Vcity888 Privacy Policy – Personal Data Protection for Malaysian Members

Vcity888 ("we", "platform") is an online Sports Betting and casino platform operating in Malaysia. We recognise that personal data privacy is a fundamental right of every individual, and we are committed to protecting the information you entrust to us.

This Privacy Policy explains how vcity888 collects, uses, discloses, stores, and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This Policy applies to all users of the vcity888 platform, including registered members, website visitors, and any individual who interacts with our services.

This document covers all data collection methods – whether through the vcity888 website, mobile app, email communications, customer support, or any other channel associated with vcity888 operations.

Vcity888 collects various categories of personal data necessary to provide members with a secure, compliant, and high-quality service:

Vcity888 not collecting unnecessary data such as medical information, religious beliefs, or political views. We only collect data that is strictly required for the purposes stated in this policy.

Your personal data is collected through several methods on the vcity888 platform:

Directly from You

• Account registration: Name, MyKad number, phone number, email address, and financial information;
• KYC verification: Identity documents such as MyKad or passport for identity verification;
• Financial transactions: eWallet or FPX bank account details during deposits and withdrawals;
• Support interactions: Records of conversations with the vcity888 support team;
• Feedback forms: Reviews and suggestions you share voluntarily.

Automatically

• Cookies and similar technologies: Session information, language preferences, and analytics data;
• Server logs: IP address, device type, and access time are recorded automatically;
• Platform usage data: Betting and gaming activity records are collected for security and service improvement purposes.

Vcity888 uses your personal data solely for lawful and transparent purposes. The following are the primary purposes for which data is used:

• Account management: Creating, verifying, and managing your vcity888 member account;
• Transaction processing: Processes deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u (FPX), and CIMB Clicks (FPX), as well as withdrawal requests;
• Identity verification (KYC): Meeting legal requirements related to anti-money laundering (AML) and fraud prevention;
• Service delivery: Enables access to Sports Betting, slots, Live Casino, jackpots, and all features on the vcity888 platform;
• Platform security: Detecting and preventing fraud, hacking attempts, and account abuse;
• Service improvement: Analysing usage patterns to improve the platform's interface, performance, and features;
• Communications: Sending important notifications related to your account, transactions, and promotions you have subscribed to;
• Legal compliance: Fulfilling reporting obligations to the relevant authorities.

Vcity888 does not sell, rent, or trade members' personal data to any party for marketing or commercial purposes. Your data is only shared in the following limited circumstances:

• Payment processors: Transaction information is shared with authorised payment processors such as Malaysian eWallet platforms and partner banks to facilitate deposits and withdrawals. All financial partners are bound by strict confidentiality agreements;
• Game software providers: Non-identifiable statistical data is shared with game providers (such as Pragmatic Play, PG Soft) for technical purposes;
• Legal authorities: vcity888 complies with court orders and lawful requests from Malaysian law enforcement agencies;
• Customer support service providers: Companies that assist with the technical operations of the platform (e.g., cloud services, analytics) are permitted to access only the data they require and are bound by data protection agreements;
• Business transfers: In the event of a company merger or acquisition, members will be notified in advance.

Vcity888 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse, or disclosure:

• 256-bit SSL Encryption: All communications between your device and vcity888's servers are encrypted to the highest security standards;
• Tiered access controls: Members' personal data is accessible only to vcity888 staff with a legitimate need and who have undergone background checks;
• Two-factor authentication (2FA): Available to all vcity888 member accounts – we encourage you to use it;
• Regular security audits: vcity888's infrastructure and systems are regularly tested and audited by independent cybersecurity experts;
• Real-time monitoring: An active threat detection system monitors for suspicious activity around the clock;
• Secure data backup: Data is backed up regularly to secure, geographically separate locations to ensure continuity of service.

That said, no internet security system can be guaranteed to be 100% foolproof. In the event of a material data breach, vcity888 will notify affected members within 72 hours as required under the PDPA.

Vcity888 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. The following types of cookies are used:

• Essential Cookies (Required): Required for core platform functions such as login sessions, security, and basic preferences. Cannot be disabled;
• Performance Cookies: Collects statistical data on how members use the platform to help us improve our services. Can be disabled;
• Functional Cookies: Remembers your preferences such as language, favourite sports (football, badminton, e-sports, etc.) and display settings. Can be disabled;
• Session Cookies: Deleted automatically when you close your browser.

You can manage and control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of some features on the vcity888 platform.

Vcity888 retains your personal data only for as long as necessary for the stated purposes or as required under Malaysian law:

• Active account data: Retained for the duration your account is active, plus 7 years after account closure (AML legal requirements);
• Financial transaction records: Retained for 7 years to comply with financial reporting and anti-money laundering requirements;
• Support communication records: Retained for 3 years for reference and dispute resolution purposes;
• Technical data log: Retained for 12 months for security and technical diagnostic purposes;
• Marketing data: Retained until you withdraw your consent to receive marketing communications.

Once the relevant retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

As a vcity888 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights:

• Right to Access: You have the right to request a copy of the personal data we hold about you;
• Right to Rectification: You have the right to correct any data that is inaccurate or incomplete;
• Right to Erasure: You may request deletion of your personal data when it is no longer needed, subject to applicable legal obligations;
• Right to Object to Processing: You may object to the processing of your data under certain circumstances;
• Right to Withdraw Consent: You may withdraw consent for consent-based data processing at any time;
• Right to Complain: You have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) if you believe your rights have been violated.

To exercise any of the above rights, please contact the vcity888 support team by email at support@vcity888.ws. We will respond to your request within 21 business days.

In certain circumstances, your personal data may be processed or stored on servers located outside Malaysia – particularly in connection with cloud technology service providers and international gaming platforms used by vcity888.

Vcity888 ensures that any cross-border data transfers are made only to:

• Countries or regions with an equivalent or higher level of data protection than Malaysia;
• Entities that have signed data processing agreements compliant with Malaysia's PDPA standards;
• Service providers that hold internationally recognised data protection certifications.

By using the vcity888 platform, you consent to data transfers as described in this section, with the assurance that an equivalent level of protection will be maintained at all times.

Vcity888 services are intended solely for individuals aged 21 and above. vcity888 does not knowingly collect, store, or process any personal data from individuals under the age of 21.

Should we discover that personal data has been collected from an individual under the age of 21 without our knowledge, we will:

• Immediately closing the associated account;
• Delete all data relating to that individual as promptly as possible;
• Refunding any deposits made to that account.

If you become aware that a minor has registered or attempted to use the vcity888 platform, please notify us immediately at support@vcity888.ws.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by vcity888, please reach out to us through the following channels:

• Privacy Email: support@vcity888.ws (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 on the vcity888 platform – select the "Privacy & Data" category
• FAQ: Visit FAQ page us for answers to the most frequently asked questions

We will respond to all privacy-related enquiries within 21 business days. For complaints that cannot be resolved by vcity888, you have the right to escalate the matter to Malaysia's Department of Personal Data Protection (PDPD).