Data Protection

Mcity888 Privacy Policy – Your Information Security

At mcity888, your privacy is more than a legal obligation — it is a responsibility we take seriously every day. Learn how we manage and protect your personal data.

  1. Home
  2. Privacy Policy

Contents

Updated: 1 January 2026

1Introduction

Mcity888 is committed to protecting the privacy of every user on our platform. This Privacy Policy explains in detail how we collect, store, use, and protect your personal information when you register, log in, or interact with any part of the mcity888 platform.

This document is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. By using the mcity888 platform, you consent to the processing of your personal data in accordance with the terms set out in this policy.

mcity888 does not sell, rent, or transfer your personal data to third parties for marketing purposes without your explicit consent. We only share data when it is necessary to deliver our services to you or to comply with legal requirements.

If you have any questions about how we handle your data after reading this policy, the mcity888 privacy team can be reached via our support email listed at the end of this document.

2Personal Data We Collect

We collect various types of data depending on how you interact with the mcity888 platform. Generally, the data we collect falls into three main categories:

A. Data You Provide Directly

  • Full name as stated on official identity documents
  • Date of birth for age verification (18 and above)
  • Email address and mobile number
  • Current residential address
  • Bank account or digital wallet details for deposit and withdrawal purposes
  • Copies of identity documents (MyKad, passport) during the KYC process

B. Data Collected Automatically

  • IP address and general location data
  • Device type, operating system, and browser used
  • Game activity logs including time, game type, and wagering amounts
  • Deposit and withdrawal transaction history
  • Cookie data and session identifiers

C. Data from Third Parties

  • Identity verification from accredited KYC service providers
  • Transaction information from payment providers such as FPX, DuitNow, and digital wallets
  • Anti-money laundering (AML) verification data from relevant agencies
Data Type Primary Purpose Required?
Name & Date of Birth Identity Verification & KYC Yes
Email & Phone No. Communication & account security Yes
Bank / eWallet Details Payment Processing Yes (for withdrawals)
Activity & IP Logs Security & fraud prevention Automatic
Cookie Data User experience & analytics Options
Identification Documents Legal Compliance & KYC Yes (for withdrawals)

3How We Use Your Data

Mcity888 uses your personal data for specific and legitimate purposes. We do not process your data for any other purpose without informing you in advance.

  • Account management: Creating, verifying, and maintaining your member account on the mcity888 platform.
  • Transaction processing: Processing deposits, withdrawals, and bonus payments securely and accurately.
  • Identity verification: Conducting the KYC process to verify that you are 18 years of age or older and that your identity is valid.
  • Platform security: Detecting and preventing fraud, money laundering, and unauthorized access to your account.
  • Legal compliance: Fulfilling our obligations under PDPA 2010, AML regulations, and other regulatory requirements.
  • Service communications: Sending account, transaction, security, and service update notifications.
  • Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate assistance.
  • Platform improvements: Analyzing usage patterns to improve user experience and platform performance.
  • Marketing (with consent): Sending offers, promotions, and new product information to members who have given their consent.
You may withdraw consent for marketing communications at any time by contacting our support team or using the unsubscribe link in any promotional email. Withdrawing marketing consent does not affect the delivery of essential service communications.

4Legal Basis for Data Processing

Every personal data processing activity carried out by mcity888 is grounded in at least one valid legal basis under Malaysia's Personal Data Protection Act 2010:

  • Consent: You provide explicit consent during account registration, specifically for marketing and promotional communications.
  • Contract performance: Processing is required to fulfill the service agreement between you and mcity888, including payment processing and account management.
  • Legal obligations: mcity888 is legally required to retain certain transaction records, conduct KYC, and comply with AML requirements under Malaysian law.
  • Legitimate interests: We process certain data based on legitimate business interests, such as preventing fraud and ensuring platform security, as long as these interests do not override your fundamental privacy rights.

5Data Sharing with Third Parties

Mcity888 does not sell your personal data. However, we do share your data with selected third parties in the following situations:

  • Payment providers: FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and other payment providers required to process your transactions.
  • KYC service providers: Accredited third-party identity verification companies that help us verify the identity of new members.
  • Game providers: Gaming software companies such as Live Casino, Slots, and Fish Shooting Games providers that require a member ID to operate the games.
  • Cloud and hosting services: Technical infrastructure providers that store and process data on our behalf, subject to strict data processing agreements.
  • Regulatory authority: When required by law or a valid court order.
All third parties we work with are required to sign data processing agreements ensuring they protect your information to the same or higher standard that we uphold. We do not permit them to use your data for their own purposes.

In the event of a merger, acquisition, or business asset transfer, your personal data may be transferred to the new entity. In such cases, we will notify you in advance and ensure equivalent data protection standards continue to apply.

6Data Security Measures

The security of your personal data is mcity888's top priority. We continuously invest in the latest security technologies and procedures to ensure your information is always protected.

  • 256-bit SSL encryption: All data transmitted between your device and mcity888's servers is encrypted using TLS 1.3 – the same security standard used by leading banking institutions.
  • Sensitive data encryption: Bank account details, card numbers, and identity documents are stored in encrypted format. Full card numbers are never stored on our servers.
  • Strict access controls: Only authorized staff with legitimate work requirements may access member personal data, and every access is logged for audit review.
  • Two-factor authentication (2FA): We encourage and support the use of 2FA for all member accounts as an added layer of protection.
  • 24/7 security monitoring: Our security team continuously monitors the platform to detect any suspicious activity or intrusion attempts.
  • Regular security testing: We conduct regular penetration testing and security audits carried out by independent specialists.
  • Data backup: Your data is securely backed up across multiple data centres in different locations to ensure service continuity.
While we take all reasonable steps, no security system is perfect. In the event of a data breach that may affect your rights and freedoms, we will notify you within 72 hours of becoming aware, in line with international best practices.

7Data Retention Period

Mcity888 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable law.

Data Category Retention Period Basis
Active account information Throughout the active account period Service contract
Financial transaction records 7 years after transaction Legal obligations
KYC Documents 5 years after account closure PDPA & AML requirements
Game activity logs 2 years Security & disputes
Support communication data 3 years Legitimate interests
Marketing data (with consent) Until consent is withdrawn Consent

Once the retention period ends, your data will be securely deleted or anonymised so that it can no longer be linked to any specific individual.

8Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data that we hold:

Right of Access Obtain a copy of the personal data we hold about you at any time.
Right to Rectification Correct inaccurate or outdated information in your account.
Right to Erasure Request deletion of data that is no longer needed, subject to legal obligations.
Right to Object Object to the processing of your data for direct marketing purposes at any time.
Right to Portability Receive your data in a machine-readable format for transfer to another platform.
Right to Restrict Processing Restrict how we use your data in certain situations as defined by law.

To exercise any of the above rights, contact us via support email. We will process your request within 30 business days. In complex cases, this period may be extended to 60 days with prior notice to you.

9Cookies & Tracking Technologies

Mcity888 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled without affecting platform functionality.
  • Preference cookies: Saving your preferences such as language, preferred currency denomination, and favorite game layout.
  • Analytics cookies: Helping us understand how users interact with the platform for continuous improvement purposes. This data is collected in aggregate and does not identify individuals.
  • Marketing cookies: Used to display relevant ads and offers to you, including on third-party platforms. These cookies are only active with your consent.
You can manage cookie settings through your browser preferences or via the cookie preference panel available on your first visit to the mcity888 platform. Please note that disabling certain cookies may affect the functionality of some parts of the platform.

Mcity888 does not use invasive cross-site tracking technologies. All analytics data we collect is processed in a secure environment and is not shared with third-party advertisers without your consent.

10Changes to This Privacy Policy

Mcity888 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new service features.

  • Any significant changes will be communicated to you via email or in-platform notification at least 14 days before the changes take effect.
  • The latest version of this Privacy Policy is always available on this page with a clear update date.
  • Continued use of the platform after the effective date of any changes constitutes your acceptance of the updated policy.
  • If you disagree with the changes made, you have the right to close your account and withdraw your balance before the effective date.

We maintain an archive of previous versions of this Privacy Policy. If you need access to an earlier version for reference or dispute purposes, please contact our support team.

11Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your personal data protection rights, the mcity888 privacy team is here to help:

  • Support Email: [email protected]
  • Live Chat: Available 24/7 directly within the mcity888 platform
  • Response Time: We aim to respond to all privacy-related inquiries within 5 business days

For complaints that cannot be resolved through our internal channels, you have the right to submit a complaint to the Department of Personal Data Protection Malaysia (JPDP) or the relevant regulatory body in your country.

For more information on our platform's terms of use, please read Terms and Conditions us. For information on responsible gaming practices, visit the Responsible Gaming us.

Our Privacy Commitment

Mcity888's Six Pillars of Data Protection

Privacy is not an add-on – it is built into every layer of the mcity888 platform from day one.

Encryption

256-bit SSL on Every Connection

Every byte of data flowing between your device and mcity888's servers is protected with TLS 1.3 encryption. Your personal information, passwords, and payment details cannot be intercepted by any party while in transit.

Identity

Secure & Efficient KYC

Our KYC identity verification process uses certified document recognition technology. Documents you upload are encrypted immediately and can only be accessed by staff specifically authorized for verification purposes.

No Data Selling

Your Data Is Never Sold

Mcity888 has never and will never sell member personal data to any party for marketing or profit. Your data is used solely to deliver the services you use and to comply with applicable laws.

Compliance

Malaysia PDPA 2010 Compliant

All of mcity888's data handling practices are designed to meet the requirements of Malaysia's Personal Data Protection Act 2010. We conduct regular compliance audits and work with legal advisors who specialize in data privacy.

User Controls

You're in Control

Through your mcity888 account settings, you can update personal information, manage marketing preferences, request a copy of your data, or initiate account closure at any time. Your rights are always respected, no questions asked.

Transparency

Incident Notification Within 72 Hours

In the event of any security incident that may affect your personal data, mcity888 is committed to notifying you within 72 hours – well ahead of what is legally required. Transparency is at the heart of our trust with you.

FAQ

Frequently Asked Questions About mcity888 Data Privacy

Yes, you have the right to request deletion of your personal data. However, certain data is legally required to be retained even after account closure — such as financial transaction records (7 years) and KYC documents (5 years after account closure) under Malaysian legal requirements. Data not subject to legal obligations will be deleted within 30 business days of your request being received.

No. mcity888 does not store your full credit or debit card number. All card transactions are processed directly through a PCI-DSS compliant payment gateway. We only retain the token reference issued by the payment provider, not the actual card number. For primary payment methods such as DuitNow and FPX, only the bank account information required for identity verification is stored, in encrypted form.

mcity888 employs multiple layers of protection including 256-bit SSL encryption, a web application firewall (WAF), an intrusion detection system (IDS), 24/7 security monitoring, and periodic penetration testing by independent experts. Your password is stored in hashed form using strong cryptographic algorithms — meaning even our own staff cannot view your password. We also encourage the use of two-factor authentication (2FA) for an additional layer of protection on your account.

mcity888 shares only the minimum data necessary with our game software providers — typically just the member ID and session information required to run the games. We do not share your full name, banking details, or KYC documents with game providers. All game providers we work with are required to comply with strict privacy policies and may not use that data for any other purpose.

Yes, you have the right to request access to all personal data we hold about you under the Personal Data Protection Act 2010. Submit your request via our support email with "Data Access Request" as the subject. We will verify your identity and provide a data report within 30 business days. Data will be provided in a readable format such as PDF or CSV.
Join mcity888 Today

A Trusted Platform Built with Privacy at Its Core

Mcity888 doesn't just offer the best online casino experience in Malaysia — we also ensure every aspect of your personal data is handled with care, security, and transparency. Register now and play with peace of mind, knowing your privacy is in safe hands.

Register a Free Account Login

For users aged 18 and above only. Please read Responsible Gaming us.

Useful Links
Bahasa Melayu