Privacy Policy TKB777 Personal Data Protection

Tkb777 collects various categories of personal information as you interact with our platform. This collection is carried out transparently and only for the purposes stated in this privacy policy. The following are the main categories of information we collect:

Account Registration Information
When you register an account at tkb777, we collect your full name, date of birth, email address, mobile number, preferred username, and password (stored in encrypted form). This information is required to create and manage your account.

Identity Verification (KYC) Information
As part of the mandatory identity verification process, we may request identification documents such as a copy of your ID card or passport, proof of current address such as a utility bill or bank statement, and documents related to the payment method you use. These documents are used solely for verification and legal compliance purposes.

Financial and Transaction Information
We record the details of all deposit and withdrawal transactions, including amounts, dates, payment methods used, and transaction reference numbers. Full card or bank account details are not stored directly in our systems — payment processing is handled by licensed third-party payment processors that comply with PCI DSS standards.

Platform Usage and Activity Data
We automatically collect data on how you use the platform, including games played, session duration, wagering records, bonus claim history, and general account activity. This data is used for security, fraud detection, and service improvement purposes.

Device and Technical Information
Includes IP address, browser type, operating system, device identifier, general location data (based on IP), and cookie information. This data helps us detect suspicious access and ensure the platform functions properly across various devices.

The information we collect is used for specific and legitimate purposes. tkb777 ensures that every use of data is relevant, necessary and proportionate to the purpose for which it was collected. Here is how we use your information:

Tkb777 does not use your personal data for third-party marketing purposes or sell it to advertisers. Should we wish to use your data for any purpose not listed above, we will obtain your consent beforehand.

Tkb777 processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act (PDPA) 2010. Our data processing relies on one or more of the following bases:

• Contract Performance: Processing required to fulfil the contractual obligations between you and tkb777, such as managing your account, processing payments and providing gaming services.
• Legal Compliance: Processing required to comply with legal obligations, including KYC requirements, anti-money laundering (AML) reporting and other applicable statutory duties.
• Legitimate Interest: Processing for legitimate business interests such as fraud detection, platform security and service improvement, where these interests do not override your fundamental rights and freedoms.
• Consent: For certain types of processing such as optional marketing communications, we rely on your explicit consent. You may withdraw this consent at any time.

Tkb777 does not sell, rent, or exchange your personal information to third parties for their own marketing purposes. However, there are limited situations in which we may share your information with trusted third parties:

• Payment Processors: Licensed payment service providers such as FPX, DuitNow, Touch 'n Go eWallet and GrabPay processors that require the necessary information to process your transactions securely.
• Game Providers: Third-party game software providers that support gaming content on our platform. Data sharing is limited to information necessary to run the games and maintain wagering records.
• KYC Service Providers: Third-party identity verification companies that assist us in verifying member documents and information as part of our compliance process.
• Legal Authorities: Government authorities, regulators or law enforcement agencies with the legal power to request such information, including in financial crime or AML investigations.
• Professional Advisors: Lawyers, accountants or auditors bound by strict professional confidentiality obligations.

All third parties that receive your data are required to protect it to a standard equal to or higher than the one we adhere to. tkb777 conducts thorough vetting of all third-party partners before any data sharing takes place.

Tkb777 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure core functions run smoothly, and analyse usage patterns in aggregate.

Types of Cookies We Use:

• Essential Cookies: Required for core platform operations such as login authentication, session management, and security. These cookies cannot be disabled as the platform cannot function without them.
• Functional Cookies: Saves your preferences such as language, display settings and other personal configurations to provide a more comfortable experience.
• Analytics Cookies: Collects information about how members use the platform in a non-personally identifiable form. This data helps us understand which parts of the platform are most popular and where improvements are needed.
• Security Cookies: Helps detect suspicious activity, unauthorised login attempts and potential security threats to your account.

Tkb777 retains your personal information only for as long as it is needed for the purposes for which it was collected, or as required by applicable law. Retention periods depend on the type of data and the relevant legal requirements:

• Active Account Data: Retained for the duration your account remains active and used to manage the services you use.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the transaction date, in line with Malaysia's tax and financial legal requirements.
• KYC Documents: Retained for a minimum of five (5) years after account closure, in line with the applicable AML/CFT requirements.
• Customer Support Communication Logs: Retained for two (2) years after the conclusion of the related support case.
• Security Log Data: Retained for twelve (12) months for security incident investigation purposes if required.

When data is no longer needed and there is no legal obligation to retain it, tkb777 will delete or anonymize that data securely and irreversibly.

Tkb777 continually invests in the latest security infrastructure to ensure your personal data is always protected against unauthorised access, disclosure, modification, or destruction.

The technical and organisational security measures we implement include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols for all communications between your browser and our servers.
• Encryption of data at rest for all sensitive information in our databases.
• Strict role-based access control (RBAC) — staff may only access the data required for their specific tasks.
• Internal and external security audits conducted periodically by qualified independent parties.
• Regular penetration testing to identify and address security vulnerabilities before they can be exploited.
• 24/7 threat monitoring system with automated and manual incident response.
• Mandatory information security training for all tkb777 staff who handle personal data.
• Regular data backup procedures and a tested disaster recovery plan.

As a tkb777 member, you hold important rights regarding your personal data under Malaysia's PDPA 2010. tkb777 is committed to respecting and facilitating the exercise of these rights:

Tkb777 is an online gaming platform intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal information from anyone under the age of 18.

Should we discover that personal information of a child has been collected without our knowledge, we will take immediate steps to delete that information from our records and close the associated account. Parents or guardians who have reason to believe their child has provided personal information to tkb777 are encouraged to contact our support team immediately.

The tkb777 platform may contain links to third-party websites or services for your convenience. This privacy policy does not apply to those sites, and tkb777 is not responsible for the privacy practices or content of any third-party site.

We encourage you to read the privacy policy of every website you visit, especially before providing any personal information. The presence of links to external sites on the tkb777 platform does not mean we endorse or support those sites.

Tkb777 reserves the right to update, amend, or replace this privacy policy at any time to reflect changes in our practices, new legal requirements, or service improvements. The latest version of this privacy policy will always be available on this page with a clearly displayed "last updated" date.

For material amendments, we will endeavour to provide members with reasonable notice via registered email or in-platform notification at least 14 days before the changes take effect. Continued use of the tkb777 platform after the effective date of such amendments constitutes your acceptance of the updated privacy policy.

We encourage you to review this privacy policy periodically to stay informed about how we protect your information. If you do not agree with any changes, you may close your account and stop using the tkb777 platform.

If you have any questions, concerns, or complaints regarding this privacy policy or how we handle your personal data, the tkb777 data protection team is ready to assist you.

We are committed to resolving all privacy-related inquiries or complaints thoroughly and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.