Privacy Policy tpower2 –
Protection Personal Data You

1 Introduction & Scope of the Privacy Policy

Tpower2 ("we", "the Company") is the operator of an online betting and gaming platform based at tpower2.best. As a platform serving hundreds of thousands of Malaysian players, we understand that players' trust in how we handle their personal data is just as important as their trust in the fairness of the games we offer.

This Privacy Policy transparently and clearly outlines the types of personal information we collect from tpower2 platform users, the purposes for which that data is collected, the parties who may have access to it, how long it is retained, and the full rights held by every user over their personal data. We have written this document in plain, easy-to-understand language because we believe you have every right to fully understand what happens to your information — without needing to be a legal expert to read it.

This Privacy Policy applies to all users of the tpower2 platform, including registered players, website visitors, and any individual who interacts with tpower2 services via the website, mobile app, or any other communication channels operated by tpower2.

2 Types of Personal Data We Collect

Tpower2 collects player personal data through several channels — directly from players during registration and platform use, automatically via tracking technologies as you browse our platform, and in some cases from legitimate third-party sources. Below is a full breakdown of the data we collect:

Tpower2 does not collect sensitive information such as biometric data, medical records, religious information, or users' political views. We only collect data that is directly necessary to provide safe, legitimate, and responsible online betting and gaming services to players in Malaysia.

3 How tpower2 Uses Your Personal Data

Every piece of data tpower2 collects has a clear and legitimate purpose. We do not use player data for purposes outside the scope of the services we provide. The following are the primary purposes for which tpower2 uses players' personal data:

• Account Management: Creating, verifying, and managing your tpower2 account, including the login process, identity verification (KYC), and account recovery.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, and CIMB Clicks, as well as processing winnings withdrawals to payment methods registered under your name in Malaysian Ringgit (RM).
• Legal Compliance: Meeting anti-money laundering (AML) requirements, Know Your Customer (KYC) compliance, and other applicable legal reporting obligations.
• Platform Security: Detecting and preventing fraud, multi-accounting, bonus abuse, bot usage, and other suspicious activities that could compromise the integrity of the platform.
• Customer Support: Providing players with effective and relevant support based on their account context and interaction history with the tpower2 platform.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling behaviour and reaching out to players who may need support before the situation escalates.
• Platform Improvements: Analysing aggregated, anonymised usage data to understand how players interact with the tpower2 platform and make relevant improvements.
• Service Communications: Sending players important notifications related to their account, policy changes, technical disruptions, or relevant security information.

4 Sharing Data with Third Parties

Tpower2 does not sell player personal information to any third party. However, there are limited situations where tpower2 may need to share certain player data with specific parties for legitimate purposes. Below are those circumstances along with their explanations:

• Payment Service Providers: tpower2 shares the necessary transaction information with Malaysia's eWallet and online banking providers (Touch 'n Go, GrabPay, DuitNow, FPX, etc.) to process deposits and withdrawals in MYR. Only the minimum data required to complete each transaction is shared.
• Third-Party Game Providers: For games operated by third-party providers (such as live casino by Evolution Gaming, slots by Pragmatic Play, etc.), relevant session and betting transaction data is shared with those providers to facilitate gameplay. These providers are bound by strict confidentiality agreements with tpower2.
• Law Enforcement Agencies: tpower2 will disclose player data to relevant authorities such as the Royal Malaysia Police or other enforcement agencies when required by Malaysian law, a valid court order, or in situations where there is a serious threat to public safety.
• Independent Fraud Investigators: In cases of serious fraud, tpower2 may share relevant information with legally appointed digital forensics firms or independent investigators to assist with the investigation.
• Business Transfers: Should tpower2 be involved in any merger, acquisition, or transfer of business assets, user data may be transferred as part of that transaction. Players will be notified and given appropriate options before any such transfer takes place.

All third parties receiving data from tpower2 are bound by strict confidentiality and data protection obligations. tpower2 only works with third parties that have demonstrated adequate and trustworthy data security standards.

5 tpower2 Data Security Measures

Tpower2 continuously invests in cybersecurity infrastructure to protect the personal data of all our Malaysian players. Our security approach is multi-layered — meaning even if one line of defence is breached, additional layers remain in place to protect your data. Key technical and organisational security measures implemented by tpower2 include:

• Data encryption in transit using TLS 1.3 protocol with 256-bit SSL certificates that are renewed on a regular basis
• Encryption of data at rest for all sensitive information, including passwords (hashed), identification numbers, and financial details
• Two-factor authentication (2FA) is available and encouraged for all player accounts
• Role-based access control (RBAC) ensuring that only tpower2 staff who require access to specific data are granted the relevant permissions
• Round-the-clock real-time threat monitoring by the tpower2 cybersecurity team
• Periodic independent penetration testing and security audits conducted on a regular basis
• DDoS protection and a web application firewall (WAF) to defend against external attacks
• Encrypted data backups stored at separate locations for disaster recovery
• Mandatory data security training for all tpower2 staff with access to player data

6 Cookies & Tracking Technologies

Tpower2 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the tpower2 website. They allow tpower2 to recognise your device on subsequent visits and tailor the platform experience to your preferences.

You can manage or delete cookies at any time through your web browser settings. However, disabling essential cookies will affect the core functionality of the tpower2 platform and may prevent you from logging in or using certain features. tpower2 does not use cookies to track activity across other websites outside the tpower2.best domain.

7 User Rights Regarding Personal Data

As a tpower2 player, you have clear rights regarding the personal data we hold about you. tpower2 fully respects these rights and provides straightforward mechanisms for you to exercise them:

8 Data Retention & Deletion

Tpower2 does not retain player personal data for longer than is necessary for the original purpose of collection or to fulfil relevant legal obligations. The following are tpower2's data retention period guidelines:

• Active Account Data: For as long as your tpower2 account remains active, the associated personal data will be retained to enable tpower2 to deliver its services effectively.
• Financial Records: Records of all financial transactions in MYR (RM) — including deposits via Malaysian eWallets and withdrawals — are retained for a minimum of 7 years in compliance with Malaysian financial and tax legislation.
• KYC & Identity Records: Identity document copies collected for KYC purposes are retained for a minimum of 5 years after account closure or the date of the last transaction, in accordance with applicable AML legal requirements.
• Communication Logs: Communication records between players and the tpower2 customer support team are retained for 3 years for reference and dispute resolution purposes.
• Technical Data & Logs: Technical activity and security logs are retained for 12 months for cybersecurity and fraud investigation purposes.
• Marketing Data: If you withdraw consent for marketing communications, the relevant data will be deleted or deactivated within 30 days of your request.

Once the designated retention period has elapsed, tpower2 will securely delete or anonymise the relevant personal data using methods that ensure it cannot be recovered by any party.

9 Protection of Children's Data

The tpower2 platform is exclusively for adults aged 18 and above. tpower2 does not knowingly collect, process, or store the personal data of any individual under the age of 18. Registration by minors is strictly prohibited under tpower2's Terms and Conditions.

Should tpower2 discover that personal data of a minor has been collected without our knowledge (for example, through registration using false age information), we will take the following steps immediately:

• Immediate suspension of the account in question
• Deleting all personal data associated with that account
• Taking appropriate action in accordance with applicable Malaysian child protection laws

10 Changes to This Privacy Policy

Tpower2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. tpower2 is committed to keeping players informed of any material changes to this Privacy Policy.

When significant changes are made to tpower2's Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page
• Sending notices via registered email to all active tpower2 players
• Displaying a clear notice within the tpower2 platform for a reasonable period

Continued use of the tpower2 platform after the effective date of any Privacy Policy changes will be considered acceptance of the updated policy. If you do not agree with the changes made, you have the right to close your tpower2 account and request the deletion of your personal data in accordance with the rights set out in Section 7 above.

11 How to Contact tpower2's Privacy Officer

Tpower2 takes every privacy-related enquiry, complaint, or request seriously. If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to report a concern about how tpower2 handles your personal data, please reach out to us through the following channels:

When contacting tpower2 about a privacy matter, please include your tpower2 account number, full name, and a clear description of your query or request. This will help us process your request more quickly and accurately.