CityNow Privacy Policy – Member Personal Data Protection

1 Information We Collect

CityNow collects several categories of information to provide each member with a secure, seamless, and personalised service. The types of information we collect are as follows:

We only collect information that is strictly necessary for the stated purposes. We do not collect sensitive data such as medical information, political views, or religious beliefs.

2 How We Use Your Data

Every piece of information we collect is used for a specific and legitimate purpose. Below is a detailed breakdown of how your data is used on the citynow platform:

• Identity verification and KYC: Your personal information is used to verify your identity in order to meet legal compliance requirements and prevent money laundering.
• Transaction processing: Your financial data is used solely to process deposits and withdrawals securely and accurately to the correct account.
• Service communications: We use your email and phone number to send important account-related notifications — such as login confirmations, successful transactions, and security alerts.
• Fraud prevention: Technical data such as IP addresses and device information is used by our security systems to detect and block suspicious activity.
• Platform improvement: Anonymised usage data is analysed in aggregate to understand usage patterns and improve your gaming experience on CityNow.
• Marketing communications: With your consent, we send information about the latest promotions and offers. You may withdraw this consent at any time.
• Customer support: All communications with our support team are recorded for reference and service quality improvement purposes.

3 Sharing Information with Third Parties

CityNow takes a strictly limited approach to sharing your information. We does not sell or rent your personal data to any party. However, there are limited situations in which we may need to share your information:

• Payment service providers: Required financial information is shared with approved payment processors solely to complete your transactions. All such providers are bound by strict confidentiality agreements.
• Legal compliance: We may be required to disclose certain information to competent authorities when mandated by law, court order, or valid regulatory directive.
• Fraud prevention: In cases of suspected fraud or money laundering, relevant information may be shared with law enforcement agencies or relevant industry bodies.
• Technical service providers: Our cloud service and technical support providers have limited access to data necessary for platform operations. They are bound by strict data processing agreements.
• Business transfers: Should citynow be involved in a merger or acquisition, user data may be transferred as part of the business assets. Members will be notified before any such transfer takes place.

4 Data Storage & Security

The security of your personal data is citynow's number one priority. We continuously invest in security infrastructure to ensure your information is always protected:

• All data is stored in data centers equipped with multi-layered physical access controls, 24-hour CCTV monitoring, and intrusion prevention systems.
• Sensitive data such as passwords is stored in hashed form using the latest encryption algorithms — meaning even CityNow staff cannot read your password.
• Our systems undergo regular penetration testing by independent security experts to identify and patch any vulnerabilities.
• Internal access to member data is restricted on a need-to-know basis, and every access is logged for audit purposes.

Data retention period: We retain your personal data for as long as your account is active and for a reasonable period after account closure to meet our legal obligations. Financial records are kept in accordance with applicable legal requirements, typically for seven years.

5 Cookies & Tracking Technologies

CityNow uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

• Essential cookies: These cookies are required for core platform functions such as login sessions and security. They cannot be disabled without affecting platform functionality.
• Performance cookies: Helps us understand how members use the platform by collecting anonymous statistical data. This data is used to improve platform speed and usability.
• Functional cookies: Stores your preferences such as preferred language, account settings, and display options so you do not need to reconfigure them every time you log in.
• Marketing cookies: Used only with your consent to display relevant promotions based on your interests and usage patterns. You may disable these cookies through your browser settings.

Most web browsers accept cookies automatically. You can adjust your browser settings to reject cookies, though this may affect the functionality of certain parts of the citynow platform.

6 Your Privacy Rights

As a citynow member and a user protected under Malaysia's data protection laws, you have the following rights regarding your personal data:

7 Cross-Border Data Transfers

In operating a global platform, your personal data may be stored or processed on servers located outside Malaysia. CityNow ensures that any cross-border data transfer is carried out with adequate safeguards:

• Data transfers to other countries are only made to countries with a level of data protection equivalent to or higher than Malaysia's.
• All third-party service providers who receive member data are bound by data processing agreements that comply with international standards.
• CityNow employs standard contractual protection mechanisms to ensure your data remains protected regardless of where it is stored.

8 Children's Privacy

The citynow platform is exclusively for individuals aged 18 years and above. We do not knowingly collect personal data from children or minors under the age of 18.

If we find that we have collected data from a minor without adequate age verification, we will take immediate steps to delete that information and close the relevant account. Parents or guardians who believe their child may have registered on our platform are urged to contact us immediately.

9 Changes to This Privacy Policy

CityNow reserves the right to modify this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements.

• Members will be notified of any significant changes via their registered email or in-platform notification at least 14 days before the changes take effect.
• The "Last Updated" date at the top of this document will always reflect the latest version of the Privacy Policy.
• Continued use of the citynow platform after the effective date of any amendments constitutes acceptance of the updated Privacy Policy.
• We encourage you to review this page periodically to stay informed about how we protect your information.

10 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or citynow's personal data practices, our privacy team is here to help:

• Live Chat: Available 24/7 via the chat icon at the bottom corner of the citynow platform — the fastest way to get a response.
• Privacy Email: [email protected] — for written inquiries requiring official documentation.
• Response Time: General inquiries are answered within 24 hours. Formal requests related to privacy rights are processed within 14 business days.

We value every piece of feedback and complaint related to privacy, as it helps us continuously improve our data protection practices for the benefit of all citynow members.