Privacy Policy

This Privacy Policy ("Policy") sets out the data processing practices of vcity177 ("we", "us", "our"), the operator of the online casino and sports betting platform accessible at vcity177.cam. This Policy explains what personal data we collect from users ("Player", "you", "your"), the purposes for which that data is processed, the legal bases on which we rely, and the rights available to you as a data subject.

vcity177 is committed to protecting the privacy of all players who access our platform, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia. We process personal data only in ways that are fair, transparent, and proportionate to the purpose for which the data is needed.

By registering an account on vcity177 and/or using the platform, you acknowledge that you have read and understood this Policy, and you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not create an account or use the platform.

For the purposes of this Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, location data, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, and destruction.
• "Data Controller" means vcity177, the entity that determines the purposes and means of the processing of Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of vcity177, under a contractual obligation and in accordance with our instructions.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by a Player to the processing of their Personal Data for a stated purpose.
• "KYC" means the Know Your Customer identity verification process conducted to confirm a Player's identity and comply with anti-money laundering (AML) regulations.
• "Cookie" means a small text file placed on a Player's device by the Platform for the purposes of session management, personalisation, and analytics.

We collect personal data from Players through several channels, including the registration process, account usage, customer support interactions, and automated technical means. The categories of personal data we collect are as follows:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, unless strictly required by applicable law and with your explicit consent.

We process the personal data we collect for the following purposes:

• Account Registration and Management: To create, maintain, and administer your vcity177 account, including updating your profile details and managing your VIP tier status.
• Identity Verification (KYC): To verify your identity and age in compliance with anti-money laundering (AML) and counter-terrorism financing (CTF) regulatory requirements. This is a legal obligation and cannot be waived.
• Transaction Processing: To facilitate deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, and USDT TRC20, and to process withdrawal requests to your nominated payment method.
• Platform Operation and Game Delivery: To deliver casino games, live dealer tables, and sports betting markets, and to record the outcomes of all wagers for dispute resolution and audit purposes.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account misuse, and other prohibited conduct as outlined in our Terms and Conditions.
• Customer Support: To respond to your enquiries, process complaints, and provide assistance through live chat and email.
• Responsible Gambling Compliance: To monitor account activity for signs of problem gambling behaviour, to enforce deposit limits and self-exclusion requests, and to comply with responsible gambling obligations.
• Marketing and Promotions: To send you promotional communications, bonus offers, and platform updates where you have provided consent to receive such communications. You may withdraw consent at any time by contacting support.
• Legal and Regulatory Compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities, and meet our obligations under our operating licence.
• Platform Improvement and Analytics: To understand how players use the vcity177 platform, identify technical issues, and improve the overall user experience through aggregated, anonymised analytics.

vcity177 processes personal data on the following legal bases, depending on the purpose of the processing:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions agreed to by the Player at registration — including account management, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC verification, AML/CTF compliance, and responses to lawful regulatory requests.
• Legitimate Interests: Processing carried out for vcity177's legitimate business interests, including fraud prevention, security monitoring, responsible gambling compliance, and platform improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing of data for direct marketing communications, where your explicit consent has been obtained. You may withdraw this consent at any time.

vcity177 does not sell, rent, or trade your personal data to third parties. We share personal data only where strictly necessary, with the following categories of recipients:

• Payment Service Providers: Malaysian payment processors and gateway partners (including those facilitating DuitNow, FPX, and eWallet transactions) receive the minimum data required to process your transactions securely.
• Identity Verification Providers: Third-party KYC and AML compliance providers who process identity documents and perform verification checks on our behalf. These providers are contractually bound to strict data protection standards.
• Game Content Providers: Certified game studios and live dealer providers whose products are integrated into the vcity177 platform may receive anonymised session data necessary for game delivery. They do not receive personally identifiable information.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to governmental bodies, regulatory authorities, or law enforcement agencies where required to do so by applicable law, court order, or in connection with the investigation of fraud or other criminal activity.
• Professional Advisors: Legal, financial, and compliance advisors who are subject to professional confidentiality obligations and who need access to data to provide their services.

All third-party processors are bound by data processing agreements that require them to implement appropriate technical and organisational security measures and to process your data only in accordance with our written instructions.

vcity177 uses cookies and similar tracking technologies to operate essential platform functions, maintain your login session, and improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. These cannot be disabled without breaking core platform functions.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and last-visited game categories. These improve usability but are not essential.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the platform. This information helps us identify usability issues and prioritise platform improvements. No personally identifiable data is transmitted through analytics cookies.
• Security Cookies: Used to detect and prevent fraud, bot activity, and account misuse. These cookies analyse behavioural patterns and device fingerprints to identify anomalous activity.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the vcity177 platform. Strictly necessary cookies cannot be disabled.

We retain personal data for as long as it is necessary to fulfil the purposes outlined in this Policy, or as required by applicable law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, to comply with AML/CTF regulatory requirements.
• Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, in accordance with financial record-keeping regulations.
• KYC Documentation: Retained for a minimum of five (5) years following account closure or the completion of the most recent KYC review, whichever is later.
• Customer Support Communications: Retained for three (3) years following the closure of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, to evidence your prior consent in the event of a dispute.
• Technical and Log Data: Retained for twelve (12) months and then securely deleted or anonymised.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

vcity177 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the vcity177 servers.
• Encrypted storage of all sensitive personal data and KYC documentation at rest.
• Strict role-based access controls limiting access to personal data to authorised personnel only, based on a minimum-necessity principle.
• Regular security audits and penetration testing conducted by independent security professionals.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Staff training on data protection obligations and secure data handling practices.

In the event of a personal data breach that poses a risk to your rights and freedoms, vcity177 will notify you and the relevant regulatory authority in accordance with applicable legal requirements, without undue delay.

As a data subject, you hold the following rights with respect to your personal data processed by vcity177. You may exercise any of these rights by submitting a written request to [email protected]. We will respond to all valid requests within thirty (30) days of receipt.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your Account.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being verified.
• Right to Data Portability: Where processing is based on your consent or a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where such processing is based on our legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of prior processing.

Please note that certain rights are subject to limitations and exceptions under applicable law. For example, we may be unable to delete data that we are legally required to retain for AML/CTF compliance purposes. We will inform you of any applicable limitations when responding to your request.

vcity177 is strictly an adults-only platform. Access to the platform is permitted only for persons who are 21 years of age or older. We do not knowingly collect or process personal data from any person under the age of 21.

Our registration process includes age verification steps to prevent underage access. Where we have reason to believe that personal data has been submitted by a person under the age of 21, we will immediately suspend the associated account, delete the data in question, and report the matter to the relevant regulatory authorities where required.

If you are a parent or guardian and you believe that a minor has submitted personal data to vcity177 without your knowledge, please contact us immediately at [email protected] so that we can take appropriate action.

vcity177 may transfer personal data to service providers or partners located outside of Malaysia where required for operational purposes, including cloud infrastructure providers and KYC verification services. Any such transfers are conducted subject to appropriate safeguards to ensure that your data is protected to a standard equivalent to that required under applicable Malaysian data protection law.

Safeguards for international transfers include contractual clauses that impose data protection obligations on the receiving party, data processing agreements incorporating appropriate security standards, and, where applicable, transfers to jurisdictions that have been assessed as providing an adequate level of data protection.

You may request further information about the specific safeguards applied to international transfers by contacting us at [email protected].

vcity177 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they affect your rights or alter how your data is used in a meaningful way — we will notify you by sending an email to the address associated with your account at least seven (7) days before the changes take effect.

For non-material updates, such as corrections to wording or formatting improvements, we will update the "Last Updated" date at the top of this Policy without prior notification. We encourage you to review this Policy periodically to stay informed of any updates.

Your continued use of the vcity177 platform following the effective date of any amended Policy constitutes your acceptance of the updated terms. The most current version of this Policy is always available at vcity177.cam/privacy-policy.

If you have any questions, concerns, or complaints about this Privacy Policy or the way in which vcity177 processes your personal data, or if you wish to exercise any of your data subject rights, please contact our support team using the details below. All data-related requests must be submitted in writing.

We are committed to resolving all privacy concerns internally. However, if you believe that our handling of your personal data does not comply with applicable law, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.