Data Protection

vcity88 Privacy Policy: How We Handle Your Personal Data

This Privacy Policy explains what personal data vcity88 collects from Malaysian players, the purposes for which it is processed, how it is protected, the conditions under which it may be shared, and the rights available to you as a data subject.

Effective date: 1 January 2026
Introduction

Our Commitment to Privacy at vcity88

vcity88 is committed to handling your personal data with care, clarity, and proportionality. This policy applies to every player who creates an account, deposits MYR funds, places a bet, accesses live casino or sports betting markets, contacts support, or otherwise interacts with our platform. By using vcity88, you acknowledge this policy and the practices described within it.

When we use the terms "vcity88", "we", "our", or "us", we are referring to the operator and its authorised service providers responsible for running the platform. "You" or "player" means any verified or prospective account holder accessing vcity88 from any location, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam.

vcity88 collects only the personal data needed for legitimate, defined purposes. We do not sell player data to third parties for their own independent marketing. We apply appropriate technical and organisational safeguards and retain data only for as long as reasonably necessary.

This policy should be read together with the vcity88 Terms & Conditions and the Responsible Gambling information available on this site. Where a conflict arises between this policy and those documents, the more privacy-protective provision shall apply wherever practicable.

Core Principles

How We Approach Data Protection

Six principles guide every data processing decision at vcity88, from account registration through to account closure.

Purpose Limitation

Data collected for one purpose — such as identity verification — is not repurposed for unrelated activities without a clear legal basis or your consent where required.

Data Minimisation

vcity88 requests only the information genuinely needed to deliver a service, complete a check, or meet a regulatory obligation. Unnecessary collection is avoided.

Accuracy

We take reasonable steps to keep the personal data we hold current. Players are encouraged to update account details promptly when they change.

Security by Design

Encrypted connections, access controls, session management, and audit logging are applied throughout vcity88 to protect personal data from unauthorised access.

Retention Limits

Personal data is not held indefinitely. Retention periods are tied to service necessity, legal obligation, dispute resolution, and responsible gambling monitoring requirements.

Accountability

vcity88 and its authorised processors are accountable for compliance with this policy. Third-party processors are selected with care and bound by data protection obligations.

Section 1

Definitions

The following defined terms apply throughout this Privacy Policy:

  • Personal Data — any information that identifies or could reasonably identify a natural person, whether alone or in combination with other information held by vcity88.
  • Processing — any operation carried out on personal data, including collection, storage, use, disclosure, retention, and deletion.
  • Data Subject — the individual to whom personal data relates, in this context the vcity88 account holder or prospective player.
  • Controller — vcity88 and the operator entity responsible for determining the purpose and means of processing personal data through this platform.
  • Processor — a third party engaged by vcity88 to process personal data on behalf of and under the instruction of the controller.
  • KYC — Know Your Customer, the identity and verification procedures applied by vcity88 to confirm eligibility, ownership, and regulatory compliance.
  • Sensitive Data — categories of personal data that carry heightened risk, such as financial records, government-issued identity information, or health disclosures related to responsible gambling.
Section 2

Personal Data We Collect

Account Registration Data

When you create a vcity88 account, we collect your full legal name, date of birth, contact email address, phone number, and residential address. This information is essential to create a verified account and enforce the 21+ age requirement.

Identity and KYC Documents

To comply with verification obligations, we may collect copies or images of your Malaysian IC (MyKad), passport, proof of address, and payment ownership records. Documents are transmitted and stored using encrypted channels.

Payment and Transaction Data

Records of MYR deposits, withdrawals, bonus claims, and wager history are retained for account management, fraud prevention, and dispute resolution. Payment channel identifiers for Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, and other supported methods are stored to facilitate fund matching and withdrawal processing.

Technical and Device Data

IP address, device type, browser information, session timestamps, and platform interaction logs are collected automatically when you access vcity88. This data is used to maintain security, prevent unauthorised access, and improve service reliability.

Section 3

Purposes of Data Processing

Account Administration

Personal data is processed to create, maintain, verify, and close vcity88 accounts. This includes identity confirmation, contact management, eligibility assessment, and password security.

Payment Processing and Verification

Transaction data is used to execute deposits and withdrawals in MYR, match payment methods to the registered account holder, detect irregular transfers, and respond to payment queries from Malaysian banks and e-wallet providers.

Security and Fraud Prevention

Login patterns, device signals, IP records, and account activity are monitored to identify suspicious behaviour, protect player accounts, prevent identity misuse, and respond to attempted fraud.

Regulatory and Legal Compliance

vcity88 processes identity, financial, and activity data to meet applicable anti-money laundering, age verification, and operational requirements under the regulatory framework governing this platform.

Responsible Gambling Monitoring

Deposit frequency, session duration, and loss patterns may be reviewed to identify signs of problem gambling and trigger appropriate support interventions in line with the responsible gambling commitments described on our Responsible Gambling page.

Customer Support

Support communications, including live chat transcripts and email correspondence, are retained to resolve ongoing queries, assist with dispute review, and improve service quality.

Section 4

Legal Basis for Processing

vcity88 relies on the following lawful grounds when processing your personal data:

  • Contractual necessity — processing required to perform the services set out in the Terms & Conditions, including account management, payment execution, and wagering operations.
  • Legal obligation — processing necessary to comply with applicable identity, anti-money laundering, age verification, or data retention requirements.
  • Legitimate interests — processing for fraud prevention, platform security, account monitoring, responsible gambling assessment, and service improvement, where these interests are not overridden by your rights.
  • Consent — where vcity88 relies on your explicit consent for a specific processing activity, such as optional marketing communications, you may withdraw that consent at any time by contacting support.

vcity88 does not make automated decisions that produce significant legal effects on your account solely through algorithmic processing without human review where that review is required under applicable obligations.

Section 5

Sharing and Disclosure of Data

vcity88 does not sell, rent, or trade your personal data to third parties for their own marketing. Data may be shared in the following limited circumstances:

Authorised Service Providers

vcity88 engages trusted processors including payment gateway operators, KYC verification services, game software providers, IT infrastructure partners, and customer support platform operators. These parties act under contractual data protection obligations and may only process your data for the specific purpose for which they have been engaged.

Regulatory and Law Enforcement Authorities

vcity88 may disclose personal data to competent authorities where required by applicable law, court order, or regulatory obligation. Disclosures will be limited to what is strictly necessary.

Fraud and Security Investigations

Where fraud, payment misuse, identity theft, account manipulation, or serious security incidents are identified or reasonably suspected, vcity88 may share relevant data with payment providers, financial institutions, or security partners to investigate and respond to the matter.

Corporate Transactions

In the event of a business restructuring, merger, acquisition, or transfer of assets, player data may form part of that transaction under appropriate confidentiality and data protection commitments.

Section 6

Data Security

vcity88 implements layered security measures proportionate to the risk of harm from unauthorised access, disclosure, alteration, or destruction of personal data. These measures include:

  • TLS and SSL encryption for all data transmitted between your device and our servers.
  • Encrypted storage for sensitive records, including identity documents, payment details, and authentication credentials.
  • Role-based access controls restricting internal access to personal data to those with a legitimate operational need.
  • Session management and automatic timeout procedures to reduce the risk of unauthorised account access.
  • Monitoring and alerting systems for unusual login patterns, suspicious transaction activity, and attempted data exfiltration.

No security system is completely infallible. If you suspect your vcity88 account has been accessed without your authorisation, contact our 24/7 support team immediately.

Section 7

Data Retention

vcity88 retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to the following considerations:

Active Accounts

While your account remains active and verified, vcity88 retains registration, KYC, payment, transaction, and support data to deliver ongoing services and meet regulatory obligations.

Closed or Suspended Accounts

Following account closure, vcity88 may retain transaction records, identity documents, and communication logs for a further period where required by applicable legal, regulatory, anti-money laundering, or dispute resolution obligations. Retention periods vary based on the nature of the data and the jurisdiction's requirements.

Responsible Gambling Records

Self-exclusion requests, deposit limit changes, and related responsible gambling records may be retained beyond account closure to honour protective commitments and prevent circumvention through re-registration.

When personal data is no longer required, it is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

Section 8

Cookies and Tracking Technologies

vcity88 uses cookies and similar technologies to support essential platform functionality, maintain session security, analyse aggregated usage patterns, and improve the overall player experience. The principal categories are as follows:

Essential Cookies

Required for login sessions, security tokens, fraud prevention, and the basic operation of account features. These cannot be disabled without affecting core functionality.

Functional Cookies

Support remembered preferences such as language setting, display options, and session continuation across page navigations within vcity88.

Analytics Cookies

Collect aggregated, anonymised data about page visits, navigation paths, and feature usage to help vcity88 identify performance issues and service improvements. Individual player identity is not passed to analytics providers.

Security Cookies

Support bot detection, rate limiting, account monitoring, and suspicious-activity detection to protect vcity88 and its players from automated attacks and fraudulent access attempts.

You may adjust your browser settings to restrict or delete cookies. Disabling essential cookies may impair your ability to log in or use account features within vcity88.

Section 9

Your Data Rights

Depending on applicable data protection rules, you may be entitled to one or more of the following rights in relation to the personal data vcity88 holds about you.

Right of Access Request a copy of the personal data vcity88 holds about you and receive information on how it is being processed.
Right of Rectification Request correction of inaccurate or incomplete personal data held on your vcity88 account.
Right to Erasure Request deletion of personal data in certain circumstances, subject to legal, regulatory, and responsible gambling retention obligations.
Right to Restrict Processing Request that vcity88 limits the processing of your data while accuracy, lawfulness, or an objection is being assessed.
Right to Object Object to processing based on legitimate interests, including profiling for responsible gambling or fraud detection, in certain circumstances.
Right to Portability Receive a copy of personal data you provided to vcity88 in a structured, commonly used format where technically feasible.
Withdrawal of Consent Where processing relies on your consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.
How to Exercise Rights Contact vcity88 through the on-site 24/7 support channel. We aim to respond within a reasonable timeframe, subject to identity verification.
Section 10

Children and Minors

vcity88 is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals below the minimum age requirement. Where a player is found to be underage, the account will be closed, pending activity will be voided, and personal data will be handled according to applicable legal obligations.

The 21+ age requirement is enforced through KYC document checks applied before withdrawal processing. If you believe an underage person has created a vcity88 account, contact support immediately through the on-site channel.

Section 11

Third-Party Links and Services

vcity88 may display informational references to Malaysian payment brands such as Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, and Public Bank within the platform interface. vcity88 is not responsible for the privacy practices of third-party payment processors, banking institutions, or game software providers who have their own data handling policies.

We recommend reviewing the privacy notices of any payment provider you use in connection with vcity88, as their data practices are independent of this policy. All data sharing with authorised processors operates under contractual safeguards as described in Section 5.

Section 12

International Data Transfers

vcity88 operates through service providers that may be located outside Malaysia. Where personal data is transferred to an overseas processor, vcity88 takes reasonable steps to ensure that appropriate safeguards are in place, whether through contractual data protection clauses, the security capabilities of the recipient, or the nature of the processing activity.

Cross-border transfers are limited to what is necessary for the delivery of vcity88 services, identity verification, payment processing, security monitoring, and regulatory compliance. We do not transfer data to locations solely for cost reasons without appropriate safeguards.

Section 13

Changes to This Policy

vcity88 may update this Privacy Policy from time to time to reflect changes in data processing practices, legal obligations, platform features, or operational requirements. The effective date displayed at the top of this page will be updated when material changes are made.

Where changes are significant, we will take reasonable steps to notify active account holders. Continued use of vcity88 after an updated policy takes effect constitutes acknowledgement of the revised terms. You are encouraged to review this page periodically to stay informed about how we handle your personal data.

Section 14

Contact Us

If you have a question, concern, or request relating to this Privacy Policy or the personal data vcity88 holds about you, please contact our support team using the on-site 24/7 Live Chat. Support agents are available in English, Bahasa Melayu, and Chinese.

You may also write to us by email — the address is displayed as plain text in the footer of this page. Do not include your account password or full payment details in any written communication. For data access requests or deletion requests, your account identity will need to be confirmed before we proceed.

vcity88 aims to respond to all substantive privacy enquiries within a reasonable period. Complex requests involving extensive record searches, third-party data verification, or legal review may require additional time, and we will keep you informed of progress where a delay is expected.

21+ Age Requirement and Responsible Data Use

vcity88 is available only to verified adults aged 21 and above. Personal data related to responsible gambling — including self-exclusion requests, deposit limits, and session records — is handled with heightened care and is not used for any commercial purpose. For tools and support resources, visit the Responsible Gambling page.

Your Data, Your Control

Confident That Your Privacy Is Protected?

Return to the vcity88 homepage to explore the platform, or read our responsible gambling and terms information before getting started. vcity88 is for eligible adults aged 21 and above only.