Privacy Policy

Introduction

VCity77 ("we", "us", "our") operates the online casino and sports betting platform accessible at vcity77.cam. This Privacy Policy ("Policy") describes how VCity77 collects, uses, stores, discloses, and protects the personal data of individuals ("you", "Player", "User") who access or use our platform, whether through a web browser, mobile device, or any other channel we may make available.

VCity77 serves primarily the Malaysian market. Our platform is integrated with Malaysian payment infrastructure including FPX (Financial Process Exchange), DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank internet banking, and CIMB Clicks. As a result, we process personal and financial data typical of online financial services operating within the Malaysian digital payments ecosystem.

By registering an account or otherwise using the VCity77 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, you should discontinue using the platform and may request account closure as described in our Terms & Conditions.

Definitions

The following terms are used throughout this Privacy Policy with the meanings assigned below:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a living natural person, directly or in combination with other available data.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, disclosure, and deletion.
• "Data Controller" — VCity77, which determines the purposes and means of processing personal data collected through the platform.
• "Data Subject" — The natural person to whom the personal data relates — in this context, the registered player or website visitor.
• "Third Party" — Any person or entity other than VCity77 and the data subject, including payment processors, identity verification service providers, and fraud-prevention partners.
• "KYC" — Know Your Customer — the identity and age verification procedure required by VCity77 before processing withdrawal requests.
• "Cookies" — Small text files stored on a user's device by a web browser at the request of the visited website, used to retain session information and usage data.
• "FPX" — Financial Process Exchange, the Malaysian real-time online payment gateway operated under Bank Negara Malaysia oversight.

Personal Data We Collect

VCity77 collects personal data that is necessary to provide our services safely, lawfully, and effectively. The categories of personal data we collect are summarised in the table below:

VCity77 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, health data, or biometric data beyond what is strictly required for identity document verification. Where KYC documents contain such incidental information, it is processed solely for identity verification and is not used for any other purpose.

How We Collect Your Data

VCity77 collects personal data through the following methods:

• Direct collection — Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to surveys.
• Automated collection — Technical and usage data collected automatically when you access the platform, through cookies, web server logs, device fingerprinting technologies, and similar mechanisms.
• Payment processor data — Transaction confirmations, payment references, and account identifiers shared with VCity77 by FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and other payment partners upon transaction processing.
• Identity verification partners — Results and risk scores from third-party KYC and anti-fraud services that VCity77 may engage to verify identity documents and screen against sanctions lists.
• Fraud and security monitoring — Data generated through VCity77's internal fraud detection systems, including anomalous betting pattern analysis and device risk assessments.

Purposes of Data Processing

VCity77 processes your personal data for the following specific purposes:

• Account creation and management — Establishing and maintaining your registered player account, including authentication and profile management.
• Payment processing — Executing deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, CIMB, Maybank, and USDT TRC20 channels.
• Identity and age verification (KYC) — Confirming that you are a real person, aged 21 or above, and that your identity matches the payment methods on your account.
• Fraud prevention and security — Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover, and abuse of promotional offers.
• Regulatory compliance — Meeting applicable legal, anti-money laundering, and record-keeping obligations.
• Responsible gambling — Administering deposit limits, self-exclusion requests, session reminders, and player protection measures.
• Customer support — Responding to your enquiries, resolving complaints, and maintaining records of support interactions.
• Platform improvement — Analysing anonymised usage patterns to improve game selection, payment flow, and overall platform experience.
• Marketing communications — Sending promotional notifications, bonus alerts, and VIP tier updates to players who have not opted out of such communications.

Legal Basis for Processing

VCity77 processes personal data only where a lawful basis exists for doing so. The primary legal bases applicable to our processing activities are:

• Contractual necessity — Processing required to perform the contract between VCity77 and the player (e.g., account operations, payment processing, game access).
• Legal obligation — Processing necessary to comply with applicable legal requirements, including anti-money laundering obligations and regulatory record-keeping requirements.
• Legitimate interests — Processing for fraud prevention, platform security, abuse detection, and analytics, where VCity77's legitimate business interests do not override the player's rights and freedoms.
• Consent — Where you have provided explicit consent, for example for marketing communications. You may withdraw this consent at any time without detriment to your account standing.

Data Sharing & Disclosure

VCity77 does not sell your personal data. We may share personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment service providers — FPX gateway operators, DuitNow infrastructure providers, e-wallet platforms (Touch 'n Go, Boost, GrabPay), and participating Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong), solely to process transactions.
• Identity verification services — Third-party KYC and document verification providers engaged to verify player identity and screen against relevant sanctions or watchlists.
• Fraud prevention partners — Specialist service providers that assist VCity77 in detecting and preventing fraudulent activity, account abuse, and money laundering.
• Information technology providers — Cloud hosting, data storage, and platform infrastructure providers who process data on VCity77's behalf under contractual data processing agreements.
• Legal and regulatory authorities — Where VCity77 is required or permitted by law to disclose personal data in response to a court order, legal process, or a request from a competent authority.

All third parties with whom VCity77 shares personal data are required to maintain appropriate technical and organisational security measures and to process such data only for the purposes specified by VCity77. VCity77 does not authorise third parties to use player personal data for their own independent marketing or commercial purposes.

Payment Data & Malaysian Payment Systems

When you initiate a deposit or withdrawal via FPX, DuitNow, or any e-wallet platform, you will be directed to the respective payment provider's own interface. VCity77 does not store full bank account numbers, internet banking credentials, or e-wallet login details. VCity77 receives only transaction references, masked payment identifiers, and confirmation statuses from payment providers.

For cryptocurrency transactions via USDT TRC20, VCity77 stores your designated deposit wallet address and the corresponding transaction hashes for the purpose of crediting your player account and maintaining audit trails.

Financial transaction records — including deposit and withdrawal history — are retained for a minimum of seven (7) years from the date of the transaction, as required for anti-money laundering compliance and dispute resolution purposes. This retention period applies even if you close your account before that period elapses.

Cookies & Tracking Technologies

VCity77 uses cookies and similar tracking technologies on its platform to maintain session state, analyse usage patterns, prevent fraud, and improve user experience. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies — Required for the platform to function correctly. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without materially impairing platform functionality.
• Performance and Analytics Cookies — Used to collect anonymised information about how players navigate the platform — which pages are visited most frequently, where players encounter errors, and how long sessions last. This data is used in aggregate form only to improve the platform.
• Functionality Cookies — Remember your language preferences, game filter settings, and other personalisation choices to improve your experience on return visits.
• Security and Fraud-Detection Cookies — Support VCity77's fraud prevention systems by establishing a device fingerprint and identifying anomalous access patterns consistent with account takeover attempts.

You may control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the platform. VCity77 does not use cookies to serve third-party advertising.

Data Retention

VCity77 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following retention guidelines apply:

• Active account data — Retained throughout the duration of your registered account relationship with VCity77.
• Transaction and financial records — Retained for a minimum of seven (7) years from the date of each transaction, regardless of account status.
• KYC and identity documents — Retained for five (5) years after account closure or the completion of the last transaction, whichever is later.
• Customer support communications — Retained for two (2) years from the date of the last interaction, for complaint resolution and quality assurance purposes.
• Responsible gambling records — Self-exclusion records are retained indefinitely to prevent re-registration during exclusion periods and to support long-term player protection obligations.
• Technical and log data — Server access logs and device data are retained for up to twelve (12) months for security monitoring and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

Data Security

VCity77 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between players and VCity77's servers.
• Encrypted storage of personal data at rest, with access restricted on a need-to-know basis.
• Multi-factor authentication requirements for internal staff accessing player data systems.
• Regular security audits, vulnerability assessments, and penetration testing of the platform infrastructure.
• Separation of payment data from general personal data within VCity77's internal systems.
• Incident response procedures designed to detect, contain, and remediate data security incidents within defined timeframes.

While VCity77 takes data security seriously and maintains robust safeguards, no system can guarantee absolute security. Players are encouraged to use strong, unique passwords for their VCity77 accounts and to log out from shared devices after each session. VCity77 will not be held liable for security breaches attributable to a player's own failure to maintain account security.

Your Data Rights

Registered players of VCity77 hold the following rights in relation to their personal data. These rights may be exercised by contacting VCity77's support team via live chat or by emailing [email protected]:

VCity77 will acknowledge receipt of a data rights request within five (5) business days and will aim to resolve it within thirty (30) calendar days. For complex requests or high-volume periods, we may extend this period by an additional thirty (30) days with prior notification.

Minors & Age Restriction

VCity77 is strictly an adult entertainment platform. No person under the age of 21 years is permitted to register an account or use any feature of the platform. VCity77 does not knowingly collect personal data from individuals under the age of 21.

Where VCity77 becomes aware that personal data has been collected from a person under 21, we will immediately close the associated account, void any balances or winnings, and delete all personal data associated with that account within a reasonable time, subject only to any overriding legal retention obligations.

Parents and guardians who believe their child may have accessed VCity77 or provided personal information to us are encouraged to contact our support team immediately for prompt remediation.

Changes to This Privacy Policy

VCity77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. When material changes are made, we will notify registered players via the email address associated with their account or via a prominent notice on the platform.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the VCity77 platform following the publication of a revised Policy constitutes acceptance of those changes. We encourage you to review this Policy periodically to remain informed of how we handle your personal data.

If you disagree with any revision to this Policy, you may request account closure by contacting our support team. Any outstanding real-money balance will be returned following successful identity verification, as described in our Terms & Conditions.

Contact Us

For any queries, concerns, or formal requests related to this Privacy Policy or VCity77's handling of your personal data, please contact our team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the VCity77 platform. Average response time is 3–5 minutes. Please identify your query as a "Privacy" or "Data" request at the start of the conversation.
• Email: [email protected] — for formal data rights requests, please include "Data Rights Request" in your subject line. We aim to respond within 5 business days.
• Languages: Privacy enquiries can be handled in English, Bahasa Melayu, and Chinese (Mandarin and Cantonese).

VCity77 treats all privacy and data protection queries with the same urgency and confidentiality as security-related matters. Player data requests are handled by a dedicated team separate from standard customer support operations to ensure appropriate care and discretion.