Privacy Policy

Introduction

This Privacy Policy ("Policy") sets out how mcity888 ("we", "us", "our", or "the Platform"), operated at mcity888.win, collects, uses, stores, discloses, and protects the personal data of individuals who access or use our online gaming and sports betting platform ("Users" or "you").

mcity888 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles, as well as the obligations imposed by our international gaming licence. By registering for an mcity888 account or otherwise using the Platform, you consent to the data practices described in this Policy. If you do not agree with this Policy, please do not use the mcity888 Platform.

This Policy should be read in conjunction with our Terms and Conditions, available at mcity888.win/terms-conditions. Where this Policy uses defined terms, those definitions carry the same meaning as in the Terms and Conditions unless otherwise stated.

1. Data Controller

For the purposes of this Policy, mcity888 acts as the data controller in respect of personal data collected from Users of the Platform. As data controller, mcity888 determines the purposes and means of processing your personal data. Questions regarding this Policy or your personal data may be directed to our support team at [email protected] (plain text — not a clickable link).

2. Personal Data We Collect

mcity888 collects personal data from you in the following categories:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., MyKad number or passport number) collected during registration and KYC verification.
• Contact Data: Email address, mobile phone number, and residential address, including city (e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru, Penang) and postcode.
• Account Data: Username, encrypted password, account preferences, session data, login history, and records of communications with mcity888 support.
• Financial Data: Payment method details (e.g., registered e-wallet identifiers for Touch 'n Go eWallet, Boost, or GrabPay; bank account details for Maybank, CIMB, Public Bank, Hong Leong Bank; and cryptocurrency wallet addresses for USDT TRC20 transactions), transaction history, deposit records, and withdrawal records. mcity888 does not store full card numbers or full bank account numbers on our servers.
• Gaming Data: Betting history, game session logs, bonus usage records, and responsible gaming tool settings (deposit limits, self-exclusion status, session timer preferences).
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and other device identifiers collected automatically when you access the Platform.
• Usage Data: Information about how you use the Platform, including pages visited, time spent on each section, click paths, and features accessed.
• KYC Documentation: Scanned or photographed copies of identity documents (MyKad, passport, utility bills, bank statements) submitted for identity and address verification purposes.

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where identity documents incidentally contain such information and collection is necessary for KYC compliance.

3. How We Collect Personal Data

mcity888 collects personal data through the following means:

• Direct collection: Data you provide when registering for an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically via cookies, server logs, and similar technologies when you access or interact with the Platform.
• Third-party sources: Identity verification services, payment processors, and fraud prevention agencies may provide us with data for the purpose of verifying your identity or assessing transaction risk.

4. Purposes and Legal Bases for Processing

mcity888 processes your personal data for the following purposes and on the following legal bases:

• Contract performance: To create and maintain your mcity888 account, process deposits and withdrawals, provide access to games and betting markets, and deliver the services you have registered for.
• Legal obligation: To comply with KYC/AML obligations under our international gaming licence, to respond to lawful requests from regulatory or law enforcement authorities, and to maintain records as required by applicable regulations.
• Legitimate interest: To prevent fraud, detect and investigate suspicious account activity, improve the Platform's performance and user experience, and manage our business operations securely.
• Consent: To send you promotional communications about mcity888 offers, bonuses, and new features, where you have opted in to receive such communications. You may withdraw this consent at any time through your account settings.
• Responsible gaming obligations: To monitor gaming patterns, administer self-exclusion requests, enforce deposit limits you have set, and fulfil our duty of care obligations under our gaming licence.

5. Cookies and Tracking Technologies

mcity888 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve user experience, and analyse Platform usage. The types of cookies used include:

• Strictly necessary cookies: Required for the Platform to function, including session management, login state maintenance, and security features. These cannot be disabled without materially impairing Platform functionality.
• Analytical cookies: Used to collect aggregated, anonymised data about how Users interact with the Platform, which helps mcity888 improve the service. No personally identifiable information is shared with third-party analytics providers beyond what is necessary for this purpose.
• Preference cookies: Store your language preferences, UI settings, and other personalisation choices within the Platform.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect Platform functionality. mcity888 does not use third-party advertising cookies or permit advertising networks to place tracking cookies on the Platform.

6. Disclosure of Personal Data

mcity888 does not sell your personal data. We may share your personal data with the following categories of recipients, strictly for the purposes described in Section 4:

• Payment processors and e-wallet providers: To process deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, Malaysian bank transfers, and other approved payment methods. These providers process data in accordance with their own privacy policies and applicable financial regulations.
• Identity verification and KYC service providers: Third-party services used to verify the identity documents and details of mcity888 account holders as required by our gaming licence.
• Fraud prevention and AML monitoring services: Specialist third-party services that assist mcity888 in detecting and preventing fraudulent transactions and money laundering activity.
• Regulatory and law enforcement authorities: Where mcity888 is legally required or authorised under our gaming licence obligations to disclose information to regulators, gaming authorities, financial intelligence units, or law enforcement agencies.
• IT infrastructure and cloud service providers: Technical service providers who host Platform infrastructure and data storage on behalf of mcity888, subject to contractual data protection obligations.

All third-party recipients are required to process your personal data only for the specified purpose, to implement appropriate technical and organisational security measures, and to comply with applicable data protection obligations.

7. Data Retention

mcity888 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, and gaming licence obligations. Specific retention periods include:

• Account and identity data: Retained for the duration of your mcity888 account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction.
• KYC documentation: Retained for the minimum period required under the gaming licence jurisdiction's AML regulations.
• Gaming session logs: Retained for a period sufficient to resolve disputes and meet regulatory audit requirements, typically not less than two (2) years.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is not technically feasible, data is placed under access controls that restrict further processing.

8. Your Data Rights

Subject to applicable law and the limitations imposed by our legal and regulatory obligations, you have the following rights in respect of your personal data held by mcity888:

• Right of access: You may request a copy of the personal data mcity888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data in your mcity888 account.
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations.
• Right to restriction: You may request that mcity888 restricts further processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract performance, you may request that we provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time through your account settings.
• Right to object: You may object to processing of your personal data where mcity888 relies on legitimate interest as the legal basis, subject to mcity888's overriding legitimate grounds.

To exercise any of the above rights, please contact mcity888 support at [email protected]. mcity888 will respond to verified requests within a reasonable timeframe. We may require you to verify your identity before processing a data rights request.

9. Security Measures

mcity888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for data in transit, encryption-at-rest for sensitive data categories, access controls limiting staff access to personal data on a need-to-know basis, regular security assessments, and intrusion detection systems.

Notwithstanding the above, no data transmission over the internet or electronic storage system is completely secure. mcity888 cannot guarantee absolute security of your personal data. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, mcity888 will notify affected individuals without undue delay as required by applicable obligations.

10. International Data Transfers

mcity888's Platform infrastructure may involve the transfer of personal data to servers or service providers located outside Malaysia. Where such transfers occur, mcity888 ensures that appropriate safeguards are in place, such as contractual clauses requiring recipient parties to comply with data protection standards equivalent to those described in this Policy.

11. Children and Minors

mcity888 does not knowingly collect personal data from persons under the age of 21. The Platform is strictly intended for adults aged 21 and above. If mcity888 becomes aware that a person under 21 has provided personal data or created an account, we will immediately close that account, delete the associated personal data, and take steps to prevent re-registration. If you believe a minor has accessed the Platform, please contact us immediately at [email protected].

12. Changes to This Policy

mcity888 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or business operations. We will notify you of material changes by posting a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of the Platform following notification of changes constitutes your acceptance of the revised Policy.

13. Contact and Complaints

If you have questions, concerns, or complaints regarding mcity888's handling of your personal data, or wish to exercise any of your data rights, please contact our support team at [email protected]. We will make every effort to address your concern promptly and fairly.

If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority or gaming regulator in your jurisdiction. mcity888 will cooperate fully with any such regulatory inquiry.