Reference

How vcity166 Handles Your Personal Information

This Privacy Policy sets out exactly what data we collect when you open an account, deposit via Touch 'n Go eWallet, Boost, or GrabPay, and move around our platform.

Account data protectionPayment info kept separateYour right to request deletionNo sale of personal dataMalaysia-applicable policy
vcity166 How vcity166 Handles Your Personal Information
REACH OUR TEAM

Contact Us About Your Privacy Rights

If you want to access the data we hold on you, ask us to correct something, or request that we remove your account records, reach out through any of the channels below. Our support team handles privacy requests alongside general account queries — there is no separate form to fill out before you can talk to a real person. We aim to acknowledge your request and confirm next steps within a reasonable time from when we receive it.

Team online

Live Chat

Start a chat session directly from the platform. This is the quickest path for account-specific privacy questions, including data access and correction requests.

Email Support

Write to our support address with your registered email in the subject line. Include the specific data request type so we can route it to the right team member.

Account Help Centre

Log into your account and open the Help section. From there you can submit a formal data request that gets attached to your account record automatically.

HOW WE PROTECT IT

Data Security and Account Privacy Practices

We apply practical, layered measures to keep your account information secure — not just at the point of deposit, but across every interaction on the platform. Account passwords are stored in hashed form; we never hold them in plain text. Session tokens expire after a period of inactivity, so an unattended device does not leave your account exposed. When you switch between mobile and desktop mid-session, the authentication state transfers securely without prompting you to re-enter payment details.

Data Retention Policy

We keep your account records for as long as your account remains open, then for a defined period set by applicable local regulations. Once that window passes, records are deleted from active systems.

Cookie Usage

We use session cookies to maintain your login state and preference cookies to remember your last payment method — for example, whether you last deposited via Boost or GrabPay. You can clear these via your browser settings.

Account Security Steps

Each login triggers an OTP sent to your registered mobile number. This applies whether you are accessing from a new device or one you have used before, so an unauthorised login attempt gets stopped at that step.

Who Can See Your Data

Only authorised operations and finance staff access account data, and only to process requests or investigate issues. Third-party providers we work with are contractually restricted from using your data for their own purposes.

Common Questions About Your Data and This Policy

These are the questions we get asked most often when it comes to how we handle personal information. If yours is not covered here, the support channels listed above are the right next step.

We collect your name, email address, and contact number at registration. Once you deposit via Touch 'n Go eWallet, Boost, or GrabPay, we also log the transaction reference linked to your account wallet.

We do not sell your data. We share it only with service providers directly involved in running the platform — payment processors, fraud detection services — and only under binding data-processing agreements.

Yes. Contact us via live chat or email using your registered address and request a data access report. We will confirm receipt and let you know how long processing will take.

Send a deletion request through live chat or the Help Centre in your account. We will remove active records once the mandatory local-law retention period has been met after your account closes.

We use session and preference cookies — for example, to remember your last deposit method like GrabPay or Boost. You can disable non-essential cookies in your browser settings without losing core account access.

Yes. Whether you are accessing from Melaka or anywhere else in Malaysia, the same data practices apply. Use of this platform is subject to local law, and eligibility depends on what local law permits in your region.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.