Privacy Policy tkap10 – Personal Data Protection for Malaysian Users

When you register and use the tkap10 platform, we collect various types of information to ensure your gaming experience runs smoothly and securely. This information is collected transparently and solely for legitimate purposes.

Information you provide directly:

• Full name as stated on your official identity document.
• National identity card number (MyKad) or passport number.
• Active email address for account communications.
• Mobile phone number registered in your name.
• Date of birth for age verification.
• Current residential address.
• Bank account or digital wallet details for deposit and withdrawal purposes.
• Identity verification documents (KYC) such as a selfie with your ID card.

Information collected automatically:

• IP address and general geographic location data.
• Type and version of the browser used.
• Device type, operating system, and screen resolution.
• Game session data including date, time, bets placed, and results.
• Records of deposits, withdrawals, and complete transaction history.
• Cookie data and device identifiers for security verification.

Tkap10 uses your personal data for legitimate and necessary purposes in operating the platform. Every processing purpose is grounded on a solid legal basis under Malaysia's PDPA 2010.

You may withdraw your consent to data processing for marketing purposes at any time by contacting our support team. Withdrawal of consent does not affect the validity of any processing carried out prior to withdrawal.

Tkap10 does not sell, rent, or disclose your personal data to third parties for commercial purposes without your explicit consent. However, there are certain situations where data sharing is necessary and legally permissible:

• Payment service providers: The payment gateways we use (such as FPX, TNG eWallet, Boost, GrabPay, and ShopeePay) receive the transaction data necessary to process your deposits and withdrawals. All these providers are bound by strict confidentiality agreements.
• Technology service providers: Cloud, hosting, and analytics service providers that help us operate the platform. They may only process your data under tkap10's instructions and are not permitted to use it for any other purpose.
• Regulatory authorities: tkap10 will disclose user data to the relevant authorities when required by law, such as in fraud investigations or anti-money laundering cases.
• Game software providers: Third-party game developers who provide game content on the tkap10 platform may receive non-personally identifiable game session data for technical purposes.

Tkap10 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies (required): Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance cookies: Collecting information about how you use our platform (pages visited, time spent) to help us improve the user experience. This data is collected in aggregate and anonymised form.
• Functional cookies: Remembering your preferences such as language, display theme, and game settings to personalise your experience.
• Analytics cookies: We use analytics tools to understand overall platform usage patterns. This data cannot be re-linked to your individual identity.

You can manage or delete cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the tkap10 platform and you may be unable to log in or use certain features.

The security of your personal data is the highest priority for tkap10. We continuously invest in industry-grade security infrastructure to ensure your data remains protected at all times.

• Encryption of data in transit: All communications between your browser and tkap10 servers are secured with TLS 1.3 protocol and AES-256 encryption.
• Encryption of data at rest: Sensitive data such as passwords is stored using irreversible bcrypt hashing. Financial information is stored in encrypted format.
• Layered access control: Only authorised personnel with a legitimate business need may access user data, and every access is logged for audit purposes.
• Two-factor authentication (2FA): Our platform supports 2FA for all user accounts, providing an additional layer of security against unauthorised access.
• 24/7 monitoring: Our systems are monitored around the clock to detect suspicious activity or intrusion attempts.
• Regular penetration testing: tkap10 conducts regular security testing involving independent cybersecurity experts to identify and patch any system vulnerabilities.
• Secure data disposal: When data is no longer needed, it is deleted using secure deletion methods that ensure it cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data processed by tkap10:

Tkap10 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

• Active account data: Retained for the duration your account is active on tkap10, plus 5 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• Customer support communication logs: Retained for 3 years from the date of last communication.
• Game session data: Complete records are retained for 5 years; anonymised aggregate data may be retained longer for analytics purposes.
• KYC Documents: Retained for 5 years after termination of the business relationship, or longer if required by law.

When the retention period expires, your data will be securely deleted or converted into a form that cannot be personally identified, using industry-recognised deletion methods.

Tkap10 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improved platform features. Each new version will carry the latest "Updated" date at the top of this document.

For significant changes that affect your rights or how we use your data, we will:

• Sending an email notice to the address registered to your account at least 14 days before the changes take effect.
• Displaying clear notices on the home page and your account dashboard.
• In some cases, obtain your fresh consent before continuing to process data under the updated terms.

Continued use of the tkap10 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by tkap10, our team is ready to assist you.

You can reach us via the 24/7 live chat available on the tkap10 platform or through our official email. Our privacy team will respond to all enquiries within 3 business days.

If you are dissatisfied with how we handle your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, the regulatory body responsible for enforcing the PDPA in Malaysia.