Privacy Policy TK688 – Data Protection & Member Privacy

Welcome to the tk688 Privacy Policy page. This document is tk688's official statement on how we manage the personal data of all members and users accessing our platform in Malaysia. We understand that your personal data is a trust that must be safeguarded with full integrity, and we take this responsibility seriously.

This Privacy Policy applies to all services provided by tk688, including the official website at tk688.bz, the tk688 mobile app, and any other official communication channels operating under the tk688 brand. This includes all data we collect, whether directly from you or automatically when you use our platform.

By registering for or using tk688's services, you agree to the terms set out in this Privacy Policy. If you do not agree with any aspect of this policy, you are advised not to use our services. We encourage you to read this document carefully and to contact us should you have any questions.

Tk688 collects your personal data through two primary methods – information you provide directly to us, and data collected automatically through your use of the platform. Below is a detailed explanation of the types of data we collect:

Data you provide directly:

• Identity information: Full name, identity card or passport number, date of birth, and gender collected during the account registration and KYC verification process.
• Contact information: Mobile number, email address, and residential address used for account communication and verification.
• Financial information: Bank account numbers, e-wallet information, and deposit and withdrawal transaction records for payment processing and AML compliance purposes.
• Supporting documents: Copies of identity cards, passports, bank statements, and other documents requested during the KYC verification process.
• Communication: Any messages, complaints, or feedback you send to the tk688 customer support team via live chat, email, or WhatsApp.

Data collected automatically:

• Log and technical data: IP address, browser type, operating system, device used, pages visited, and access times.
• Gaming data: Wagering history, wins and losses, games played, session duration, and gaming patterns for security control and responsible gaming purposes.
• Location data: Approximate geolocation data based on IP address to ensure compliance with applicable regional restrictions.
• Cookie data: Information collected through cookies and similar tracking technologies to enhance the user experience on our platform.

Tk688 uses collected personal data solely for legitimate purposes directly related to delivering our platform services. We do not use your data for any purpose not stated in this Privacy Policy without first obtaining your consent.

The primary purposes for which your personal data is used are as follows:

• Account management: Creating, verifying, and maintaining your member account on the tk688 platform, including registration processing and identity verification.
• Service provision: Allowing you to access all games and features on the tk688 platform, including Slot Games, Live Casino, Sports Betting and Bingo.
• Transaction processing: Processing deposits and withdrawals securely through supported payment methods, including FPX, Touch 'n Go eWallet, Boost, GrabPay, and bank transfers.
• Legal compliance: Meeting mandatory KYC and AML requirements, as well as complying with any directives from relevant authorities.
• Platform security: Identifying and preventing fraud, money laundering, duplicate account creation, and any activity that violates tk688's Terms and Conditions.
• Responsible gaming: Monitoring gameplay patterns to identify early signs of problem gambling and providing appropriate support to members who need it.
• Service communication: Sending important notifications related to accounts, transactions, security updates, and changes to terms of service.
• Marketing (with consent): Sending information about promotions, bonuses, and special offers to members who have consented to receive marketing communications.
• Platform improvement: Analysing usage data to understand user needs and improve the quality of the gaming experience on tk688.

Tk688 processes your personal data only on a solid and lawful legal basis. Under Malaysia's Personal Data Protection Act 2010 (PDPA), several bases permit data processing, and tk688 relies on the following:

• Consent: For non-mandatory data processing, such as sending marketing communications, we obtain your explicit consent. You may withdraw this consent at any time.
• Contract performance: Data processing required to provide tk688 services to you under the Terms and Conditions agreement you accepted upon registration.
• Legal obligation: Data processing required to comply with applicable legal obligations, including KYC and AML requirements under Malaysia's anti-money laundering laws.
• Legitimate interest: Data processing for platform security, fraud prevention, and service improvement purposes, where tk688's legitimate interests do not override your fundamental rights.

Tk688 takes a strict and limited approach to sharing members' personal data with third parties. Our core principle is does not sell or share your personal data for third-party marketing purposes. However, there are specific situations where data sharing is necessary and lawful:

• Payment service providers: Required financial data is shared with approved payment processors such as FPX, e-wallet, and bank providers to enable deposit and withdrawal transactions to be processed securely.
• Game software providers: Limited technical data is shared with third-party gaming platform providers that supply game content on tk688, solely for gaming operation purposes.
• Relevant authorities: Data is shared when required by law or a valid court order, including AML reports to Malaysia's Financial Intelligence Unit (FIU) where necessary.
• Technology service providers: Companies providing cloud computing, hosting, and analytics services that operate under strict confidentiality agreements with tk688.
• Auditing and compliance: Independent auditors and regulatory bodies with lawful authority to inspect tk688 records.

All third parties receiving tk688 members' personal data are bound by data processing agreements requiring them to protect that data to an equivalent or higher standard than the one we adhere to.

Tk688 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or unintentional destruction.

Technical security measures we employ:

• 256-bit SSL/TLS encryption for all data transmitted between your device and tk688 servers.
• Password storage using a secure hashing algorithm with a unique salt for each account.
• Two-factor authentication (2FA) via SMS OTP for all account logins and financial transactions.
• Multi-layered firewall and intrusion detection system (IDS) that continuously monitors network traffic.
• Role-based access control (RBAC) ensuring that only authorised staff can access sensitive member data.
• Regularly encrypted data backups to ensure service continuity.

Data retention period: tk688 retains your personal data for as long as your account remains active and for the period required by law following account closure. Financial records and transaction data are retained for a minimum of 7 years in accordance with Malaysia's AML legal requirements. Data that is no longer needed is securely deleted following established procedures.

Tk688 uses cookies and similar tracking technologies to enhance your experience on our platform, maintain the security of your login session, and understand how users interact with our services.

Types of cookies we use:

• Essential cookies (required): Required for core platform operations, including login session management and security. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies: Saving your preferences such as language, display settings, and game preferences so you do not need to reconfigure them each time you log in.
• Analytics cookies: Collecting anonymous information about how users interact with the platform to help us understand usage patterns and improve our services. Analytics data cannot be used to personally identify you.
• Security cookies: Helping detect suspicious activity, unauthorised login attempts, and potential fraud to protect your account.

You can manage cookie settings through your browser settings. However, disabling certain cookies may affect the functionality of the tk688 platform. Third-party cookies for advertising or marketing are not used on the tk688 platform.

As a tk688 member and data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact the tk688 Privacy Officer by email at [email protected] or via live chat within the platform. We may need to verify your identity before processing your request to ensure the security of your data.

In operating the tk688 platform, your personal data may be transferred to and stored on servers located outside Malaysia. This occurs primarily in the context of cloud computing services and international gaming software providers that support our platform's operations.

Tk688 ensures that any cross-border data transfers are carried out with adequate safeguards, including:

• Data transfer agreements incorporating internationally recognised standard data protection clauses.
• Transfers are made only to countries or entities that provide an equivalent or higher level of data protection than Malaysia.
• Regular audits of data recipients to ensure ongoing compliance with the established data protection standards.

Tk688 is an online gaming platform restricted exclusively to individuals aged 18 years and above. We do not intentionally collect, process, or store personal data from children or individuals under the age of 18.

All tk688 account registrations go through a strict age verification process as part of our KYC procedures. Should we find that a minor's personal data has been collected inadvertently, we will take immediate action to delete that data and close the associated account.

Parents or guardians who discover that their child has registered on the tk688 platform without permission are requested to contact us immediately at [email protected] so that appropriate action can be taken promptly.

Tk688 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. Any amendments will take effect immediately upon publication on this page, unless otherwise stated.

For material and significant changes to the way we handle your personal data, tk688 will:

• Displaying a clear notice on the platform's home page for at least 14 days before changes take effect.
• Sending email notifications to all active registered members informing them of the relevant changes.
• In the event of highly significant changes, seeking renewed consent from members before those changes apply to their accounts.

The date of the latest revision is always displayed at the top of this page. We encourage you to review this page periodically. Continued use of the tk688 platform after any changes to the Privacy Policy are published will be considered acceptance of the latest version of that policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how tk688 handles your personal data, we encourage you to contact our Privacy Officer directly.

You may contact the tk688 Privacy Officer through the following channels:

• Privacy Email: [email protected] – for all privacy-related enquiries and data rights requests.
• Support Email: [email protected] – for general account and service-related issues.
• Live Chat: Available 24/7 directly within the tk688 platform with an average response time of under 3 minutes.
• Official WhatsApp: tk688's official WhatsApp number is available within the platform after logging in.

We are committed to responding to all privacy-related requests within 14 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Personal Data Protection Department or the relevant data protection authority in your jurisdiction.