City88 Privacy Policy – Member Personal Data Protection in Malaysia

This Privacy Policy is published by city88 and applies to all users who access or use our online entertainment platform at https://city88.im, including all related services such as slots, live casino, table games, roulette, jackpot, Sports Betting and VIP rewards.

Your privacy is not merely a legal obligation for city88 — it is a moral responsibility we take seriously. In this digital age, where personal data is increasingly valuable, we ensure that every piece of information you entrust to city88 is handled with the highest level of care and security.

City88 collects only the personal data necessary to operate our services securely, meet compliance obligations and improve user experience. The following are the categories of data we may collect:

city88 collects your personal data through various channels as you interact with our platform:

• Account Registration: Information you provide when creating a new account on city88, including your name, phone number, email address, and password.
• KYC Process (Identity Verification): Documents submitted for identity verification, such as a copy of your ID card or passport where required.
• Financial Transactions: Information collected automatically when you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, and when you submit a withdrawal request.
• Platform Usage: Data automatically generated when you use the city88 platform — including game logs, Sports Betting records, Live Casino activity, and interactions with table games.
• Support Communications: Records of conversations via LiveChat, email, or any other communication channel you use to contact the city88 support team.
• Cookies & Tracking Technologies: Data collected through cookies, web beacons, and similar technologies when you browse the city88 website (see Section 7 for more details).

Every piece of personal data collected by city88 used only for legitimate and transparent purposes. We do not use your data for anything beyond what is stated below:

• Account Management: To create, verify, and manage your city88 account, including processing secure logins and two-factor authentication.
• Transaction Processing: To securely process deposits and withdrawals, and to maintain accurate transaction records for your reference.
• Legal Compliance: To fulfil anti-money laundering (AML) compliance obligations, know your customer (KYC) requirements and reporting as required by the relevant authorities.
• Platform Security: To detect and prevent fraudulent activity, unauthorised access, or any conduct that violates Terms & Conditions city88.
• Service Improvement: To understand platform usage patterns and improve the user experience across slots, Live Casino, Sports Betting, and all other services.
• Service Communications: To send important notifications relating to your account, transactions, security updates, and policy changes.
• Marketing Communications (with consent): To send information about promotions, new bonuses, and exclusive offers — only to members who have given consent to receive such communications.

City88 does not sell your personal data to any third party. However, in order to operate the platform safely and efficiently, city88 may share your data with a limited and selected category of third parties, strictly on an operational-need basis:

• Payment Service Providers: Payment gateways that process your deposit and withdrawal transactions (such as FPX providers, Touch 'n Go, GrabPay, Boost, ShopeePay and DuitNow eWallet processors) receive only the minimum information required to complete the transaction.
• Licensed Game Providers: Game developers that provide slots, live casino and table games to city88 may receive limited technical data necessary to run the games.
• Cloud & Security Service Providers: Third parties that provide server infrastructure, data backup and cybersecurity services.
• Relevant Authorities: City88 will disclose personal data where required by law, court order or a valid request from a regulatory authority.

All third parties that receive data from city88 are bound by strict confidentiality agreements and are permitted to use that data only for the specified purposes.

City88 employs multiple layers of technical and procedural security to protect your personal data from unauthorised access, loss, destruction, or disclosure.

Technical Security Measures:

• 256-bit SSL encryption for all data in transit between your device and city88 servers.
• Encryption of sensitive data stored in databases using industry-recognised algorithms.
• Two-factor authentication (2FA) available for all city88 member accounts.
• Continuous 24/7 security monitoring and intrusion detection systems.
• Strict access controls — only explicitly authorised city88 employees may access personal data, and only to the extent necessary to carry out their duties.
• Regular security audits and independent penetration testing.

Data Retention Period:

• Active account data is retained for the duration your account remains active, plus the minimum period required by law (typically 5–7 years after account closure).
• Financial transaction records are retained for a minimum of 7 years in line with financial compliance requirements.
• Security logs and technical data are retained for 12 months for investigation purposes if required.

City88 uses cookies and similar tracking technologies to enhance user experience, analyse platform traffic and ensure the security of your login sessions.

Types of Cookies Used:

• Essential Cookies: Required for core platform functions such as maintaining login sessions, security and navigation. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how you use the city88 platform — pages visited, games played, time spent — to help us improve service performance.
• Functional Cookies: Saving your preferences such as language, region, and display settings to deliver a more personalised experience.
• Analytics Cookies: Allows us to understand aggregate (non-individual) usage patterns to improve platform design and content.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect your ability to log in and use the city88 platform fully.

As a member city88, you have certain rights regarding your personal data. We are committed to making it straightforward for you to exercise these rights, free of charge:

Platform city88 is strictly intended for individuals aged 21 and above only. We do not knowingly collect or process personal data from individuals under the age of 21.

Should we identify that personal data belonging to a minor has been collected without the knowledge of a parent or legal guardian, we will immediately take the following steps:

• Immediate closure of the account in question.
• Delete all personal data belonging to that individual from our systems.
• Return any stored funds to the original payment method.

City88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, applicable legislation or improvements to the services we offer.

When material amendments are made to this Privacy Policy, city88 will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a prominent notice on the city88 platform homepage for at least 14 days after the changes are published.
• Sending notifications to all registered members via email or in-platform notifications, for material amendments that affect their privacy rights.

We encourage you to review this Privacy Policy page periodically. Your continued use of the city88 platform following the publication of any amendments will be considered your acceptance of the revised terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how city88 manage your personal data, please contact our Data Privacy Officer through the following channels: