Privacy Policy vcity66 – Personal Data Protection for Malaysian Players

1. Introduction

vcity66 ("we", "platform", or "vcity66") operates the website at https://vcity66.bet and all related services. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you use the vcity66 platform.

This policy is established in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best-practice privacy principles. By registering an account or using any vcity66 service, you agree to the collection and use of your information as described in this Privacy Policy.

2. Personal Data We Collect

Vcity66 collects your personal information through various methods as you interact with our platform. The following are the categories of data we collect:

2.1 Data You Provide Directly

2.2 Automatically Collected Data

• Technical Data: IP address, browser type, operating system, device ID, and connection log data.
• Usage Data: Games played, bets placed, session duration, and in-platform navigation history on vcity66.
• Location Data: General geographic location based on IP address to verify that you are accessing from a permitted region (Malaysia).
• Cookie Data: Session cookies and preference cookies to enhance the user experience on vcity66 (see Section 6).

3. How We Use Your Data

Vcity66 uses the personal data collected solely for the following purposes. We will not use your data for any other purpose without notifying you first:

• Account Management: Creating and maintaining your vcity66 account, processing registrations, and verifying your identity.
• Transaction Processing: Handles deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX, and processes withdrawals to your Malaysian bank account.
• Security & Fraud: Identifying and preventing fraudulent activity, money laundering, and unauthorised access to your account.
• Legal Compliance: Complying with Malaysian legal requirements, including PDPA 2010, AML/CFT regulations, and regulatory directives.
• Product Improvement: Analyzing usage patterns (in aggregate and anonymized form) to improve the gaming experience on vcity66.
• Service Communications: Sending important notifications regarding your account, transactions, security updates, and changes to our terms.
• Marketing Communications: Sending vcity66 promotions, bonuses, and exclusive offers — only if you have consented to receive them during registration or through your account settings.
• Customer Support: Handling enquiries, complaints, and assistance requests submitted via live chat, email, or Telegram.

4. Data Sharing & Disclosure

Vcity66 does not sell your personal data. We only share information in limited, necessary circumstances, as outlined below:

4.1 Trusted Third-Party Service Providers

Vcity66 works with service providers that help us operate the platform, including:

• Payment Providers: Touch 'n Go, GrabPay, DuitNow, and Malaysian banks supported by FPX — for processing your financial transactions.
• Game Providers: Licensed game software providers that supply casino and slot games on the vcity66 platform.
• Cloud Computing Services: Server infrastructure provider that stores and processes data under strict security agreements.
• Identity Verification Services: Third parties that assist vcity66 with KYC processing and document verification.

All these service providers are bound by strict data protection agreements and are only permitted to use your data for purposes specified by vcity66.

4.2 Legal Requirements

Vcity66 may disclose your information to the relevant authorities when required by law, including upon request from the Royal Malaysia Police, the Courts, Bank Negara Malaysia, or other relevant regulatory bodies. We will notify you of any such disclosure to the extent permitted by law.

5. Data Security

Protecting your personal data is a responsibility we take seriously. vcity66 implements a range of technical and organisational security measures to safeguard your information:

5.1 Technical Security Measures

• 256-bit SSL/TLS Encryption: All communication between you and vcity66's servers is fully encrypted.
• Secure Password Storage: Your password is never stored in plain text — we use the robust bcrypt hashing algorithm.
• Two-Factor Authentication (2FA): 2FA is available on all vcity66 accounts for an added layer of security.
• Firewall & IDS: Our servers are protected by multi-layered firewalls and an active Intrusion Detection System.
• Continuous Monitoring: vcity66's IT security team monitors systems 24 hours a day, 7 days a week for suspicious activity.

5.2 Organisational Security Measures

• Only staff who genuinely require access to user data in order to perform their duties are permitted to do so (principle of least privilege).
• All vcity66 staff who handle user data undergo regular data protection training.
• Internal and external security audits are conducted regularly to identify and address vulnerabilities.

5.3 Data Breach Response

In the event of a data breach affecting your personal information, vcity66 is committed to notifying affected users within 72 hours of becoming aware of the incident, in line with industry best practices. We will also take immediate remedial steps to limit the impact of the breach.

6. Cookies & Tracking Technologies

Vcity66 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage or disable optional cookies through your browser settings. However, disabling essential cookies may affect the functionality of the vcity66 platform. Cookies do not contain financial information such as your card number or password.

7. Your Rights as a User

Under Malaysia's PDPA 2010 and the privacy principles we uphold, you have the following rights regarding your personal data at vcity66:

8. Protection of Children's Data

Vcity66 is a platform exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

Should we become aware that personal data of a minor (under 18 years of age) has been inadvertently collected, we will take immediate steps to delete that data and close the associated account.

9. Cross-Border Data Transfers

In the course of operating its platform, vcity66 may need to transfer your personal data to servers or service providers located outside Malaysia. Any such transfer is made only to parties that:

• Adheres to data protection standards equivalent to or higher than Malaysia's PDPA.
• Bound by data transfer agreements that comply with Malaysian legal requirements.
• Holds internationally recognized security certifications (such as ISO 27001).

Vcity66 will not transfer your data to jurisdictions that lack adequate data protection standards without your explicit consent or a valid legal basis.

10. Data Retention Period

Vcity66 retains your personal data only for as long as necessary for the purposes described in this Privacy Policy, or as required by Malaysian law:

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered.

11. Amendments to the Privacy Policy

Vcity66 reserves the right to amend this Privacy Policy from time to time to reflect changes in the law, our business practices, or improvements to data protection. Any material amendments will be communicated to you via:

• An email notice to the address registered to your vcity66 account.
• A clear notice on the vcity66.bet homepage or via a pop-up at login.
• Updating the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically. Your continued use of the vcity66 platform after any amendments take effect will be considered your acceptance of the updated policy.

12. Contact vcity66 Privacy Officer

If you have any questions, concerns, or complaints regarding how vcity66 handles your personal data, please contact us:

We are committed to responding to all privacy-related enquiries within 21 working days. If you are dissatisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP).