Privacy Policy

1. Who We Are

vcity155 is the operator of the online gaming platform accessible at vcity155.org ("the Platform"). For the purposes of this Privacy Policy, vcity155 acts as the data controller in respect of personal data collected from players and visitors located in Malaysia and other jurisdictions where the Platform is accessible.

Where vcity155 engages third-party service providers to process personal data on its behalf, those providers act as data processors and are bound by data processing agreements that require them to handle personal data in accordance with vcity155's instructions and applicable data protection requirements.

2. Data We Collect

vcity155 collects the following categories of personal data from players and Platform visitors:

3. How We Collect Your Data

vcity155 collects personal data through the following means:

• Direct provision by you: When you register an account, complete identity verification, make a deposit or withdrawal request, contact customer support, or update your account profile, you provide data directly to vcity155.
• Automated collection: When you access the Platform, our systems automatically collect technical and usage data including your IP address, device identifiers, session data, and browsing behaviour via cookies and similar tracking technologies.
• Third-party sources: Where permitted by applicable law, vcity155 may receive data about you from identity verification service providers, fraud prevention agencies, payment processors, and publicly available sources to supplement the information you have provided.
• Payment providers: When you deposit or withdraw funds via Malaysian payment methods such as Touch 'n Go eWallet, Boost, DuitNow, or FPX, vcity155 receives transaction confirmation data from those providers sufficient to credit or debit your account. vcity155 does not store full payment credentials.

4. How We Use Your Data

vcity155 uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your vcity155 account, processing login authentication, and communicating with you about your account.
• Service delivery: Processing deposits and withdrawals in MYR, settling bets, delivering bonuses and promotional rewards, and providing live customer support.
• Identity verification and compliance: Verifying that you meet the minimum age requirement of 21 years, confirming your identity for anti-money laundering (AML) and know-your-customer (KYC) compliance purposes, and meeting our obligations under applicable international gaming authority regulations.
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorised account access, collusion, and other prohibited conduct. Monitoring for unusual transaction patterns and technical security threats.
• Responsible gaming: Monitoring account activity to identify potential problem gambling indicators, applying responsible gaming limits where appropriate, and fulfilling self-exclusion requests.
• Platform improvement: Analysing usage data and player feedback in aggregate form to improve the vcity155 Platform, game selection, payment experience, and customer support quality.
• Marketing communications: Where you have opted in, sending you promotional communications about vcity155 offers, new games, and relevant Platform updates. You may opt out at any time.
• Legal obligations: Retaining records as required by applicable laws and regulations, responding to lawful requests from regulatory or law enforcement authorities, and resolving disputes.

5. Legal Basis for Processing

vcity155 processes personal data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between vcity155 and you (i.e., the Player Account agreement and these Terms), including account management, bet settlement, and payment processing.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including AML obligations, age verification requirements, and gaming authority licensing conditions.
• Legitimate interests: Processing is necessary for vcity155's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your fundamental rights.
• Consent: Where vcity155 relies on your consent (for example, for marketing communications or non-essential cookies), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing

vcity155 does not sell your personal data to any third party. We share personal data only in the following limited circumstances:

• Service providers: vcity155 engages third-party providers for identity verification, payment processing, fraud detection, IT infrastructure, customer support tools, and analytics. These providers access personal data only to the extent necessary to perform services on vcity155's behalf and are contractually prohibited from using it for any other purpose.
• Game providers: Where you play games provided by third-party studios (such as live casino providers or slot developers), technical data including your session information and bet activity may be shared with the relevant provider for game delivery and audit purposes.
• Regulatory and legal authorities: vcity155 may be required to disclose personal data to gaming regulatory bodies, financial intelligence units, law enforcement agencies, or courts where required by applicable law or lawful order.
• Business transfers: In the event of a merger, acquisition, or sale of vcity155's business assets, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

7. Data Retention

vcity155 retains personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable law. In practice:

• Account data and transaction records are retained for a minimum of five (5) years from account closure, in accordance with AML record-keeping requirements.
• Identity verification documents are retained for the period required under applicable gaming and financial regulations.
• Technical and usage data is typically retained for up to twelve (12) months from collection.
• Communications data (support chat transcripts and emails) is retained for a minimum of two (2) years from the date of the communication.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an individual.

8. Cookies & Tracking Technologies

The vcity155 Platform uses cookies and similar tracking technologies to operate core Platform functionality, maintain your login session, remember your preferences, and analyse Platform usage. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled. They include session management, security tokens, and login state cookies.
• Functional cookies: Remember your language preferences, responsible gaming settings, and display options to provide a personalised experience.
• Analytics cookies: Collect anonymised usage data (pages visited, session duration, game interactions) to help vcity155 understand how the Platform is used and identify areas for improvement.
• Marketing cookies: Used only where you have provided consent, to deliver relevant vcity155 promotional content. You may withdraw consent at any time via your account settings or browser cookie controls.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality and may prevent you from accessing your account.

9. Data Security

vcity155 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the vcity155 Platform — the same encryption standard employed by Malaysian banking platforms such as Maybank2u and CIMB Clicks.
• Encrypted storage of sensitive personal data including passwords (stored as salted cryptographic hashes, never in plaintext) and financial identifiers.
• Access controls limiting personal data access to vcity155 personnel and service providers who require it for legitimate business purposes, on a need-to-know basis.
• Regular security assessments and vulnerability testing of the Platform infrastructure.
• Incident response procedures for identifying, containing, and notifying affected parties in the event of a data security breach.

Notwithstanding these measures, no internet transmission or digital storage system is completely secure. vcity155 cannot guarantee absolute security of data transmitted via the internet.

10. Your Privacy Rights

As a vcity155 player, you have the following rights in relation to your personal data, subject to applicable legal limitations:

• Right of access: You may request a copy of the personal data vcity155 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You can update most account information directly from your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to vcity155's legal obligations to retain certain records.
• Right to restrict processing: You may request that vcity155 limit the processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of your personal data.
• Right to object: You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Marketing opt-out is available via your account settings at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting prior lawful processing.

To exercise any of the above rights, please contact vcity155 via live chat or at [email protected] (plain text — not a link). vcity155 will respond to verified requests within 30 days.

11. Children's Privacy

vcity155 is strictly an adults-only platform. No person under the age of 21 years is permitted to register an account or use any vcity155 Service. vcity155 does not knowingly collect personal data from individuals under the age of 21. If vcity155 becomes aware that personal data has been collected from an underage individual, that data will be deleted and the associated account closed immediately. If you believe a person under 21 has registered an account, please notify us via live chat support immediately.

12. Third-Party Links

The vcity155 Platform may contain references to third-party payment providers (such as Touch 'n Go eWallet, Boost, or Maybank2u) for informational context. vcity155 does not operate those platforms and is not responsible for the privacy practices of any third-party service provider. We encourage you to review the privacy policies of any third-party services you use in connection with your vcity155 account activity.

13. Changes to This Privacy Policy

vcity155 reserves the right to update or revise this Privacy Policy at any time. Where changes are material, vcity155 will notify registered players via email or on-platform notification prior to the changes taking effect. The updated Privacy Policy will always be accessible on this page with the Last Updated date clearly shown. Your continued use of the vcity155 Platform following the effective date of any revision constitutes your acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or vcity155's handling of your personal data, please contact our Data Protection team:

• Live Chat: Available 24/7 via the vcity155 Platform — the fastest way to reach us.
• Email: [email protected] (plain text only — not a clickable link)

We will acknowledge all privacy-related requests within 5 business days and aim to resolve them within 30 days of receipt.