Privacy Policy
Platform Intercity Malaysia

When you register and use the Intercity platform, we collect several categories of information to ensure our services run smoothly, securely, and in line with required compliance standards. We practise data minimisation — only data that is necessary will be collected.

Personal Identification Information (collected during registration and KYC):

• Full name as stated on your identity card or passport.
• Identity card number (MyKad) or passport number.
• Date of birth for minimum age verification of 18 years.
• Current residential address including postcode and state.
• Active email address for account communications.
• Mobile phone number for two-factor authentication (2FA).

Financial Information (collected for deposits, withdrawals, and AML compliance):

• Bank name and bank account number for fund withdrawal purposes.
• E-wallet information (TnG eWallet, Boost, GrabPay) if used.
• History of deposit and withdrawal transactions on the platform.
• Source of funds for transactions exceeding certain thresholds, in line with AML requirements.

Platform Activity Information (collected automatically when you use the platform):

• Login records including date, time, and IP address.
• Device type, operating system, and web browser used.
• History of games, wagering, and activity on the platform.
• Platform interface interaction data for UX improvement purposes.

Every piece of information collected by intercity has a clear and legitimate purpose. We do not use your data for any purpose beyond the scope stated in this policy.

Intercity does not use your data to make automated decisions that negatively affect your rights as a user without appropriate human intervention. Any decisions relating to account suspension or withdrawal rejection will be reviewed by our compliance team.

Intercity does not sell, rent, or distribute members' personal information to third parties for independent marketing purposes. Data sharing occurs only under specific and limited circumstances as follows:

• Payment service providers — FPX, TnG eWallet, Boost, and GrabPay providers receive only the information necessary to process financial transactions.
• Game platform providers — Slots and Live Casino content providers receive the minimum data required for game session verification.
• Statutory authorities — intercity fully complies with official requests from legitimate authorities in accordance with applicable laws.
• Technology service providers — hosting companies, CDN providers, and cybersecurity services supporting our platform operations, subject to strict data processing agreements.
• Identity verification services — third-party KYC providers used for automated document verification, subject to binding confidentiality agreements.

All third parties working with intercity are required to comply with data protection standards equal to or higher than those we practise. Legally binding data processing agreements are signed with every operational partner.

Intercity uses cookies and similar technologies to enhance the user experience, ensure session security, and analyse platform usage patterns for continuous improvement.

Types of cookies we use:

• Essential Cookies — required for core platform functions such as login verification, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies — collects aggregate information on how members use the platform, such as most frequently visited pages and response times. This data helps us improve platform performance.
• Functional Cookies — remembers your preferences such as language, display settings, and login information to provide a more personalised experience.
• Analytics Cookies — used by our internal analytics tools to understand aggregate usage patterns and make data-driven decisions for platform improvements.

You can manage your cookie preferences through your web browser settings at any time. However, disabling essential cookies may affect certain features of the Intercity platform and your overall gaming experience.

Intercity continuously invests in the latest cybersecurity infrastructure to ensure that members' personal data is always protected against unauthorised access, breaches, or misuse.

• 256-bit SSL encryption for all data communications between client and server.
• AES-256 data-at-rest encryption for all sensitive information stored in the database.
• Two-factor authentication (2FA) is available and encouraged for all member accounts.
• Real-time security threat monitoring 24 hours a day, 7 days a week.
• Periodic penetration testing conducted by appointed independent security auditors.
• Staff access to member data is restricted based on the principle of least privilege.
• Daily automated data backups to geographically separate locations for disaster recovery.

While intercity takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against all threats. In the event of any security incident involving members' personal data, intercity is committed to notifying affected members in a timely manner and taking immediate remedial action.

Intercity retains members' personal data for as long as necessary to fulfil the original purpose of collection, or as required by applicable law.

• Active account data — retained for the duration of your account's active period on the intercity platform.
• Financial transaction records — retained for a minimum of 7 years in line with financial compliance and applicable tax legislation requirements.
• KYC Documents — retained for the duration of the active account period plus 5 years after account closure, in line with AML requirements.
• Customer support communication logs — retained for 3 years for reference and dispute resolution purposes.
• Inactive account data — data is reduced to the minimum required records after 2 years of inactivity.
• After account closure — data that is no longer legally required will be securely deleted or anonymised.

Once the retention period expires and no legal obligation requires the data to be kept, Intercity will delete or anonymise the data in a secure and irreversible manner.

As an intercity member, you have certain rights regarding your personal data that we fully respect and support. Below are the key rights you may exercise:

The intercity platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data from children under the age of 18.

• An age verification process is carried out during registration and re-verified during the KYC process through valid identity document checks.
• Should intercity discover that a minor's data has been collected unintentionally, such data will be deleted immediately and the associated account will be terminated.
• Parents or guardians who suspect their child has registered on the Intercity platform without authorisation are advised to contact our support team immediately.

The intercity platform may contain links or integrations with third-party services such as payment providers and game providers. The intercity Privacy Policy applies solely to the intercity.bet platform and does not cover the privacy practices of those third parties.

• Each payment provider (FPX, TnG eWallet, Boost, GrabPay) has its own privacy policy governing how they handle your transaction information.
• Third-party game providers integrated within the intercity platform may collect game session data in accordance with their own privacy policies.
• Intercity recommends that members review the privacy policy of their chosen payment provider before making any transactions.

Intercity is not responsible for the privacy practices or content of any third-party services linked to our platform. Relationships with third parties exist only to the extent necessary for platform operations.

Intercity reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or relevant technological developments.

• Material amendments will be communicated to members via in-platform notifications or registered email at least 14 days before taking effect.
• Minor amendments that do not affect members' fundamental rights may take effect immediately with an updated review date at the top of this document.
• Continued use of the intercity platform after any amendments take effect will be considered acceptance of the revised policy.
• Previous versions of the Privacy Policy are available upon request through customer support for reference.

We encourage members to review this Privacy Policy page periodically to stay informed about how we protect your information. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

If you have any questions, concerns, or requests regarding this Privacy Policy or how intercity handles your personal data, our team is ready to assist.

• Live Chat 24/7 — the fastest way to get an immediate response from our support team.
• Privacy Email — for written requests regarding data rights or privacy complaints, contact [email protected]
• General Support Email — for general enquiries, contact [email protected]

Intercity is committed to responding to any privacy-related enquiries within 5 business days. Official requests related to data rights will be processed within 30 business days from the date of receipt of the complete request.