Your Privacy at a Glance
Encrypted Data Storage
All personal and financial data held by City88 is encrypted using 256-bit SSL technology. Your information is stored on secured servers and is never transmitted in plain text over public networks.
No Data Selling
City88 does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. Your data belongs to you — we are simply its custodian.
Your Rights Are Respected
You have the right to access, correct, restrict, and request deletion of your personal data held by City88 at any time. We provide clear, accessible mechanisms for exercising all these rights.
Transparent Cookie Use
City88 uses cookies and similar technologies solely to improve your experience on the Platform. Cookies do not contain personally identifiable information and you may manage your preferences at any time.
Defined Retention Periods
City88 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Data not required for legal or operational purposes is securely deleted.
Marketing Opt-Out
If you have consented to receive promotional communications from City88, you may withdraw that consent and opt out of marketing messages at any time through your Account settings or by contacting our support team.
Introduction
This Privacy Policy ("Policy") is issued by City88 ("City88", "we", "us", or "our"), the operator of the online gaming platform accessible at https://city88.cam ("the Platform"). It describes how City88 collects, uses, stores, shares, and protects the personal data of individuals who access or use the Platform ("User", "you", or "your").
City88 is committed to handling your personal data responsibly and in accordance with applicable data protection standards. By registering for an Account on the Platform or continuing to use the Platform, you acknowledge that you have read and understood this Policy and agree to the collection and use of your personal data as described herein.
This Policy should be read in conjunction with our Terms & Conditions, which govern the overall use of the City88 Platform, and our Responsible Gambling Policy. Where there is any inconsistency between this Policy and those documents on matters of data privacy, this Policy shall prevail.
Effective Date: This Privacy Policy was last reviewed and updated on 1 January 2026. City88 encourages all Users to review this Policy periodically, particularly following any notification of material changes.
Definitions
For the purposes of this Policy, the following definitions apply:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | City88, which determines the purposes and means of Processing Personal Data collected through the Platform. |
| "Data Processor" | Any third-party entity that Processes Personal Data on behalf of City88 in accordance with City88's instructions and applicable data protection obligations. |
| "Account" | The registered user account created by an eligible individual to access the features and services of the City88 Platform. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the User's agreement to the Processing of their Personal Data for a specified purpose. |
| "Cookies" | Small text files placed on a User's device by the Platform to facilitate functionality, analytics, and personalisation features. |
Data We Collect
City88 collects Personal Data from Users through a variety of mechanisms, including direct submission by the User, automatic collection through Platform interactions, and — where applicable and lawfully permitted — from third-party sources.
3.1 Data Provided Directly by You
During registration, KYC verification, and ongoing use of the Platform, you may provide the following categories of Personal Data:
- Identity Data: Full legal name, date of birth, gender, and national identification details (Malaysian IC / MyKad number, Passport number, or Driver's Licence number)
- Contact Data: Email address, mobile phone number, and residential address (including city, postcode, and state within Malaysia)
- Financial Data: Bank account details for withdrawal purposes, payment method identifiers (e.g., DuitNow registered number, Touch 'n Go eWallet account reference), and transaction history
- Verification Documents: Copies of identity documents, proof of address documents, and selfie photographs submitted for KYC compliance
- Communications Data: Records of your interactions with our customer support team via live chat, email, or WhatsApp
- Gaming Preferences: Your stated preferences, game history, sports betting markets followed (e.g., EPL, Liga Super Malaysia), and VIP tier status
3.2 Data Collected Automatically
When you access or use the Platform, City88's systems automatically collect certain technical and usage data, including:
- IP address and approximate geographic location (city-level)
- Device type, operating system, browser type and version
- Pages visited, time spent on each page, and navigation path through the Platform
- Session timestamps, login and logout records
- Betting and gaming activity logs, including stake amounts, game selections, and outcomes
- Cookie identifiers and similar tracking technology data
3.3 Data from Third-Party Sources
City88 may receive supplementary Personal Data from trusted third-party service providers engaged to support KYC verification, fraud prevention, and payment processing. Such third parties are contractually bound to provide data only where they have a lawful basis for doing so and only to the extent necessary for the specific processing purpose.
Data Processing
City88 processes your Personal Data for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your City88 Account, including authentication and access control. |
| Identity Verification (KYC) | Verifying your identity and eligibility to use the Platform in compliance with applicable regulatory requirements, including anti-money laundering obligations. |
| Payment Processing | Processing deposits and withdrawals through approved Malaysian payment methods (DuitNow, FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, Hong Leong, and cryptocurrency channels). |
| Service Delivery | Providing access to games, sports betting markets, live casino services, and all other features of the City88 Platform. |
| Fraud Prevention | Detecting, investigating, and preventing fraudulent transactions, account abuse, and other unlawful activities on the Platform. |
| Responsible Gambling | Monitoring gaming patterns to identify potential problem gambling behaviours and providing appropriate responsible gambling interventions and tools. |
| Customer Support | Responding to your enquiries, resolving disputes, and providing assistance through our trilingual support team (English, Bahasa Melayu, Chinese). |
| Regulatory Compliance | Meeting applicable legal and regulatory obligations, including record-keeping requirements and responses to lawful requests from authorities. |
| Platform Improvement | Analysing aggregated and anonymised usage data to improve Platform performance, game offerings, and user experience. |
| Marketing Communications | Sending promotional offers, bonus notifications, and relevant updates where you have provided consent to receive such communications. |
Legal Basis for Processing
City88 processes your Personal Data only where a lawful basis exists for doing so. The applicable legal bases are as follows:
- Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you have accepted, including Account management, payment processing, and service delivery.
- Legal Obligation: Processing necessary for compliance with applicable laws and regulations, including KYC verification, anti-money laundering obligations, and responses to lawful authority requests.
- Legitimate Interests: Processing carried out in furtherance of City88's legitimate business interests, including fraud prevention, security monitoring, and Platform improvement, provided these interests are not overridden by your fundamental data protection rights.
- Consent: Processing for marketing communications, certain analytics, and non-essential cookies, where you have provided freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Third-Party Sharing
City88 does not sell or rent your Personal Data to third parties. We may share your Personal Data with carefully selected third-party service providers and partners only to the extent necessary to fulfil the purposes described in this Policy.
6.1 Categories of Third-Party Recipients
- Payment Service Providers: Financial institutions and payment processors (including the operators of DuitNow, FPX, and eWallet platforms) to facilitate deposit and withdrawal transactions.
- Identity Verification Providers: KYC and anti-money laundering service providers engaged to verify your identity documents and assess compliance risk.
- Game Content Providers: Licensed game studios whose software is integrated into the Platform, to the extent necessary for game delivery and technical support.
- Cloud and Infrastructure Providers: Technology service providers hosting the Platform's servers, databases, and communication infrastructure, all of whom are bound by appropriate data processing agreements.
- Analytics Providers: Service providers assisting with aggregated, pseudonymised Platform usage analytics to improve user experience.
- Regulatory Authorities: Where required by law, court order, or the lawful request of competent governmental or regulatory bodies, including Malaysian financial intelligence authorities.
Data Processing Agreements: All third-party Data Processors engaged by City88 are subject to written data processing agreements that impose obligations consistent with applicable data protection standards and restrict the use of your Personal Data to the specific services they provide to City88.
6.2 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of City88's business or assets, Personal Data held by City88 may be transferred to the acquiring entity as part of that transaction. We will endeavour to provide reasonable advance notice of any such transfer and ensure that the acquiring entity provides equivalent privacy protections.
Payment Data
City88 takes the security of your financial data particularly seriously. Payment transactions conducted through the Platform — including deposits via DuitNow, FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, and GrabPay, as well as cryptocurrency transfers — are processed through encrypted, secure channels.
City88 does not store full payment card numbers or cryptocurrency private keys on its servers. Where payment details such as bank account numbers are retained for withdrawal purposes, they are stored in encrypted form and accessible only to authorised personnel on a strict need-to-know basis.
All financial transaction records are maintained in accordance with applicable anti-money laundering record-keeping requirements. City88 may be required to disclose transaction records to competent financial intelligence authorities where required by law.
Cookies & Tracking Technologies
City88 uses cookies and similar tracking technologies (including web beacons and pixel tags) on the Platform to enable core functionality, analyse usage patterns, and deliver a personalised experience.
8.1 Types of Cookies Used
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Essential cookies required for the Platform to function correctly. They enable core features such as Account authentication, session management, and security. These cannot be disabled. |
| Functional | Cookies that remember your preferences (such as language settings and display configurations) to provide a more personalised experience on subsequent visits. |
| Analytics | Cookies that help City88 understand how Users navigate the Platform by collecting aggregated, anonymised data on page visits, session duration, and navigation paths. Used to improve Platform performance. |
| Marketing | Where you have provided consent, marketing cookies may be used to deliver relevant promotional content and to measure the effectiveness of City88's marketing communications. These are set only with your prior consent. |
Managing Cookies: Most browsers allow you to refuse or delete cookies through their settings. Please note that disabling certain cookies may impair the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are essential for Platform operation.
Data Retention
City88 retains your Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following principles:
- Active Account Data: Personal Data associated with an active Account is retained for as long as the Account remains open and active.
- Closed Account Data: Following Account closure, City88 retains certain Personal Data (including identity verification records, transaction history, and communication logs) for a minimum period of five (5) years, or longer where required by applicable law or regulatory guidance, to meet legal and anti-money laundering obligations.
- Marketing Data: Where you have withdrawn consent to marketing communications, your contact details will be removed from active marketing lists within a reasonable period, though a suppression record may be retained to honour your opt-out preference.
- Technical Logs: Server logs and automated technical records are retained for a shorter period sufficient for security monitoring and incident investigation purposes, typically not exceeding 12 months unless required for ongoing investigation.
Upon the expiry of the applicable retention period, City88 will securely delete or irreversibly anonymise your Personal Data so that it can no longer be associated with you.
Data Security
City88 implements comprehensive technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
- Encryption of sensitive Personal Data fields at rest within City88's database infrastructure
- Role-based access controls limiting employee access to Personal Data to those with a specific operational need
- Multi-factor authentication for privileged administrative access to data systems
- Regular independent security audits and penetration testing of Platform infrastructure
- Incident response procedures for detecting, containing, and reporting personal data breaches
Notwithstanding these measures, no digital transmission over the internet or electronic storage system can be guaranteed to be 100% secure. City88 will notify affected Users and relevant authorities in accordance with applicable notification obligations in the event of a material personal data breach.
Your Responsibilities: You are responsible for maintaining the security of your Account credentials. Do not share your password with any third party. City88 staff will never ask for your password via email, live chat, or any other channel. If you suspect unauthorised access to your Account, contact our support team immediately.
User Rights
You hold the following rights in respect of your Personal Data held by City88. To exercise any of these rights, please contact our Data Privacy team at [email protected] (plain text only — not a clickable link). City88 will respond to verified requests within a reasonable timeframe.
Right of Access
You have the right to request a copy of the Personal Data City88 holds about you, together with information about how that data is being processed.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete Personal Data that City88 holds about you. Corrections to KYC-verified fields may require re-verification.
Right to Erasure
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
Right to Restrict Processing
You may request that City88 restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
Right to Data Portability
Where processing is based on your consent or contractual necessity, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format.
Right to Object
You have the right to object to the processing of your Personal Data for direct marketing purposes at any time. You may also object to processing based on legitimate interests on grounds relating to your particular situation.
Where your request cannot be fully accommodated — for example, where erasure is prevented by a legal retention obligation — City88 will explain the reasons for that limitation in its response to you. All rights requests are handled free of charge unless they are manifestly unfounded or excessive.
Protection of Minors
The City88 Platform is strictly intended for individuals who are 21 years of age or older. City88 does not knowingly collect or process Personal Data of persons under the age of 21. Registration by underage individuals is prohibited under the Terms & Conditions and constitutes a material breach.
Where City88 becomes aware or reasonably suspects that Personal Data has been provided by a person under 21, we will immediately suspend the associated Account, withhold any funds pending investigation, and take steps to delete the data of the underage individual as soon as practically possible, subject to any overriding regulatory obligations.
If you are a parent or guardian and believe that a person under your care has registered an Account on City88, please contact our support team at [email protected] immediately.
International Data Transfers
In the course of providing Platform services, City88 may transfer your Personal Data to service providers and infrastructure partners located outside of Malaysia. Such transfers may be necessary for cloud hosting, payment processing, or technical support services.
Where Personal Data is transferred outside of Malaysia, City88 takes steps to ensure that equivalent levels of data protection are applied to the transferred data. This includes entering into appropriate contractual arrangements with the receiving party to ensure that your Personal Data is handled in a manner consistent with this Policy and applicable data protection standards.
Policy Amendments
City88 reserves the right to amend this Privacy Policy at any time to reflect changes in legal requirements, regulatory guidance, Platform functionality, or business practices. Where changes are material, we will provide reasonable advance notice via a prominent notice on the Platform and/or by email to the address registered to your Account.
The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any amendments constitutes your acknowledgement of the revised Policy. If you do not agree with the revised Policy, you should cease using the Platform and may request Account closure.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by City88, please contact our Data Privacy team through the following channels:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24/7 through the City88 Platform, in English, Bahasa Melayu, and Chinese
- WhatsApp Support: Available through the Platform's contact interface
City88 aims to acknowledge all privacy-related enquiries within 5 business days and to resolve them within 30 calendar days, or such shorter period as may be required by applicable law. Where a request is complex or voluminous, we may extend the response period by a further 30 days and will notify you accordingly.
Further Information: For information about your data rights in relation to responsible gambling tools — including self-exclusion and deposit limits — please also refer to our Responsible Gambling page and our FAQ for quick answers to the most common data-related questions.