Privacy Policy vcity888 – Personal Data Protection for Malaysian Players

This Privacy Policy ("Policy") describes how vcity888 ("we", "Platform") collects, uses, stores, and protects your personal information when you use the vcity888.onl website, Android and iOS mobile apps, and all related services.

By registering and using the vcity888 platform, you consent to the collection and use of your personal information as described in this Policy. If you disagree with any part of this Policy, please stop using our platform and contact us to close your account.

This Policy applies to all vcity888 platform users regardless of your location, although we operate primarily for the Malaysian market. This Policy should be read together with Terms and Conditions vcity888.

Vcity888 collects your personal information through several means. The following are the categories of information we collect and the purpose of their collection:

Information You Provide Directly:

• Registration Information: Full name, national identification number (MyKad), email address, phone number, date of birth and residential address.
• KYC Verification Information: Copies of identity documents (ID card, passport), selfie photos for identity verification, and proof of address such as utility bills or bank statements.
• Financial Information: Bank account number, bank name, e-wallet account details such as Touch 'n Go and GrabPay required to process deposits and withdrawals.
• Communication: Any messages, feedback, or inquiries you send to the vcity888 support team.

Automatically Collected Information:

• Usage Data: Game history, deposit and withdrawal transactions, bets placed, and activity records within the platform.
• Technical Data: IP address, device type, operating system, app version, device identifier, and web browser information.
• Location Data: General location based on your IP address. vcity888 does not collect your GPS data or precise location.
• Cookie Data: Session data, user preferences and analytics data collected via cookies as described in section 6.

Vcity888 uses the personal information collected solely for the following purposes:

• Account Management: Creating, verifying and managing your account on the vcity888 platform, including the KYC process and identity verification required under financial regulations.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions in your account securely and accurately.
• Service Provision: Granting access to all games, promotions and platform features you are eligible for.
• Customer Support: Responding to enquiries, resolving issues and providing the technical support you need.
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering and any activity that violates the law.
• Legal Compliance: Complying with legal obligations, including reporting requirements to relevant authorities as required by law.
• Platform Improvements: Analysing usage patterns (in aggregate and anonymised form) to improve the performance, interface and features of the vcity888 platform.
• Service Communications: Sending important notifications related to your account, such as transaction confirmations, policy updates and security alerts.

Vcity888 does not use your personal data for any purposes other than those stated above. Should we wish to use your data for a new and different purpose, we will obtain your consent beforehand.

Vcity888 does not sell, rent, or trade your personal data to third parties. Your information is only shared in the following limited circumstances:

• Service Providers: Partner suppliers who help us operate the platform, including game providers (Pragmatic Play, Evolution, PG Soft, etc.), payment processors, and technical service providers. They receive only the data necessary for their specific tasks and are bound by strict confidentiality agreements.
• Legal Requirements: When required by law, court order, or an authority with valid jurisdiction. In such cases, we will notify you in advance unless prohibited by law from doing so.
• Rights & Safety Protection: Where we believe disclosure is necessary to protect the rights, property, or safety of vcity888, our users, or the public from harm.
• Business Mergers: If vcity888 undergoes a merger, acquisition, or asset sale, user data may be transferred to the new entity. You will be notified in advance and given the option to delete your account.

Vcity888 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, destruction, or disclosure:

• Data Encryption: All data transmitted between your device and vcity888 servers is protected with 256-bit SSL/TLS encryption. Sensitive data stored in our databases is also encrypted using AES-256 encryption.
• Access Controls: A role-based access control (RBAC) system ensures that only authorised staff can access your data, and only to the extent required for their duties.
• 24/7 Monitoring: A continuous security monitoring system detects and alerts our security team to any suspicious activity in real time.
• Security Testing: vcity888 conducts regular security testing, including independent penetration testing, to identify and address system vulnerabilities.
• Two-Factor Authentication: 2FA is available and encouraged for all accounts to provide an extra layer of protection against unauthorized access.
• Data Backup: Data is automatically backed up to geographically separate locations to ensure service continuity in emergency situations.

While we implement comprehensive security measures, no system can guarantee 100% absolute security. You also play an important role in keeping your account secure by using a strong password and not sharing your login details with anyone.

Vcity888 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification, session security, and language preferences. These cookies cannot be disabled.
• Functional Cookies: Storing your preferences such as preferred currency, game display settings and notification options to enhance your gaming experience.
• Analytics Cookies: Helping us understand how users interact with our platform through aggregated and anonymised data. This data is used to improve the platform.
• Security Cookies: Detecting suspicious activity, failed login attempts and supporting our anti-fraud systems to function effectively.

You can manage cookie settings through your web browser or device. Please note that disabling certain cookies may affect the functionality of the vcity888 platform. For more information on how to manage cookies in your browser, please refer to your browser's official documentation.

Under Malaysia's Personal Data Protection Act 2010 and data protection best practices, you have the following rights regarding your personal data at vcity888:

To exercise any of the above rights, contact the vcity888 support team via live chat or email. We will process your request within 30 business days. Please note that there are certain situations where we may be unable to fulfil a data deletion request, such as when the data is required to comply with legal obligations.

Vcity888 retains your personal data only for as long as necessary for the purposes stated in this Policy or as required by law. The following are general guidelines for our retention periods:

• Active Account Data: Retained for as long as your vcity888 account is active, plus any additional period required after termination to meet legal obligations.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, as required under Malaysian financial law.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with anti-money laundering (AML) compliance requirements.
• Security Logs: Retained for 2 years for security investigation and fraud prevention purposes.
• Support Communications: Retained for 3 years for reference and service improvement purposes.

Once the applicable retention period has expired, your data will be securely deleted or anonymised in accordance with our established data deletion procedures.

The vcity888 platform is strictly for users aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18.

If we discover that we have collected personal data from someone under the age of 18, we will take immediate steps to delete that data and terminate the account in question. If you believe we may hold information from or about a minor, please contact us immediately.

Vcity888 reserves the right to update or amend this Privacy Policy at any time. We will notify you of any material changes through:

• In-app notifications on the vcity888 mobile app displayed at login.
• Significant updates are displayed on the vcity888 website with a clear amendment date.
• Email to the address registered with your account for material and significant amendments.

The "Updated" date at the top of this page indicates when this Privacy Policy was last revised. We recommend reviewing this Policy from time to time to stay informed on how we protect your data.

If you have any questions, concerns, or wish to exercise your rights regarding personal data, please contact the vcity888 Data Protection Officer:

• Live Chat: The fastest method — available 24/7 directly through the vcity888 app or website. Please indicate that your inquiry relates to privacy or data protection.
• Email: Send your privacy inquiry to [email protected] with the subject "Privacy Policy Inquiry" and include your account number for faster reference.
• Response Time: Privacy-related enquiries are typically answered within 3 business days. Formal user rights requests are processed within 30 business days.

Vcity888 takes every privacy-related complaint seriously. If you are unsatisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Department (PDPD) of Malaysia.