate interests: Processing carried out for vcity888's legitimate business interests, including fraud prevention, Platform security, product improvement, and direct marketing to existing members, where such interests are not overridden by your rights and interests.
• Consent: Where vcity888 relies on your consent as the basis for processing, such as for certain marketing communications, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Data Sharing and Disclosure

vcity888 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients in the circumstances described:

• Service providers and processors: Third-party companies that provide services to vcity888 on a data processor basis, including payment processors (such as Touch 'n Go, Boost, DuitNow), identity verification providers, fraud detection services, cloud hosting providers, and customer support platform providers. These parties are contractually obligated to process data only on vcity888's instructions and to maintain appropriate security measures.
• Game providers: Where required for the provision of specific games, limited technical data (such as session identifiers) may be shared with game providers. Game providers do not receive your identity or financial data.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction, vcity888 may disclose personal data to competent authorities.
• Group companies: vcity888 may share data with affiliated group companies where necessary for the purposes described in this Policy.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of vcity888's business, personal data may be transferred as part of that transaction. Members will be notified of any such transfer.

8 Cookies and Tracking Technologies

vcity888 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function, including maintaining your logged-in session and remembering your preferences.
• Analytics cookies: Used to understand how Members use the Platform, identify popular features, and improve performance. Analytics data is aggregated and does not identify individual members.
• Marketing cookies: Used to deliver relevant promotional content and track the effectiveness of marketing campaigns. Marketing cookies require your consent.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect the functionality of the Platform. vcity888's cookie banner allows you to manage non-essential cookie consent at any time.

9 Data Retention

vcity888 retains personal data for as long as is necessary for the purposes described in this Policy, or for as long as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your active membership and for a period of 5 years following account closure, unless a longer retention period is required by applicable law.
• Financial transaction records: Retained for a minimum of 7 years following the relevant transaction, in accordance with anti-money laundering and financial record-keeping requirements.
• Communications data: Support communications retained for 3 years following the relevant interaction.
• Technical and usage data: Generally retained for 12 months from collection, after which it is anonymised or deleted.

When personal data is no longer required, vcity888 will securely delete or anonymise it in accordance with our data disposal procedures.

10 Data Security

vcity888 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and vcity888 servers;
• Encryption of sensitive data at rest, including payment credentials and identity documents;
• Access controls limiting data access to authorised personnel on a need-to-know basis;
• Regular security audits and penetration testing of the Platform and its infrastructure;
• Multi-factor authentication requirements for administrative access to systems holding personal data;
• Incident response procedures for identifying, containing, and reporting data security incidents.

While vcity888 takes all reasonable steps to protect your data, no system is completely impenetrable. If you have reason to believe that your account has been compromised, please contact our support team immediately.

11 Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by vcity888:

• Right of access: You may request a copy of the personal data vcity888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to vcity888's legal retention obligations.
• Right to restrict processing: You may request that vcity888 restrict the processing of your data in certain circumstances.
• Right to data portability: Where technically feasible and applicable, you may request your personal data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, please contact the vcity888 support team. We will respond to all valid requests within 30 days. We may require you to verify your identity before processing your request.

12 International Data Transfers

vcity888 may transfer personal data to, or process it in, countries outside Malaysia where our service providers, infrastructure, or game providers are located. Where such transfers occur, vcity888 ensures that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection requirements, including through contractual protections with the relevant recipients.

13 Children's Privacy

The vcity888 Platform is strictly restricted to persons aged 21 and above. vcity888 does not knowingly collect personal data from persons under the age of 21. If vcity888 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed. If you believe that a person under 21 has registered on the Platform, please notify vcity888 immediately via the support team.

14 Changes to This Privacy Policy

vcity888 may update this Privacy Policy from time to time to reflect changes in our data practices, the Platform, or applicable law. Where changes are material, vcity888 will notify Members via email to their registered address or via a prominent notice on the Platform at least 14 days before the changes take effect. The effective date of the current version of this Policy is stated at the top of this page. Your continued use of the Platform following notification of a revised Policy constitutes your acceptance of the revised terms.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or vcity888's handling of your personal data, please contact us through the following channel:

Support: Live chat available 24/7 on the vcity888 Platform

Email: [email protected]