Privacy Policy tkap10 — Malaysia Player Data Protection

Tkap10 collects various types of personal information to ensure a safe, fair, and seamless gaming experience for all players. This data collection is necessary to carry out KYC processes, handle financial transactions, and fulfil relevant legal obligations.

In general, the information we collect falls into three main categories:

The personal data we collect is used solely for legitimate and transparent purposes. tkap10 does not use your data for any purpose unrelated to platform operations or that could compromise your privacy.

The following are the specific purposes for which your data is used:

• Account Management: Creating, verifying, and managing your account, including secure login processes, two-factor authentication, and account recovery.
• Transaction Processing: Processing deposits via FPX, DuitNow, Touch 'n Go eWallet, and GrabPay, and securely handling withdrawals to your bank account.
• Regulatory Compliance: Meeting KYC requirements, Anti-Money Laundering (AML) obligations, and reporting duties to relevant authorities in accordance with Malaysian law.
• Service Improvement: Analysing aggregate platform usage patterns to improve user experience, identify technical issues, and develop new features.
• Responsible Gaming: Monitoring gaming activity to detect signs of problem gambling and offering appropriate self-protection tools to players who need them.
• Communication: Sending important account notifications, security updates, and promotional information (subject to your communication preferences) via email or SMS.
• Fraud Prevention: Identifying and investigating suspicious activity, fraud attempts, or unauthorised access to your account to protect your interests.

Tkap10 takes a highly cautious approach to sharing personal data. As a matter of policy, we do not share your data with any external party except in the following circumstances required for platform operations or legal obligations.

• Payment Processors: Minimum transaction details are shared with payment service providers such as banks and digital wallet providers solely to process transactions. All our payment processors are bound by strict data protection agreements.
• Authorities: Personal information may be disclosed to relevant authorities such as Bank Negara Malaysia or law enforcement agencies when required by law or court order.
• Technical Service Providers: Our cloud infrastructure and technical service providers may have limited access to your data solely for the purpose of delivering those services, and not for their own independent use.
• Game Software Providers: A limited amount of technical data may be shared with game providers integrated with our platform to ensure smooth and fair game functionality.

The security of your data is tkap10's top priority. We continuously invest in the latest security infrastructure to ensure your information is always protected against cyber threats, unauthorised access, and data loss.

The security measures we implement include:

• Data Encryption in Transit: All communications between your device and the tkap10 servers are secured with TLS 1.3 protocol and 256-bit SSL encryption, ensuring no data can be intercepted during transmission.
• Data Encryption at Rest: Personal and financial data stored in our databases is also encrypted using the AES-256 standard, meaning that even if someone gains physical access to the servers, your data remains unreadable.
• Layered Access Control: Only authorised staff with a legitimate business need may access player data. All access is logged and periodically audited.
• Two-Factor Authentication: tkap10's internal systems are protected with two-factor authentication for all staff access, significantly reducing the risk of unauthorised entry.
• Regular Penetration Testing: We conduct regular security testing and vulnerability audits through independent third parties to identify and patch any weaknesses before they can be exploited.
• Data Backup: Your data is automatically backed up daily to separate locations to ensure service continuity in the event of any unexpected technical incident.

Retention Period: Your personal data will be retained for as long as your account is active. Following account closure, data will be retained for the period required by Malaysian law (typically 7 years for financial records) before being securely deleted.

Tkap10 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

• Essential Cookies: Required for core platform functions such as login authentication, secure sessions, and language preferences. These cookies cannot be disabled as they are critical to website operation.
• Performance Cookies: Helping us understand how players interact with the platform through anonymous usage statistics. This data is used to improve the overall user experience.
• Functional Cookies: Saving your preferences such as display mode, notification settings, and frequently used details to save you time while using the platform.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorised access attempts, and to ensure the integrity of your login sessions.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and this Privacy Policy, you have the following rights regarding your personal data held by us. tkap10 is committed to facilitating the exercise of these rights without any barriers.