Privacy Policy mcity88 – Member Data Protection

This Privacy Policy explains in detail how mcity88 ("we", "Platform") collects, uses, stores and protects your personal information when you use our website, mobile app, or any services we provide. We respect the privacy rights of every member and are committed to handling your personal data responsibly and transparently.

By registering an account or continuing to use the mcity88 platform, you agree to the data collection and usage practices described in this Privacy Policy. We encourage you to read this document carefully so you fully understand your rights.

Mcity88 collects your personal information through several methods, including account registration, direct use of the platform, and automated technology as you browse our site. The following are the types of information we collect:

A. Information You Provide Directly

• Full name as per identity card or passport.
• Active mobile phone number.
• A valid email address.
• Date of birth for age verification.
• Bank account details (bank name, account number) for transaction purposes.
• Identity documents for the KYC process when required.
• Username and password (stored in encrypted hashed form).

B. Information Collected Automatically

• IP address and approximate location data (city/state level).
• Device type, operating system, and browser version.
• Game session data including login times, games played, and session duration.
• Financial transaction records including deposits, withdrawals, and wagering history.
• Cookie data and similar website tracking technologies.

Every piece of information we collect is used for clear and lawful purposes. mcity88 does not use your data for any purpose not stated in this Privacy Policy. The primary purposes of data use are as follows:

• Account Management: Creating, managing, and verifying your member account, including a secure login process.
• Financial Processing: Processing deposits, withdrawals, and all financial transactions accurately and securely.
• Regulatory Compliance: Meeting legal requirements related to KYC (Know Your Customer) and AML (Anti-Money Laundering).
• Platform Security: Detecting and preventing fraud, unauthorized access, and suspicious activity.
• Customer Support: Responding to inquiries, resolving complaints, and providing technical assistance.
• Service Improvement: Analyzing usage patterns to enhance the gameplay experience and platform interface.
• Marketing Communications: Sending promotional information, bonuses, and platform updates (only with your consent).
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support.

Mcity88 does not sell or rent members' personal information to any party for marketing or commercial purposes. However, under limited and controlled circumstances, we may share your information with the following parties:

• Payment Providers: Required transaction details are shared with approved payment providers such as FPX, Touch 'n Go eWallet, GrabPay, and USDT providers to process your transactions.
• Game Providers: Basic game session data is shared with third-party game providers that supply game content on our platform.
• Legal Authority: We will disclose information when required by law, court order, or direction from a lawful authority.
• IT Service Providers: Technical and security infrastructure providers working on our behalf and bound by strict confidentiality agreements.

All third parties we work with are required to comply with privacy standards equal to or stricter than those of mcity88. They are only permitted to use your data for the specific purposes defined in their service agreements.

The security of your personal information is mcity88's highest priority. We continuously invest in the latest security technologies and procedures to protect your data from unauthorized access, loss, misuse, or disclosure.

The technical security measures we employ include:

• 256-bit SSL/TLS encryption for all communications between your device and our servers.
• Encryption of sensitive data in the database using the AES-256 algorithm.
• Multi-layered firewall system and an intrusion detection system (IDS) active 24 hours a day.
• Two-factor authentication (2FA) available for all member accounts.
• Real-time account activity monitoring to detect suspicious patterns.
• Regular penetration testing by independent security experts.
• Encrypted data backups stored at geographically separate locations.

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We therefore encourage you to take your own security precautions, such as using a strong and unique password.

Mcity88 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled.
• Preference Cookies: Saving your preferences such as language and display settings for your convenience.
• Analytics Cookies: Helping us understand how members use the platform for continuous improvement purposes. All data is collected anonymously.
• Security Cookies: Used to detect suspicious activity and prevent fraud and unauthorised access.

You can manage or delete cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality and user experience of the mcity88 platform.

As a mcity88 member, you have the following rights regarding your personal information. We fully respect these rights and will process your requests within a reasonable timeframe:

To exercise any of the above rights, please contact the mcity88 customer support team via live chat or email. We will process your request within 30 business days.

Mcity88 retains your personal information only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable laws and regulations.

Our general data retention principles are as follows:

• Active account information is retained for as long as the account remains active and for the required period following account closure to meet legal obligations.
• Financial records and transaction data are retained for a minimum of seven (7) years in compliance with Malaysia's financial regulatory requirements.
• Technical and security log data is retained for 12 months for investigation and digital forensics purposes if required.
• Marketing and communication data is retained until you withdraw consent or request deletion.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised using approved procedures to ensure it cannot be recovered.

The mcity88 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal information from anyone under the age of 18.

If we find that we have inadvertently collected information from a minor:

• The account in question will be closed immediately.
• All relevant personal information will be deleted within 72 hours.
• Any deposited funds will be returned via an appropriate method.

Mcity88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or service improvements.

When we make significant changes to this Privacy Policy:

• The "Updated" date at the top of this document will be revised.
• Notifications will be displayed on the platform's home page for a minimum of 14 days.
• For particularly significant changes, we will send a notification to your registered email address.

Continued use of the mcity88 platform after any changes take effect will be considered your acceptance of the updated Privacy Policy. If you disagree with the changes, you have the right to close your account and request deletion of your data.

If you have any questions, concerns, or wish to exercise your privacy rights, the mcity88 data protection team is ready to assist you through the following channels:

We aim to respond to all privacy-related enquiries within 3 working days. For formal data deletion or access requests, the processing period is up to 30 working days.