Privacy Policy — Moncity9

1. Introduction

Moncity9 ("the Platform", "we", "us", "our") is committed to protecting and respecting the privacy of every person who accesses or uses our online casino and sports betting services at moncity9.cam (the "Platform"). This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

This Policy applies to all players registered on the Moncity9 platform, including those accessing the Platform from Malaysia and other jurisdictions. It covers data collected through the website, any associated mobile-optimised interface, customer support channels, and any other means by which you interact with Moncity9.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. Together, these documents constitute the full framework governing your relationship with Moncity9.

2. Definitions

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, or any factor specific to the physical, physiological, or social identity of that person.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means Moncity9, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Subject" means the individual to whom the personal data relates — in most cases, a registered player or website visitor.
• "KYC" (Know Your Customer) means the identity and age verification process required before a player's account can be fully activated for withdrawals, involving submission of government-issued documentation.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
• "Third Party" means any person or entity that is not the data subject or Moncity9, including payment processors, game studios, and analytics providers.
• "Cookie" means a small data file placed on your device by the Platform for the purpose of session management, analytics, or personalisation.

3. Data We Collect

Moncity9 collects personal data that is necessary for the provision of our services, compliance with legal obligations, and the delivery of a personalised and secure player experience. The categories of personal data we collect include the following:

We do not intentionally collect sensitive personal data categories (such as racial or ethnic origin, religious beliefs, health data, or biometric data) unless required by our regulatory obligations in specific circumstances, in which case we will seek explicit consent.

4. How We Collect Data

Moncity9 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support via live chat, or participating in promotions.
• Automated technologies: Data collected automatically as you interact with the Platform, including through cookies, server logs, session tracking tools, and similar technologies.
• Third-party payment providers: Financial transaction data shared with us by payment processors and e-wallet providers (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong) to facilitate and verify transactions.
• Identity verification services: Data received from third-party KYC and anti-money laundering (AML) screening services used to verify player identities.
• Analytics providers: Aggregated and anonymised usage statistics provided by web analytics tools to help us understand how the Platform is used.

5. Data Processing & Legal Basis

Moncity9 processes personal data only where a lawful basis for processing exists. The primary legal bases on which we rely are as follows:

• Contractual necessity: Processing required to fulfil our obligations under the Terms and Conditions agreed with you at registration — including account creation, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and age verification under our international gaming licence.
• Legitimate interests: Processing necessary for the legitimate interests of Moncity9, including fraud prevention, security monitoring, platform improvement, and responsible gaming programme delivery — where those interests are not overridden by your rights.
• Consent: Where we rely on consent as the legal basis for processing — such as for marketing communications or non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6. How We Use Your Data

Moncity9 uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and administer your player account, including processing deposits and withdrawals in MYR via supported Malaysian payment methods.
• Identity and age verification: To verify that you are who you claim to be and that you meet the minimum age requirement of 21 years before accessing gambling services.
• Platform delivery: To provide access to casino games, sports betting markets (EPL, Liga Super Malaysia, UFC, and others), live dealer tables, and all other Platform features.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions via our 24/7 live chat service.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account compromise, and other prohibited conduct.
• Responsible gaming: To monitor gameplay patterns and identify players who may be at risk of problem gambling, and to enforce deposit limits, cooling-off periods, and self-exclusion requests.
• Legal compliance: To meet our obligations under anti-money laundering regulations, licensing requirements, and any applicable data protection laws.
• Platform improvement: To analyse usage data and improve the design, functionality, and content of the Platform for all Malaysian players.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — where you have opted in to receive such communications. You may opt out at any time.

Moncity9 does not use personal data for automated decision-making that produces significant legal effects without human oversight. Where profiling is conducted for responsible gaming or fraud detection purposes, these processes are subject to regular human review.

7. Data Sharing & Disclosure

Moncity9 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances and only to the extent necessary:

• Payment processors and e-wallet providers: We share financial data with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network services to process transactions on your behalf.
• KYC and AML verification providers: We share identity documentation with licensed third-party verification services to fulfil our regulatory obligations.
• Game studios and content providers: Where necessary for game delivery, limited technical data (such as session identifiers) may be shared with our licensed international game studio partners.
• IT and infrastructure providers: Hosting, cloud storage, and cybersecurity service providers who process data on our behalf under contractual obligations of confidentiality and data security.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law or pursuant to a valid legal order.
• Professional advisers: Lawyers, auditors, and compliance consultants where necessary for the conduct of our business, subject to professional confidentiality obligations.

8. Cookies & Tracking Technologies

Moncity9 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and gather anonymised analytics. The types of cookies we use are as follows:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security tokens that protect your account. These cannot be disabled without rendering the Platform non-functional.
• Functional cookies: Remember your preferences such as language settings, last visited game category, and display preferences to personalise your experience.
• Analytics cookies: Collect anonymised usage data — pages visited, time on page, click paths — to help us understand how Malaysian players use the Platform and identify areas for improvement. No personally identifiable information is included in analytics data.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and account compromise attempts.

You may manage cookie preferences through your browser settings. Disabling certain cookie types may affect Platform functionality. Moncity9 does not use third-party advertising cookies or behavioural tracking cookies for external advertising networks.

9. Data Retention

Moncity9 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention standards are as follows:

• Active account data: Retained for the duration of your account's active status plus a minimum period of five (5) years following account closure, in accordance with AML record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of KYC completion or account closure, whichever is later, in compliance with anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Technical and usage data: Retained in aggregated or anonymised form for up to two (2) years for analytics purposes.
• Marketing consent records: Retained for the duration of your consent period and for a reasonable period thereafter as evidence of compliance.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

10. Data Security

Moncity9 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. Our security measures include:

• 256-bit Transport Layer Security (TLS) encryption for all data transmitted between your device and the Moncity9 platform.
• Encrypted storage of sensitive personal data and payment credentials at rest.
• Two-factor authentication (2FA) options for player account access.
• Regular security audits and penetration testing of Platform infrastructure.
• Strict internal access controls ensuring that personal data is accessible only to authorised personnel with a legitimate business need.
• Segregated player fund accounts to ensure that your balance is ring-fenced from operational funds at all times.

While we take all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, Moncity9 will notify affected players as required by applicable obligations.

11. Your Rights

Subject to applicable data protection legislation and our regulatory obligations, you have the following rights in respect of your personal data held by Moncity9:

To exercise any of these rights, please contact our Data Privacy team via live chat on the Platform or by email at the address set out in Section 15. We will respond to all verified requests within thirty (30) days. In complex cases, we may extend this period by a further sixty (60) days, of which we will inform you in writing.

Please note that certain rights are subject to limitations where data retention is mandated by regulatory or legal obligations — for example, AML and KYC records that must be retained for five years cannot be deleted upon request during that mandatory retention period.

12. Minors & Age Policy

Moncity9 operates a strict minimum age policy of 21 years for all registered players. The Platform is not directed at, and we do not knowingly collect personal data from, any person under the age of 21. Age verification is a mandatory component of our KYC process, and any account found to belong to a person under 21 will be immediately closed and all associated data deleted, except where retention is required for legal purposes.

13. International Data Transfers

As an internationally operated platform, Moncity9 may transfer and store your personal data outside of Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within the Platform's primary jurisdiction.

Our international data transfer safeguards include contractual obligations on receiving parties (standard contractual clauses), ensuring that receiving jurisdictions have adequate data protection frameworks, and restricting transfers to authorised service providers with documented data processing agreements.

Players located in Malaysia should be aware that Malaysian data protection obligations under the Personal Data Protection Act 2010 (PDPA) apply to data processors operating within Malaysia. As an internationally licensed operator, Moncity9 aligns its data governance standards with international best practices applicable under our licensing framework.

14. Policy Amendments

Moncity9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform services. The date of the most recent revision is displayed at the top of this page.

Where material changes are made to this Policy — particularly changes that affect how we use your personal data or your rights — we will endeavour to notify registered players via platform notification or email to the address registered on your account. We encourage you to review this Policy periodically.

Your continued use of the Moncity9 platform following publication of any revised Privacy Policy constitutes your acceptance of those changes. If you do not accept the revised Policy, please cease using the Platform and close your account in accordance with the procedure set out in our Terms and Conditions.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Moncity9, please contact us through the following channels:

For data subject rights requests (access, rectification, erasure, portability, or objection), please contact us via live chat or email with your full name, registered email address, and a description of your request. We will require identity verification before processing any data subject rights request.