Privacy Policy

vcity333 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform. This Privacy Policy ("Policy") sets out, in clear and transparent terms, how vcity333 collects, uses, stores, discloses, and otherwise processes personal data relating to players, prospective players, and visitors to the vcity333.cam website.

This Policy applies to all personal data processed in connection with your use of vcity333's online casino, sports betting, live dealer, and related services, as well as all communications between you and the Platform, whether conducted via our website, live chat system, email, or WhatsApp.

By registering an account on vcity333, completing any transaction, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must refrain from using the Platform and contact our support team to close your account.

The following definitions apply throughout this Privacy Policy unless the context requires otherwise:

• "Personal Data" — Any information relating to an identified or identifiable natural person ("data subject"), including name, email address, phone number, identification documents, IP address, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. In relation to this Policy, the Data Controller is vcity333.
• "Data Processor" — Any third party that processes personal data on behalf of vcity333, such as payment processors, KYC verification providers, and cloud infrastructure providers.
• "Consent" — A freely given, specific, informed, and unambiguous indication of a data subject's agreement to the processing of their personal data for a stated purpose.
• "KYC" — Know Your Customer — the regulatory process by which vcity333 verifies the identity of Players before permitting withdrawals or other sensitive account actions.
• "Cookies" — Small data files placed on a user's device by the Platform to enable functionality, session management, analytics, and personalisation.

vcity333 acts as the Data Controller in respect of all personal data collected from players and visitors through the vcity333.cam website and associated communication channels. As Data Controller, vcity333 is responsible for ensuring that personal data is processed lawfully, fairly, and transparently in accordance with this Policy and applicable data protection legislation.

Where vcity333 engages third-party service providers to process personal data on its behalf — including payment processing partners such as FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank — those parties act as Data Processors and are contractually bound to process data only on vcity333's documented instructions and to maintain appropriate technical and organisational security measures.

vcity333 collects only the personal data that is necessary and proportionate to the purposes for which it is collected. The categories of personal data we may collect are set out in the table below:

vcity333 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide when registering an account, completing KYC verification, contacting our support team, or participating in promotions.
• Automated Technical Means: Data collected automatically when you access the Platform, including IP addresses, session tokens, browser fingerprints, and cookies placed on your device.
• Transaction Records: Data generated when you initiate deposits or withdrawals via payment partners including Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or cryptocurrency networks.
• Third-Party Verification Services: Where vcity333 engages licensed KYC and identity verification partners to validate the authenticity of documents you submit, those partners may share verification outcomes (and in limited cases, document data) with vcity333.
• Publicly Available Sources: In limited circumstances relating to fraud prevention or AML compliance, vcity333 may cross-reference data against publicly available registries or sanctions lists.

vcity333 processes your personal data only where a valid legal basis exists under applicable data protection law. The legal bases upon which we rely are as follows:

• Contractual Necessity: Processing that is necessary to perform our contractual obligations to you as a registered Player — including operating your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, and regulatory reporting duties under our operating licence.
• Legitimate Interests: Processing necessary for the legitimate business interests of vcity333, including fraud prevention, platform security, responsible gambling monitoring, service improvement, and business analytics — provided such interests are not overridden by your fundamental data protection rights.
• Consent: Where we rely on your consent as a legal basis — for example, to send you promotional communications via email or WhatsApp — we will obtain that consent through a clear, affirmative opt-in mechanism, and you may withdraw consent at any time without detriment to your account.

vcity333 processes your personal data for the following specific and lawful purposes:

1. To register and maintain your player account on the Platform.
2. To verify your identity, age (21+), and eligibility in accordance with our Terms & Conditions and applicable regulatory requirements.
3. To process deposits, withdrawals, and other financial transactions via your selected Malaysian payment method, including FPX, DuitNow, Maybank, CIMB, Touch 'n Go eWallet, and supported cryptocurrency channels.
4. To deliver the gaming services you have selected, including slots, live dealer tables, sports betting on Liga Super Malaysia, EPL, UFC, and other markets, and instant-win games.
5. To communicate with you regarding your account, including transaction confirmations, security alerts, KYC requests, and support responses.
6. To detect, investigate, and prevent fraud, money laundering, and any other prohibited conduct under our Terms & Conditions.
7. To monitor gameplay patterns in connection with our responsible gambling obligations and to enforce deposit limits, session limits, or self-exclusion where applicable.
8. To send you promotional communications and personalised bonus offers — only where you have provided valid consent for such communications.
9. To operate, maintain, and improve the technical infrastructure of the Platform, including performance monitoring, bug tracking, and security patching.
10. To comply with all applicable laws, regulations, court orders, and requests from competent regulatory or law enforcement authorities.

vcity333 will not process your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another valid legal basis.

vcity333 does not sell, rent, or otherwise commercialise your personal data. We share personal data with third parties only where necessary and only under the following circumstances:

• Payment Processors: Financial data is shared with Malaysian payment partners (FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay) and cryptocurrency processing networks solely to execute your deposit and withdrawal instructions.
• KYC & Fraud Prevention Partners: Identity documents and verification data may be processed by licensed third-party KYC service providers for the purpose of identity authentication and fraud screening.
• Technology Service Providers: Cloud hosting, data storage, and platform infrastructure providers may process technical data on our behalf under strict data processing agreements that prohibit independent use of your data.
• Regulatory Authorities: Where required by applicable law, licensing obligations, anti-money laundering regulations, or court order, vcity333 may disclose personal data to competent regulators, tax authorities, or law enforcement agencies without prior notice to you.
• Responsible Gambling Organisations: In cases involving suspected problem gambling, or where a Player has enrolled in a voluntary self-exclusion programme, limited data may be shared with approved responsible gambling support organisations to coordinate support services.

vcity333 primarily processes and stores personal data on servers located within secure data centre facilities. In certain circumstances, personal data may be transferred to or processed in jurisdictions outside Malaysia, including for the purposes of cloud infrastructure, KYC verification services, or platform support operations.

Where personal data is transferred internationally, vcity333 takes all reasonable steps to ensure that appropriate safeguards are in place, including the use of standard contractual clauses, data processing agreements, and assessments of the adequacy of data protection in the recipient jurisdiction. Players based in Malaysia may contact our support team for further information regarding the specific safeguards applicable to their data.

vcity333 retains personal data for the minimum period necessary to fulfil the purposes set out in this Policy, taking into account applicable legal, regulatory, and contractual retention requirements. The following indicative retention periods apply:

• Account data and KYC documents: Retained for a minimum of five (5) years following account closure, in accordance with AML and regulatory record-keeping requirements.
• Transaction records: Retained for a minimum of seven (7) years to comply with applicable financial record-keeping obligations.
• Support communications: Retained for up to three (3) years from the date of the last interaction, for the purposes of dispute resolution and quality assurance.
• Usage and technical data: Retained for up to twenty-four (24) months for the purposes of fraud analysis, platform security, and service improvement, after which it is anonymised or deleted.
• Promotional consent records: Retained for the duration of the consent plus a reasonable additional period for audit purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with vcity333's data disposal procedures.

vcity333 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• AES-256 encryption for all personal data stored at rest within our database systems;
• TLS 1.3 encryption for all data transmitted between your device and our servers;
• Two-factor authentication (2FA) options available for player accounts;
• Regular penetration testing and independent security audits of our platform infrastructure;
• Role-based access controls ensuring that only authorised personnel may access personal data on a need-to-know basis;
• Real-time fraud detection and anomaly monitoring systems operating continuously across all player accounts;
• Documented incident response procedures to ensure timely identification and resolution of any security event.

Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be one hundred percent secure. You are responsible for maintaining the confidentiality of your account login credentials and for ensuring that your device is free from malware or unauthorised access. vcity333 will never ask for your password via email, live chat, or any other channel.

vcity333 uses cookies and similar tracking technologies to operate and improve the Platform, to maintain your session state, to prevent fraud, and to analyse usage patterns. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies that keep you logged in during your visit and security cookies that prevent cross-site request forgery. These cookies cannot be disabled without impairing the functionality of the Platform.
• Analytical / Performance Cookies: Used to collect aggregated and anonymised information about how visitors use the Platform, including which pages are visited most frequently and where error messages are encountered. This data informs our platform improvement programme.
• Functional Cookies: Remember your preferences such as language settings and last-visited game category to deliver a personalised experience on return visits.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and suspicious login behaviour.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing your account and using the Platform. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

Subject to applicable law and the specific circumstances of your request, you hold the following rights in relation to your personal data held by vcity333:

• Right of Access: You may request a copy of the personal data vcity333 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records.
• Right to Restrict Processing: You may request that we temporarily cease processing your personal data while a dispute regarding its accuracy or lawfulness is resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request that we provide your data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing, at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our support team at [email protected] or via live chat. We will acknowledge your request within 48 hours and respond substantively within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 60 days with prior notification.

vcity333's services are strictly intended for individuals who are 21 years of age or older. The Platform does not knowingly collect or process personal data relating to individuals under the age of 21. Age verification is a mandatory component of our KYC process, and we employ technological and procedural controls to prevent minors from accessing the Platform.

If vcity333 becomes aware or reasonably suspects that personal data has been submitted by or on behalf of an individual who is under 21 years of age, we will immediately suspend the relevant account, cease processing the minor's data, and take steps to securely delete all collected information as soon as reasonably practicable, subject to any overriding legal obligations.

Parents or guardians who believe that a minor has accessed or registered on the Platform should contact our support team immediately at [email protected] so that the matter can be investigated and resolved promptly.

vcity333 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory guidance, or operational requirements. The "Last Updated" date at the top of this page will be revised to reflect each new version.

Where amendments are material — meaning they significantly affect the way we collect or use your personal data, or affect your rights in relation to that data — vcity333 will provide advance notice to registered Players via the contact email address on file or through a prominent notification displayed upon login, at least seven (7) calendar days before the amended Policy takes effect.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree with the amendments, you should cease using the Platform and request account closure before the effective date.

If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which vcity333 processes your personal data, please contact our dedicated Data & Privacy Support team through any of the following channels:

• Email: [email protected] — Please include "Privacy Request" or "Data Subject Request" in the subject line for prioritised handling.
• Live Chat: Available 24 hours a day, 7 days a week via the Platform. Our support agents handle privacy enquiries in English, Bahasa Melayu, and Mandarin.
• WhatsApp: Available 24/7 for general privacy enquiries and data rights requests.

We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days. Where your request is particularly complex, we will notify you within that period and advise of any extension required.