Privacy Policy tpower agent – Personal Data Protection for Malaysia Members

This Privacy Policy is issued by tpower agent and covers all services offered through our platform, including the website, mobile app, and any official communication channels we operate.

We understand that your personal information is sensitive and valuable. The trust you place in us when you register and use this platform is something we take seriously. That is why we want to be transparent about what we do with your data — not because we have to, but because we believe it is the right way to do business.

This policy is to be read alongside the tpower agent Terms and Conditions. Should there be any conflict between the two documents on privacy matters, this Privacy Policy shall take precedence.

Tpower agent only collects data necessary to provide platform services safely and effectively. The following are the categories of data we collect:

We do not collect sensitive category data such as health information, political views, or religious background unless you voluntarily share such information in the context of customer support.

The personal data we collect is used solely for the following purposes, and nothing beyond that:

• Identity verification and KYC — to comply with legal requirements and prevent platform abuse.
• Financial transaction processing — deposits, withdrawals, and all financial activity within the platform.
• Account management — including account settings, responsible gaming limits, and VIP programs.
• Service communications — account-related notifications, transactions, and important platform updates.
• Security and fraud prevention — detection of suspicious activity and protection of your account.
• Platform enhancement — usage analytics to improve the overall user experience.
• Legal compliance — fulfilling applicable legal obligations and reporting requirements.

Tpower agent does not sell, rent, or transfer your personal data to third parties for commercial purposes. However, in certain situations, we may need to share some of your data with the following parties:

• Approved service providers — such as payment processors, KYC verification providers, and technical infrastructure providers bound by strict confidentiality agreements with us.
• Licensed game providers — game data required to ensure game integrity and proper RTP functionality.
• Law enforcement authorities — when required by court order or a lawful request from a Malaysia enforcement agency.
• Professional advisory parties — lawyers or accountants bound by professional confidentiality obligations.

Every third-party service provider we work with is required to meet data protection standards equal to or higher than our own. We conduct regular reviews of all partners to ensure ongoing compliance.

Tpower agent continuously invests in security infrastructure to protect members' personal data. The security measures we implement include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of data at rest using industry-standard encryption for sensitive data stored in our databases.
• Two-factor authentication (2FA) available to all accounts as an added layer of security.
• Real-time threat monitoring by the tpower agent cybersecurity team, operating 24/7.
• Tiered access control — only specifically authorized personnel may access members' personal data, and every access is logged in detail.
• Regular penetration testing by independent security experts to identify and close vulnerabilities.

While we implement all reasonable security measures, no online system can be guaranteed 100% secure. You also play an important role in protecting your account by using a strong password and never sharing your login credentials with anyone.

Tpower agent uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Necessary Cookies — Essential for core platform functions such as login and session security. This cannot be disabled.
• Preference Cookies — Stores your preferences such as language and display settings for a more comfortable experience.
• Analytics Cookies — Helps us understand how members use the platform so we can improve our services.
• Security Cookies — Used to identify and prevent fraudulent activity and unauthorized access.

You can manage cookie settings through your internet browser. Disabling certain cookies may affect the functionality of some platform features. tpower agent does not use third-party advertising cookies.

As a tpower agent member and Malaysian citizen, you have the following rights regarding your personal data under the Personal Data Protection Act 2010:

Tpower agent does not retain your personal data longer than necessary. Retention periods depend on the type of data and the purpose for which it was collected:

• Active account data — retained for the duration of your active membership.
• Financial transaction data — retained for 7 years from the transaction date as required by Malaysia financial law.
• KYC and identity verification data — retained for 5 years after account closure for anti-money laundering (AML) compliance purposes.
• Customer support communication logs — retained for 2 years for dispute resolution purposes.
• Gaming data and activity — retained for 3 years for responsible gaming monitoring and auditing.

Upon expiry of the retention period, data will be securely deleted or anonymised so that it can no longer be associated with any specific individual.

Tpower agent is an exclusive platform for users aged 18 and above. We do not knowingly collect, process, or store the personal data of individuals under the age of 18.

Should we discover that a child's data has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect an account has been opened by their underage child are advised to contact us immediately.

Tpower agent reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Members will be notified of any significant changes through:

• In-app or on-site notification the next time you log in.
• Email to your registered address at least 14 days before the changes take effect.
• Update the "Updated" date at the top of this document.

Continued use of the platform after the effective date of any amendment constitutes acceptance of the updated policy. If you do not agree with the changes, you may close your account before the effective date.