Privacy Policy – vcity177

1. Introduction

vcity177 ("we", "us", "our", "the Platform") operates the website located at https://vcity177.co and provides online gaming services to registered Players, principally in Malaysia. We are committed to protecting the privacy and personal data of all individuals who interact with the vcity177 platform, whether as registered account holders or as visitors to our website.

This Privacy Policy describes the categories of personal data we collect, the purposes for which we process that data, the lawful bases on which we rely, the parties with whom we may share it, the measures we take to keep it secure, and the rights you have in relation to your personal information.

By creating a vcity177 account or using our Services, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Privacy Policy, you should not create an account or use the vcity177 platform.

2. Data Controller

For the purposes of applicable data protection legislation, vcity177 is the data controller in respect of personal data collected from Players and website visitors. As data controller, vcity177 determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that such processing complies with applicable law.

If you have any questions about how vcity177 handles your personal data, or if you wish to exercise any of your data subject rights, please contact our Data Protection team at the contact details provided in Section 16 of this Policy.

3. Personal Data We Collect

vcity177 collects various categories of personal data, the extent of which depends on your relationship with the platform. The principal categories are as follows:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, nationality, MyKad / passport number	Registration & KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration & account management
Financial Data	Bank account details, eWallet identifiers, transaction history, deposit and withdrawal records	Deposit / withdrawal processing
KYC Documentation	Scanned or photographed copies of identity documents, proof of address, source of funds documentation	KYC / AML compliance
Gaming Activity Data	Game play history, bets placed, wins and losses, session duration, game preferences	During platform use
Technical Data	IP address, device type, browser type and version, operating system, time zone, login timestamps	Automatically on platform access
Communications Data	Live chat transcripts, email correspondence, support ticket content	When contacting support
Marketing Preferences	Opt-in/opt-out status for promotional communications, preferred communication channel	Account settings / registration

4. How We Collect Personal Data

vcity177 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC, making deposits or withdrawal requests, contacting customer support, or updating your account profile.
• Automated collection: Technical data collected automatically when you visit the vcity177 website or use the platform, including through cookies, web server logs, and analytics tools.
• Third-party sources: Identity verification and fraud screening data from KYC/AML service providers; payment transaction data from payment processors including FPX, eWallet operators (Touch n Go, Boost), and card networks; geolocation data from IP address databases for regulatory compliance.
• Gaming activity: Data generated automatically through your use of games and sportsbook services on the vcity177 platform, including bet history, RNG outcomes, and session data.

5. How We Use Your Personal Data

vcity177 uses personal data for the following purposes:

• To create, verify, and manage your vcity177 account;
• To process deposits, withdrawals, and other financial transactions in Malaysian Ringgit (MYR);
• To conduct KYC and AML verification as required by applicable regulatory obligations;
• To deliver and improve the vcity177 gaming and sportsbook services;
• To personalise your experience on the platform, including game recommendations and promotional offers;
• To detect, investigate, and prevent fraud, money laundering, account abuse, and other prohibited conduct;
• To respond to customer support enquiries, complaints, and dispute resolution requests;
• To send transactional communications including deposit confirmations, withdrawal notifications, and security alerts;
• To send marketing communications where you have opted in to receive them;
• To comply with legal obligations, regulatory requirements, and law enforcement requests;
• To enforce our Terms & Conditions and protect the rights and interests of vcity177 and its Players;
• To support responsible gaming monitoring and intervention, including identification of at-risk playing patterns.

6. Legal Basis for Processing

vcity177 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between vcity177 and the Player, including account management, transaction processing, and service delivery.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including KYC/AML requirements and regulatory reporting obligations.
• Legitimate interests: Processing necessary for the legitimate interests of vcity177 or third parties, including fraud prevention, platform security, service improvement, and responsible gaming monitoring, where such interests are not overridden by the Player's rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including for marketing communications and certain cookie uses. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Sharing of Personal Data

7.1 vcity177 does not sell personal data to third parties. We may share personal data with the following categories of recipients for the purposes described in this Policy:

• Payment processors: Including FPX operators, eWallet providers (Touch n Go, Boost), card networks, and banks — shared for transaction processing and fraud screening only;
• KYC and identity verification providers: Third-party services used to verify identity documents and screen against sanctions lists and politically exposed persons (PEP) databases;
• Game content providers: Including Evolution Gaming, Pragmatic Play, and other licensed studios — limited data shared for game delivery and RNG certification purposes;
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and platform maintenance vendors who process data on vcity177's behalf under data processing agreements;
• Regulatory authorities and law enforcement: Where required by law, court order, or regulatory direction, vcity177 will disclose personal data to the relevant authorities;
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to obligations of confidentiality.

7.2 All third-party service providers who process personal data on behalf of vcity177 are required to maintain appropriate technical and organisational security measures and are prohibited from using the data for any purpose beyond the services they provide to vcity177.

8. International Data Transfers

8.1 vcity177 may transfer personal data to service providers or partners located in countries outside Malaysia. Where such transfers occur, vcity177 ensures that appropriate safeguards are in place, including data processing agreements incorporating standard contractual clauses or equivalent protections.

8.2 By using the vcity177 platform, you acknowledge that your data may be transferred, stored, and processed outside of Malaysia in connection with the services described in this Policy.

9. Data Retention

9.1 vcity177 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements.

9.2 Account data and KYC documentation are retained for a minimum of 5 years following account closure, in accordance with anti-money laundering regulatory requirements applicable to online gaming operators. Gaming activity records and transaction histories may be retained for the same period.

9.3 Marketing preference data is retained for as long as you maintain an active vcity177 account or until you withdraw consent, whichever is earlier. Technical and analytics data is typically retained for 24 months in aggregated or anonymised form.

9.4 Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with vcity177's data disposal procedures.

10. Cookies and Tracking Technologies

10.1 vcity177 uses cookies and similar tracking technologies on its website and platform. The categories of cookies used are as follows:

• Strictly necessary cookies: Essential for the platform to function, including session management and authentication. These cannot be disabled.
• Performance and analytics cookies: Used to measure how visitors use the vcity177 platform, which pages are visited most, and where errors occur. Data is aggregated and anonymised.
• Functional cookies: Used to remember your preferences such as language settings and login state for enhanced user experience.
• Security cookies: Used to detect and prevent fraudulent account access and bot activity on the platform.

10.2 vcity177 does not use third-party advertising cookies or behavioural tracking cookies. You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the vcity177 platform.

11. Your Data Subject Rights

Subject to applicable law, you have the following rights in relation to your personal data held by vcity177:

• Right of access: To request a copy of the personal data vcity177 holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data in certain circumstances, subject to our legal retention obligations;
• Right to restriction: To request that we restrict processing of your personal data in certain circumstances;
• Right to data portability: To receive a copy of your personal data in a structured, machine-readable format in certain circumstances;
• Right to object: To object to processing of your personal data for direct marketing or where processing is based on legitimate interests;
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, please contact our Data Protection team using the contact details in Section 16. We will respond to all valid requests within 30 days. We may need to verify your identity before processing a request.

12. Security Measures

12.1 vcity177 implements a range of technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and the vcity177 platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Access controls limiting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication for internal administrative systems;
• Regular security audits and penetration testing by independent cybersecurity specialists;
• Intrusion detection systems and real-time fraud monitoring;
• Staff training on data protection and information security obligations.

12.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, vcity177 will notify you and the relevant regulatory authority without undue delay, in accordance with applicable data breach notification requirements.

13. Children's Privacy

The vcity177 platform is strictly intended for individuals aged 21 and above. vcity177 does not knowingly collect personal data from individuals under the age of 21. If vcity177 discovers that an account has been created by a person under the minimum age, the account will be immediately closed, all personal data will be deleted (subject to any legal retention obligations), and any funds associated with the account will be handled in accordance with our Terms & Conditions.

14. Third-Party Links

The vcity177 website may contain references to our game studio and payment partners. Please note that vcity177 does not control the privacy practices of any third-party services. This Privacy Policy applies solely to data collected and processed by vcity177. We encourage Players to review the privacy policies of any third-party services they access independently.

15. Updates to This Privacy Policy

15.1 vcity177 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered Players by email and/or by prominent notice on the platform prior to the changes taking effect.

15.2 The "Last Updated" date at the top of this document indicates when this Policy was most recently revised. Continued use of the vcity177 platform following notification of an update constitutes acceptance of the revised Policy.

16. Contact and Complaints

For any queries, concerns, or requests relating to this Privacy Policy or the personal data vcity177 holds about you, please contact our Data Protection team:

• Email: [email protected]
• Live Chat: 24/7 via the platform support widget
• Response Time: Data subject requests acknowledged within 5 business days; substantive response within 30 days

If you believe that vcity177 has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.