Privacy Policy TWCBET – Player Data Protection

This Privacy Policy ("Policy") explains how TWCBET ("we", "platform", or "TWCBET") collects, uses, stores, discloses, and protects your personal data when you use the twcbet.cash website and all services offered on it.

TWCBET is an online casino and Sports Betting platform operating in Malaysia, serving over 500,000 active members nationwide — from Kuala Lumpur, Selangor, Penang, Johor, Sabah, and Sarawak. As we process the personal data of Malaysian users, we are fully subject to the Personal Data Protection Act 2010 (PDPA) and all regulations and guidelines issued by the Personal Data Protection Commissioner of Malaysia.

This policy applies to everyone who visits or uses the TWCBET platform — including guests without an account, registered members, VIP members, and any individual who interacts with the platform through any channel, including email, live chat, or other means provided by TWCBET.

TWCBET collects various types of personal data depending on how you use our platform. The following are the categories of data we collect:

TWCBET does not collect sensitive data such as health information, biometric data, political affiliations, or religious beliefs, except where required by law or with your explicit consent.

TWCBET collects your personal data through several channels:

• Directly from you — when you register a TWCBET account, complete your profile, submit identity verification documents, contact our customer support, or fill in any form on the platform.
• Collected automatically during use — when you browse the TWCBET platform, our systems automatically record technical data such as your IP address, device type, and usage patterns for security and service improvement purposes.
• Through financial transactions — when you make a deposit using Touch 'n Go eWallet, DuitNow, GrabPay, ShopeePay, Boost, FPX, or other supported Malaysian payment methods, transaction-related details such as date, time, and amount are recorded for accounting and legal compliance purposes.
• Via cookies and tracking technologies — continued in Section 9 of this document.
• Via authorised third parties — in limited circumstances, TWCBET may receive data from third-party identity verification providers that we engage for KYC (Know Your Customer) purposes.

TWCBET processes your personal data only for legitimate, clearly stated purposes. The primary purposes are as follows:

• Account management: To register, verify, maintain and manage your TWCBET account — including processing deposits, managing your balance and handling withdrawals to your Malaysian bank account or e-wallet.
• Service delivery: To grant you access to all TWCBET games and services — including Live Casino (baccarat, blackjack, poker), Sports Betting (badminton, Malaysia Super League football, EPL, e-sports), lottery, and slots.
• Security and verification: To verify your identity, prevent fraud, money laundering and other illegal activities, and to protect the integrity of the TWCBET platform and the safety of all members.
• Legal compliance: To fulfil our obligations under Malaysia's PDPA 2010, anti-money laundering (AML) requirements, KYC requirements, and any other applicable legal obligations.
• Customer support: To resolve enquiries, complaints, and requests submitted to the TWCBET support team.
• Platform improvement: To analyse usage patterns on an aggregate (non-personal) basis for the purpose of improving TWCBET's platform performance, interface design and overall user experience.
• Service communications: To send you important account-related notifications — such as transaction confirmations, security alerts and policy update information — via email or SMS to your Malaysian number.
• Marketing (with consent): To send you TWCBET promotional information, bonuses, and special offers — only if you have given consent to receive marketing communications. You may withdraw this consent at any time.

TWCBET will not process your personal data for any purpose not stated in this Privacy Policy without first obtaining your fresh consent.

TWCBET does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, in operating the platform, we may need to share certain data with the following categories of third parties, and only to the extent necessary for the stated purposes:

• Payment service providers: Payment gateways and financial institutions that process your deposit and withdrawal transactions — including DuitNow, Touch 'n Go eWallet, GrabPay, ShopeePay, Boost, and FPX providers. This sharing is mandatory to facilitate financial transactions.
• Identity verification (KYC) providers: Third-party identity verification companies that assist us in verifying members' identity documents to meet KYC and AML requirements.
• Gaming software providers: Gaming technology companies that supply Live Casino and slots platforms to TWCBET. They may process certain technical data required to run your gaming sessions.
• Authorities and law enforcement: Where required by Malaysian law, court order, or direction from a lawful enforcement authority, TWCBET may be obligated to disclose your personal data to the relevant authorities.
• Infrastructure service providers: Companies providing cloud computing, cybersecurity and technical infrastructure services that support TWCBET's platform operations. All such providers are bound by strict data confidentiality agreements.

TWCBET continually invests in data security to ensure your personal and financial information remains protected at all times. The key security measures we have in place are as follows:

• 256-bit SSL encryption: All communications between your browser and TWCBET servers are encrypted using 256-bit TLS/SSL protocol — the same standard used by Malaysian online banking platforms such as Maybank2u and CIMB Clicks.
• Secure password storage: Your account password is never stored in plain text. We use a one-way cryptographic hashing algorithm (bcrypt with a random salt), which ensures that even in the event of a database breach, your password cannot be recovered.
• Two-factor authentication (2FA): TWCBET offers two-factor authentication via SMS to your Malaysian mobile number as an added layer of security. We encourage all members to enable 2FA in their account settings.
• Strict access controls: Access to members' personal data within TWCBET's internal systems is restricted to employees and contractors with a legitimate business need only. All access is logged and monitored.
• Regular security testing: The TWCBET platform undergoes regular penetration testing and vulnerability assessments by independent cybersecurity firms to identify and patch any weaknesses before they can be exploited.
• 24/7 Monitoring: TWCBET's automated security monitoring system operates around the clock to detect suspicious activity, intrusion attempts or usage anomalies that may indicate a security incident.
• Segregated fund storage: Member funds are held in bank accounts that are separate from TWCBET's operational accounts, ensuring your finances are not affected by any financial difficulties the company may face.

While TWCBET takes all reasonable steps to protect your data, no security system is entirely impenetrable. In the unlikely event of a data breach that materially affects your personal information, TWCBET will notify you and the relevant authorities in accordance with PDPA requirements within the stipulated timeframe.

TWCBET does not retain your personal data longer than is necessary for the purposes stated in this Privacy Policy, or as required under Malaysian law. The following are the general data retention guidelines we follow:

• Active account data: Retained for as long as your account remains active and for 7 years following account closure, in compliance with financial record-keeping requirements under Malaysian law.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in accordance with the Companies Act 2016 and the requirements of Malaysia's Inland Revenue Board (LHDN).
• Identity verification records (KYC): Retained for 5 years after the end of the business relationship, in accordance with Malaysia's anti-money laundering (AML) requirements.
• Customer support communication records: Retained for 3 years from the date of last interaction.
• Technical log data: Retained for a maximum of 12 months unless a longer period is required for an ongoing security investigation.
• Marketing data: Retained until you withdraw your consent to receive marketing communications from TWCBET.

When data is no longer needed and there is no legal obligation to retain it, TWCBET will delete or destroy that data in a secure and irreversible manner.

As an individual whose data is processed by TWCBET, you hold the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA). TWCBET is committed to respecting and facilitating the exercise of these rights:

• Right to access: You have the right to request a copy of the personal data we hold about you. TWCBET will respond within 21 days of receiving your request.
• Right to rectify: If the personal data TWCBET holds about you is inaccurate, incomplete or out of date, you have the right to request a correction. Basic information such as your phone number and email address can be updated directly in your account settings.
• Right to withdraw consent: You may withdraw your consent to certain data processing activities — in particular, marketing communications — at any time. Withdrawal of consent does not affect the validity of any processing that took place prior to the withdrawal.
• Right to object to marketing processing: You have the right to object to the use of your data for direct marketing purposes at any time by clicking the "unsubscribe" link in any marketing email from TWCBET or by contacting us directly.
• Right to request restriction of processing: In certain circumstances, you may request that TWCBET restrict how we process your data — for example, while a dispute regarding data accuracy is being resolved.
• Right to lodge a complaint: If you believe TWCBET has processed your personal data unlawfully or in breach of the PDPA, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, please contact the TWCBET support team at support@twcbet.cash by stating the right you wish to exercise and the information required to verify your identity. TWCBET will process your request promptly and at no charge in most cases.

The TWCBET platform uses cookies and similar tracking technologies to enhance user experience, maintain account security, and analyse platform performance. The following are the types of cookies we use:

• Essential cookies (required): These cookies are required for the TWCBET platform to function properly — including maintaining your login session, remembering your language preference, and ensuring transaction security. They cannot be disabled as they are essential to the platform's core functionality.
• Performance & analytics cookies: We use analytics cookies to understand how members use the TWCBET platform — which pages are visited, how long sessions last, and where users encounter issues. This information is used in aggregate form and does not identify individuals.
• Functional cookies: These cookies remember your preferences — such as your preferred blackjack table size or display settings — to provide a more personalised experience during your TWCBET sessions.
• Security cookies: Used to detect suspicious login attempts, identify devices used to access your account, and prevent account takeovers.

You can manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of the TWCBET platform. In particular, disabling essential cookies will prevent you from logging in to your TWCBET account.

To manage your cookie preferences on TWCBET, you can access the cookie settings panel available in the cookie bar that appears on your first visit to the website, or through your account settings after logging in.

TWCBET reserves the right to update or modify this Privacy Policy from time to time as necessary — whether due to changes in our business practices, new legal requirements, or member feedback. Whenever we make significant changes to this Privacy Policy, we will:

• Updating the "Last updated" date at the top of this document.
• Sending email notifications to all active TWCBET members at least 14 days before any changes take effect.
• Displaying a prominent notice on the TWCBET platform's main page regarding upcoming changes.

Your continued use of the TWCBET platform after any changes to the Privacy Policy take effect will be considered your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how TWCBET handles your personal data, please contact us through the following channels: