Mcity888 Privacy Policy – Personal Data Protection for Malaysian Members

Mcity888 takes the privacy of every member seriously. As an online betting and casino entertainment platform serving Malaysian players, we understand that our members' trust in us depends not only on the quality of the games and services we offer — but also on how we manage and protect their personal data.

This Privacy Policy transparently explains how mcity888 collects, uses, stores, protects, and — in limited circumstances — shares the personal information you provide when using our platform. It is written in plain, straightforward language rather than confusing legal jargon, because we believe you have the right to know exactly what happens to your information.

By registering an account on mcity888, making a deposit, or using any of our services, you are deemed to have read and agreed to this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team for assistance with account closure.

Mcity888 collects personal data from members through various channels — during the registration process, during your use of the platform, and when you contact our customer support team. Below are the categories of data we collect and why they are necessary:

Identity & Contact Data:

• Full name as stated on your Malaysian MyKad.
• Identity card number (MyKad) for KYC verification purposes.
• An active Malaysian mobile phone number.
• A valid and active email address.
• Current residential address in Malaysia.
• Date of birth for age eligibility verification (18 years and above).

Financial & Transaction Data:

• Records of all deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX.
• Records of all withdrawal requests and processing history.
• The e-wallet or bank account number used for transactions (last digits only, for security purposes).
• Account balance history and in-platform transaction activity.

Platform Usage Data:

• Game history, betting activity, and in-platform behaviour on mcity888.
• Login session records including time, date, and IP address.
• Device information (device type, operating system, web browser).
• Your saved game preferences and account settings.

Communication Data:

• Records of conversations with the customer support team via live chat or email.
• Feedback and complaints you submit to mcity888.

Every piece of data we collect is used for a specific and legitimate purpose. mcity888 does not use your personal data for purposes unrelated to the provision of our platform services. The following are the primary purposes for which your data is used:

• Account Management: Creating and managing your member account, processing registration requests, and ensuring each member holds only one active account.
• Identity Verification (KYC): To verify your identity in compliance with international compliance standards and to protect the platform against misuse.
• Transaction Processing: Securely and accurately processing deposits and withdrawals made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX.
• Customer Support: Enables our support team to provide relevant and effective assistance based on your account history and transaction records.
• Platform Security: Detecting and preventing fraudulent activity, money laundering, or any misuse of the platform that could compromise the safety of other members.
• Legal Compliance: Complying with applicable legal obligations when required by the relevant authorities.
• Platform Improvements: Analysing aggregated usage patterns (without identifying individuals) to improve the user experience, platform performance, and the range of games on offer.
• Service Communications: Sending you important information about your account, platform updates, or policy changes that you need to be aware of.

Mcity888 not use your personal data for third-party marketing purposes, sell user profiles to other companies, or for any purpose not stated in this Privacy Policy without your explicit prior consent.

Mcity888 does not sell, rent, or trade members' personal data to any third party for commercial purposes. However, there are limited situations where we need to share certain information with external parties to ensure the platform operates properly and securely:

• Payment Service Providers: Transaction data required for processing is shared with e-wallet and internet banking providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers to process your deposits and withdrawals. All these providers are bound by strict confidentiality agreements and comply with international payment security standards.
• Game Software Providers: Basic game session data is shared with registered casino software providers such as Evolution Gaming, Pragmatic Play, and SA Gaming solely to enable gameplay functionality and resolve any technical disputes that may arise.
• Regulatory Authority: mcity888 will disclose member information to the relevant authorities when required by law — including financial crime investigations, court orders, or regulatory compliance requirements. In such situations, we will notify you in advance where legally permitted.
• Independent Security Consultants: In the event of an internal security investigation, independent security experts bound by confidentiality agreements may need to access certain records to help resolve platform security issues.

Mcity888 takes data security seriously, investing heavily in infrastructure to ensure every member's personal and financial information is protected at all times. The security measures we have in place are on par with those used by world-class financial institutions.

Key security measures we have implemented include:

• 256-bit SSL Encryption: All data transmitted between your web browser or mobile app and mcity888's servers is encrypted using 256-bit TLS/SSL standards. This means that even if someone were to intercept the transmission, they would be unable to read its contents.
• Two-Factor Authentication (2FA): Every login requires verification via an OTP sent to your registered phone number, adding an extra layer of security beyond your password alone.
• Minimum Data Retention: mcity888 only retains data that is genuinely necessary for as long as it is needed. Data that is no longer relevant is disposed of in accordance with secure procedures.
• Internal Access Controls: Only staff with a legitimate business need are permitted to access members' personal data. All access is logged and continuously monitored.
• Regular Security Audits: The mcity888 platform undergoes regular technical security audits by independent parties to identify and address system vulnerabilities before they can be exploited.
• 24/7 Monitoring: An anomaly detection system operates around the clock to identify any suspicious activity that may indicate an attempted data breach or unauthorised access.

That said, no security system can offer absolute 100% guarantees. mcity888 is committed to notifying affected members within a reasonable timeframe should any data security incident occur that impacts their personal information, in line with industry best practices.

Mcity888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit mcity888. They help us remember your preferences and deliver a smoother, more personalised experience.

Types of cookies we use:

• Essential Cookies: Required for the platform to function properly — including maintaining your login session, securing transactions, and saving your language preferences and interface settings. These cookies cannot be disabled without affecting core platform functionality.
• Preference Cookies: Stores your personal preferences — such as favourite games, display settings, and notification preferences — so you don't have to reconfigure them every time you log in.
• Analytics Cookies: Helps us understand how members use the platform — which pages are visited most frequently, how long members stay in a session, and where technical issues tend to occur. This data is collected in aggregate and does not identify any individual personally.
• Security Cookies: Helps our security systems detect suspicious activity such as repeated login attempts or sudden changes in account usage patterns.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the mcity888 platform and your overall experience. We recommend keeping cookies enabled for the best platform experience.

Mcity888 retains your personal data for as long as it is needed for the purposes outlined in this Privacy Policy, or for as long as your account remains active on our platform. Our principle is to keep only the data that is necessary, for only as long as necessary.

Our data retention guidelines:

• Active Account Data: Retained for the duration of your active account on the mcity888 platform.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of transaction, in line with financial compliance requirements and anti-money laundering standards.
• KYC Records: Retained for as long as the account is active and for 5 years following account closure for compliance purposes.
• Customer Support Communication Data: Retained for 2 years after a conversation ends for reference and service improvement purposes.
• Security Logs: Retained for 90 days for security incident investigation purposes if required.
• Closed Account Data: Basic account information is retained for 5 years after account closure to meet compliance requirements and for identity verification should a member wish to re-register.

Once the designated retention period has lapsed, data will be securely disposed of using methods that ensure it cannot be recovered by any party.

As an mcity888 member, you have certain rights regarding the personal data we hold about you. We are committed to respecting and facilitating the exercise of these rights upon your valid request:

• Right of Access: You have the right to request a copy of the personal data mcity888 holds about you. Requests will be processed within 14 business days.
• Right to Rectification: If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Some information can be updated directly in your account settings; sensitive information requires a verification process through customer support.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Please note that we may not be able to delete all data if it is required to fulfil legal obligations or to resolve related disputes.
• Right to Restriction of Processing: You have the right to request that we restrict how we use your data in certain circumstances, such as when you are disputing the accuracy of that data.
• Right to Data Portability: Where applicable, you have the right to receive your personal data in a machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, including direct marketing.

To exercise any of the rights above, please contact the mcity888 customer support team by email at support@mcity888.best, clearly stating your request. Include your account number and sufficient identity verification details so we can process your request accurately and securely.

The mcity888 platform is exclusively for individuals aged 18 and above. We strictly do not accept registrations from minors and do not knowingly collect any personal data from children or underage individuals.

During the registration process, we collect date of birth and verify this information during the KYC process using MyKad. Should mcity888 discover that personal data belonging to a child or underage individual has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.

If you believe a minor has registered an account on mcity888 using false information, please contact our support team by email at support@mcity888.best with sufficient details so we can investigate and take appropriate action promptly.

The mcity888 platform uses services from carefully selected third-party providers to support our operations — including casino software providers, payment service providers, and technical support systems. When you interact with components operated by these third parties (for example, the Touch 'n Go or GrabPay payment interface), the respective provider's privacy policy also applies to those interactions.

Mcity888 reviews and evaluates the privacy practices of every third-party provider before integrating their services into our platform. All third-party providers we work with are required to meet data protection standards that are equivalent to or exceed those we set for ourselves.

However, mcity888 is not directly responsible for the privacy practices of third parties that fall outside our control. We encourage you to read the privacy policies of the payment providers you use to fully understand how your information is handled on their platforms.

In the course of operating the platform, your personal data may be stored or processed on servers located outside Malaysia. This applies in particular to cloud infrastructure services and international casino software providers that we work with.

When this occurs, mcity888 ensures that such data transfers are safeguarded by adequate protection mechanisms, including:

• Binding data processing agreements with all third-party providers involved.
• End-to-end encryption is applied to all cross-border data transfers.
• Selection of infrastructure providers that comply with internationally recognised data security standards.

Mcity888 does not transfer personal data to countries or territories that do not provide an adequate level of data protection without appropriate additional safeguards in place.

If you have any questions, concerns, or wish to exercise your personal data rights, the mcity888 team is here to help. We take every privacy enquiry seriously and will provide a thorough response within a reasonable timeframe.

Ways to reach us:

• Privacy Email: support@mcity888.best — mark the email subject as "Data Privacy Inquiry" to ensure it is routed to the right team. Response within 48 business hours.
• Live Chat: Available 24/7 within the mcity888 platform. Ideal for initial enquiries or urgent issues. Our live chat team will direct you to the right channel for more complex personal data requests.

Mcity888 values the trust you place in us when you register an account and share your personal information. We are committed to handling that data in a manner that respects your privacy and upholds our responsibilities as a conscientious data operator.