Privacy Policy

1. Introduction

1.1 city88 ("city88", "We", "Us", "Platform") is committed to protecting the personal data of all players, registered users, and visitors to the city88 platform. This Privacy Policy describes our practices in relation to the collection, use, storage, disclosure, and protection of personal data.

1.2 This Privacy Policy should be read in conjunction with city88's Terms & Conditions, which govern the use of the city88 platform and are incorporated herein by reference. In the event of any conflict between this Privacy Policy and the Terms & Conditions with respect to personal data, this Privacy Policy shall prevail.

1.3 city88 processes personal data in accordance with applicable data protection laws and internationally recognised privacy standards. We collect only the minimum personal data necessary to provide our services and to fulfil our compliance obligations.

2. Personal Data We Collect

2.1 city88 collects the following categories of personal data in connection with the provision of its services:

2.1.1 Identity Data

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Government-issued identification document number and document type (collected during KYC verification);
• Nationality.

2.1.2 Contact Data

• Email address (used as primary account identifier and communication channel);
• Mobile phone number (used for 2FA and account recovery);
• Residential address (collected during KYC verification and used for regulatory record-keeping).

2.1.3 Financial Data

• Payment method details sufficient to process deposits and withdrawals (e.g., bank account identifiers, e-wallet reference numbers). city88 does not store full card numbers or complete banking credentials;
• Transaction history — deposit amounts, withdrawal amounts, dates, and payment channel used;
• Account balance and wagering history.

2.1.4 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session logs, login timestamps, and navigation patterns within the city88 platform;
• Game play history, bet placement records, and bonus redemption history.

2.1.5 Communication Data

• Records of communications between you and city88 support, including live chat transcripts and email correspondence.

3. How We Collect Your Data

3.1 city88 collects personal data through the following means:

• Direct Registration: When you create a city88 account, you provide identity and contact data voluntarily through the registration form.
• KYC Verification: When you submit identity documents in response to a verification request from city88.
• Payment Transactions: Financial data is collected when you make a deposit or request a withdrawal through the city88 platform.
• Platform Usage: Technical and usage data is collected automatically as you use the city88 platform, through server logs, cookies, and similar technologies.
• Support Interactions: Communication data is collected when you contact city88 support via live chat or email.

3.2 city88 does not collect personal data from third-party data brokers, social media platforms, or public directories without your explicit consent.

4. How We Use Your Personal Data

4.1 city88 uses your personal data for the following purposes:

• To create, verify, and maintain your city88 account;
• To process deposits, withdrawals, and account transactions in Malaysian Ringgit (MYR);
• To verify your identity and age (21+ requirement) in accordance with KYC obligations;
• To detect and prevent fraud, money laundering, and other prohibited activities;
• To personalise your city88 experience, including relevant game recommendations and promotional offers;
• To provide customer support and respond to your enquiries;
• To send transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts);
• To send promotional communications, where you have provided consent or where permitted under applicable law;
• To comply with applicable legal, regulatory, and compliance obligations;
• To monitor and improve the city88 platform's security, performance, and functionality.

4.2 city88 does not use your personal data to make solely automated decisions that have legal or similarly significant effects on you without providing a mechanism for human review.

5. Legal Basis for Processing

5.1 city88 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the city88 Terms & Conditions, including account management and payment processing;
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC and anti-money-laundering obligations;
• Legitimate Interest: Processing for fraud prevention, platform security, and improving city88's services, where those interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and certain cookie usage, where your consent has been obtained and may be withdrawn at any time.

6. Sharing Your Personal Data

6.1 city88 does not sell personal data to any third party. city88 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Service Providers: Malaysian payment processors including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank, for the purpose of processing your deposits and withdrawals;
• Identity Verification Services: Third-party KYC providers used to verify identity documents and confirm age eligibility;
• Game Content Providers: Licensed game studios and live dealer providers whose content is integrated into the city88 platform. These providers may receive session tokens and game event data necessary to operate the games;
• IT Infrastructure and Security Providers: Cloud hosting, CDN, and cybersecurity providers engaged to operate and secure the city88 platform;
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory direction.

6.2 All third parties with whom city88 shares personal data are required to process that data in accordance with applicable data protection standards and are prohibited from using it for their own independent purposes.

7. Cookies & Tracking Technologies

7.1 city88 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the platform to function, including session authentication and security tokens. These cannot be disabled.
• Functional Cookies: Store your preferences such as language settings and game display options.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the city88 platform, used to improve usability and performance.
• Marketing Cookies: Used to measure the effectiveness of city88's promotional campaigns. These are only set with your consent.

7.2 You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the city88 platform, but may affect certain features.

8. Data Retention

8.1 city88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal and regulatory obligations. Specific retention periods are as follows:

• Account and identity data is retained for the duration of your city88 account and for a minimum of five (5) years after account closure, in accordance with anti-money-laundering record-keeping requirements;
• Transaction records are retained for a minimum of seven (7) years from the date of the transaction;
• Support communication records are retained for three (3) years from the date of the interaction;
• Marketing consent records are retained for the duration of your consent and for one (1) year after withdrawal of consent.

8.2 Where personal data is no longer required and no legal retention obligation applies, city88 will securely delete or anonymise that data.

9. Data Security

9.1 city88 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• AES-256 encryption for data at rest;
• TLS 1.2+ / 256-bit SSL for all data in transit;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing by independent third parties;
• Two-factor authentication for all internal administrative access.

9.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, city88 will notify affected players without undue delay in accordance with applicable data protection law.

10. Your Data Rights

10.1 Subject to applicable law, you have the following rights in respect of your personal data held by city88:

• Right of Access: You may request a copy of the personal data city88 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to Restrict Processing: You may request that city88 restricts the processing of your personal data in certain circumstances;
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to city88;
• Right to Object: You may object to processing based on legitimate interest, including direct marketing.

10.2 To exercise any of the above rights, contact city88 support via the 24/7 live chat interface or by email (displayed as plain text in Section 14). city88 will respond to all valid requests within 30 days.

11. Children & Minors

11.1 The city88 platform is strictly for adults aged 21 years and above. city88 does not knowingly collect personal data from persons under the age of 21. If city88 discovers that a minor has registered an account, that account will be closed immediately, all associated personal data will be deleted, and any deposits will be returned to the source payment method.

11.2 If you believe that a minor has accessed the city88 platform or provided personal data, please notify city88 support immediately.

12. International Data Transfers

12.1 city88 primarily processes personal data within the region in which the platform operates. Where personal data is transferred to third-party service providers located outside Malaysia, city88 ensures that appropriate safeguards are in place, including contractual protections equivalent to those required under applicable Malaysian data protection law.

12.2 Personal data processed by game content providers and live studio operators may be processed in the jurisdiction in which those providers operate. city88 maintains data processing agreements with all such providers to ensure adequate data protection standards are maintained.

13. Changes to This Privacy Policy

13.1 city88 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, platform features, or our data processing practices. The effective date and last-updated date at the top of this page will be revised accordingly.

13.2 Where changes are material, city88 will provide notice to registered players via the platform or by email to the address registered on your account. Continued use of the city88 platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy.

14. Contact Us

14.1 For questions, requests, or complaints relating to this Privacy Policy or city88's data processing practices, please contact our support team via the 24/7 live chat interface accessible within the platform.

14.2 You may also contact city88 by email. The support address is displayed below as plain text only — it is not a clickable link:

14.3 city88 aims to respond to all privacy-related enquiries within 30 days. For urgent security concerns, live chat is the fastest channel.