256-Bit Encryption in Transit
All data exchanged between your device and vcity99 servers travels over TLS-encrypted connections. Credentials, payment details, and account information are never sent in plain text.
Privacy document // Malaysia
vcity99 Privacy Policy
This document explains what personal information vcity99 collects when you use our Malaysian online casino and sports betting platform, why we collect it, how we protect it, and what rights you have over your data.
Our data commitments
Six Ways vcity99 Protects Your Privacy
These commitments summarise our approach. They do not replace the full legal clauses below — if there is any difference, the detailed text applies.
No Sale of Personal Data
vcity99 does not sell, rent, or commercially trade your personal information to third parties. Data sharing is limited to what is needed for the platform to function and for legal compliance.
Defined Retention Periods
We keep personal data only as long as necessary for the stated purpose or as required by applicable law. Account and transaction records are subject to documented retention schedules.
Your Rights Are Enforceable
You may access, correct, or request deletion of your personal data. You may also object to certain processing and request a summary of what we hold. Contact support to exercise these rights.
Controlled Third-Party Access
Service providers who access data on our behalf — such as payment processors and KYC verification partners — are contractually bound to handle information securely and only for permitted purposes.
Clear Marketing Consent
Promotional communications are sent only with your consent or where otherwise permitted. You may withdraw marketing consent or adjust communication preferences through your account settings or support.
Introduction
This Privacy Policy describes how vcity99 ("vcity99", "we", "our", or "the platform") collects, uses, stores, protects, and discloses personal data when you access or use the vcity99 website, account services, casino games, live dealer tables, sports betting markets, payment features, customer support, and any related functionality. vcity99 operates as an online casino and sports betting platform directed at adults aged 21 and above in Malaysia, with service available to registered players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations.
By creating an account, making a deposit, placing a wager, or otherwise using vcity99, you acknowledge that you have read and understood this Privacy Policy and agree to the data practices described herein. This Policy should be read alongside the Terms & Conditions and the Responsible Gambling information available through the vcity99 navigation menu. If you do not accept these data practices, you should not use the platform.
We may process personal data where the Personal Data Protection Act 2010 (PDPA) and any other applicable Malaysian or international data protection legislation permits or requires us to do so. vcity99 is committed to complying with its obligations as a data controller and to treating your personal information with care, transparency, and respect.
Definitions
"Personal data" means any information that identifies or could reasonably identify you as a natural person, directly or in combination with other data, including your name, national identification number, email address, phone number, residential address, payment details, device identifiers, and account activity.
"Processing" includes any operation applied to personal data, whether automated or manual, such as collection, recording, storage, use, disclosure, transmission, restriction, erasure, or destruction.
"Data controller" refers to vcity99 in its capacity as the entity that determines the purposes and means of processing your personal data. "Data processor" refers to any third party that processes personal data strictly on behalf of vcity99 and under its documented instructions. "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to processing for a stated purpose.
CONTROLLER = vcity99 | PROCESSOR = approved_third_parties | SUBJECT = you
Personal Data We Collect
3.1 Registration and Account Data
When you create a vcity99 account we collect your full name, date of birth, nationality, Malaysian identification number or equivalent, gender, residential address, email address, and a contact telephone number. You select a username and password. This information is necessary to open an account, verify your age and identity, and maintain the account relationship.
3.2 Identity Verification (KYC) Data
To comply with anti-money laundering obligations, age verification requirements, and payment security standards, we may request copies of your national identity card, passport, utility bills, bank statements, and source-of-funds documentation. These documents are processed for verification and thereafter stored in accordance with the retention schedule in Section 9.
3.3 Financial and Transaction Data
We collect records of deposits, withdrawals, bonuses, wagers, wins, losses, and associated transaction metadata. Payment instrument details — such as the bank name (for example Maybank, CIMB, or Public Bank), account reference, FPX transaction identifier, DuitNow reference, eWallet provider (for example Touch 'n Go eWallet or Boost), or digital asset wallet address — are collected to process and reconcile payments in MYR and supported digital currencies.
3.4 Technical and Usage Data
We automatically collect IP address, browser type and version, operating system, device model, screen resolution, referring URL, pages visited, session duration, clickstream data, and platform performance metrics. This information is used for security monitoring, fraud detection, platform optimisation, and responsible gambling analysis.
3.5 Communications Data
Records of live chat sessions, emails, support tickets, complaint correspondence, and surveys are retained to manage the customer relationship, investigate disputes, and improve service quality. Where calls are recorded, you will be notified at the start of the interaction.
3.6 Responsible Gambling and Behavioural Data
Deposit frequency, session length, stake patterns, loss thresholds, limit change history, and self-exclusion records are processed to support responsible gambling monitoring, to apply restrictions where required, and to comply with platform safety obligations.
| Data Category | Key Examples | Mandatory? |
|---|---|---|
| Registration | Name, DOB, email, address, IC number | Yes — account cannot be created without it |
| KYC Documents | ID card scan, proof of address | Required before withdrawals & higher limits |
| Financial | Deposits, withdrawals, MYR balances, payment methods | Yes — required for transactions |
| Technical | IP address, device ID, session logs | Automatic — needed for security |
| Communications | Chat transcripts, support emails | Generated when you contact support |
| Responsible Gambling | Limit settings, exclusion status, session patterns | Automatic — collected for player welfare |
Legal Bases for Processing
vcity99 processes personal data under one or more of the following legal bases:
- Contract performance: processing necessary to open your account, facilitate deposits and withdrawals in MYR, settle wagers, apply bonuses, and deliver customer support.
- Legal obligation: processing required by anti-money laundering law, age verification regulations, financial record-keeping requirements, or a court or regulatory order.
- Legitimate interests: processing for fraud prevention, platform security, responsible gambling monitoring, service improvement, and analytics, where those interests are not overridden by your fundamental rights.
- Consent: processing for optional marketing communications and certain non-essential cookies, where you have given clear and informed consent that may be withdrawn at any time.
LEGAL_BASIS = contract | legal_obligation | legitimate_interest | consent
Data Processing Purposes
vcity99 processes your personal data for the following primary purposes:
- creating and managing your account, including authentication and access controls;
- processing deposits in Malaysian Ringgit and supported digital currencies, settling withdrawal requests to verified payment methods, and maintaining accurate transaction records;
- verifying your age, identity, and payment ownership to comply with applicable legal obligations and to prevent fraud;
- detecting and preventing money laundering, unauthorised access, payment fraud, account takeover, and other prohibited activity;
- monitoring responsible gambling indicators, applying player-requested limits, investigating potential harm, and escalating welfare concerns where required;
- providing customer support in English, Mandarin, and Bahasa Melayu, investigating complaints, and improving service quality;
- optimising platform performance, game delivery, live casino streams, sports betting market data, and the mobile experience;
- sending transactional communications such as account confirmations, security alerts, payment notifications, and important policy updates; and
- sending promotional communications about vcity99 bonuses, loyalty rewards, and features, subject to your marketing preferences.
Cookies and Tracking Technologies
vcity99 uses cookies, local storage, session tokens, and similar tracking technologies to maintain your session, remember preferences, provide security controls, and gather anonymised analytics about how the platform is used.
6.1 Strictly Necessary Cookies
These are required for the platform to function correctly. They enable session management, authentication, fraud prevention token validation, and secure payment flows. They cannot be disabled without significantly impairing platform functionality.
6.2 Performance and Analytics Cookies
These cookies collect aggregated and anonymised data about page load times, device types, navigation paths, and feature engagement to help vcity99 improve the platform experience for Malaysian players. Where possible, data is anonymised before analysis.
6.3 Marketing and Preference Cookies
Subject to your consent, these cookies enable personalised content, promotional offer targeting, and marketing attribution. You may withdraw consent by adjusting your browser settings or by contacting vcity99 support. Withdrawal of marketing cookies does not affect your ability to use the core platform.
Third-Party Sharing and Disclosure
vcity99 does not sell your personal data to third parties. We may share information with the following categories of recipient only to the extent necessary for a lawful stated purpose:
- Payment processors and financial institutions: including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and digital asset processors, to execute and reconcile your transactions.
- Identity and KYC verification providers: to confirm your age, identity, and source of funds in compliance with anti-money laundering requirements.
- Game and platform technology providers: who supply live casino, slots, sports data feeds, or betting infrastructure and who access player data only to deliver and audit the relevant game or market.
- Security and fraud prevention specialists: who process technical data on our behalf to detect and prevent fraudulent activity, account compromise, and payment abuse.
- Professional advisers: including legal counsel, auditors, and accountants, under duties of confidentiality and only to the extent necessary for their advisory role.
- Competent authorities: including law enforcement agencies, financial intelligence units, regulators, or courts, where disclosure is required or permitted by applicable law.
Data processors engaged by vcity99 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with documented instructions. We do not authorise processors to use player data for their own commercial purposes.
Security Measures
vcity99 implements technical and organisational measures appropriate to the risk profile of the personal data we hold. Current measures include:
- 256-bit TLS encryption for all data in transit between your device and vcity99 infrastructure;
- encryption of sensitive stored data including identity documents, payment credentials, and authentication tokens;
- two-factor authentication available on all accounts and required for sensitive account changes;
- role-based access controls limiting staff access to personal data on a need-to-know basis;
- 24/7 automated monitoring for anomalous login activity, unusual transaction patterns, and known attack signatures;
- regular internal security reviews and periodic assessments of third-party data processors; and
- documented incident response procedures for suspected data breaches, including notification obligations under applicable law.
No internet-based service can guarantee absolute security. You should use a unique, strong password, enable two-factor authentication, avoid accessing your account on public or shared devices, and contact vcity99 support immediately if you suspect unauthorised access or compromise of your credentials.
SECURITY_STACK = TLS_256 + 2FA + RBAC + 24/7_monitoring + breach_response
Data Retention
vcity99 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law, whichever is longer. The following general retention guidelines apply:
| Data Type | Indicative Retention Period | Primary Reason |
|---|---|---|
| Account and registration data | Duration of account plus 7 years post-closure | Legal obligation, dispute resolution |
| KYC and identity documents | As above (minimum 7 years from account closure) | Anti-money laundering legislation |
| Financial transaction records | 7 years from each transaction | Tax, audit, and regulatory requirements |
| Customer support communications | Up to 5 years from last contact | Dispute resolution and service improvement |
| Responsible gambling records | Duration of any exclusion plus applicable law minimum | Player protection obligations |
| Technical/session logs | Up to 24 months | Security monitoring and fraud prevention |
| Marketing consent records | Until withdrawal of consent, then for 2 years as evidence | Demonstrating lawful marketing |
When the retention period expires, personal data is securely deleted, anonymised, or aggregated so that it can no longer identify you. Earlier deletion may be possible on request, subject to legal retention obligations.
User Rights
Subject to applicable Malaysian data protection law and any overriding legal obligation, you have the following rights with respect to your personal data:
- Right of access: you may request a copy of the personal data vcity99 holds about you and information about how it is being processed.
- Right of correction: you may request that we correct personal data that is inaccurate, incomplete, or out of date.
- Right to withdraw consent: where processing is based on consent — for example marketing emails or non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of prior processing.
- Right to object: you may object to processing carried out on the basis of legitimate interests where you believe your individual circumstances outweigh those interests.
- Right to erasure: you may request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to mandatory legal retention periods.
- Right to restrict processing: you may request that vcity99 limits processing of your data while a correction or objection request is being evaluated.
To exercise any of these rights, please contact vcity99 customer support with your account identifier and a clear description of the request. Do not include your account password or full payment card number in any written request. We will acknowledge your request promptly and aim to respond substantively within 30 days, or within any shorter period required by law.
Children and Underage Users
vcity99 is a platform for adults only. Our services are directed exclusively at persons who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the registration and KYC process.
If we discover or are notified that personal data has been collected from a person under 21 years of age, we will take prompt steps to verify the matter, restrict the account, delete or securely isolate the data where legally permissible, and where appropriate notify relevant authorities. If you believe a minor has accessed vcity99, please notify us through customer support immediately.
Changes to This Privacy Policy
vcity99 may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, the payment methods we support, the services we offer, or organisational changes. Material updates will be indicated by a revised effective date displayed at the top of the current version.
Where a change materially affects the way we process your personal data, we will endeavour to notify you through a platform notice or email communication before the change takes effect. Your continued use of vcity99 after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms, unless applicable law requires a different form of consent. We recommend reviewing this page periodically to stay informed of how vcity99 protects your privacy.
Contact Us
If you have a question about this Privacy Policy, wish to exercise a data subject right, have a concern about how your personal data has been handled, or wish to withdraw a consent, please contact vcity99 customer support. Our support team is available 24/7 through the Live Chat function on the platform and can also receive non-urgent inquiries at the plain-text email address displayed in the footer below.
When submitting a privacy-related request, please include your account username or registered email address, the nature of your request, and any relevant context. Do not include your account password, full payment card number, or other unnecessary sensitive information in the message body.
This Privacy Policy should be read in conjunction with the vcity99 Terms & Conditions and the Responsible Gambling information, both of which are accessible through the navigation menu on every page of the platform.
CONTACT_CHANNEL = live_chat (24/7) | email: [email protected] | response_target: 2_hours_peak_MYT
Your data, your rights
Play at vcity99 with Full Confidence
Your personal data is protected by industry-standard security, used only for legitimate purposes, and never sold. If you have questions about this policy or your account, our support team is ready to help.