Betcity Privacy Policy – Personal Data Protection for Malaysia Users

Welcome to the betcity Privacy Policy. This document ("Privacy Policy") explains in detail how betcity ("Platform", "We", "betcity") collects, processes, uses, stores and protects your personal data when you register for and use the betcity online betting platform in Malaysia.

Betcity is committed to protecting every user's privacy to the highest standard. We fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

This Privacy Policy applies to all betcity users, including registered members, visitors who browse the betcity website without an account, and anyone who interacts with betcity through our communication channels. By continuing to use the betcity platform after reading this policy, you are deemed to have agreed to all terms stated herein.

Betcity only collects data necessary to operate as a legitimate, secure and responsible betting platform. The data we collect falls into the following categories:

Identity & Registration Data

Financial & Transaction Data

Platform Activity Data

Technical Data

Betcity collects your personal data through a variety of transparent and lawful methods:

• Account Registration: When you complete the betcity registration form, you provide your identity data and contact information directly.
• Identity Verification (KYC): When you submit identification documents for the verification process, the data from those documents is recorded in the betcity system.
• Financial Transactions: Every time you make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow, FPX, or any other method, your transaction data is automatically recorded.
• Platform Usage: Your activity on betcity — from Sports Betting and poker to slots — is recorded for security and customer support purposes.
• Support Interactions: When you contact the betcity support team via live chat or email, your conversation is recorded for quality control purposes.
• Cookies and Tracking Technologies: betcity uses cookies and similar technologies to collect technical data about your device and usage patterns.

How betcity uses your personal data for legitimate and relevant purposes only. All purposes of use are as follows:

Betcity will not use your personal data for any purpose beyond those listed above without first obtaining fresh consent from you.

Betcity never sells or rents your personal data to any party for marketing or commercial purposes. However, in limited situations where it is necessary, betcity may share data with the following parties:

• Payment Providers: Payment processors such as FPX, DuitNow, and Malaysian eWallet providers require certain transaction data to securely process your deposits and withdrawals.
• Malaysian Authorities: betcity fully complies with directives from legitimate authorities in Malaysia. Where required by a court or regulatory body, betcity will disclose the necessary information.
• Technical Service Providers: Third parties that assist betcity with technical operations — such as cloud services, analytics tools and security systems — may access certain data within the limited scope required.
• Licensed Business Partners: In the event of a merger, acquisition or sale of betcity assets, user data may be transferred to the relevant entity, subject to equivalent privacy protections.

Betcity invests heavily in security infrastructure to safeguard your data against threats such as cyberattacks, data theft, and unauthorised use. Key security measures we have implemented include:

• 256-bit SSL Encryption: All communications between your device and betcity's servers are encrypted using the latest TLS 1.3 protocol. This means that even if your data is intercepted, it cannot be read.
• Data-at-Rest Encryption (AES-256): Data stored in the betcity database is encrypted to the AES-256 standard — the same standard used by financial institutions and Malaysian government agencies.
• Two-Factor Authentication (2FA): betcity encourages and supports the use of 2FA for all accounts. This adds a significant extra layer of security.
• 24/7 Security Monitoring: The betcity security team continuously monitors the system to detect any suspicious activity or intrusion attempts.
• Internal Access Controls: Only betcity staff with a legitimate business need may access user data. All access is logged and regularly audited.
• Regular Security Testing: betcity conducts regular penetration testing and independent third-party security audits to identify and address vulnerabilities.

While betcity takes all reasonable steps to protect your data, it is important to understand that no digital security system is 100% foolproof. You also play a key role by using strong passwords, keeping your login credentials private, and promptly reporting any suspicious activity to betcity.

Betcity uses cookies and similar technologies to enhance the user experience, analyse usage patterns, and maintain platform security. The types of cookies we use are as follows:

• Essential Cookies (Required): Required for core betcity platform functions such as login session verification and security. These cookies cannot be disabled.
• Functional Cookies: Saves your preferences — such as language, account settings and interface appearance — so you don't have to reconfigure them each time you log in.
• Analytics Cookies: Helps betcity understand how users interact with the platform — including the most visited pages, time spent, and navigation paths — for continuous improvement purposes.
• Security Cookies: Used to detect suspicious login attempts and protect your account from unauthorised access.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some parts of the betcity platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a betcity user have the following rights regarding your personal data:

Requests to exercise the above rights will be processed by betcity within 30 calendar days. For complex cases, this period may be extended by up to 60 days with notice to you. betcity does not charge any fee for reasonable requests.

Betcity retains your personal data only for as long as necessary for the identified purposes, or as required under Malaysian law. Retention period guidelines are as follows:

• Active Account Data: Retained for as long as your betcity account is active and for 7 years after account closure (PDPA and AML requirements).
• Financial Transaction Records: Retained for 7 years from the date of transaction in accordance with Malaysian financial regulations and LHDN tax requirements.
• Platform Activity Logs: Retained for 2 years for security and dispute resolution purposes.
• Support Chat Logs: Retained for 3 years for quality control and dispute resolution purposes.
• Technical Data (Server Logs): Retained for 90 days for security and technical troubleshooting purposes.
• Marketing Data (with consent): Retained until you withdraw your consent.

Once the retention period expires, betcity will securely delete your data using methods that ensure it cannot be recovered.

The betcity platform is for individuals aged 18 and above only. betcity does not knowingly collect or process personal data of individuals under the age of 18.

Should betcity discover that personal data belonging to someone under the age of 18 has been collected without our knowledge, the account in question will be closed immediately and all associated data will be deleted within 48 hours.

Betcity also takes into account the protection of individuals vulnerable to problem gambling. The self-protection tools betcity provides — including deposit limits, self-exclusion breaks and permanent self-exclusion — form part of betcity's commitment to responsible betting. For more information, visit the Responsible Gambling us.

Betcity reserves the right to amend this Privacy Policy from time to time to reflect changes in platform operations, updated Malaysian legal requirements, or evolving industry best practices.

When material changes occur — such as changes to the types of data collected, new purposes of use, or data sharing with new categories of third parties — betcity will notify you via:

• In-platform notifications on betcity when you log in
• Email to your registered address at least 14 days before the changes take effect
• A prominent notice at the top of this Privacy Policy page

Your continued use of the betcity platform after the effective date of any changes will be deemed as your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your betcity account.

Betcity has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Privacy Policy and Malaysia's PDPA. For any enquiries, complaints, or requests relating to your data privacy, please contact us via:

• DPO Email: privacy@betcity.life
• General Support Email: support@betcity.life
• Live Chat: 24 hours a day, 7 days a week via the betcity platform

The betcity privacy team is committed to responding to all privacy enquiries within 5 business days. For more complex data subject rights requests, the response period is up to 30 calendar days as stipulated by Malaysia's PDPA.