Vcity88 Privacy Policy – Malaysia Member Personal Data Protection

Vcity88 ("we", "Platform") takes our responsibility to protect the privacy and personal data of all members seriously. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of your personal information when you use the vcity88 platform via our website or mobile app.

This policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in user privacy protection. By registering or using vcity88 services, you agree to the practices described in this policy.

Vcity88 collects the personal information needed to provide our services safely and efficiently. Below are the categories of data we collect:

Vcity88 collects your personal data through the following channels:

• Account registration — information you provide when registering a new account.
• KYC verification — identity documents and proof of address that you have uploaded.
• Financial transactions — payment details entered during deposits or withdrawals.
• Platform usage — automatic records of game activity and site navigation.
• Support interactions — information you share when contacting our support team.
• Cookies and similar technologies — session data, preferences, and usage analytics.

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive information such as health data, religious beliefs, or political views.

Personal data collected by vcity88 is used solely for the following legitimate and stated purposes:

• To process account registration and verify member identity through KYC procedures.
• To process deposit and withdrawal transactions securely and accurately.
• To provide effective and responsive customer support.
• To detect and prevent fraud, money laundering, and other illegal activities.
• To comply with applicable legal and regulatory obligations.
• To send important notifications related to your account, transactions, and service updates.
• To improve platform quality based on usage pattern analysis (in aggregated, non-identifiable form).
• To send promotions and marketing offers — only where you have given consent, and you may withdraw that consent at any time.

Vcity88 does not sell or transfer your personal data to third parties for their own marketing purposes. However, there are limited situations where we may need to share your data:

• Payment service providers — to process your financial transactions securely.
• Identity verification service providers — for KYC and fraud prevention purposes.
• Game providers — information required to enable games to function properly.
• Legal authorities — where required by law, court order, or a relevant enforcement authority.
• Never sold to any party for third-party advertising, marketing, or commercial purposes.

All third parties we work with are required to meet data protection standards equal to or higher than our own.

The vcity88 platform uses cookies and similar technologies to enhance your experience. Cookies are small files stored on your device when you visit our website. Here are the types of cookies we use:

• Essential cookies — required for core platform functions such as login and session security.
• Preference cookies — stores your language preference and display settings.
• Analytics cookies — helps us understand how the platform is used for continuous improvement (aggregate data).
• Optional cookies — can be disabled through your browser settings without affecting the platform's core functionality.

Vcity88 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL encryption for all data transmitted over the network.
• Passwords are stored using strong, irreversible hashing algorithms.
• Role-based access control — only authorized staff may access specific data.
• Continuous 24/7 security monitoring and intrusion detection systems.
• Regular security audits conducted by qualified independent third parties.
• Established incident response procedures to address any breach swiftly.

As a data subject under the Personal Data Protection Act 2010, you have the following rights regarding your personal data held by vcity88:

To exercise any of the above rights, contact the vcity88 support team via live chat. We will process your request within 30 business days.

Vcity88 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law:

• Active account data — retained for the duration of your active account plus 7 years after account closure (financial legal requirement).
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's tax and financial regulatory requirements.
• Support communication data — retained for 3 years for reference and service improvement purposes.
• Technical logs — automatically deleted after 90 days unless required for a security investigation.
• Marketing data — deleted as soon as you withdraw consent to receive marketing communications.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact vcity88's Data Protection Officer via:

• Live chat — available 24/7 via the vcity88 platform for immediate enquiries.
• Email — [email protected] for more detailed written enquiries.

We are committed to addressing all privacy-related inquiries seriously and within a reasonable timeframe. If you are unsatisfied with our response, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia.