Vcity44 Privacy Policy — Personal Data Protection for Malaysian Members

Welcome to the vcity44 Privacy Policy. This document is vcity44's official statement on how we manage the personal information of all users and members who use our platform at vcity44.ws.

Vcity44 is an online casino entertainment and sports betting platform serving the needs of Malaysian players. In providing you with the best experience possible — including slots, live casino, baccarat, blackjack, EPL and Malaysia Super League football betting, badminton, e-sports, and more — we need to collect and process certain information about you.

We are committed to protecting your privacy and ensuring your personal information is handled responsibly in accordance with the provisions of Personal Data Protection Act (PDPA) 2010 Malaysia. This policy outlines your rights, our responsibilities, and how you can reach us regarding your data.

Vcity44 collects your personal information through various means — directly when you provide it, automatically as you use the platform, and through legitimate third parties. Below is a summary of the types of data we may collect:

Vcity44 uses your personal data only for legitimate and necessary purposes. We will not use your data for any other purpose without informing you in advance. The primary purposes are as follows:

• Account Management: Registering your account, verifying your identity, enabling login access and managing account settings
• Service Provision: Processing deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, FPX and other local payment methods; facilitating games and betting
• Security & Fraud Prevention: Identifying and preventing fraud, money laundering, and platform abuse
• Communications: Sending important notifications regarding your account, transactions, service updates, and customer support responses
• Marketing (with consent): Sending promotional offers, bonuses and new game information — only where you have consented to receive marketing communications
• Analytics & Improvement: Understanding usage patterns to improve the interface, platform performance and overall user experience
• Legal Compliance: Meet legal reporting requirements and applicable regulatory obligations
• Responsible Gaming: Monitoring betting patterns to identify players who may need assistance and providing responsible gambling self-control tools

Vcity44 does not sell your personal data to any third party for their own marketing purposes. However, in the course of operating the platform, we may share your data with the following categories of third parties in limited and controlled circumstances:

• Payment Processors: Licensed payment service providers including FPX gateway, and e-wallet processors such as Touch 'n Go, GrabPay, Boost, and ShopeePay — data is shared only to the extent necessary to process your transaction
• Game Providers: Gaming software providers such as Evolution Gaming, SA Gaming, Pragmatic Play and Microgaming — to operate and verify game outcomes
• KYC Services: Identity verification providers who assist in verifying member documents for compliance purposes
• Regulatory Authorities: Law enforcement agencies, regulatory bodies, or courts — only when required by law or court order
• Professional Advisors: Lawyers, accountants or auditors — subject to strict confidentiality obligations

Vcity44 implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure:

• 256-bit SSL Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL protocol with 256-bit keys — the same standard used by Malaysia's major banks
• Encrypted Passwords: Account passwords are stored in a hashed format that cannot be decoded — not even vcity44 staff can view your password
• Two-Factor Authentication (2FA): Additional verification options are available to protect your account from unauthorised access
• 24/7 Security Monitoring: An automated monitoring system that detects unusual activity and potential security threats in real time
• Staff Access Controls: Access to user data is restricted to staff who require it on a need-to-know basis, with all access logged and audited
• Secure Backup: Data is regularly backed up to a secure, separate location to ensure service continuity

Vcity44 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functionality — session login, security and language preferences. Cannot be disabled
• Performance Cookies: Collecting information on how you use the platform to help us improve our services — data is collected anonymously
• Functional Cookies: Remember your preferences such as favourite games, display limits, and other personal settings
• Analytics Cookies: Helping us understand traffic patterns, most visited pages and user exit points for continuous improvement purposes

You can manage your cookie settings through your internet browser settings. However, disabling certain cookies may affect the functionality of the vcity44 platform.

Under Malaysia's PDPA 2010 and vcity44's commitment to your privacy, you have the following rights regarding the personal data we hold about you:

To exercise any of the above rights, please submit a written request to support@vcity44.ws with the subject line "Personal Data Request". We will respond within 14 business days.

Vcity44 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law and regulatory obligations. Our general data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account is active and for a specified period after account closure for audit purposes
• Financial Transaction Records: Retained for seven (7) years after the transaction date, in line with Malaysia's financial reporting requirements
• Identity Verification Data (KYC): Retained for the duration of account activity and five (5) years after account closure
• Security Logs: Retained for 12 months for security investigation and audit purposes
• Customer Support Communications: Retained for three (3) years for reference and service quality improvement

Once the retention period expires, your data will be securely deleted or anonymised in accordance with established procedures.

The vcity44 platform is strictly for users aged 18 and above. We do not knowingly collect personal data from minors.

Vcity44 employs multiple age-verification mechanisms to prevent access by minors, including KYC requirements and date-of-birth verification during registration.

Vcity44 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform service updates.

When we make significant changes, we will:

• Update the "Last updated" date at the top of this document
• Display a notice on the vcity44 platform homepage
• Sending registered members email notifications of material changes

Your continued use of the vcity44 platform after any amendments are published will be considered your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact vcity44's Data Protection Officer through the following channels:

• Email: support@vcity44.ws (subject: "Data Privacy Inquiry")
• Live Chat: Available 24/7 within the vcity44 platform

We are committed to responding to all privacy-related enquiries within 7 working days. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia Department of Personal Data Protection under the Ministry of Communications and Digital.