Privacy Policy
At Suncity888, we take the privacy and security of your personal data seriously. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your own data. Please read it alongside our Terms & Conditions.
This Privacy Policy ("Policy") is published by Suncity888 ("we", "us", "our", "the Operator"), the entity operating the online gaming and sports betting platform accessible at https://suncity888.cam. This Policy applies to all users ("you", "your", "the User") who access or use the Suncity888 platform, including visitors who have not yet registered an account.
Suncity888 is committed to handling all personal data with care, transparency, and respect for applicable data protection obligations. We collect only the data we genuinely need to provide our services, verify identities, process financial transactions, and comply with regulatory requirements. We do not sell your personal data to third parties for commercial marketing purposes.
By registering an account on the Suncity888 platform, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, please refrain from using the platform.
Our Commitment: Suncity888 processes personal data solely to provide and improve our services, protect the security of the platform, and comply with applicable legal obligations. Your data is never sold, rented, or traded to third-party commercial entities for advertising purposes.
For the purposes of this Policy, the following terms shall carry the meanings defined below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies, or could reasonably identify, a natural person — including name, email address, phone number, identity document number, IP address, and financial account details. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, modification, disclosure, or deletion. |
| "Data Controller" | Suncity888, as the entity that determines the purposes and means of processing Personal Data collected through the platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of Suncity888 under a data processing agreement (e.g., payment processors, KYC verification providers). |
| "Cookie" | A small text file placed on your device by the platform for the purposes of session management, preference storage, and analytics. |
| "KYC" | Know Your Customer — the identity verification process required under our regulatory obligations and anti-money laundering (AML) programme. |
| "Platform" | The Suncity888 website at https://suncity888.cam, its mobile-optimised version, and all associated services operated by the Operator. |
Suncity888 collects the following categories of personal data, depending on how you interact with the platform:
3.1 Registration Data
- Full legal name as it appears on your identity document;
- Date of birth (used to verify you are aged 21or above);
- Email address and mobile phone number;
- Chosen username and encrypted password;
- Country and city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam).
3.2 Identity Verification (KYC) Data
- Copy of valid Malaysian identity document (MyKad, Driver's Licence, or Passport);
- Proof of residential address (utility bill or bank statement dated within three months);
- Selfie photograph holding the identity document;
- Payment method verification documents (e.g., e-wallet screenshot showing registered name).
3.3 Financial Data
- Deposit and withdrawal transaction history;
- Payment method identifiers (e.g., masked bank account number, e-wallet phone number);
- Cryptocurrency wallet addresses for BTC, ETH, or USDT transactions;
- Account balance and bonus balance records.
3.4 Gameplay & Behavioural Data
- Game activity logs including bets placed, games played, session duration, and outcomes;
- Sports betting selections, stake amounts, and settlement records;
- Bonus claims, wagering progress, and promotional participation history.
3.5 Technical & Device Data
- IP address and approximate geolocation derived from IP;
- Device type, operating system, and browser information;
- Session timestamps, login history, and access logs;
- Cookie and similar tracking technology data (see Section 10).
3.6 Communication Data
- Content and metadata from live chat support interactions;
- Email and support ticket correspondence;
- Responses to surveys or feedback requests (where voluntarily provided).
Suncity888 collects personal data through the following channels:
- Directly from you — when you complete the registration form, submit KYC documents, contact customer support, or participate in promotions;
- Automatically — when you access the platform, through cookies, web beacons, server logs, and similar tracking technologies that record device and behavioural data;
- From payment processors — confirmation data returned by DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency network operators when processing your transactions;
- From identity verification providers — third-party KYC and AML screening services used to verify the authenticity of identity documents and conduct sanctions screening;
- From referals — if you were referred to Suncity888 via our Refer-a-Friend programme, your referral source may be recorded.
Suncity888 processes your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your registered account, including authentication and access control. |
| Service Delivery | Enabling you to access and use gaming services, place bets, participate in promotions, and interact with live dealer games and sports betting products. |
| Financial Transactions | Processing deposits, withdrawals, and refunds through your chosen payment method (e.g., DuitNow, Touch 'n Go eWallet, FPX, Maybank, CIMB). |
| Identity Verification (KYC) | Verifying your identity and age (21+) in compliance with anti-money laundering and responsible gambling obligations. |
| Fraud & Security | Detecting and preventing fraudulent transactions, account takeovers, bonus abuse, and other prohibited activities. |
| Regulatory Compliance | Meeting legal and regulatory obligations, including AML reporting, sanctions screening, and responding to lawful authority requests. |
| Customer Support | Responding to your enquiries, resolving account issues, and managing disputes through live chat and email support. |
| Platform Improvement | Analysing aggregate usage data and behavioural patterns to improve platform performance, game selection, and user experience. |
| Responsible Gambling | Monitoring gameplay patterns to identify potential problem gambling indicators and providing appropriate intervention tools or resources. |
Suncity888 relies on the following legal bases for processing your personal data:
- Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including account management, payment processing, and service delivery;
- Legal Obligation: Processing required to comply with applicable laws, including AML obligations, identity verification requirements, and regulatory reporting;
- Legitimate Interests: Processing carried out to advance the legitimate interests of Suncity888, including fraud prevention, platform security, and service improvement — provided such interests are not overridden by your rights;
- Consent: Where you have explicitly consented to a specific type of processing, such as receiving promotional communications. You may withdraw consent at any time by contacting our support team.
Suncity888 does not sell, rent, or trade your personal data to third parties for commercial advertising purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate safeguards:
- Payment Processors: Including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency network operators — to the extent necessary to process your financial transactions;
- KYC & AML Service Providers: Third-party identity verification and sanctions screening platforms used to fulfil our regulatory obligations;
- Technology & Infrastructure Providers: Cloud hosting, cybersecurity, and platform maintenance partners operating under strict data processing agreements with Suncity888;
- Customer Support Systems: Secure live chat and ticketing platform providers used to manage support interactions;
- Law Enforcement & Regulatory Authorities: Where required by law, court order, or lawful regulatory demand, we will disclose personal data to the appropriate authority;
- Business Successors: In the event of a merger, acquisition, or sale of all or part of Suncity888's business, your data may be transferred to the successor entity, subject to the same privacy protections.
Important: Any third party that receives personal data from Suncity888 is contractually required to handle that data securely, use it only for the specified purpose, and comply with applicable data protection obligations. We do not permit our data processors to use your data for their own commercial purposes.
Suncity888 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal retention obligations, whichever is the longer period. The following general retention guidelines apply:
- Account Data: Retained for the lifetime of your active Account, plus a minimum of five (5) years after account closure, in compliance with AML record-keeping obligations;
- KYC Documents: Retained for a minimum of five (5) years from the date of last use, as required by applicable AML regulations;
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
- Support Communications: Retained for a period of three (3) years from the date of the interaction;
- Technical Logs: Retained for up to twelve (12) months, unless a longer retention period is required for an active security investigation.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures. Anonymised or aggregated data from which no individual can be identified may be retained indefinitely for analytical purposes.
Suncity888 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security programme includes:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and the Suncity888 platform is encrypted using Transport Layer Security (TLS) with a minimum 256-bit key length;
- Encrypted Data Storage: Sensitive personal data and financial information are stored in encrypted form. Passwords are hashed using industry-standard algorithms and are never stored in plain text;
- Two-Factor Authentication (2FA): Optional 2FA is available for all accounts to provide an additional layer of login security;
- Access Controls: Strict role-based access controls ensure that only authorised personnel can access personal data, and only to the extent required for their specific function;
- Regular Security Reviews: The platform undergoes periodic independent security assessments and penetration testing to identify and remediate vulnerabilities;
- Incident Response: In the event of a confirmed data breach that poses a risk to your rights, Suncity888 will notify affected users and relevant authorities within the timeframes required by applicable law.
No method of electronic transmission or storage is entirely risk-free. While we invest heavily in platform security, Suncity888 cannot guarantee the absolute security of your data against all possible threats. You are also responsible for maintaining the security of your own login credentials.
Suncity888 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain your session, remember your preferences, and gather analytics data. The following categories of cookies may be used:
| Cookie Type | Purpose | Mandatory? |
|---|---|---|
| Strictly Necessary | Session management, authentication, security tokens, and fraud prevention. These cannot be disabled without affecting core platform functionality. | Yes |
| Functional | Remembering your language preferences, display settings, and previously selected payment methods to improve convenience. | Optional |
| Analytics | Collecting aggregated, anonymised usage data to understand how players interact with the platform, identify technical issues, and prioritise improvements. | Optional |
| Performance | Monitoring page load times, error rates, and server response to maintain platform stability and optimise delivery for Malaysian users across all regions. | Optional |
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair or prevent access to the Suncity888 platform. For instructions on managing cookies in your browser, refer to your browser's help documentation.
Subject to applicable law and any overiding legal obligations (such as AML record-keeping requirements), you have the following rights with respect to your personal data held by Suncity888:
Right of Access
You may request a copy of the personal data we hold about you, along with information about how it is being used.
Right to Rectification
If any personal data we hold is inaccurate or incomplete, you may request that it be corrected or updated promptly.
Right to Erasure
You may request deletion of your personal data in certain circumstances — for example, where it is no longer needed for the purpose for which it was collected, subject to legal retention requirements.
Right to Restriction
You may request that we limit the processing of your data in specific circumstances, such as while a dispute regarding its accuracy is being resolved.
Right to Data Portability
Where technically feasible, you may request a machine-readable copy of the personal data you have provided to us for the purpose of transfering it to another service provider.
Right to Object
You may object to the processing of your personal data where we rely on legitimate interests as our legal basis — for example, direct marketing communications.
How to Exercise Your Rights: To submit a data rights request, please contact our Data Protection team via live chat or by emailing [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and respond substantively within 30 days.
The Suncity888 platform is strictly intended for use by adults aged21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory component of our KYC process, and we take all reasonable steps to prevent underage access to our platform.
If Suncity888 becomes aware that personal data has been collected from an individual under 21 years of age, we will take immediate steps to delete that data and close the relevant account. Any deposits made by underage users will be handled in accordance with our Terms & Conditions and applicable legal requirements.
If you are a parent or guardian and believe a minor has accessed the Suncity888 platform or provided personal data to us, please contact our support team at the earliest opportunity so that we can investigate and take appropriate action.
21+ Strictly Enforced: Suncity888 operates a zero-tolerance policy on underage gambling. We encourage the use of parental control software to restrict minors from accessing online gambling platforms. Our Responsible Gambling page contains further guidance on protecting younger family members.
Suncity888 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where amendments are material, we will endeavour to notify registered users via email and/or a prominent on-platform notice at least fourteen (14) days before the amended Policy takes effect.
The effective date of the current version is always displayed at the top of this page. We recommend reviewing this Policy periodically. Your continued use of the Suncity888 platform after the effective date of any amendment constitutes your acceptance of the revised Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the Suncity888 Data Protection team through the following channels:
- Live Chat: Available 24/7 directly on the Suncity888 platform — the fastest way to reach us for urgent data matters.
- Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" for prompt routing.
For responsible gambling-related data requests — such as self-exclusion data removal or activity history — please visit our Responsible Gambling page or mark your support request accordingly.
Suncity888 operates with players across Malaysia, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. Our support team is available around the clock to assist with all privacy-related matters promptly and professionally.
Our Privacy Commitments
Six core principles that guide how Suncity888 handles your personal data every day.
256-Bit SSL Encryption
Every piece of data transmitted between your device and Suncity888's servers is protected by industry-standard TLS encryption — the same standard used by international banks and financial institutions.
No Data Selling — Ever
Suncity888 does not sell, rent, or trade your personal data to third-party advertisers or commercial data brokers. Your data is used solely to provide and improve the platform's services to you.
Strict Access Controls
Role-based access controls ensure that only the personnel who genuinely need access to your data can retrieve it — and only for the specific purpose required. All access is logged and audited regularly.
Your Rights, Respected
Suncity888 supports your full suite of data rights — including access, rectification, erasure, portability, and the right to object. Data rights requests are acknowledged within 72 hours and resolved within 30 days.
Minimal Data Collection
We collect only the personal data genuinely necessary to deliver our services, verify your identity, and meet our regulatory obligations. We do not collect data speculatively or for purposes unrelated to your Suncity888 account.
Transparent Breach Notification
In the event of a confirmed data breach that poses a risk to your rights, we will notify you and any relevant authorities promptly — within the timeframes required by applicable data protection law.
Questions About Your Privacy?
Our Data Protection team is available24/7 via live chat. You can also explore our full FAQ or return to the Suncity888 homepage to experience Malaysia's most trusted online casino platform.
For players aged 21 and above only. Suncity888 is an entertainment platform. Play responsibly.