TKP288 Privacy Policy — Your Data Security Is Our Priority

Welcome to the tkp288 Privacy Policy. This document transparently explains how the tkp288 platform, operating under the domain tkp288.my, collects, processes, stores and protects your personal data as a member or visitor of our website.

Tkp288 takes every user's privacy seriously. We believe that trust is the foundation of a strong relationship between a platform and its members. That is why we are committed to being transparent about our data handling practices and ensuring your personal data is always protected to the highest security standards.

This Privacy Policy applies to all users of the tkp288 platform, including:

• Visitors to tkp288.my who have not yet registered an account.
• Individuals who are in the process of registering a new account.
• Registered members who actively use tkp288 services.
• Former members who have closed their accounts.

Tkp288 collects various types of personal data to enable us to provide a secure, efficient and high-quality service to all members. The following are the categories of data we collect:

2.1 Data You Provide Directly

Data Category	Example Information	Primary Purpose
Identification Information	Full name, MyKad / passport number, date of birth	Identity verification (KYC), fraud prevention
Contact Information	Phone number, email address, residential address	Account communications, transaction verification
Financial Information	Bank name, bank account number, digital wallet name	Processing deposits and withdrawals
Supporting Documents	MyKad photo, verification selfie, bank statement	KYC verification for withdrawals exceeding RM5,000
Account Information	Username, password (hashed), security questions	Account security and access

2.2 Automatically Collected Data

When you use the tkp288 platform, we automatically collect certain technical information to ensure optimal platform performance and security:

• IP address and general location information (state, city).
• Web browser type and version.
• Device type, operating system and screen resolution.
• Pages visited, visit timestamps and session duration.
• Betting activity logs and financial transaction records.
• Cookie data and device identifiers.

Personal data collected by tkp288 is used solely for legitimate and necessary purposes in delivering the best platform experience to our members. The following are the primary purposes for which data is used:

3.1 Account Management & Services

• Creating and managing your member account on the tkp288 platform.
• Verifying your identity during login and sensitive transactions.
• Securely processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
• Processing withdrawal requests to your bank account or e-wallet.
• Providing effective customer support whenever you contact us.

3.2 Security & Fraud Prevention

• Detecting and preventing fraudulent activity, money laundering and platform abuse.
• Monitoring suspicious betting patterns to protect the interests of all members.
• Complying with KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements as mandated.
• Investigating complaints and disputes raised by members.

3.3 Communications & Marketing

• Sending important notifications related to your account, transactions, and security.
• Keeping you informed about the latest promotions, bonuses and offers at tkp288 (with your consent only).
• Sending updates on the Malaysia Super League, EPL, badminton, cricket and sports events you follow.
• Conducting member satisfaction surveys to drive platform improvements.

3.4 Platform Improvements

• Analysing usage data to improve the tkp288 interface and user experience.
• Developing new features such as the latest slots, Live Casino offerings and new Sports Betting markets.
• Optimising the platform's technical performance across various devices and internet connections.

Tkp288 maintains a strict policy on sharing members' personal data. We only share data with third parties in limited and lawful circumstances, as outlined below:

4.1 Authorised Service Providers

Tkp288 works with select third-party service providers to support platform operations. All such providers are bound by strict data confidentiality agreements:

• Payment providers: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and local Malaysian banks for processing financial transactions.
• Identity verification provider: Approved KYC services for verifying members' identity documents.
• Gaming technology provider: Casino and sports software providers that supply gaming content on the tkp288 platform.
• Cloud service provider: Server infrastructure providers that store data to internationally recognised security standards.

4.2 Legal Requirements

Tkp288 may be required to disclose members' personal data to the relevant authorities in the following circumstances:

• Court orders or writs that are legally valid under Malaysian law.
• Official requests from the Royal Malaysia Police (PDRM) or law enforcement agencies.
• Reporting obligations to Bank Negara Malaysia (BNM) in relation to suspicious transactions.
• Official investigations relating to money laundering or terrorism financing.

Protecting members' personal data is tkp288's foremost responsibility. We continuously invest in our security infrastructure to ensure your information remains protected at all times.

5.1 Technical Security

• Data in transit is encrypted using TLS 1.3 and 256-bit SSL protocols.
• Data at rest is encrypted using AES-256.
• Two-factor authentication (2FA) is available for all member accounts.
• Round-the-clock system monitoring by tkp288's IT security team.
• Regular penetration testing conducted by independent security experts.
• Multi-layered firewall and active intrusion detection and prevention systems (IDS/IPS).

5.2 Organisational Security

• Privacy awareness and data security training is mandatory for all tkp288 staff.
• Strict role-based access control (RBAC) policy.
• All access to sensitive member data is logged and audited on a regular basis.
• Documented and tested security incident response procedures.

The tkp288.my website uses cookies and similar tracking technologies to enhance your experience and enable certain features to function properly.

6.1 Types of Cookies We Use

Cookie Type	Purpose	Status
Essential Cookies	Required for core website functions such as login, session security and transaction processing	Mandatory
Preference Cookies	Saving user preferences such as language, time zone and display settings	Optional
Analytics Cookies	Collecting anonymised usage data to understand how members use the tkp288 platform	Optional
Security Cookies	Helping detect fraudulent activity and protecting member accounts from unauthorised access	Mandatory

6.2 Managing Cookies

You can manage or disable optional cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of the tkp288 platform. Essential cookies cannot be disabled as they are required for the security of your account.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by tkp288:

Tkp288 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by Malaysian law.

Data Type	Retention Period	Justification
Active account data	For the duration of active account	Service operational requirements
Financial transaction records	7 years after transaction	Tax & AML Legal Requirements
Support communication logs	3 years after last interaction	Dispute resolution
KYC Documents	5 years after account closure	PDPA & AML Requirements
Betting activity logs	3 years after activity	Responsible gambling audits and monitoring
Marketing data (with consent)	Until consent is withdrawn	Member consent

Once the retention period expires, your personal data will be securely deleted or anonymised in accordance with tkp288's documented data deletion procedures.

Tkp288 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements or new platform features.

When significant changes occur, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice on the tkp288.my homepage for a minimum of 14 days.
• Sending email notifications to all registered members if changes materially affect their rights.

Continued use of the tkp288 platform after any Privacy Policy changes take effect will be considered your acceptance of the updated version. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the tkp288 Data Protection Officer through the following channels:

• Email: support@tkp288.my (with the subject line: "Privacy Policy Enquiry")
• Live Chat: Available 24/7 at tkp288.my
• Response time: Within 3 business days for email, instant for Live Chat

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body under the Ministry of Communications and Digital Malaysia.