Privacy Policy

1. Introduction

city888 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of our registered players and website visitors. This Privacy Policy describes how city888 collects, uses, stores, and discloses personal information in connection with the operation of the city888.club online gaming platform.

This policy is intended to be read alongside the city888 Terms & Conditions, which govern your use of the Platform. Terms not otherwise defined herein carry the same meaning as in the Terms & Conditions.

city888 operates under an internationally recognised gaming licence. As a licensed operator, we are subject to data protection obligations imposed by our licensing authority as conditions of continued licensure. These obligations inform and supplement the commitments described in this Privacy Policy.

2. Data Controller

city888 is the data controller in respect of personal data collected through the city888.club platform. For the purposes of this Privacy Policy, the data controller is the legal entity holding the city888 international gaming licence and operating the Platform.

All data protection enquiries, access requests, and complaints should be directed to city888 support via the contact details set out in Section 15 of this Policy.

3. Data We Collect

city888 collects the following categories of personal data in connection with your registration and use of the Platform:

Registration and Identity Data:

• Full legal name;
• Date of birth;
• Residential address;
• Email address;
• Username (as chosen at registration);
• Phone number (if provided).

Identity Verification (KYC) Data:

• Government-issued identity document (MyKad, passport, or equivalent);
• Proof of address documentation where requested;
• Source of funds documentation where required by AML obligations.

Financial and Transaction Data:

• Deposit and withdrawal transaction records;
• Payment method identifiers (e.g., partial e-wallet account references) — city888 does not store full payment credentials;
• Transaction amounts, timestamps, and MYR balance history.

Gaming Activity Data:

• Game sessions, bet history, and outcomes across all Platform sections (casino, slots, poker, sportsbook);
• Session duration and frequency data used for responsible gaming monitoring.

Technical and Usage Data:

• IP address and approximate geolocation;
• Device type, browser, and operating system;
• Pages visited, navigation paths, and feature interactions;
• Login timestamps and session data.

Communications Data:

• Support chat transcripts and email correspondence with city888;
• Feedback and survey responses where voluntarily provided.

4. How We Collect Data

city888 collects personal data through the following means:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions;
• Automatically: through cookies, server logs, and analytics tools when you access and navigate the Platform;
• From third parties: identity verification providers, payment processors, and fraud prevention services may provide or confirm data about you in connection with your account.

5. Legal Bases for Processing

city888 processes personal data on the following legal bases:

• Contractual necessity: processing required to create and manage your account, process deposits and withdrawals, and provide gaming services under the Terms & Conditions;
• Legal obligation: processing required to comply with AML regulations, KYC obligations, tax reporting, and gaming licence conditions;
• Legitimate interests: fraud prevention, platform security, responsible gaming monitoring, and improving Platform performance where our interests do not override your fundamental rights;
• Consent: for marketing communications where you have opted in. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

6. How We Use Your Data

city888 uses the personal data it collects for the following purposes:

• To create, manage, and secure your city888 account;
• To process deposits, withdrawals, and game transactions;
• To verify your identity and age in compliance with KYC and licensing requirements;
• To detect and prevent fraud, money laundering, and other prohibited activities;
• To monitor responsible gaming indicators and, where appropriate, contact players who may be exhibiting signs of problem gambling;
• To provide 24/7 customer support and respond to your enquiries and complaints;
• To send transactional notifications related to your account (e.g., withdrawal confirmations, account security alerts);
• To send promotional communications where you have opted in, and to personalise offers based on your gaming activity;
• To analyse aggregate Platform usage data to improve products, features, and user experience;
• To comply with applicable laws, regulatory requirements, and gaming licence obligations.

7. Data Sharing

city888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of third parties as necessary to operate the Platform:

• Payment processors: to facilitate MYR deposits and withdrawals via Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and other accepted methods;
• Identity verification providers: to perform KYC checks on documents submitted during account verification;
• Game providers: game software licensors may receive session data necessary to operate their games within the city888 environment;
• Fraud and AML services: transaction monitoring providers who assist in detecting suspicious activity;
• IT and hosting providers: cloud infrastructure and data centre providers who store and process Platform data under contractual data processing agreements;
• Regulatory and legal authorities: as required by applicable law, court order, or our gaming licence authority.

All third-party service providers engaged by city888 are required to process personal data in accordance with applicable data protection standards and are prohibited from using your data for their own purposes beyond the scope of the services they provide to city888.

8. Cookies & Tracking

city888 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used include:

• Essential cookies: required for the Platform to function, including session management, login state maintenance, and security tokens. These cannot be disabled without impairing Platform functionality;
• Analytical cookies: used to collect aggregate, anonymised data about how players navigate the Platform, which pages are visited most frequently, and how features are used. This data is used to improve the Platform and is not used to identify individual users;
• Preference cookies: used to remember user preferences such as display settings and language selection.

city888 does not embed third-party advertising trackers or social media tracking pixels on the Platform. Your browsing behaviour on city888 is not shared with advertising networks.

Most browsers allow you to manage cookie settings. Disabling essential cookies will affect your ability to use certain features of city888.

9. Data Security

city888 implements technical and organisational measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and city888 servers;
• Encryption at rest for sensitive data including identity documents and payment references;
• Access controls limiting personal data access to authorised personnel on a need-to-know basis;
• Regular security assessments and penetration testing;
• Incident response procedures for detecting and responding to data security events.

While city888 takes reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own login credentials. If you suspect your account has been compromised, contact city888 support immediately via live chat.

10. Data Retention

city888 retains personal data for as long as your account is active and for such additional period as is required to fulfil the purposes described in this Privacy Policy or as mandated by applicable law and gaming licence conditions.

Specifically:

• Account and KYC data is retained for a minimum of five years following account closure, in compliance with AML and gaming licence record-keeping obligations;
• Transaction and betting history is retained for the same minimum period;
• Support communications are retained for three years following the resolution of the relevant matter;
• Marketing opt-in records are retained for the duration of the opt-in and for a reasonable period thereafter to demonstrate compliance;
• Technical log data (IP logs, session logs) is retained for 12 months unless a longer retention period is required for fraud investigation or regulatory purposes.

Following expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with city888's data lifecycle procedures.

11. Your Rights

Subject to applicable law and the conditions of city888's gaming licence, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data city888 holds about you;
• Right to rectification: to request correction of inaccurate or incomplete data;
• Right to erasure: to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to restrict processing: to request that city888 limit its processing of your data in certain circumstances;
• Right to data portability: to receive a copy of your data in a structured, commonly used, machine-readable format;
• Right to object: to object to processing based on legitimate interests, including profiling for marketing purposes;
• Right to withdraw consent: where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact city888 support via live chat or email at [email protected] (plain text — not a clickable link). city888 will respond to requests within 30 days, or notify you if additional time is required.

Please note that certain rights are subject to exceptions where legal or regulatory obligations require city888 to retain or continue processing data, for example KYC records required by AML law.

12. Children's Privacy

city888 is strictly prohibited for persons under the age of 21. city888 does not knowingly collect personal data from anyone under 21. Where city888 has reason to believe that a registered account belongs to a person under the required age, the account will be immediately closed and all associated data retained only to the extent required by legal and regulatory obligations, with winnings forfeited in accordance with the Terms & Conditions.

Parents or guardians who believe that a person under 21 has registered with city888 are encouraged to contact support immediately via live chat.

13. International Data Transfers

city888's data processing infrastructure may involve the transfer of personal data to servers or service providers located outside of Malaysia. Where such transfers occur, city888 takes reasonable steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection law and the conditions of city888's gaming licence.

These safeguards may include contractual data processing agreements with service providers, or reliance on recognised transfer mechanisms as applicable in the relevant jurisdiction.

14. Changes to This Policy

city888 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or gaming licence conditions. Material changes will be notified to registered players via the contact information on file or through a notice on the Platform. The effective date at the top of this Policy reflects the date of the most recent revision. Continued use of the Platform following notification of changes constitutes acceptance of the updated Privacy Policy.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or city888's data practices, please contact us:

• Live Chat: available 24/7 via the city888 Platform;
• Email: [email protected] (plain text — not a clickable link).

For responsible gaming enquiries and self-exclusion requests, please visit the city888 Responsible Gaming page. Our support team can also assist with responsible gaming matters via live chat at any time.