Privacy Policy vcity — Personal Data Protection for Malaysian Players

Information We Collect from You

When you register and use the vcity platform, we collect various types of information to ensure a safe, seamless and personalised gaming experience for you. This data collection is carried out transparently and only for legitimate purposes.

Information You Provide Directly

• Account information: Full name, date of birth, email address, phone number and the password you set during registration.
• Identity verification documents (KYC): Copies of your identity card, passport, driver's licence or other official documents required to verify your identity.
• Financial information: Bank account details, e-wallet information and payment methods used for deposits and withdrawals — stored in encrypted form.
• Communications: Records of your conversations with our customer support team via live chat, email or other channels.
• Profile information: Language preference, account settings, responsible gaming limits and other information you update in your profile.

Automatically Collected Information

In addition to information you provide directly, the vcity system also automatically collects technical data when you use our platform:

• Device data: Device type, operating system, phone model, screen resolution and unique device identifier.
• Network data: IP address, browser type, software version and internet service provider (ISP).
• Activity data: Pages you visit, games played, session duration, clicks and navigation patterns within the platform.
• Location data: General location information based on your IP address, not your precise GPS location, unless you grant specific permission.

How vcity Uses Your Personal Data

Vcity uses the information collected for a variety of legitimate and necessary purposes to ensure the platform runs smoothly and delivers the best experience for Malaysian players. The primary purposes for which your data is used are as follows:

Vcity will not use your personal data for any purpose not stated in this Privacy Policy without notifying you in advance and, where required, obtaining your consent.

Information Sharing with Third Parties

Vcity does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are certain situations where we need to share your information with trusted parties for legitimate operational purposes:

• Payment service providers: Parties such as banks, credit card processors and e-wallet operators that process your financial transactions. They are bound by strict confidentiality agreements.
• Game software providers: Third-party game providers may receive technical data necessary to ensure games function correctly — no personally identifiable information is shared.
• Regulatory and law enforcement bodies: vcity will disclose information when required by law, court order, or direction from a competent authority.
• Analytics services: An analytics platform that helps us understand usage patterns to improve our services — this data contains no personally identifiable information.

Cookies and Tracking Technologies

Vcity uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the vcity website.

Types of Cookies We Use

• Essential cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as the platform will not function without them.
• Preference cookies: Saves your settings such as preferred language, display theme and game configuration so you do not have to reconfigure them each time you log in.
• Analytics cookies: Helps us understand how players interact with the platform so we can improve its design and existing features.
• Security cookies: Used to detect suspicious activity, prevent fraud and protect player accounts from unauthorised access.

You can manage your cookie settings through your browser. Please note that disabling certain cookies may affect the functionality of some parts of the vcity platform.

Data Retention and Transfer Period

Vcity retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, subject to applicable legal requirements.

Standard Retention Period

• Active account data: For the duration your account remains active, plus any retention period required by law following account closure.
• Financial transaction records: Minimum 7 years in accordance with internationally applicable Anti-Money Laundering (AML) regulatory requirements.
• Support communication records: 3 years after the last interaction, for reference and service quality improvement purposes.
• Technical log data: 90 days for regular activity logs; up to 2 years for logs related to ongoing security investigations.

International Data Transfers

As vcity operates as a global platform, your personal data may be stored or processed on servers located outside Malaysia. In all such cases, vcity ensures that data transfers are carried out in accordance with internationally recognised protection mechanisms and security standards equal to or higher than local standards.

Your Rights Regarding Personal Data

As a vcity player, you have certain rights regarding your personal data that we take seriously. The following is a summary of your rights:

To exercise any of the above rights, contact the vcity customer support team via live chat. We will process your request within 30 business days.

Vcity Data Security Measures

Vcity implements a comprehensive range of technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or unintentional destruction.

• Data encryption in transit: All communications between your device and vcity servers are protected with TLS 1.3 protocol and 256-bit SSL encryption.
• Data encryption at rest: Sensitive data such as passwords and financial information is encrypted at rest using the industry-standard AES-256 encryption algorithm.
• Internal access controls: Access to players' personal data within the vcity organisation is restricted to staff who require it, in accordance with the principle of least privilege.
• 24/7 monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or unusual activity.
• Incident response plan: vcity has clear procedures in place to handle any data breach, including notifying affected players and relevant authorities within the timeframes required by law.

Children's Privacy and Underage Players

The vcity platform is inappropriate and not permitted for individuals under the age of 18. vcity does not knowingly collect or process personal data from minors. Should we determine that a player is under 18, their account will be terminated immediately and all collected data will be deleted.

If you believe that an underage individual has registered on the vcity platform, please contact our support team immediately so that appropriate action can be taken promptly.

Third-Party Links and Services

The vcity platform may contain links to third-party websites or services not operated by us, such as game providers or payment partners. This Privacy Policy does not apply to those third-party websites or services.

Vcity is not responsible for the privacy practices of third parties. We encourage you to read the Privacy Policy of every website you visit. Please note that any information you provide to third parties is beyond vcity's control.

Amendments to This Privacy Policy

Vcity reserves the right to update or modify this Privacy Policy at any time. Any significant changes will be communicated to you via your registered email or an in-platform notification before the changes take effect.

Your continued use of the vcity platform after those amendments take effect will be considered your acceptance of the updated Privacy Policy. The "Updated" date at the top of this document indicates when the last amendment was made.

If you do not agree with any amendments to this Privacy Policy, you have the right to close your account and request deletion of your data by contacting the vcity customer support team.