Privacy Policy vcity177 — Our Commitment to Protecting Your Data

Vcity177 collects your personal information through two main channels: information you provide directly while using the platform, and information collected automatically through industry-standard tracking technologies.

Information you provide directly:

• Registration Information: Your full name, active Malaysian phone number, email address, and the password you created when registering your vcity177 account.
• Identity Verification (KYC) Information: A copy of your identity document (MyKad), a facial photo for verification, and proof of address (utility bill or bank statement) when requested by the vcity177 compliance team.
• Financial Information: Your bank account number, account holder name, and digital wallet details (DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) registered for deposit and withdrawal purposes in MYR.
• Support Communications: Live Chat conversation records, emails sent to support@vcity177.best, and any documents or images you attached as supporting evidence in a complaint or enquiry.
• Optional Information: Date of birth, gender, and any other profile information you choose to share voluntarily.

Information collected automatically:

• Your device's IP address and approximate location information based on IP.
• Web browser type, operating system, and device information (phone model, screen size).
• Platform activity records including games played, session duration, bets placed, and game outcomes.
• Cookie data and similar tracking technologies (detailed in Section 5).
• Server log records including access times and dates, pages visited, and links clicked.

Vcity177 collects and processes your personal information only for legitimate and necessary purposes. Below is a complete list of the data usage purposes we carry out:

Vcity177 will not process your data for any purpose not listed above without first obtaining your separate consent. You may withdraw consent for promotional communications at any time through your account settings or by contacting us.

Vcity177 continuously invests in cybersecurity infrastructure to ensure your personal data is protected to the highest standard at all times. Our protection measures span multiple layers:

Technical Security:

• In-transit encryption using 256-bit SSL/TLS for all communications between your device and vcity177 servers.
• Encryption of data at rest for all sensitive information stored in our databases, including passwords (using bcrypt hashing) and financial information.
• A web application firewall (WAF) that filters and blocks malicious traffic in real time.
• Intrusion detection systems (IDS/IPS) that monitor suspicious activity 24 hours a day.
• Regular security vulnerability scans conducted by both our internal security team and independent third parties.
• Two-factor authentication (2FA) is available for all player accounts as an optional additional layer of security.

Operational Security:

• Role-based access control (RBAC) ensuring staff can only access data relevant to their job responsibilities.
• All internal access to player data is logged and monitored automatically.
• Mandatory cybersecurity and data privacy training for all vcity177 staff, conducted twice a year.
• A clear incident response procedure to ensure any data breach is identified and addressed promptly.

In the event of any data security breach affecting your personal information, vcity177 will notify you within 72 hours of confirming the breach, in line with industry best practices and Malaysia's PDPA requirements.

Vcity177 does not sell or trade your personal information. However, in the course of operating the platform, we may need to share certain personal data with carefully selected third parties under limited and controlled circumstances.

Third parties that may receive a portion of your data:

• Payment Service Providers: DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay receive the transaction information necessary to process your deposits and withdrawals in MYR. These providers maintain their own privacy policies and are subject to Bank Negara Malaysia regulations.
• Game Providers: Live casino and slots game development companies receive the session data required to run the games. This data does not contain your full identifying information.
• Identity Verification (KYC) Providers: Third-party services used to verify your identity documents in order to meet anti-money laundering compliance requirements.
• Platform Analytics Services: Anonymized and aggregated usage data may be shared with analytics tools to help us understand how the vcity177 platform is used and where improvements are needed.
• Legal Authorities: vcity177 will disclose personal information to the relevant authorities when required by law, court order, or valid legal process.

Vcity177 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser when you visit vcity177.

Essential cookies are required for the core functions of the vcity177 platform and cannot be disabled without affecting your ability to log in and use our services. Optional cookies can be managed through your web browser settings or by contacting us to update your privacy preferences.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding personal information held by vcity177. We are committed to respecting and facilitating the exercise of these rights.

Vcity177 does not retain your personal data for longer than is necessary for the purpose it was collected, or as required by applicable law. The following are our data retention guidelines:

• Active Account Data: Retained for the entire duration your account remains active on the vcity177 platform.
• Closed Account Data: Basic account information and transaction records are retained for 7 years following account closure to meet tax compliance, AML requirements, and potential legal dispute obligations.
• Support Communication Records: Support chat logs and emails are retained for 3 years from the date of last communication.
• Gaming Activity Records: Full betting activity logs are retained for 5 years for audit and dispute resolution purposes.
• KYC Documents: Retained for 7 years after the business relationship ends, in line with Malaysia's anti-money laundering legal requirements.
• Server Log & IP Data: Retained for 90 days for security and fraud detection purposes.
• Analytics Cookies: Data collected through analytical cookies is anonymised after 26 months.

Once the applicable retention period has ended, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

In the course of operating the platform, your personal data may be processed or stored on servers located outside Malaysia. This occurs when vcity177 engages cloud service providers or international game providers that operate from overseas.

When your data is transferred outside Malaysia, vcity177 ensures that such transfers are made only to countries or recipients that provide a level of data protection equivalent to that required under Malaysia's PDPA. The safeguards we apply include:

• Data processing agreements with internationally accepted standard clauses.
• Assessment of the data protection standards in the recipient country prior to approving any transfer.
• Data is encrypted before transfer to ensure protection in transit.

To learn more about the data transfer mechanisms we use, contact our Privacy Officer at privacy@vcity177.best.

Vcity177 is an adult entertainment platform that for individuals aged 18 and above only. We do not knowingly collect or process personal information from individuals under the age of 18.

If we discover that personal information from an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to:

• Immediate suspension of the associated account.
• Delete all personal information collected from that individual as promptly as possible.
• Returning any funds deposited through the appropriate method.

Vcity177 has appointed a Data Protection Officer (DPO) responsible for ensuring the platform's compliance with Malaysia's PDPA and this Privacy Policy. If you have any questions, concerns, or wish to exercise any of your data privacy rights, please contact: