mcity88 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how mcity88 ("we", "us", "our", "the Platform") collects, processes, stores, and discloses personal data in connection with the operation of the online gaming and sports betting platform available at mcity88.win ("the Site") and all related services (collectively, "the Services").

This Policy applies to all individuals who access or use the mcity88 platform in any capacity, including registered Members, prospective Members who browse the Site without registering, and any other users who interact with mcity88 through the Site, support channels, or promotional communications.

By accessing or using the mcity88 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please discontinue use of the mcity88 platform immediately.

2. Data Controller

For the purposes of applicable data protection legislation, mcity88 is the data controller in respect of personal data collected through the mcity88 platform. mcity88 is headquartered in Kuala Lumpur, Malaysia, and operates the Site under an international gaming authority licence.

If you have any questions or concerns regarding the processing of your personal data by mcity88, please contact our designated data protection contact via the details set out in Section 14 of this Policy.

3. Data We Collect

3.1 Registration Data

When you create an mcity88 account, we collect the personal data you provide during registration, including: full legal name, date of birth, email address, Malaysian mobile phone number, and preferred payment method details.

3.2 Identity Verification Data

To comply with anti-money laundering (AML) and know-your-customer (KYC) obligations imposed by our international gaming authority licence, mcity88 may request identity verification documents including a copy of your Malaysian National Identity Card (MyKad), passport, or other government-issued identification, together with proof of address and, in certain circumstances, source of funds documentation.

3.3 Financial Data

We collect transaction records including deposit amounts, withdrawal requests, payment method details (account numbers associated with Touch n' Go eWallet, Boost eWallet, Maybank, CIMB, or Public Bank), and gaming activity records necessary for accounting, fraud prevention, and regulatory compliance.

3.4 Technical & Usage Data

We automatically collect certain technical data when you access the mcity88 platform, including your IP address, device type and operating system, browser type and version, referring URL, pages visited, session duration, and login timestamps. This data is used for platform security, fraud detection, performance optimisation, and analytics.

3.5 Communications Data

We retain records of communications between you and the mcity88 support team, including live chat transcripts, email correspondence, and any documents or screenshots you provide in connection with a support or dispute matter.

3.6 Responsible Gaming Data

Where you elect to use mcity88's responsible gaming tools — including deposit limits, session time limits, cooling-off periods, or self-exclusion — we record these elections and the dates on which they were made, as required by our licensing obligations.

4. How We Use Your Data

mcity88 processes personal data for the following purposes:

• Account management: Creating, maintaining, and administering your mcity88 Member account.
• Service delivery: Processing deposits, withdrawals, wagers, and game interactions in accordance with the mcity88 Terms & Conditions.
• Identity verification & fraud prevention: Verifying your identity to comply with AML/KYC obligations and detecting, investigating, and preventing fraudulent, abusive, or illegal activity.
• Regulatory compliance: Fulfilling obligations imposed by mcity88's international gaming authority licence, including player age verification, responsible gaming record-keeping, and transaction monitoring.
• Customer support: Responding to your enquiries, resolving disputes, and improving the quality of our support service.
• Platform security: Monitoring login activity, detecting account compromise, and maintaining the integrity and security of the mcity88 platform.
• Marketing communications: Sending promotional offers, bonus notifications, and news about the mcity88 platform, subject to your communication preferences and any opt-out instructions you have provided.
• Analytics & improvement: Analysing usage patterns and platform performance data to improve the mcity88 user experience for Malaysian players.

5. Legal Basis for Processing

mcity88 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the Services you have requested under the mcity88 Terms & Conditions.
• Legal obligation: Processing necessary to comply with regulatory requirements including AML, KYC, and responsible gaming obligations under our international gaming authority licence.
• Legitimate interests: Processing for fraud prevention, platform security, and analytics, where our legitimate interests in operating a secure and compliant gaming platform are not overridden by your data protection rights.
• Consent: Marketing communications, where we rely on your affirmative consent, which you may withdraw at any time by contacting support or updating your account communication preferences.

6. Cookies & Tracking Technologies

The mcity88 platform uses cookies and similar tracking technologies to support the delivery of the Services, maintain session security, and collect analytics data. The categories of cookies we use include:

• Strictly necessary cookies: Required for core platform functions including login session management and security. These cannot be disabled without impairing platform functionality.
• Performance cookies: Collect anonymised data about how Members use the mcity88 platform to help us identify and resolve performance issues.
• Functional cookies: Remember your preferences such as language, display settings, and game lobby filters.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from accessing certain features of the mcity88 platform, including the login flow.

7. Data Sharing & Third Parties

mcity88 does not sell your personal data to third parties. We share personal data only in the following circumstances:

• Payment processors: We share transaction data with Malaysian payment service providers (Touch n' Go eWallet, Boost eWallet, Maybank, CIMB, Public Bank) to process deposits and withdrawals. Each provider is subject to their own privacy policy and data protection obligations.
• Game providers: We share limited account and session data with licensed third-party game studios to facilitate gameplay. These providers process data solely for the purpose of game delivery and are contractually bound by data protection requirements.
• Regulatory authorities: We disclose personal data to our licensing authority, law enforcement agencies, or other regulatory bodies where required by applicable law or our licence conditions.
• Fraud prevention services: We may share data with independent fraud detection and identity verification service providers for AML and KYC compliance purposes.
• Professional advisers: We may share data with legal counsel, auditors, or other professional advisers under confidentiality obligations where necessary for the conduct of our business.

8. International Data Transfers

The mcity88 platform serves Malaysian players and processes most data within Malaysia or in jurisdictions associated with our international gaming authority licence. Where personal data is transferred outside of Malaysia, we ensure that appropriate safeguards are in place, including data processing agreements with contractual clauses that provide equivalent protections to those applicable in Malaysia.

9. Data Retention

mcity88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or our licensing obligations, whichever is longer. In practice, this means:

• Account and transaction records are retained for a minimum of five (5) years following account closure, as required by AML regulations.
• Identity verification documents are retained for a minimum of five (5) years following the completion of the KYC process or account closure, whichever is later.
• Support and communications records are retained for three (3) years from the date of the relevant interaction.
• Technical and usage logs are retained for twelve (12) months unless a longer retention period is required for an ongoing investigation.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with mcity88's data disposal procedures.

10. Data Security

mcity88 implements technical and organisational security measures appropriate to the nature of the personal data we hold, including TLS 1.3 encryption for all data in transit, AES-256 encryption for sensitive data at rest, bcrypt password hashing, access controls limiting personal data access to authorised personnel on a need-to-know basis, regular security assessments, and automated anomaly detection on account login activity.

While mcity88 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account login credentials and should notify mcity88 support immediately if you believe your account has been compromised.

11. Your Rights

Subject to applicable data protection law and our licensing obligations, you hold the following rights in respect of your personal data held by mcity88:

• Right of access: You may request a copy of the personal data mcity88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to our legal and regulatory retention obligations.
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances.
• Right to data portability: You may request a machine-readable copy of personal data you provided to mcity88 in structured circumstances.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on our legitimate interests, subject to our demonstrating compelling legitimate grounds.

To exercise any of these rights, please contact mcity88 support via live chat or email at [email protected]. We will respond within 30 days.

12. Children's Privacy

The mcity88 platform is strictly intended for adults aged 21 years and above. mcity88 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under the minimum age threshold, we will immediately suspend the associated account and take steps to delete the relevant data. If you believe a person under 21 has registered on the mcity88 platform, please notify us at [email protected] immediately.

13. Changes to This Policy

mcity88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or our licensing obligations. Where changes are material, we will notify registered Members via email or an on-platform notification prior to the changes taking effect. The date at the top of this Policy indicates when it was last revised. Your continued use of the mcity88 platform following the effective date of any updated Policy constitutes your acknowledgement of the revised terms.

14. Contact Us

For any queries, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mcity88, please contact our support team via:

• Live chat: Available 24/7 directly on the mcity88 platform (response within 45 seconds).
• Email: [email protected] (response within 2 hours).

mcity88 is headquartered in Kuala Lumpur, Malaysia.