mcity88 Privacy Policy — How We Collect, Use & Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how mcity88 ("mcity88," "we," "us," "our") — the operator of the online gaming platform accessible at mcity88.club — collects, uses, stores, discloses, and otherwise processes the personal data of individuals who register for an account, visit the website, or otherwise interact with the platform ("you," "your," "Player").

mcity88 is committed to handling personal data responsibly and in compliance with applicable data protection legislation. We recognise that privacy is a legitimate expectation for every person who engages with our platform, and this Policy is intended to give you clear, honest information about our data practices.

By registering an account or continuing to use mcity88.club, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy forms part of the mcity88 Terms & Conditions. If you do not accept this Policy, please do not register an account or use the platform.

This Policy should be read alongside the mcity88 Terms & Conditions and any additional privacy notices that may be provided at the point of specific data collection.

2. Data Controller

For the purposes of this Policy, the data controller responsible for the personal data you provide to mcity88 is the operator of mcity88.club. The data controller determines the purposes and means by which your personal data is processed.

For any data-related enquiries, requests, or complaints, you may contact mcity88 using the details provided in Section 15 (Contact Us) of this Policy. We will respond to written data subject requests within 30 calendar days of receipt.

3. Personal Data We Collect

mcity88 collects the following categories of personal data from players and visitors:

3.1 Registration & Identity Data

• Full legal name;
• Date of birth (for age verification — 21+ requirement);
• Email address;
• Mobile phone number;
• Preferred username;
• Country of residence (Malaysia).

3.2 Identity Verification (KYC) Data

• Copy of government-issued identification (Malaysian IC, passport, or equivalent);
• Proof of address documentation (utility bill, bank statement);
• Source-of-funds documentation (where required by AML obligations).

3.3 Financial & Transaction Data

• Payment method identifiers (e.g., masked Touch n Go eWallet account reference, bank account number last four digits, DuitNow ID);
• Deposit and withdrawal transaction records;
• Bonus claim and wagering history;
• Wallet balance history.

3.4 Usage & Behavioural Data

• Game play history (games played, stakes, wins, losses, session durations);
• Sports betting history (markets wagered, odds taken, outcomes);
• Platform navigation and feature usage patterns;
• Customer support interaction records.

3.5 Technical Data

• IP address and approximate geographic location;
• Device type, operating system, and browser type;
• Session timestamps and login history;
• Cookie and tracking identifiers (see Section 10).

4. How We Collect Your Data

mcity88 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion;
• Automatically: Through cookies, log files, and tracking technologies when you access or use mcity88.club (see Section 10);
• From third parties: From identity verification service providers, payment processors, fraud prevention services, and — where applicable — publicly available sources for AML screening purposes.

5. Purposes of Processing

mcity88 processes your personal data for the following purposes:

• Account administration: Creating, managing, and maintaining your mcity88 player account;
• Identity verification: Verifying your age (21+), identity, and eligibility to use the platform;
• Payment processing: Processing deposits, withdrawals, and associated financial transactions in MYR;
• Service delivery: Providing access to games, the sportsbook, bonuses, and customer support;
• Legal and regulatory compliance: Complying with applicable AML, KYC, responsible gaming, and other legal obligations;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, and unauthorised account access;
• Responsible gaming: Monitoring player behaviour to identify potential problem gambling indicators and administering responsible gaming tools;
• Platform improvement: Analysing usage data to improve platform performance, game selection, and user experience;
• Marketing communications: Sending promotional offers and platform updates to players who have consented to receive them (see opt-out rights in Section 11).

6. Legal Bases for Processing

mcity88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract with you — i.e., providing the gaming platform, processing transactions, and administering your account;
• Legal obligation: Processing required to comply with AML, KYC, age verification, and other applicable legal requirements;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your rights;
• Consent: For marketing communications and non-essential cookies, where your specific consent has been obtained.

7. Sharing Your Personal Data

mcity88 may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment service providers: To process deposits and withdrawals via Touch n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, and Public Bank;
• Identity verification providers: To conduct KYC checks and age verification;
• Game software providers: Game studios and live casino operators (such as Evolution Gaming, Pragmatic Play) receive session and wagering data necessary to deliver their games;
• Fraud prevention and AML services: Screening services used to detect suspicious financial activity;
• IT and cloud infrastructure providers: Hosting, database, and security service providers acting as data processors on behalf of mcity88;
• Regulatory and law enforcement authorities: Where disclosure is required by applicable law, court order, or competent regulatory authority.

All third-party service providers who process personal data on mcity88's behalf are engaged under data processing agreements that require them to maintain appropriate security measures and process data only for the purposes specified by mcity88.

8. Data Retention

mcity88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention guidelines apply:

• Account and transaction data: Retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• KYC documentation: Retained for a minimum of five (5) years following the end of the customer relationship;
• Usage and behavioural data: Retained for up to two (2) years for responsible gaming monitoring and platform improvement purposes, unless longer retention is required for a specific investigation;
• Marketing data: Retained until you withdraw consent or opt out of marketing communications;
• Technical logs: Retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Data Security

mcity88 implements the following security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data transmitted between your device and mcity88.club;
• Encryption of sensitive data fields (including payment identifiers) at rest in our databases;
• Access controls limiting data access to authorised personnel with a documented need;
• Two-factor authentication available for player accounts;
• Regular security assessments and vulnerability testing of the platform;
• Incident response procedures in place for data breach detection and notification.

While mcity88 takes all reasonable steps to protect your data, no transmission over the internet or method of electronic storage is entirely secure. You are responsible for maintaining the security of your own account credentials, and mcity88 will not be liable for unauthorised access to your account resulting from your failure to secure your login details.

10. Cookies & Tracking Technologies

mcity88 uses cookies and similar tracking technologies to operate and improve the platform. The following cookie categories are used:

• Strictly necessary cookies: Required for core platform functionality including session management, login persistence, and security features. These cannot be disabled without affecting platform functionality;
• Functional cookies: Store your preferences such as language settings and game lobby filters to enhance your experience;
• Analytics cookies: Collect aggregated, anonymised data about how visitors use mcity88.club — page views, session durations, click paths — to help us improve the platform. No personally identifiable information is collected by analytics cookies;
• Marketing cookies: Used to deliver relevant promotional content. These are only placed with your consent.

You can manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will impair platform functionality, including your ability to log in to your mcity88 account.

11. Your Data Rights

Subject to applicable law, you have the following rights in respect of the personal data mcity88 holds about you:

• Right of access: To request a copy of the personal data we hold about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data, subject to our legal retention obligations (e.g., AML record-keeping requirements);
• Right to restriction: To request that we temporarily restrict processing of your data in certain circumstances;
• Right to data portability: To receive your data in a structured, machine-readable format where processing is based on consent or contractual necessity;
• Right to object: To object to processing based on legitimate interests, including profiling for marketing purposes;
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact mcity88 in writing using the details in Section 15. We will respond within 30 calendar days. Note that some rights are subject to limitations — for example, we cannot delete transaction records that we are legally required to retain for AML compliance purposes.

To unsubscribe from marketing communications, you may use the unsubscribe link in any mcity88 marketing email, or contact customer support directly.

12. Minors

mcity88 is strictly for persons aged 21 and above. We do not knowingly collect personal data from individuals under 21 years of age. Where mcity88 discovers or has reason to believe that a person under 21 has registered an account, that account will be immediately suspended, all associated data will be deleted (save as required for legal purposes), and any deposits will be returned.

If you believe that a minor has accessed mcity88, please contact us immediately at the address given in Section 15.

13. International Data Transfers

Some of mcity88's service providers — particularly cloud hosting providers, game studios, and fraud prevention services — may be located outside Malaysia. Where your personal data is transferred to recipients in other jurisdictions, mcity88 takes steps to ensure that appropriate safeguards are in place, including contractual data transfer mechanisms, to protect your data to a standard consistent with this Policy.

By using mcity88, you acknowledge that your data may be transferred to and processed in jurisdictions outside your country of residence for the purposes described in this Policy.

14. Changes to This Privacy Policy

mcity88 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. Material changes will be notified to registered players by email or by prominent notice on the platform prior to taking effect.

The "last updated" date at the top of this Policy indicates when the current version was published. We encourage you to review this Policy periodically. Your continued use of mcity88 following notification of an updated Policy constitutes your acceptance of the revised terms.

15. Contact Us

For any questions, requests, or complaints relating to this Privacy Policy or the processing of your personal data by mcity88, please contact us in writing:

If you are not satisfied with our response to a data complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.