Vcity99 Privacy Policy – Your Personal Data Protection

1 Information We Collect

Vcity99 collects two types of information: information you provide directly, and information collected automatically when you use our platform.

Information you provide:

• Full name, date of birth, and identification card number (for the KYC process).
• Email address and mobile number for communication and account verification purposes.
• Current residential address for compliance and identity verification purposes.
• Bank account or e-wallet details for deposit and withdrawal processing purposes.
• A copy of your identity document such as MyKad or passport during the KYC process.

Automatically collected information:

• IP address, browser type and device operating system.
• Session data, pages visited and time spent on the platform.
• Transaction records include deposits, withdrawals, wagering and wins.
• General location data based on IP address for geographic compliance purposes.

2 Purpose of Data Use

The personal data we collect is used solely for the following purposes:

• Account management: Registration, login, password recovery, and management of your account settings.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions on the platform.
• Identity verification (KYC): To verify that you meet the age eligibility and responsible gambling compliance requirements.
• Fraud prevention: Identify and prevent fraud, money laundering, and multiple account usage.
• Service communications: Send transaction notifications, security alerts, and platform update information.
• Legal compliance: Meet the reporting and record-keeping obligations required by applicable law.
• Platform improvement: Analyze usage patterns to improve the overall user experience.

3 Data Sharing with Third Parties

Vcity99 does not sell, rent or disclose your personal data to third parties for marketing purposes. However, in certain situations, we may need to share limited information with the following parties:

All third parties working with vcity99 are bound by strict confidentiality agreements and are required to process your data only in accordance with instructions given by vcity99 and solely for the stated purposes.

4 Data Security

The security of your data is vcity99's top priority. We implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss or disclosure.

The security measures we use include:

• 256-bit SSL Encryption for all data transmitted between your device and our servers.
• Encryption of data at rest for all sensitive personal information stored in our databases.
• Two-factor authentication (2FA) for staff access and additional security options for users.
• 24/7 security monitoring with a real-time intrusion detection system.
• Regular security audits by independent security experts to identify and address potential vulnerabilities.
• Strict access controls ensuring that only authorised staff who require the relevant data to perform their duties can access it.

5 Cookies and Tracking Technologies

Vcity99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login verification and session management. It cannot be disabled.
• Preference cookies: Save your preference settings such as language and display configuration.
• Analytics cookies: Help us understand how users interact with the platform for continuous improvement.
• Security cookies: Help identify suspicious activity and protect your account from unauthorized access.

You can control or disable cookies through your browser settings, but please note that disabling essential cookies may affect the functionality of the vcity99 platform.

6 Data Retention Period

Vcity99 retains your personal data for as long as necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations.

In general, the retention periods are as follows:

• Active account data: Retained for the duration your account is active and for a minimum of 5 years after account closure, in accordance with Malaysia's gambling and financial legal requirements.
• Transaction records: Retained for a minimum of 7 years in accordance with applicable accounting and financial legal requirements.
• KYC Documents: Retained for the period stipulated by responsible gambling compliance requirements.
• Security logs: Retained for 12 months for audit and security investigation purposes.

When data is no longer needed and there is no legal obligation to retain it, vcity99 will delete or anonymise that data in a secure manner.

7 International Data Transfers

Vcity99 servers operate in data centers that comply with international security standards. Where cross-border data transfers are required for operational purposes, vcity99 ensures all transfers are carried out with adequate safeguards, including appropriate data processing agreements and technical protection measures equivalent to Malaysia's standards.

Your data will not be transferred to jurisdictions that do not provide an adequate level of data protection without appropriate additional safeguards.

8 Your Rights as a Data Owner

As a vcity99 user and owner of your own personal data, you have the following rights protected under Malaysia's Personal Data Protection Act 2010:

9 Children's Privacy

The vcity99 platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we find that a child's data has been collected without our knowledge, that data will be deleted immediately and the associated account will be closed.

If you believe that data belonging to a child you know has been collected by vcity99, please contact us immediately through our customer support.

10 Changes to This Privacy Policy

Vcity99 may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When significant changes are made, we will notify you via your registered email or through a prominent notice on the platform at least 14 days before the changes take effect.

The "Updated" date at the top of this page indicates when this Privacy Policy was last reviewed. We encourage you to check this page periodically to stay informed about how we protect your information.