Privacy Policy

This Privacy Policy ("Policy") is issued by vcity155 ("the Platform", "we", "us", "our"), the operator of the online sports betting and live casino services accessible at https://vcity155.cam. It governs how we collect, process, store, share, and protect personal data provided to us or generated through your use of the Platform.

vcity155 takes the privacy of its members seriously. We operate in accordance with applicable data protection legislation and are committed to maintaining the confidentiality and integrity of all personal data entrusted to us by our players, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia.

By registering an account on vcity155, making a deposit, placing a wager, or otherwise accessing the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies, or is capable of identifying, a natural person, directly or indirectly — including name, national identification number, email address, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, and destruction.
• "Data Controller" means vcity155, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party engaged by vcity155 to process Personal Data on its behalf, subject to contractual data protection obligations.
• "Player" / "User" / "You" means any natural person who accesses or uses the vcity155 Platform, whether as a registered account holder or anonymous visitor.
• "KYC Data" means identity verification documents submitted by a Player in connection with Know Your Customer obligations, including copies of national identification cards (MyKad), passports, and proof of payment method.
• "Cookies" means small data files placed on your device by the Platform for session management, analytics, and user experience purposes.

vcity155 collects Personal Data through three primary channels: information you provide directly, information generated by your use of the Platform, and information received from third-party payment processors and verification services. The categories of data we collect are described below.

vcity155 processes Personal Data only where a valid legal basis exists. The applicable legal bases are as follows:

• Contractual Necessity: Processing is required to perform our obligations under the Terms & Conditions you accepted on registration — including account creation, transaction processing, bet settlement, and withdrawal processing.
• Legal Obligation: Certain processing activities are required by law, including anti-money laundering (AML) regulations, Know Your Customer (KYC) obligations, and responsible gambling compliance requirements, such as age verification and self-exclusion enforcement.
• Legitimate Interests: We process Technical Data, transactional logs, and fraud detection signals to protect the Platform and its users against fraud, account compromise, and bonus abuse. These interests do not override your privacy rights.
• Consent: Where we send you marketing communications (email newsletters, promotional offers), we do so only on the basis of your explicit opt-in consent. You may withdraw consent at any time via your Account Settings or by contacting [email protected].

vcity155 uses the Personal Data it collects for the following purposes:

1. Account Management: To create, verify, maintain, and administer your vcity155 account, including processing your registration, managing your Balance, and facilitating deposits and withdrawals in MYR.
2. Identity Verification (KYC): To verify your identity and age (21+ requirement) in compliance with our legal and regulatory obligations before processing your first withdrawal or as otherwise required.
3. Transaction Processing: To process deposits via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, credit/debit cards, and cryptocurrency, and to settle withdrawals to your nominated payment method.
4. Platform Operation and Improvement: To monitor platform performance, diagnose technical issues, analyse user behaviour to improve the betting and gaming experience, and develop new product features.
5. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited activities.
6. Responsible Gambling: To enforce self-exclusion arrangements, deposit limits, cooling-off periods, and age restrictions in accordance with our Responsible Gambling Policy.
7. Customer Support: To respond to your enquiries, manage support tickets, investigate complaints, and maintain records of communications for quality assurance purposes.
8. Marketing Communications: Where you have opted in, to send you personalised promotional offers, bonus notifications, and platform news relevant to your gaming preferences and interests. You may unsubscribe at any time.
9. Legal and Regulatory Compliance: To comply with applicable laws, respond to lawful requests from government authorities or law enforcement agencies, and fulfil our reporting obligations.

vcity155 does not sell, rent, or trade your Personal Data to any third party. We share Personal Data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: We share transaction data with your chosen payment service provider (e.g., Touch 'n Go eWallet, DuitNow, FPX, Visa/Mastercard acquirers, and cryptocurrency networks) to facilitate deposits and withdrawals. These processors operate under their own privacy policies and PCI-DSS security standards.
• Identity Verification Providers: We may share KYC documentation with third-party identity verification services engaged to authenticate your identity and confirm your age eligibility.
• Game Content Providers: Game studios whose content is hosted on vcity155 may receive anonymised session data (e.g., wager amounts, game round identifiers) for game integrity and RTP audit purposes. No directly identifying information is shared with game studios.
• Fraud and Security Services: We share technical data including IP addresses and device identifiers with fraud detection and cybersecurity providers to protect the Platform and its users.
• Legal and Regulatory Authorities: We may disclose Personal Data to regulators, law enforcement agencies, or courts when required to do so by applicable law, court order, or regulatory directive — including disclosures required under anti-money laundering legislation.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of vcity155's business assets, Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and its implications for your data rights.

All third-party Data Processors engaged by vcity155 are subject to contractual data protection obligations and are required to process Personal Data only for specified, legitimate purposes.

Due to the international nature of online gaming operations, your Personal Data may be transferred to, stored in, or processed in countries outside of Malaysia. Such transfers occur when our Data Processors or infrastructure partners operate servers outside Malaysian territory.

When transferring Personal Data internationally, vcity155 takes reasonable steps to ensure that an adequate level of protection is applied to the data, including the use of contractual data protection clauses, data processing agreements, and technical security controls consistent with the sensitivity of the data being transferred.

By using the vcity155 Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia as described in this section, subject to the safeguards outlined above.

vcity155 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and Registration Data: Retained for the duration of your account's active status, plus a minimum of 5 years following account closure to satisfy AML and regulatory record-keeping obligations.
• KYC Documentation: Retained for a minimum of 5 years from the date of the last transaction on the account, in accordance with anti-money laundering record-keeping requirements.
• Transactional Records: Bet history, deposit records, and withdrawal records are retained for a minimum of 5 years from the date of each transaction.
• Communication Records: Support tickets and live chat transcripts are retained for up to 2 years from the date of the conversation.
• Marketing Preference Data: Retained until you withdraw your consent to receive marketing communications, following which it is promptly deleted from our active marketing systems.
• Technical Logs: Server access logs and session data are retained for up to 12 months for security monitoring purposes.

On expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

vcity155 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device when you visit the Platform. They do not contain executable code and cannot access other files on your device.

The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable account login sessions, maintain your basket of active bets, and preserve your language and currency preferences. These cookies cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how players interact with the Platform — which pages are visited most frequently, how long players spend on different sections, and where technical errors occur. This data informs product improvement decisions.
• Functional Cookies: Used to remember your preferences, such as your preferred deposit method, game category, and notification settings, to deliver a more personalised experience on return visits.
• Security Cookies: Used to authenticate your session and protect against cross-site request forgery (CSRF) and other security threats. These are strictly necessary and cannot be disabled.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and performance of the Platform.

Subject to applicable data protection law, you hold the following rights in respect of your Personal Data held by vcity155. You may exercise any of these rights by submitting a written request to [email protected]:

• Right of Access: You have the right to request a copy of the Personal Data vcity155 holds about you, together with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data. You may update most account details directly via your Account Settings.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal obligations (e.g., AML record-keeping requirements).
• Right to Restriction of Processing: You may request that vcity155 restricts the processing of your Personal Data in certain circumstances — for example, where you contest its accuracy or where processing is unlawful but you prefer restriction over deletion.
• Right to Data Portability: Where processing is based on your consent or a contractual obligation, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling, and to withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing.
• Right Not to Be Subject to Solely Automated Decisions: Where a significant decision is made about you solely by automated means, you have the right to request human review of that decision.

vcity155 will respond to all data rights requests within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it.

The vcity155 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. Age verification is a mandatory step in our KYC process and is enforced before any withdrawal is approved.

If we become aware that Personal Data has been submitted by or on behalf of an individual under the age of 21, we will promptly suspend the associated account, delete the relevant Personal Data, and reverse any financial transactions associated with that account to the originating payment source where technically feasible.

If you believe that a minor has registered an account on vcity155, please notify us immediately at [email protected] so that we may take appropriate action.

vcity155 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or application and our servers is encrypted using 256-bit TLS encryption.
• Password Security: Passwords are stored using industry-standard one-way cryptographic hashing with salting. We do not store plaintext passwords under any circumstances.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security.
• Access Controls: Access to Personal Data within vcity155 is restricted on a need-to-know basis. Only authorised personnel with a legitimate operational requirement may access identifiable player data.
• Intrusion Detection and Monitoring: Our platform infrastructure is monitored continuously for anomalous activity, potential breaches, and security events.
• Regular Security Audits: vcity155 engages independent third-party security firms to conduct periodic penetration testing and vulnerability assessments of our platform infrastructure.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in high risk to your rights and freedoms, vcity155 will notify affected players and relevant authorities in accordance with applicable data breach notification obligations.

The vcity155 Platform may contain references or links to third-party payment service providers (such as Touch 'n Go eWallet, Boost, and DuitNow), responsible gambling support resources, and game content providers. These third parties operate their own websites and services, which are governed by their own privacy policies.

vcity155 is not responsible for the privacy practices, data handling procedures, or content of any third-party website or service. We recommend that you review the privacy policy of any third-party service you access in connection with your use of the Platform.

vcity155 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory guidance. Material amendments — being those that significantly affect your rights or how we process your Personal Data — will be communicated to registered players via email to the address on file and/or a prominent notice on the Platform prior to taking effect.

Minor amendments, such as typographic corrections or clarifications that do not materially affect your rights, will be published on this page without prior notice. The "Last Revised" date at the top of this Policy indicates when it was most recently updated.

Your continued use of the Platform following publication of an amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the amended Policy, you must cease using the Platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by vcity155, please contact our Data Protection team using the details below:

• Email: [email protected]
• Subject Line: Please include "Privacy Request — [Your Username]" in the subject line to ensure prompt routing
• Live Chat: Available 24 hours a day, 7 days a week via the Platform's live chat function
• Response Time: We aim to acknowledge all privacy-related correspondence within 24 hours and resolve matters within 30 days

For requests relating specifically to data access, rectification, erasure, or portability, please include your registered email address and, where identity verification is required, a copy of your identification document. This ensures that we can process your request securely and without undue delay.