Privacy Policy TK99 – Member Data Protection and Information Security in Malaysia

This Privacy Policy describes the personal data collection and management practices of TK99, an online gaming platform operating in Malaysia. It applies to all information collected through the TK99 website, mobile app, live chat, and any other communication channels associated with our platform.

By using the TK99 platform — whether by registering an account, making a deposit, playing games, or simply browsing our website — you acknowledge that you have read and understood this privacy policy. If you disagree with any part of this policy, you are advised not to use our platform.

Tk99 acts as the data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). This means we are responsible for determining how and why your personal data is processed, and we take that responsibility seriously.

Tk99 collects various categories of information depending on how you interact with our platform. Below is a summary of the types of data collected:

Tk99 does not collect sensitive categories of information such as health data, religious beliefs, or political affiliations. If we ever need to collect any additional data outside the list above, you will be notified and asked to provide consent first.

Every piece of data TK99 collects is used for a specific and legitimate purpose. Below are those purposes along with the legal basis that permits the processing:

• Service Provision: To create and manage your account, process deposits and withdrawals, and provide access to tk99's platform games.
• Identity Verification (KYC): To meet legal requirements and prevent fraud, money laundering, and platform abuse.
• Account Security: To detect and prevent unauthorised access, suspicious activity, or any security threats to your account.
• Customer Support: To resolve inquiries, complaints, and technical issues that you raise with the tk99 support team.
• Platform Improvement: To analyse usage patterns and improve the user experience, platform speed, and overall service quality.
• Marketing Communications: To send promotional information, bonuses, and the latest offers — only to members who have not objected to such communications.
• Legal Compliance: To fulfil reporting and compliance obligations to relevant authorities as required by law.

Tk99 takes a very cautious approach to sharing members' personal data. In general, your data will not be disclosed to external parties except in the following situations:

• Certified Service Providers: Game providers, payment processors, and technical infrastructure providers working on behalf of TK99, subject to strict confidentiality agreements.
• Legal Requirements: When required by court order, direction from a lawful authority, or mandatory reporting obligations under Malaysian law.
• Fraud Prevention: To fraud prevention agencies or competent authorities where there is strong evidence of illegal activity involving your account.
• Your Consent: In other situations where you have given clear and specific consent for that data disclosure.

When sharing data with third-party service providers, TK99 ensures that data processing agreements compliant with PDPA standards are in place, and that only the minimum data necessary for the stated purpose is shared.

Tk99 stores members' personal data on secure servers using multiple layers of technical and organisational protection:

• Data in Transit Encryption: All data transmitted between your device and TK99 servers is protected by 256-bit SSL/TLS encryption — the same standard used by banking institutions.
• Stored Data Encryption: Sensitive data such as financial information and identification numbers are stored in encrypted form in TK99's database.
• Strict Access Control: Only TK99 staff with a clear business need are permitted to access member data, with every access logged and audited.
• 24/7 Monitoring: TK99's security systems are continuously monitored to detect any unauthorized access attempts or suspicious anomalies.
• Regular Security Testing: tk99 conducts regular penetration testing and vulnerability assessments to ensure our systems remain protected against the latest threats.

Your personal data will be retained for as long as your TK99 account is active or as needed to fulfil legal obligations. After account closure, data that is no longer required will be deleted or anonymised within a defined period, unless the law requires a longer retention period.

The TK99 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly.

Types of cookies used by TK99:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Functional Cookies: Saves your preferences such as language, display settings, and login information so you do not need to re-enter them each time.
• Analytics Cookies: Helps TK99 understand how members use the platform for continuous improvement purposes. This data is analyzed in aggregate and does not identify individuals.

Tk99 does not use third-party cookies for targeted advertising or user profiling across different websites.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by TK99:

1. Right of Access: You have the right to request a copy of the personal data TK99 holds about you. TK99 will comply with valid requests within a reasonable timeframe.
2. Right to Rectification: If the data we hold about you is inaccurate or incomplete, you have the right to request a correction. This can be done through your account settings or by contacting customer support.
3. Right to Object to Marketing: You may opt out of receiving marketing communications from TK99 at any time through the communication preferences in your account settings.
4. Right to Restrict Processing: In certain circumstances, you may request TK99 to restrict how your data is processed while your issue or query is being resolved.
5. Right to Erasure: In certain cases and subject to legal requirements, you may request the deletion of your personal data after account closure.

To exercise any of the above rights, please contact the tk99 privacy team via live chat or support email. We will respond to all valid requests within 30 calendar days.

Tk99 takes additional steps to protect members' financial data given its highly sensitive nature.

• Bank account and card numbers linked to your TK99 account are stored in encrypted form and are never displayed in full on any interface.
• All financial transactions processed through the TK99 platform comply with the payment security standards set by Malaysian financial institutions.
• TK99 works exclusively with payment processors that have obtained certification and recognition from the relevant financial authorities.
• Your financial transaction history is available for review in your account section at any time.

TK99 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or relevant technological advancements.

When material changes are made:

• The "Updated" date at the top of this document will be revised accordingly.
• Notifications will be sent to members via email or in-platform notifications.
• For significant changes, we will provide a notice period of at least 14 days before the changes take effect.

We encourage you to review this Privacy Policy periodically. Continued use of the TK99 platform after changes take effect will be considered acceptance of the updated policy.

If you disagree with the changes made, you have the right to close your TK99 account before they take effect. Please contact our support team for assistance with the account closure process.

If you have any questions, concerns, or complaints regarding how TK99 handles your personal data, our privacy team is ready to assist through the following channels:

• Livechat Platform: Reach us directly through the TK99 platform — available 24 hours a day, 7 days a week, including public holidays.
• Privacy Email: [email protected] – for official requests regarding data rights or privacy complaints that require documentation.
• Help Center: Visit page FAQ us for answers to frequently asked questions about tk99's privacy and data security.

Tk99 is committed to addressing every privacy inquiry and complaint seriously and within a reasonable timeframe. All complaints will be assigned a reference number for easy follow-up.