Privacy Policy — Howmcity888 Protects Your Personal Data
This Privacy Policy explains exactly what personal data mcity888 collects, why we collect it, how we use and store it, who we share it with, and what rights you hold over your own information. Your privacy is not a box-ticking exercise for us — it is a core operational commitment.
Six Things You Should Know About Our Privacy Practices
The full policy text follows below. These cards highlight the most important principles — but they do not replace the complete document.
Minimal Data Collection
mcity888 collects only the personal data necessary to operate the platform, verify your identity, process transactions, and comply with regulatory requirements. We do not harvest data for speculative future uses.
End-to-End Encryption
All data transmitted between your device and mcity888 is protected by 256-bit TLS/SSL encryption. Data stored at rest on our servers is encrypted using AES-256. Your financial and personal information is never held in plain text.
No Third-Party Data Sales
mcity888 does not sell, rent, or trade your personal data to third parties for their independent marketing or commercial purposes. Data sharing is limited to operational necessity and legal obligation only.
KYC Data Handled with Care
Identity documents submitted for KYC verification — including Malaysian IC (MyKad), passport copies, and selfies — are stored in isolated, access-controlled document vaults and are never used for purposes beyond identity verification and regulatory compliance.
Your Consent Matters
For any data processing beyond operational necessity — such as marketing communications — we request your explicit consent. You may withdraw consent at any time through your account settings or by contacting our support team.
Access, Correct & Delete
You have the right to access a copy of the personal data we hold about you, to request corrections to inaccurate data, and in certain circumstances to request deletion of your data. Submit requests via email or live chat.
- 01Introduction
- 02Definitions
- 03Data We Collect
- 04How We Collect Data
- 05Legal Basis for Processing
- 06How We Use Your Data
- 07Data Sharing & Disclosure
- 08Cookies & Tracking
- 09Data Retention
- 10Data Security
- 11Your Rights
- 12Children & Minors
- 13International Transfers
- 14Policy Amendments
- 15Contact & Data Requests
Introduction
This Privacy Policy ("Policy") issued by mcity888 ("the Platform", "we", "us", "our") and applies to all personal data collected from individuals ("you", "Member", "User") who access or use any service provided throughhttps://mcity888.cam and any associated subdomains or applications.
mcity888 operates as an online casino and sports betting platform serving users across Malaysia and other permitted jurisdictions. In the course of providing these services, we collect and process personal data to the extent necessary for platform operation, regulatory compliance, fraud prevention, and the delivery of a personalised, secure gaming experience.
This Policy is intended to be read in conjunction with our Terms & Conditions. By registering an account on mcity888 or continuing to use the Platform following any update to this Policy, you acknowledge that you have read and understood the practices described herein.
Malaysian Players: While mcity888 is not subject to Malaysian domestic data protection legislation in the same way a locally incorporated entity would be, we voluntarily adopt data protection standards aligned with the Malaysian Personal Data Protection Act 2010 (PDPA) principles as a baseline commitment to our Malaysian user base.
Definitions
For the purposes of this Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could identify a specific individual, including name, identification number, email address, payment details, and device identifiers |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, transmission, and deletion |
| "Data Controller" | mcity888, which determines the purposes and means of processing personal data collected through the Platform |
| "Data Processor" | A third-party service provider that processes personal data on behalf of mcity888 under a data processing agreement |
| "KYC Data" | Identity verification documents including government-issued ID, proof of address, and biometric photographs submitted during the account verification process |
| "Cookies" | Small text files placed on your device by the Platform to support session management, analytics, and personalisation functions |
Personal Data We Collect
The categories of personal data we collect depend on your relationship with the Platform. The following table summarises what we collect and why:
| Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Full name, date of birth, email address, phone number, residential address | Account creation, identity verification, communications |
| Identity Documents (KYC) | Malaysian IC (MyKad), passport, driver's licence, proof of address, selfie with ID | Age and identity verification, regulatory compliance, fraud prevention |
| Financial Data | Deposit and withdrawal history, payment method details (masked), transaction records in MYR | Payment processing, fraud monitoring, AML compliance |
| Usage & Gaming Data | Game sessions, betting history, login times, session duration, wagering patterns | Platform operation, responsible gambling monitoring, bonus eligibility |
| Device & Technical Data | IP address, browser type, device OS, screen resolution, cookie identifiers | Security monitoring, fraud detection, platform optimisation |
| Communications Data | Live chat transcripts, support email correspondence, feedback submissions | Customer support, quality assurance, dispute resolution |
| Marketing Preferences | Email and notification opt-in/out status, preferred promotional categories | Consent-based marketing communications |
How We Collect Your Data
mcity888 collects personal data through the following channels:
- Directly from you: When you complete the account registration form, upload KYC documents, submit a deposit or withdrawal request, contact our support team, or respond to surveys and promotions.
- Automatically during platform use: Through server logs, session tracking, and cookies when you browse or interact with any page of mcity888. This includes IP address, page navigation patterns, and device fingerprinting data used for fraud prevention.
- From payment processors: When you initiate a deposit or withdrawal via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency walets, relevant transaction metadata is shared with us to confirm and record the transaction.
- From identity verification partners: In cases where automated identity verification services are engaged, results of document checks and liveness verification may be shared with mcity888 in processed form only.
- From third-party fraud and compliance databases: Where required under our anti-moneylaundering obligations, we may cross-reference submitted details against sanctions lists and fraud intelligence services.
Legal Basis for Processing
Where applicable data protection frameworks require mcity888 to identify a lawful basis for processing personal data, we rely on the following grounds:
- Contractual necessity: Processing required to perform our obligations under the Terms & Conditions — including account management, payment processing, withdrawal fulfilment, and customer support.
- Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering (AML) obligations, age verification requirements, and gaming licence conditions. This includes KYC document collection and retention.
- Legitimate interests: Processing for fraud detection, platform security, responsible gambling monitoring, and business analytics — where these interests do not override your fundamental rights and freedoms.
- Consent: Processing for marketing communications, optional personalisation features, and any data use beyond operational necessity. You may withdraw consent at any time without affecting the lawfulness of prior processing.
How We Use Your Personal Data
mcity888 uses your personal data for the following purposes:
6.1 Platform Operations
- Creating and managing your account, including authentication and session management
- Processing deposits and withdrawals in MYR via supported Malaysian payment channels
- Delivering the requested gaming services, including game access bet settlement, and bonus crediting
- Providing customer support through live chat and email at [email protected]
6.2 Compliance & Security
- Verifying your identity and age (21+) in accordance with KYC requirements
- Detecting and preventing fraud, money laundering, collusion, and other prohibited activities
- Meeting reporting obligations under applicable gaming licence conditions
- Monitoring gaming patterns to identify and respond to responsible gambling concerns
6.3 Communications & Marketing
- Sending transactional notifications relating to your account, deposits, withdrawals, and security events
- With your consent, sending promotional communications about bonuses, new games, and platform updates relevant to Malaysian players
- Conducting player satisfaction surveys to improve Platform quality
Data Sharing & Disclosure
mcity888 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following limited circumstances:
- Payment service providers: To process deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency processors. These providers receive only the data necessary to execute the specific transaction.
- Identity verification partners: To perform automated or manual KYC verification as required under our licensing obligations. Document data is shared under strict data processing agreements.
- Fraud and AML compliance services: To cross-reference user information against regulatory sanctions lists, politically exposed persons (PEP) databases, and fraud intelligence networks as required.
- Technology and infrastructure providers: Cloud hosting providers, content delivery networks, and cybersecurity services that process data as data processors acting under our instructions.
- Regulatory and law enforcement authorities: Where required by law, court order, or regulatory demand from our licensing authority or other competent authority with jurisdiction.
- Business restructuring: In the event of a merger, acquisition, or asset sale, personal data held by mcity888 may be transferred as part of that transaction, subject to equivalent privacy protections being maintained.
No cross-border transfers to unprotected jurisdictions: Where personal data is transferred to processors located outside Malaysia, mcity888 implements appropriate safeguards such as contractual data protection clauses to ensure your data remains protected to an equivalent standard.
Cookies & Tracking Technologies
mcity888 uses cookies and similar tracking technologies to support platform functionality, maintain your login session, detect fraud, analyse usage patterns, and where consent is given, deliver relevant promotional content. The categories of cookies we use are as follows:
- Essential Cookies: Required for the Platform to function. These include session cookies that maintain your authenticated state and security tokens that protect your account. These cannot be disabled without preventing core platform use.
- Analytics Cookies: Used to understand how Members navigate the Platform — including which games are most popular, which pages generate support queries, and where technical errors occur. This data is aggregated and anonymised where possible.
- Security & Fraud Detection Cookies: Used to detect unusual login behaviour, identify device characteristics for fraud prevention, and flag potentially compromised sessions.
- Marketing & Preference Cookies: Placed with your consent to tailor promotional content and remember your display preferences. You may opt out of these at any time through your account settings.
You may configure your browser to block or delete cookies. Note that disabling essential cookies will impair or prevent your use of the Platform. For detailed cookie management instructions, refer to your browser's help documentation.
Data Retention
mcity888 retains personal data for only as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law or our gaming licence conditions. The following indicative retention periods apply:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account & Registration Data | Duration of account + 5 years | Contractual record, regulatory compliance |
| KYC Identity Documents | Duration of account + 5 years | AML and licensing obligations |
| Transaction Records | Duration of account + 7 years | Financial record-keeping, AML compliance |
| Gaming & Betting History | Duration of account + 3 years | Dispute resolution, responsible gambling monitoring |
| Support Communications | 3 years from last interaction | Quality assurance, dispute resolution |
| Marketing Preferences | Until consent withdrawn or account closed | Consent record maintenance |
| Technical / Log Data | 90 days rolling | Security monitoring and fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Whereisation is applied, the resulting data no longer constitutes personal data and may be retained for aggregated analytics purposes without restriction.
Data Security
mcity888 implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:
- Transport security: All data transmitted between your device and mcity888 is encrypted using TLS 1.2 or higher. HTTPS is enforced across all pages — there are no unencrypted HTTP endpoints on the Platform.
- Storage encryption: Sensitive data stored at rest — including identity documents, payment records, and account credentials — is encrypted using AES-256 encryption.
- Access controls: Internal access to personal data is governed by role-based access control (RBAC). Staff access is limited strictly to what is required for their role. All access events are logged and audited.
- Two-factor authentication: Available to all Members and mandatory for administrative access to internal systems that handle personal data.
- Penetration testing and security audits: mcity888 engages third-party security specialists to conduct periodic penetration testing and vulnerability assessments of the platform infrastructure.
- Incident response: A documented data breach response plan is maintained. In the event of a breach affecting Member data, mcity888 will notify affected individuals and relevant authorities within applicable regulatory timelines.
No system is entirely immune from security risks. You are responsible for maintaining the confidentiality of your account credentials and for notifying mcity888 immediately if you suspect unauthorised access to your account.
Your Data Rights
Subject to applicable law and the limitations set out in this Policy, you hold the following rights in respect of your personal data held by mcity888:
Right of Access
Request a copy of the personal data we hold about you, along with information on how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held on your account.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Right to Restrict Processing
Request that we limit how we use your data while a dispute or correction request is being resolved.
Right to Data Portability
Request your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
Right to Object
Object to processing based on legitimate interests, including profiling for marketing purposes. We will cease such processing unless compelling grounds override your objection.
Withdraw Consent
Withdraw consent for any consent-based processing at any time without penalty, effective from the date of withdrawal.
Marketing Opt-Out
Unsubscribe from marketing emails at any time via the unsubscribe link in any communication or through your account notification settings.
To exercise any of the above rights, please contact our support team via live chat or by emailing [email protected] with the subject line "Data Rights Request". We will respond within 30 days. Identity verification will be required before any request is actioned to protect against fraudulent access to another person's data.
Children & Minors
mcity888 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21 years. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that a minor in your care has registered on mcity888, please contact our support team immediately via live chat or email. We will investigate and act promptly.
Responsible Gambling & Age Protection: Our 21+ minimum age policy is enforced through mandatory KYC identity verification. Parents are encouraged to use parental control software to restrict access to gambling platforms for minors in their household. For more information, visit our Responsible Gambling page.
International Data Transfers
mcity888 is an internationally operated platform and your personal data may be stored or processed in data centres located outside of Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard comparable to that applicable in Malaysia.
Safeguards applied to international transfers include: contractual data processing agreements with all third-party processors incorporating standard data protection clauses; selection of processors located in jurisdictions with recognised data protection standards; and regular due diligence reviews of processor data security practices.
Policy Amendments
mcity888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or operational circumstances. The effective date at the top of this page will be updated accordingly.
Where a material change is made to this Policy — particularly where it affects how we use data in ways that may be unexpected — we will notify registered Members through a prominent notice on the Platform or by email to your registered address prior to the change taking effect. Your continued use of mcity888 following such notification constitutes acceptance of the updated Policy.
We recommend that you review this Policy periodically to stay informed of how your data is being handled.
Contact Us & Data Requests
If you have any questions about this Privacy Policy, wish to exercise a data right, or need to report a privacy concern, please contact mcity888 through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week via the Platform. This is the fastest channel for urgent privacy concerns such as suspected unauthorised account access.
- Email: [email protected] — please use the subject line "Privacy Policy Query" or "Data Rights Request" so that your message reaches the appropriate team. We aim to respond within 5 business days for privacy queries and within 30 days for formal data rights requests.
- Postal: For formal written requests, please contact us via email first to obtain the current registered correspondence address for the Platform operator.
This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling policy, both of which contain additional information relevant to how we manage your account and data in specific contexts.
Your Privacy Is in Good Hands
We built mcity888 with privacy as a foundation, not an afterthought. If you have questions about your data, want to update your preferences, or simply want to explore what Malaysia's most trusted online gaming platform has to offer, we are here for you 24/7.
For players aged 21and above only. Play responsibly. Responsible Gambling resources →