vcity88 Privacy Policy

1. Data Controller

vcity88, accessible at https://vcity88.win, is the data controller responsible for personal data collected through the vcity88 platform. References to "vcity88", "we", "us", or "our" throughout this Policy refer to the vcity88 platform and its operating entities. References to "you", "your", "Player", or "Member" refer to any registered account holder or visitor to the vcity88 platform.

For all data privacy enquiries, including data subject access requests, please contact us at the email address specified in Section 14 of this Policy.

2. Personal Data We Collect

vcity88 collects the following categories of personal data in the course of providing our services:

2.1 Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (for age verification — all players must be 21 or older)
• Nationality and country of residence
• Copies of identity documents submitted during KYC verification (Malaysian IC, passport, or other acceptable document)

2.2 Contact Data

• Email address (primary communication channel)
• Malaysian mobile phone number (for SMS OTP and account communications)
• Residential address (for KYC verification and regulatory compliance)

2.3 Financial Data

• Payment method identifiers (e-wallet account references, bank account numbers, cryptocurrency wallet addresses)
• Transaction history including deposits, withdrawals, and gaming activity
• Source of funds documentation where required by AML obligations

2.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session duration, pages visited, and in-platform navigation behaviour
• Login timestamps and authentication method used

2.5 Gaming Activity Data

• Game history, betting records, win/loss data, and wagering patterns
• Bonus usage, promotional interaction history
• Responsible gaming preferences and self-imposed limit settings

3. How We Collect Your Data

vcity88 collects personal data through the following channels:

• Direct registration: Data you provide when creating your vcity88 account, completing KYC verification, or updating your profile.
• Platform interaction: Data generated automatically as you use the platform — including game play, deposits, withdrawals, and navigation.
• Cookies and tracking technologies: See Section 8 for full details on our cookie use.
• Payment processors: Transaction confirmation data received from payment processors when you deposit or withdraw funds.
• Customer support interactions: Records of communications between you and our support team, including live chat transcripts and email correspondence.
• Third-party verification services: Identity verification data from KYC service providers used to validate identity documents.

4. Legal Basis for Processing

vcity88 processes your personal data on the following legal bases:

5. How We Use Your Personal Data

vcity88 uses your personal data for the following purposes:

5.1 Account Administration

Your identity and contact data are used to create and manage your vcity88 account, authenticate your login sessions, process your transactions, and communicate with you regarding your account activity. This processing is necessary for the performance of the contract between you and vcity88.

5.2 Regulatory Compliance

vcity88 is obligated under applicable gaming authority regulations and anti-money laundering requirements to collect and verify player identity data, monitor transaction patterns for suspicious activity, and maintain records of gaming activity for regulatory audit purposes. This data processing is mandatory — without it, vcity88 cannot legally provide services to you.

5.3 Platform Security & Fraud Prevention

Technical and usage data — including IP addresses, device fingerprints, and login patterns — is analysed to detect and prevent fraudulent account activity, bonus abuse, collusion between players, and unauthorised access attempts. This processing is conducted on the basis of vcity88's legitimate interest in maintaining the integrity of the platform for all players.

5.4 Platform Improvement

Aggregated and anonymised usage data is analysed to understand how players navigate the platform, which games are most popular, where players experience friction, and how the user experience can be improved. Individual players are not identifiable from this aggregated analysis.

5.5 Marketing Communications

Where you have provided consent, vcity88 may send you promotional communications about new games, bonuses, and platform features via email or SMS. You may withdraw consent for marketing communications at any time by updating your communication preferences in your account settings or by contacting support. Withdrawal of marketing consent does not affect your ability to use the platform.

5.6 Responsible Gaming

vcity88 monitors gaming patterns to identify potential indicators of problem gambling behaviour. Where such indicators are detected, the Platform may contact you with information about responsible gaming tools. This processing is conducted in the interests of player welfare and in accordance with our licensing obligations.

6. Data Sharing & Disclosure

vcity88 does not sell your personal data. We may share your personal data with the following categories of third parties in the circumstances described:

• KYC verification providers: Identity document data is shared with third-party KYC verification service providers solely for the purpose of identity verification. These providers are contractually bound to process data only for this purpose.
• Payment processors: Transaction data is shared with payment processors (including e-wallet operators such as Touch 'n Go and Boost, and banking partners) to execute deposit and withdrawal requests.
• IT infrastructure providers: Hosting, cloud storage, and cybersecurity service providers who process data on vcity88's behalf under data processing agreements with appropriate contractual protections.
• Regulatory and law enforcement authorities: Where required by applicable law, licensing conditions, or a valid legal order, vcity88 will disclose personal data to regulatory bodies, gaming authorities, financial intelligence units, or law enforcement agencies.
• Fraud prevention agencies: Where fraud is suspected, relevant data may be shared with fraud prevention agencies and cross-platform industry fraud networks.

7. Data Retention

vcity88 retains personal data for the following periods:

Following expiry of the applicable retention period, personal data will be securely deleted or anonymised. Anonymised data may be retained indefinitely for aggregated analytics purposes.

8. Cookies & Tracking Technologies

vcity88 uses cookies and similar tracking technologies on its platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without breaking core functionality.
• Performance cookies: Collect anonymised data about how players interact with the platform to enable ongoing UX improvements. Data collected is aggregated and not linked to individual identities.
• Functional cookies: Remember your preferences such as language settings, last-played games, and responsible gaming limit preferences to personalise your session.
• Analytics cookies: Used to understand aggregate platform traffic patterns and session behaviour. Data is processed in aggregate form only.

You may adjust your browser settings to refuse non-essential cookies. Note that disabling certain cookies may affect platform functionality. Strictly necessary cookies cannot be disabled via browser settings while using the platform.

9. Data Security

vcity88 implements the following technical and organisational measures to protect your personal data:

• 256-bit SSL/TLS encryption on all data transmission between your device and vcity88 servers
• AES-256 encryption for personal data stored at rest
• Role-based access controls — production data access is limited to personnel with a demonstrated operational need
• Multi-factor authentication requirements for all staff with access to player data systems
• Regular third-party penetration testing and security audits
• Incident response procedures with defined timelines for breach notification where legally required

No data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. While vcity88 takes all reasonable and commercially practical steps to protect your data, we cannot provide an absolute guarantee of security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, vcity88 will notify affected players and relevant authorities within the timeframes required by applicable law.

10. Your Data Rights

Subject to applicable law and vcity88's legal and regulatory obligations, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data vcity88 holds about you. Requests will be fulfilled within 30 calendar days.
• Right to Rectification: You may request correction of inaccurate personal data. For most account data, you can update information directly in your account settings without contacting support.
• Right to Erasure: You may request deletion of your personal data in certain circumstances. Note that vcity88 may be legally required to retain certain data for regulatory compliance purposes even after account closure — this data cannot be deleted before the applicable retention period expires.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format where this is technically feasible.
• Right to Object: You may object to processing conducted on the basis of legitimate interests. vcity88 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact vcity88 support at the email address in Section 14. We will require identity verification before processing any data subject request to protect against unauthorised access to your personal data.

11. Children's Privacy

vcity88 does not knowingly collect personal data from individuals under the age of 21. The platform is strictly restricted to adults aged 21 and above. Age verification is conducted during the KYC process. If vcity88 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed, the data deleted (subject to any mandatory regulatory retention requirements), and any deposits refunded.

If you have reason to believe that a person under 21 is using a vcity88 account, please contact our support team immediately at the email address in Section 14.

12. International Data Transfers

vcity88 may transfer personal data to, or process personal data in, jurisdictions outside Malaysia in connection with the operation of the platform — for example, in connection with cloud hosting infrastructure or third-party service providers. Where such transfers occur, vcity88 ensures that appropriate safeguards are in place, including contractual data processing agreements that require recipient parties to maintain data protection standards equivalent to those described in this Policy.

By using vcity88's services, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside of Malaysia. vcity88 takes all reasonable steps to ensure such transfers are conducted lawfully and that your data is afforded appropriate protections in the destination jurisdiction.

13. Changes to This Privacy Policy

vcity88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform functionality. Material changes — those that significantly affect how we process your personal data or your rights — will be communicated to registered Members via email to the registered address at least 14 days prior to taking effect, or via a prominent notice on the platform.

The date at the top of this Policy indicates when it was last updated. Your continued use of the vcity88 platform following notification of changes constitutes your acceptance of the updated Privacy Policy. If you do not accept the updated terms, you must cease using the platform and may request account closure.

14. Contact Us

For all privacy-related enquiries, data subject access requests, or concerns about how vcity88 handles your personal data, please contact our data protection team:

This Privacy Policy was last updated in June 2026 and applies to all personal data collected by vcity88 from this date forward. Prior versions of this Policy are available upon request.