tpower2 Privacy Policy for Malaysian Users

Introduction and Scope

This tpower2 Privacy Policy applies to information processed through the website and associated account functions. It describes the general privacy practices relevant to visitors and registered users in Malaysia, including users accessing tpower2 from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya and Shah Alam.

By using tpower2, you acknowledge that personal information may be handled as described in this policy. Where consent is requested for a particular activity, you may decide whether to provide it. Certain information may nevertheless be required to open an account, establish eligibility, protect platform security or complete a transaction.

Definitions

“Personal information” means information that identifies a person or can reasonably be associated with an identifiable person. “Processing” includes collecting, recording, organising, using, reviewing, storing, sharing, restricting or deleting information. “Account information” means data connected with a registered tpower2 profile.

“KYC information” refers to identity and verification material used for Know Your Customer checks. “Transaction information” includes MYR deposit and withdrawal records, payment references and relevant provider details. “Device data” includes technical information generated when a user visits tpower2 through a phone, tablet or computer.

Information tpower2 May Collect

The information collected by tpower2 depends on how the website and available services are used. Visitors who only read general information may provide less personal data than registered users completing verification or reviewing MYR transactions.

• Identity details, including name, date of birth, nationality and age confirmation.
• Contact details, such as an email address, residential address and non-clickable phone information where requested.
• Account credentials, security settings, login history and communication preferences.
• KYC documents, including an accepted identity document, proof of address and verification selfie.
• Payment information, transaction references, selected bank or eWallet type and deposit or withdrawal history.
• Usage records, including pages viewed, language settings, device type, browser data and approximate location derived from technical information.
• Responsible gambling records, including deposit limits, cooling-off requests, self-exclusion status and relevant support interactions.
• Communications sent to tpower2, including account questions, complaint details and supporting screenshots.

How Personal Information Is Collected

tpower2 may receive information directly from users when they enter account details, provide KYC documents, ask for assistance, set responsible gambling controls or submit a privacy request. Information may also be generated automatically when a device connects to the website.

Subject to the relevant service arrangement, transaction information may be received from participating banks and payment facilities. Familiar Malaysian options may include FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank and Hong Leong. The appearance of a payment brand does not guarantee availability for every tpower2 account.

Purposes of Data Processing

tpower2 processes personal information only where there is a relevant operational, security, contractual, compliance or consent-based purpose. The precise basis and purpose may vary according to the user, account activity and applicable requirements.

• Creating, maintaining and securing a tpower2 account.
• Confirming identity, age and eligibility for services restricted to users aged 21 and above.
• Reviewing MYR deposits, withdrawals, account ownership and payment disputes.
• Presenting sports and casino content, such as EPL, Liga Super Malaysia, UFC and live football information.
• Detecting fraud, duplicate accounts, suspicious transactions, technical abuse and unauthorised access.
• Administering promotions, loyalty points and VIP status where those features are available.
• Applying deposit limits, cooling-off periods, self-exclusion controls and other responsible gambling measures.
• Answering questions, investigating complaints and maintaining necessary communication records.
• Meeting record-keeping, security and legal obligations applicable to tpower2 operations.

KYC Documents and Verification Records

A tpower2 user may be asked to provide a valid Malaysian identity document, driver's licence or passport, a recent proof of address and a selfie holding the selected document. Additional evidence may be requested where account ownership, age, payment source or transaction activity requires further review.

KYC information is sensitive and should only be submitted through the designated secure process. Users should not send identity documents through unsecured chat, public social media or unknown messaging accounts. Where the verification instructions permit, unnecessary identification number digits may be covered before submission.

tpower2 may retain verification results and relevant evidence for as long as reasonably required for account security, dispute management, fraud prevention and applicable record-keeping duties. A request to erase KYC data may be restricted where continued retention is necessary or required.

Cookies and Similar Technologies

tpower2 may use cookies, local storage and comparable technologies to maintain sessions, remember preferences, support navigation, protect account access and understand general website performance. These technologies may record browser type, device characteristics, viewed pages, session timing and technical identifiers.

Essential technologies support functions such as secure navigation and account continuity. Preference technologies may remember choices made on tpower2. Measurement information may help identify slow pages, broken layouts or navigation issues affecting Malaysian mobile users. Browser controls can usually block or remove cookies, although some tpower2 functions may then operate incorrectly.

Disclosure and Service Providers

tpower2 does not disclose personal information without a relevant purpose. Information may be made available to carefully selected service providers that support hosting, platform security, identity verification, payments, customer assistance, analytics, fraud prevention or professional advice.

A provider should receive only the information reasonably required for its assigned function and should be subject to appropriate confidentiality and security obligations. Information may also be disclosed where necessary to investigate suspected fraud, protect users, respond to a lawful request, enforce tpower2 terms or establish and defend legal rights.

If a corporate reorganisation, financing arrangement or transfer of operations occurs, relevant records may be reviewed or transferred subject to suitable safeguards. tpower2 does not represent that personal information will never leave Malaysia; where cross-border processing occurs, reasonable measures should be used to protect the information.

Data Security

tpower2 uses organisational and technical measures intended to protect personal information against accidental loss, unlawful access, unauthorised disclosure, alteration and misuse. Measures may include access controls, authentication procedures, monitoring, secure transmission methods, staff confidentiality obligations and incident response processes.

No internet service can guarantee absolute security. Users also play an important role by creating a unique password, keeping login credentials private and securing the devices used to access tpower2. Users must never provide an online banking password, card PIN or one-time password to anyone claiming that such information is needed for verification.

Retention of Personal Information

tpower2 retains information for periods determined by its purpose, account status, security value, dispute relevance and any applicable record-keeping requirement. Different categories may therefore have different retention periods. A general website log may not need to be kept for as long as an identity verification or transaction record.

When information is no longer reasonably required, tpower2 may delete it, anonymise it or place it beyond ordinary operational use. Records linked to fraud prevention, self-exclusion, legal claims or MYR payment disputes may need to remain available after an account has closed.

User Rights and Privacy Choices

Subject to identity verification, applicable law and operational limitations, a tpower2 user may ask whether personal information is held, request access to certain records, seek correction of inaccurate information or raise an objection about a particular use.

• Request details about the categories and purposes of processing.
• Ask tpower2 to correct incomplete or inaccurate account information.
• Request deletion where retention is no longer necessary and no overriding duty applies.
• Withdraw consent for a consent-based activity without affecting earlier lawful processing.
• Ask for a review of a privacy concern or security incident affecting the account.
• Change certain communication and cookie preferences where controls are available.

tpower2 may request sufficient information to confirm the identity of the person making a privacy request. This helps prevent another person from gaining access to private account, KYC or transaction records. A request may be declined or limited where disclosure would affect another person's rights, expose security controls or conflict with a retention requirement.

Responsible Gambling and Sensitive Records

tpower2 may process information connected with deposit limits, cooling-off periods, self-exclusion, unusual gambling patterns and responsible gambling communications. This information is used to administer requested controls, identify potential risk and avoid reactivation where an exclusion remains in force.

Responsible gambling records may be treated as particularly sensitive. Access should be limited to personnel or providers who need the information to perform an authorised function. A self-excluded user must not attempt to avoid controls by creating another tpower2 account or changing identity details.

Children and Age-restricted Access

tpower2 is not intended for children or persons under 21 years of age. The platform does not knowingly seek gambling-related personal information from anyone below the applicable age threshold. If tpower2 identifies an underage account, access may be suspended while the circumstances and relevant records are reviewed.

A parent or guardian who believes that an underage person has submitted information should contact tpower2 using the website email shown in the footer. Enough detail should be provided to locate the relevant record without including unnecessary sensitive information.

Policy Updates and Contact

tpower2 may amend this Privacy Policy when services, security practices, payment arrangements or legal requirements change. The revised policy will display an updated effective date. Material changes may also be highlighted through an appropriate website notice.

Questions, correction requests and privacy concerns may be sent to the website email displayed as plain text in the footer. Users should identify the nature of the request and provide only the account details reasonably needed for review. Do not include passwords, card PINs, online banking credentials or one-time passwords.