Vcity333 Privacy Policy – Personal Data Protection for Malaysian Players

Vcity333 (referred to as "we", "the platform", or "vcity333" in this document) is committed to protecting and respecting the privacy of every individual who uses our services. This Privacy Policy has been developed to meet the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and clearly outlines our approach to managing personal data.

This policy applies to all personal information collected through:

• The official vcity333 website at https://vcity333.ws
• Vcity333 mobile app (if available)
• Email, live chat, or other support channel communications between you and vcity333
• Any services or features we may offer from time to time

We encourage you to read this Privacy Policy carefully. Should there be any material changes to how we handle your personal data, we will notify you via an in-platform notice or by email before those changes take effect.

Vcity333 collects various types of personal data depending on how you interact with our platform. The following are the categories of data we may collect:

Vcity333 collects your personal data through the following methods:

• Directly from you — when you register an account, complete your profile, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically — when you browse or use the vcity333 platform, our systems automatically record technical data such as your IP address, device type, visit time, and pages visited via cookies and similar technologies.
• From trusted third parties — in certain cases, we may receive information from identity verification service providers, payment processors such as FPX via Maybank2u or CIMB Clicks, or relevant authorities where required by law.
• Through your use of our services — game history, betting records for the Malaysia Super League, EPL, badminton, e-sports, and casino games, as well as platform usage patterns, are automatically generated and stored as you use vcity333.

Vcity333 uses the personal data collected for the following purposes, all grounded in a lawful basis under PDPA 2010:

• Account management: Creating, verifying, and managing your vcity333 user account, including the KYC process required for security and regulatory compliance.
• Service provision: Enables you to access and use all features of the vcity333 platform, including slots, Live Casino, blackjack, roulette, jackpot, cricket, and Sports Betting.
• Financial processing: Processes your deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, or CIMB Clicks, and handles your winnings withdrawals in MYR.
• Security & fraud prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, and security breaches using technical data and usage patterns.
• Service communications: Sending transaction notifications, security alerts, service updates, and responses to your customer support enquiries.
• Personalise your experience: Analysing usage patterns to offer more relevant game recommendations, personalised promotions, and an improved platform experience.
• Legal compliance: Fulfilling legal and regulatory obligations applicable in Malaysia, including requests from competent authorities.

Vcity333 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. However, we may share your personal data in the following limited circumstances:

• Service providers: Third parties that assist us in providing our services — such as payment processors, identity verification providers, and cloud infrastructure providers — may only use your data for purposes we specify and are bound by strict confidentiality agreements.
• Relevant authorities: We may disclose your data to Malaysian government agencies, law enforcement bodies, or regulatory authorities when required by law or court order.
• Protection of vcity333's rights: In cases of litigation, fraud investigation, or the enforcement of vcity333's legal rights, relevant personal data may need to be disclosed.

The security of your personal data is vcity333's top priority. We employ a range of technical and organisational measures to protect your data from unauthorised access, loss, alteration, or disclosure.

The security measures we implement include:

• Data encryption in transit using 256-bit TLS/SSL protocols.
• Encryption of stored data for sensitive information such as passwords and financial details.
• Role-based access control (RBAC) ensuring that only authorised personnel can access user data.
• Continuous 24/7 system security monitoring.
• Regular independent security audits to identify and address vulnerabilities.
• A comprehensive incident response plan in the event of a data breach.

While we take every reasonable measure to protect your data, no method of transmission over the internet or electronic storage is 100% secure. As such, we cannot guarantee the absolute security of your data.

Vcity333 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you browse a website.

Types of cookies we use:

• Essential Cookies (Required): Required for core platform functionality such as login authentication and session security. These cookies cannot be disabled.
• Preference Cookies: Saves your settings and preferences, such as your preferred language and display settings.
• Analytics Cookies: Helps us understand how users interact with the platform for ongoing improvements. Data collected is aggregated and does not identify individuals.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can manage or disable cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of the vcity333 platform.

Vcity333 is a platform intended exclusively for individuals aged 18 years and above. We do not knowingly collect, store, or process personal data of individuals under the age of 18.

Should we discover that we have collected personal data from an individual under the age of 18, we will immediately:

• Immediately terminating the account in question.
• Permanently deleting all personal data belonging to that individual from our systems.
• Refunding any deposits made by that individual.

If you suspect that someone under the age of 18 has registered at vcity333, please notify us immediately at privacy@vcity333.ws.

As a vcity333 user in Malaysia, you have the following rights regarding your personal data under the PDPA 2010:

• Right of Access: You have the right to request and receive a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request the correction of any inaccurate or outdated personal data.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that we restrict the processing of your personal data.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, such as direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that has already taken place.
• Right to Lodge a Complaint: You have the right to lodge a complaint with Malaysia's Personal Data Protection Commissioner if you are dissatisfied with how we handle your data.

In the course of our operations, your personal data may be transferred to or stored on servers located outside Malaysia. However, vcity333 ensures that any such data transfers are carried out in accordance with data protection standards that are equivalent to or exceed the requirements of Malaysia's PDPA 2010.

Measures we take to protect data during cross-border transfers include:

• Ensuring that data recipients in other countries maintain an adequate level of protection.
• Using transfer mechanisms such as data processing agreements and standard contractual clauses.
• Processing transfers only to countries or entities that have obtained our approval and are bound by strict data protection obligations.

Vcity333 retains your personal data only for as long as necessary for the stated purposes or as required under Malaysian law. Our data retention guidelines are as follows:

• Active account data: Retained for the duration of your active account at vcity333 and for a reasonable period following account termination.
• Financial transaction records: Retained for a minimum of 7 years in compliance with Malaysian tax and financial legal requirements.
• KYC records and identity verification: Retained for a minimum of 5 years after the business relationship ends, in compliance with AML legal requirements.
• Support communication records: Retained for 3 years for reference and dispute resolution purposes.
• System and security log data: Retained for 12 months for security investigation purposes.

When your personal data is no longer needed, we will delete or anonymise it in a secure and irreversible manner.

Vcity333 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or the services we offer.

In the event of material changes, we will notify you via:

• A prominent notice within the vcity333 platform upon your next login.
• An email to the address registered to your account, at least 14 days before the changes take effect.
• Updating the "Last Updated" date at the top of this page.

Your continued use of the vcity333 platform after any changes take effect will be deemed acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how vcity333 handles your personal data, please contact our Data Protection Officer:

• Email: privacy@vcity333.ws (for privacy enquiries and data rights requests)
• General Support Email: support@vcity333.ws
• Live Chat: Available 24/7 via the vcity333 platform

We are committed to addressing every enquiry or complaint seriously and within the stipulated timeframe. If you are dissatisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia.