tkp188 Privacy Policy

Section 01

Introduction

tkp188 ("we", "us", "our", "the Platform") is committed to protecting the personal information of every member, visitor and prospective user ("you", "User", "Member") who interacts with the tkp188 website, mobile interface and associated services (collectively, "the Services").

This Privacy Policy ("Policy") describes how personal data is collected, used, stored, shared and protected in connection with the tkp188 Services. It applies to all Users regardless of their location and is intended to be read alongside the Terms & Conditions. Where a conflict exists between this Policy and the Terms, the Terms shall prevail to the extent permitted by law.

By registering an account or continuing to use the tkp188 Services after this Policy takes effect, you acknowledge that you have read and understood how your personal data is handled. If you do not agree with any part of this Policy, you should discontinue use of the Services and close your account.

Section 02

Definitions

The following terms apply throughout this Policy:

Term	Meaning
Personal Data	Any information relating to an identified or identifiable natural person, including name, contact details, device identifiers and financial records.
Processing	Any operation performed on personal data, including collection, storage, use, disclosure, alteration or deletion.
Controller	The entity that determines the purposes and means of processing personal data — in this case, tkp188.
Processor	A third party that processes personal data on behalf of tkp188 under a documented contractual arrangement.
Consent	A freely given, specific, informed and unambiguous indication of the User's agreement to the processing of their personal data for a stated purpose.
KYC Data	Identity documents and supporting evidence collected for Know Your Customer verification, including Malaysian MyKad, passport or driver's licence.
Cookie	A small text file placed on a User's device by the tkp188 Platform for session management, security or analytical purposes.

Section 03

Data We Collect

tkp188 collects personal data through different points of interaction. The categories below describe what is collected and the typical context in which it arises.

Category	Examples	When Collected
Identity	Full name, date of birth, nationality, gender	Account registration and KYC verification
Contact	Email address, phone number, residential address	Registration, support communications
Financial	Payment method type, masked account identifiers, MYR transaction records	Deposits, withdrawals, bonus claims
KYC Documents	Malaysian MyKad, passport, driver's licence, proof of address	Age and identity verification, withdrawal review
Technical	IP address, browser type, device identifiers, operating system	Automatically on each session
Behavioural	Game and betting history, session duration, navigation patterns	Ongoing Platform use
Communications	Support chat transcripts, email correspondence, feedback submissions	Any contact with the tkp188 support team

Section 04

Legal Basis for Processing

tkp188 processes personal data under one or more of the following legal bases depending on the nature of the processing activity:

• Contractual necessity: Processing required to operate your Account, process deposits and withdrawals, and deliver the Services you have requested.
• Legal obligation: Processing required to comply with anti-money laundering obligations, age verification requirements, licensing conditions and regulatory reporting duties.
• Legitimate interests: Processing required for fraud prevention, security monitoring, responsible gambling compliance and improving the quality of the Services, where those interests are not overridden by your rights.
• Consent: Processing for optional marketing communications, non-essential analytics or other purposes where tkp188 has sought and received your explicit agreement. You may withdraw consent at any time.

Section 05

Data Processing

Personal data collected by tkp188 is used for the following purposes, each corresponding to a legal basis described in Section 04.

5.1 Account Management

Identity, contact and login information is used to create, verify, maintain and secure your Account. This includes enforcing the single-account rule, confirming age eligibility (21 years and above) and enabling password recovery.

5.2 Payment Processing

Financial data and payment method identifiers are used to process MYR deposits and withdrawals through supported channels, including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX and selected cryptocurrency options such as USDT TRC20.

5.3 Identity Verification (KYC)

KYC documents are processed to confirm that each Member meets the age requirement, holds the identity they have declared, and owns the payment methods connected to their Account. This processing is required by licensing and anti-fraud obligations.

5.4 Responsible Gambling

Behavioural and account data may be used to monitor patterns that indicate potential gambling harm. This allows tkp188 to apply voluntary limits, cooling-off periods or self-exclusion where requested, or to intervene where required under responsible gambling obligations.

5.5 Security and Fraud Prevention

Technical and behavioural data is used to detect unusual access patterns, duplicate accounts, payment fraud and automated betting activity that breaches the tkp188 Terms & Conditions.

5.6 Customer Support

Communications data is retained to handle support queries, verify account ownership during assistance requests and maintain an auditable record of significant account-related communications.

5.7 Marketing

Where you have provided consent, contact information may be used to send information about tkp188 promotions, bonus offers and service updates. You may opt out of marketing communications at any time by contacting support at [email protected].

Section 06

Data Sharing

tkp188 does not sell personal data. Disclosure to third parties is limited to the circumstances described below.

• Service providers: Payment processors, identity verification partners, cloud infrastructure providers and customer support platforms operating under contractual data-processing agreements with tkp188.
• Regulatory and licensing bodies: Reporting to licensing authorities, financial intelligence units or law enforcement agencies where required by applicable laws or licence conditions.
• Fraud prevention networks: Sharing of anonymised or pseudonymised risk signals with recognised fraud-prevention services to protect the Platform and its members.
• Group entities: Where tkp188 operates through affiliated companies for shared infrastructure purposes, data may be accessible within the corporate group under equivalent data protection standards.
• Legal compulsion: Compliance with a court order, subpoena or other mandatory legal process issued by a competent authority.

Section 07

International Data Transfers

tkp188 may process and store personal data on servers located outside Malaysia. Where data is transferred to countries that do not maintain an equivalent standard of data protection to Malaysia's Personal Data Protection Act 2010, tkp188 will apply contractual safeguards, including standard data-protection clauses, to ensure an adequate level of protection is maintained during the transfer.

Users who have questions about the specific jurisdictions in which their data may be stored are encouraged to contact the tkp188 support team for further information.

Section 08

Data Retention

tkp188 retains personal data for as long as the Account remains active and for a period thereafter as required by applicable legal, regulatory and anti-money laundering obligations. The following general retention guidelines apply:

• Account and identity records: Retained for the duration of the Account and typically for a minimum of five years following account closure, in line with common regulatory requirements.
• Financial transaction records: Retained for a minimum of five years following the date of each transaction.
• KYC documents: Retained for the minimum period required by applicable licensing and anti-money laundering obligations.
• Support communications: Retained for up to three years or longer where an unresolved dispute exists.
• Marketing consent records: Retained for the duration of the consent and for a reasonable period following withdrawal to demonstrate compliance.

Data that is no longer required will be deleted or anonymised in accordance with tkp188's internal data lifecycle procedures.

Section 09

Cookies and Similar Technologies

The tkp188 Platform uses cookies and similar browser-based storage technologies. The following categories describe their function.

9.1 Strictly Necessary Cookies

Required for the Platform to function. These include session authentication tokens, security cookies that protect against cross-site request forgery, and load-balancing identifiers. These cannot be disabled without disrupting essential functionality.

9.2 Functional Cookies

Store user preferences such as language selection and remembered display settings. These improve the experience but are not critical to core Platform operation.

9.3 Analytics Cookies

Collect aggregated, anonymised data about how users interact with the Platform — such as pages visited and session duration — to help tkp188 understand usage patterns and improve the Services. Where used, these operate under documented data-processing agreements with the analytics provider.

9.4 Managing Cookies

You may configure your browser to refuse or delete non-essential cookies. Note that disabling strictly necessary cookies will prevent the Platform from operating correctly. Consult your browser's help documentation for instructions specific to your browser and device.

Section 10

User Rights

Subject to applicable law and regulatory limitations, you hold the following rights in relation to your personal data held by tkp188.

• Right of access: Request a copy of the personal data tkp188 holds about you, including the purposes for which it is processed.
• Right to rectification: Request correction of inaccurate or incomplete personal data. Minor corrections can often be made directly through Account settings.
• Right to erasure: Request deletion of your personal data in circumstances where retention is no longer necessary, subject to legal retention obligations that may override this right.
• Right to restrict processing: Request that processing be limited while the accuracy of data is contested or while an objection is under consideration.
• Right to data portability: Request a structured, commonly used and machine-readable copy of data you have provided to tkp188 where technically feasible.
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes. Marketing objections will be acted upon immediately.
• Right to withdraw consent: Withdraw consent for any processing that relies on consent as its legal basis. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, contact the tkp188 support team with a clear description of your request. Responses will be provided within a reasonable period, subject to identity verification requirements. Where a request cannot be fulfilled, tkp188 will explain the reason clearly.

Section 11

Minors

The tkp188 Services are intended solely for adults aged 21 years and above. tkp188 does not knowingly collect personal data from any person under this age. If we become aware that personal data has been collected from an individual who does not meet the age requirement, that data will be deleted promptly and the associated Account will be closed in accordance with the Terms & Conditions.

Section 12

Security Measures

tkp188 implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These include:

• TLS encryption for all data transmitted between your device and the Platform.
• Encryption at rest for sensitive Account and financial records.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular internal security reviews and vulnerability assessments.
• Documented incident response procedures for data breaches, including notification protocols where required by applicable law.

While tkp188 takes data security seriously, no system is entirely immune to risk. Users should also protect their own Account by using strong, unique passwords, keeping login credentials confidential and using secure private networks when accessing the Platform.

Section 13

Policy Amendments

This Privacy Policy may be updated from time to time to reflect changes in applicable law, regulatory guidance or tkp188's data processing practices. Material changes will be communicated through a notice on the Platform or by email to the address registered on your Account, where available.

The effective date at the top of this page will be revised with each update. Continued use of the tkp188 Services after the revised Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with an amendment, you may close your Account by contacting support.

Section 14

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data by tkp188, please reach out to the support team through the following channels. All data-related enquiries will be handled with appropriate confidentiality.

Support email (plain text — not a clickable link):
[email protected]

Live chat: Available through the tkp188 Platform interface 24 hours a day, 7 days a week. Typical initial response time for general queries is 3–5 minutes. Data subject requests may require additional time to process following identity verification.