Privacy Policy TK99 — Our Commitment to Protecting Your Data

1Introduction — Who We Are and TK99's Privacy Commitment

TK99 ("we," "the Company," or "the Platform") operates an online betting platform in Malaysia via the website tk99-khelo.com. We understand that player trust is our most valuable asset, and a significant part of that trust depends on how carefully, responsibly, and transparently we handle your personal data.

This Privacy Policy describes the types of personal data TK99 collects when you use our platform, why we collect it, how we use it, who we may disclose it to, and what your rights are as a data subject. We have written this policy in plain, clear language because we believe Malaysian players deserve to fully understand how their data is managed — not have it buried behind legal jargon that most people cannot decipher.

TK99 acts as the Data Controller under Malaysia's Personal Data Protection Act (PDPA) 2010, meaning we are responsible for determining the purposes and means of processing the personal data we collect from you.

2Types of Personal Data TK99 Collects

TK99 collects only the data genuinely necessary to deliver platform services safely and effectively. The following outlines the categories of data we collect:

2.1 Identity Data

• Full name (as shown on official identification documents)
• Active Malaysian phone number
• Email address (if provided during registration)
• Date of birth (to verify that you are 18 years of age or older)
• Malaysian identity card number (only when KYC verification is required for large withdrawals)

2.2 Financial & Transaction Data

• EWallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay) used for deposits and withdrawals
• Malaysian bank account number for withdrawals via DuitNow or FPX
• Records of all deposit and withdrawal transactions in Malaysian Ringgit (RM)
• Betting history and in-platform gaming activity
• Account balance and bonus records received

2.3 Technical & Usage Data

• The IP address of your device when accessing the TK99 platform
• Device type, operating system, and web browser used
• Login, logout, and active session timestamps and dates
• Pages visited and actions taken within the platform
• Cookie data and similar tracking technologies (see Section 9)

3How TK99 Collects Your Personal Data

TK99 collects your personal data through several channels:

• During Account Registration: When you complete the TK99 registration form with your name, phone number, and other required details
• During Financial Transactions: When you make a deposit or withdrawal using Touch 'n Go eWallet, GrabPay, DuitNow, FPX, or other supported Malaysian payment methods
• While Using the Platform: Betting activity, games played, and interactions with platform features are automatically recorded in our systems
• When Contacting Support: Live chat conversations and email communications with the TK99 support team are retained for record-keeping and service improvement purposes
• Via Automated Technology: Cookies, web pixels, and similar technologies that collect technical data while you browse the TK99 platform

4Purposes for Which TK99 Processes Your Personal Data

TK99 processes your personal data only for legitimate and necessary purposes. The following outlines the primary purposes for which your data is processed at TK99:

• Account Management: Creating, verifying, and maintaining your TK99 account so you can log in and use the platform securely
• Age & Identity Verification (KYC): Ensuring all TK99 players are aged 18 and above, as required by Malaysian law and the platform's ethical responsibilities
• Payment Processing: Processing your deposits and withdrawals accurately and securely through Malaysian eWallets (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow, and FPX
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, multi-account abuse, and other security threats to the platform and its players
• Legal Compliance: Fulfilling TK99's legal obligations under Malaysian law, including responding to court orders or requests from lawful authorities
• Customer Support: Processing your enquiries, complaints, and support requests through the TK99 support team
• Responsible Gaming: Monitoring play patterns to identify signs of problem gambling and delivering effective self-management tools
• Service Communications: Sending you important notifications related to your account, transactions, and security
• Marketing Communications (with your consent): Keeping you informed about promotions, new bonuses, and platform features that may interest you — but only if you have given consent to receive such communications
• Platform Improvements: Analysing usage patterns in aggregate (not individually) to improve the TK99 platform's interface, performance, and features

5Third-Party Data Sharing & Disclosure

TK99 does not sell, rent, or disclose players' personal data to third parties for their own marketing or commercial purposes. However, there are limited situations where TK99 needs to share data with third parties for legitimate operational purposes:

5.1 Trusted Service Providers

TK99 works with a number of third-party service providers that help us operate the platform. These include payment processors that facilitate transactions via Touch 'n Go eWallet, GrabPay, DuitNow, and FPX; cloud service providers that securely store our data; and game software providers that power the slots, live casino, and other games on the TK99 platform.

All third-party service providers working with TK99 are required to sign confidentiality and data protection agreements, and are only permitted to process TK99 player data for purposes we specify — not for their own benefit.

5.2 Legal Requirements

TK99 may disclose player personal data when required by Malaysian law or a valid court order — for example, in criminal investigations or legal proceedings. In such cases, TK99 will comply with the lawful order while ensuring only the minimum necessary data is disclosed.

5.3 Platform Security Safeguards

In cases involving serious fraudulent activity or threats to platform security, TK99 may share relevant information with Malaysian authorities, financial institutions, or cybersecurity providers for investigation and prevention purposes.

6Data Security Measures Taken by TK99

TK99 continually invests in security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The following are the security layers we have in place:

• Encryption in Transit: SSL/TLS 256-bit encryption protects all data transmitted between your device and TK99's servers
• Encryption at Rest: Sensitive data such as financial information and personal identification is encrypted at rest within our databases
• Strict Access Controls: Only authorised personnel may access player data, and every access is logged for audit purposes
• Two-Factor Authentication: TK99 supports and encourages the use of 2FA on all player accounts as an additional layer of protection
• 24/7 Security Monitoring: An automated threat detection system continuously monitors platform activity to identify intrusion attempts or suspicious behaviour
• Regular Security Audits: TK99 conducts periodic independent security audits to identify and address potential vulnerabilities in our systems

7TK99 Personal Data Retention Periods

TK99 does not retain your personal data longer than is necessary to fulfil the purposes stated in this Privacy Policy, or as required under Malaysian law.

• Active account data: Retained for as long as your account remains active with TK99
• Financial transaction data: Retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements
• KYC data (identity verification): Retained for at least 5 years after account closure
• Support communication logs: Retained for 2 years from the date of interaction
• Technical data and cookies: Retention periods vary by cookie type (see Section 9)

Once the retention period ends, your data will be securely deleted or anonymised so it can no longer be linked to you as an individual.

8Your Rights as a TK99 Player Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding the personal data TK99 holds about you:

8.1 Right of Access

You have the right to request and receive a copy of the personal data TK99 holds about you. Requests can be submitted via live chat or TK99's support email, and we will provide the information within 21 business days.

8.2 Right to Rectification

If you find that personal data TK99 holds about you is inaccurate or out of date, you have the right to request a correction. Some details such as your name and phone number can be updated directly in your TK99 account settings, while other information may require additional verification before changes are made.

8.3 Right to Withdraw Marketing Consent

You may withdraw your consent to receive marketing communications from TK99 at any time, either through the unsubscribe link in marketing emails or by contacting TK99 support. Withdrawing marketing consent does not affect essential service communications, such as transaction notifications and account security alerts.

8.4 Right to Request Data Deletion

In certain circumstances, you may request that TK99 delete your personal data. This right is subject to our legal record-retention obligations — for example, financial records must be kept for the period required under Malaysian law even after you close your account.

9Cookies & Tracking Technologies on the TK99 Platform

The TK99 platform uses cookies and similar tracking technologies to enhance your experience, keep your account secure, and help us understand how our platform is used overall.

9.1 Types of Cookies TK99 Uses

• Essential Cookies (Required): Required for core platform functions such as login sessions, security, and navigation. These cookies cannot be disabled without affecting your ability to use the TK99 platform.
• Functional Cookies: Saves your preferences such as language (Bahasa Malaysia), display theme, and other platform settings so you don't have to reconfigure them each time you log in.
• Analytics Cookies: Helps TK99 understand which pages are visited most frequently, where players encounter difficulties, and how to improve the overall experience. This data is collected in aggregate and does not identify individual players.
• Security Cookies: Used to detect suspicious login activity, protect against CSRF attacks, and ensure only legitimate sessions remain active on your account.

9.2 Managing Your Cookies

You can manage your cookie settings through your web browser. Most browsers allow you to block or delete cookies via their privacy settings. However, disabling essential cookies may affect your ability to log in or use certain features of the TK99 platform. Analytics and functional cookies can be disabled without impacting core platform functionality.

10Protection of Children's Data

The TK99 platform is strictly for individuals aged 18 and above. TK99 does not knowingly collect or process personal data from any individual under the age of 18. Should we discover that a minor's data has been collected without proper age verification, that data will be deleted immediately and the account in question will be closed.

Parents or guardians who believe their child has registered a TK99 account or shared personal data with us should contact us immediately at support@tk99-khelo.com and we will take prompt action to resolve the matter.

TK99 uses a multi-layer age verification system, including Malaysian phone number verification and KYC checks, to ensure all users meet the minimum age requirement of 18 years.

11Changes to TK99's Privacy Policy

TK99 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, Malaysian legal requirements, or the technologies we use. Any significant changes will be communicated to players via in-platform notifications or email at least 14 days before they take effect.

The "Last Updated" date shown at the top of this page will be revised whenever changes are made. We encourage you to review this Privacy Policy periodically, especially before providing us with any new personal information.

Continued use of the TK99 platform after the stated update date constitutes full acceptance of the amended Privacy Policy. If you do not agree with the changes made, please stop using the platform and contact us to close your account.

12Contact TK99 for Privacy Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or how TK99 handles your personal data, please contact us through the following channels:

• Email: support@tk99-khelo.com
• Live Chat: Available 24 hours a day, 7 days a week within the TK99 platform

TK99 is committed to addressing every privacy enquiry seriously and providing a clear response within 21 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia in accordance with the procedures set out under PDPA 2010.

We value the trust you place in TK99. Protecting your privacy is more than a legal obligation for us — it is core to our commitment to being a truly responsible betting platform that Malaysian players can rely on.