Privacy Policy vcity365 – Personal Data Protection for Malaysia Members

Vcity365 understands that your trust is the foundation of the relationship we build together. When you register an account, make a deposit, or simply browse our platform, you are entrusting us with your personal information. We do not take this responsibility lightly. This Privacy Policy is written in plain, easy-to-understand language — not confusing legal jargon — because we believe every member deserves to know exactly what happens to their data.

1. Personal Data We Collect

We collect several categories of data depending on how you interact with the vcity365 platform:

A. Data You Provide Directly

• Full name as per identity card (MyKad).
• Active email address and mobile phone number.
• Date of birth (for age verification — 18 and above).
• Current residential address.
• Bank account or e-wallet details for deposit and withdrawal purposes.
• Identity verification documents (MyKad, passport) and proof of address during the KYC process.
• Photos or images submitted for verification purposes.

B. Automatically Collected Data

• IP address and approximate location based on IP.
• Device type, operating system, and browser version in use.
• Login session timestamps and duration.
• Game history, wagering, deposits, and withdrawals.
• Interaction logs with the platform including clicks, searches, and page navigation.
• Cookie information and device identifiers.

C. Data from Third Parties

• Verification information from payment service providers (FPX, TNG eWallet, DuitNow).
• Identity verification data from recognised third-party KYC providers.
• Blacklist information from regulatory bodies related to AML (Anti-Money Laundering).

2. How We Use Your Data

Vcity365 uses your personal data solely for the following purposes — and nothing beyond that:

We do not use your data for any purpose not listed above without obtaining your consent first.

3. Sharing Data with Third Parties

Vcity365 does not sell your personal data to any party. However, in certain situations, we may need to share your information with the following parties:

• Payment Service Providers: FPX, Touch 'n Go eWallet, DuitNow, and other approved payment providers — to process your financial transactions.
• KYC Providers: Accredited third-party identity verification companies to support a secure and efficient KYC process.
• Game Providers: Game providers such as Evolution Gaming and Pragmatic Play may receive anonymised member IDs for technical gaming purposes.
• Legal Authority: Where required by law, court order, or a legitimate regulatory body investigation.
• IT Service Providers: Companies supporting the platform's technical operations, subject to strict confidentiality agreements.

All third parties we work with are required to comply with data protection standards equal to or higher than those we apply ourselves.

4. Data Security & Protection

We continuously invest in security technology and procedures to keep your data safe at all times. The protective measures we have in place include:

• 256-bit SSL encryption for all data communications between your browser/app and our servers.
• Password storage with hashing using the bcrypt algorithm — your password is never stored in plain text.
• Two-factor authentication (2FA) for an additional layer of security during login.
• Continuous 24/7 monitoring by our cybersecurity team for suspicious activity.
• Server isolation for sensitive data such as KYC documents and financial information.
• Regular security audits by independent third parties to identify and address vulnerabilities.
• Role-based access control — only authorised staff may access specific categories of data.

While we implement the best security measures available, no system can be guaranteed 100% threat-free. You also play an important role by keeping your account password confidential and not sharing it with anyone.

5. Your Privacy Rights as a vcity365 Member

Under the Malaysian Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our support team via 24/7 live chat. We will verify your identity before processing any personal data request.

6. Cookies & Tracking Technologies

Vcity365 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Session Cookies: Required to maintain your login status during an active session. Automatically deleted when you close your browser.
• Preference Cookies: Store your preferences such as language and platform theme, helping us deliver a more personalised experience.
• Analytics Cookies: Collect anonymous usage data to help us understand how members interact with the platform and improve it.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of the vcity365 platform.

7. Data Retention Period

Vcity365 retains your personal data for as long as your account is active or as long as necessary for the purposes stated in this policy. Specific retention periods are as follows:

• Active Account Data: Retained for as long as your account is active and for 5 years after account closure.
• Financial Transaction Records: Retained for 7 years in accordance with accounting and AML legal requirements.
• KYC Documents: Retained for 5 years after account closure in accordance with compliance requirements.
• Support Communication Logs: Retained for 2 years for reference and dispute resolution purposes.
• Analytics Cookie Data: Retained for a maximum of 13 months from the date the cookie was set.

Once the retention period expires, data will be securely deleted or anonymised so it can no longer be linked back to you.

8. Children's Data Protection

Vcity365 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we find that we have collected personal data from a minor without proper verification, we will:

• Close the account in question immediately.
• Delete all data associated with that individual.
• Refund any deposits made (subject to investigation).

If you have reason to believe that someone under the age of 18 has registered an account at vcity365, please contact our support team immediately.

9. Amendments to This Privacy Policy

Vcity365 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs.

When we make significant changes to this policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Display an in-account notification upon your next login.
• Send an email notification to the address registered on your account (for material changes).

We encourage you to review this page periodically. Continued use of the vcity365 platform after any policy amendment takes effect will be considered your acceptance of the revised policy.

10. How to Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, we encourage you to reach out to us:

All privacy-related requests are handled by a team specifically trained in data handling under the PDPA. Your identity will be verified before any action is taken on your data.