Vcity66 Privacy Policy – Malaysia Member Personal Data Protection

Vcity66 collects your personal information through several methods depending on how you interact with our platform. We only collect information that is genuinely necessary to provide you with a quality and secure service.

Information you provide directly:

• Full name, date of birth and identification card number during account registration and the KYC process.
• Email address and mobile number for verification and communication purposes.
• Bank account or e-wallet details for processing deposits and fund withdrawals.
• Copies of identification documents collected during the identity verification (KYC) process.
• Feedback, enquiries or complaints you submit to our support team.

Information collected automatically:

• IP address, device type, operating system, and browser version used.
• Session log data includes pages visited, access times, and actions taken on the platform.
• Approximate geolocation data based on IP address for legal compliance purposes.
• Device technical information such as unique device identifiers (Device ID) when using the vcity66 mobile app.

All information we collect is intended to ensure the security of your account, meet legal requirements, accurately process financial transactions, and deliver a better, more personalised user experience.

Vcity66 uses collected personal data for lawful and transparent purposes only. We will not use your information beyond the scope stated here without first obtaining your additional consent.

• Account Management — Securely creating, verifying, and maintaining your member account.
• Transaction processing — Processing deposits, withdrawals, and all financial transactions accurately and promptly.
• Legal Compliance — Meeting KYC, AML (anti-money laundering), and reporting requirements mandated under Malaysian law.
• Fraud Prevention — Detecting and preventing suspicious activity, multiple account usage, or any fraudulent attempts against the platform and other members.
• Customer support — Handling enquiries, complaints, and support requests efficiently.
• Important communications — Sending account and security notifications, relevant promotions, and system updates.
• Platform Improvement — Analysing usage patterns to improve overall user experience, platform performance, and usability.
• Responsible gaming — Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate assistance.

You may withdraw consent to receive marketing communications at any time via your account settings or by contacting our support team. Withdrawing marketing consent will not affect data processing required for legal or contractual purposes.

Vcity66 does not sell or rent members' personal data to any party for marketing or commercial purposes. However, in certain situations, we may need to share your information with selected third parties as follows:

• Payment service providers — DuitNow, FPX, TNG eWallet, Boost, and GrabPay to process your financial transactions. They receive only the information necessary for transaction purposes.
• Game software providers — Third-party game platforms integrated with vcity66 may receive anonymous session identifiers for technical purposes.
• Regulatory authorities — Bank Negara Malaysia, the Royal Malaysia Police, or other statutory bodies when required by law or court order.
• Cloud service providers — Data storage and processing is handled through trusted cloud infrastructure under strict confidentiality agreements.

Vcity66 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies — Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies — Collecting information on how you use the platform to help us identify and resolve technical issues.
• Functional Cookies — Remembering your preferences such as language, display theme, and account settings for a consistent experience.
• Analytics Cookies — Helping us understand aggregate usage patterns and user behaviour to improve the platform.

You can control or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality or your experience on the vcity66 platform. For a full guide on managing cookies, refer to your browser's help section.

The security of member personal data is vcity66's top priority. We implement comprehensive technical and organisational security measures to protect your information from unauthorised access, loss, alteration, or disclosure.

• End-to-end encryption for all communications between the platform and its users.
• Encryption of data at rest using AES-256 standards across all databases containing personal information.
• Real-time threat monitoring and an intrusion detection system (IDS/IPS) operating around the clock.
• Periodic penetration testing and independent security audits conducted by qualified third parties.
• A mandatory information security training programme that all vcity66 staff must complete every year.
• Clear incident response procedures to ensure any data breach is addressed promptly and effectively.

As a vcity66 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

• Right of Access — You have the right to obtain a copy of the personal data we hold about you.
• Right to Rectification — You have the right to request correction of inaccurate or incomplete data.
• Right to Erasure — You may request deletion of your personal data under certain circumstances, subject to legal obligations that prevent such deletion.
• Right to Object — You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability — You may request your data in a machine-readable format for transfer to another service provider.

To exercise any of the rights above, please contact our support team via 24/7 live chat on the vcity66 platform or by emailing our support address. We will process your request within 30 business days in accordance with PDPA provisions.

Vcity66 services are exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

Should we determine that we have collected personal data from someone under the age of 18, we will take immediate steps to delete that information and close the associated account without prior notice.

The vcity66 platform may contain links to third-party websites or services such as game providers, payment partners or external information sources. These links are provided solely for your convenience.

Vcity66 is not responsible for the privacy practices or content of third-party websites. Each third-party website has its own privacy policy independent of ours. We encourage you to read the privacy policy of any website you visit via links from our platform.

Your interactions with third-party websites are entirely your own responsibility, and vcity66 has no control over how they handle your personal data.

Vcity66 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or new platform features. We are committed to notifying you of any significant changes.

• Significant changes will be communicated via in-platform notifications or by email to the address registered on your account.
• The effective date of the latest version will be updated at the top of this document.
• Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy.
• Previous versions of the Privacy Policy are available upon request from our support team for reference purposes.

We encourage you to review this Privacy Policy periodically so you are always informed of how we protect your personal information.

If you have any questions, concerns, or wish to exercise your rights regarding this Privacy Policy, our support team is ready to assist you through the following channels:

• Live Chat 24/7 — The fastest way to get immediate assistance. Available directly on the vcity66 platform.
• Support Email — [email protected] for written enquiries requiring a detailed response.

We will endeavour to respond to all privacy-related enquiries within 5 business days. For formal PDPA rights exercise requests, processing time is up to 30 business days.