TK88 Privacy Policy — Our Commitment to Protecting the Personal Data of Malaysian Members

TK88 collects your personal data through several different methods throughout your use of our platform. All data is collected on the basis of legitimate necessity and with your consent given during the registration process. The following are the main categories of data we collect:

Data you provide directly:

Data collected automatically when you use TK88:

• Technical data: Your device's IP address, web browser type and version, phone or computer operating system, screen resolution, and unique device ID.
• Session data: Login and logout times, duration of each session, pages visited within the TK88 platform, and the sequence of actions taken.
• Transaction data: A complete history of all deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX Maybank2u — including the amount, date, time, and payment method used.
• Betting data: Records of all bets placed on Malaysia Super League sports betting, EPL, BWF badminton, MPL Malaysia e-sports, online slots, live casino roulette, and all other game categories available at TK88 — including bet type, amount, odds, and outcome.
• Communication data: Live chat session records with TK88's support team, emails sent to us, and any other written communications you have initiated.

We do not collect sensitive data such as your health information, biometric data, or religious information. All data collected is limited to what is necessary to operate the TK88 platform safely and effectively.

TK88 uses collected personal data only for legitimate, specific purposes. We will not use your data for anything unrelated to the provision of TK88 services, or for any purpose you have not consented to. The following are the purposes for which personal data is used at TK88:

• Identity and eligibility verification: To verify that you meet the minimum age requirement of 18 years and any other eligibility criteria set out in TK88's Terms & Conditions.
• Account management: To create, manage, and maintain your TK88 account — including processing deposits, managing balances, calculating bonuses, and processing withdrawals to your Malaysian e-wallet.
• Legal compliance: To fulfil anti-money laundering (AML) compliance obligations and other applicable legal reporting requirements for TK88's operations in Malaysia.
• Fraud prevention and security: To detect and prevent fraudulent activity, multiple-account usage, bonus abuse, and other security threats that could compromise the platform and its members.
• Customer support: To enable TK88's Bahasa Malaysia-speaking support team to assist you with technical issues, transaction enquiries, or any other account-related concerns.
• Platform improvements: To analyse usage patterns in aggregate and anonymised form in order to improve the platform's design, speed, and overall user experience at TK88.
• Service communications: To send you important account-related information — such as transaction confirmations, security notifications, and terms updates — via SMS or in-platform notifications.
• Marketing (with consent): To send you information about TK88 promotions, new bonuses, and exclusive offers — but only if you have opted in to receive marketing communications, and you may withdraw that consent at any time.

TK88 has a strict policy on sharing members' personal data. Our core principle is straightforward: we do not sell your data, and we do not share it except in very limited circumstances and for clearly justified reasons.

The limited circumstances in which TK88 may share your personal data are as follows:

• Payment service providers: TK88 shares the necessary transaction information with payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and the FPX platform to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements and may only use the data to process the relevant transactions.
• Game software providers: For live casino and slot games developed by third-party software providers, limited technical data may be shared to ensure the games function properly. Your financial information and personal identity are not shared in this context.
• Relevant authorities: TK88 will disclose personal data to Malaysian authorities — including the police, the Malaysian Communications and Multimedia Commission (MCMC), or relevant regulatory bodies — when required by law or a valid court order. We do not voluntarily disclose data to authorities without a legally valid order.
• Identity verification services: To meet KYC (Know Your Customer) compliance requirements, TK88 may engage accredited third-party identity verification services to authenticate your identification documents. These services operate under their own privacy policies, which have been reviewed and approved by TK88.

In all data-sharing situations described above, TK88 ensures that recipient parties have adequate data protection measures in place and use the data solely for the specified purposes.

TK88 continually invests in security infrastructure to ensure members' personal data is protected to the highest standard. Our approach to data security is multi-layered, combining advanced encryption technology, strict access controls, and continuous monitoring.

Technical security measures we employ:

• 256-bit SSL/TLS Encryption: All communications between your device and TK88's servers are encrypted using 256-bit SSL/TLS protocol. This means that even if data were intercepted in transit, it cannot be read without the encryption key, which only TK88 holds.
• Secure password storage: Your TK88 account password is never stored in plain text. We use a strong cryptographic hashing algorithm (bcrypt) with a unique salt for each password — making it virtually impossible to crack even in the event of a database breach.
• Two-factor authentication: TK88 uses OTP verification via SMS for every new login from an unrecognised device, ensuring no one can access your account even if they know your password.
• Protected servers: TK88's servers are housed in data centres protected by multiple layers of physical and digital security controls — including intrusion detection systems, biometric access controls, and round-the-clock monitoring by a dedicated cybersecurity team.
• Data segregation: Member financial data is stored in systems that are physically and logically separated from platform operational data, minimising the risk of exposure in any security incident.
• Periodic penetration testing: TK88 undergoes regular penetration testing conducted by independent cybersecurity firms to identify and address any vulnerabilities before they can be exploited.

While TK88 takes all reasonable precautions to protect your data, please be aware that no system is 100% immune to cyber threats. In the event of a security breach involving your personal data, TK88 will notify you promptly in accordance with all applicable legal requirements.

TK88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit TK88. The following are the types of cookies we use:

You can manage cookies through your web browser settings. However, disabling essential cookies will affect the functionality of the TK88 platform and you may be unable to log in or complete transactions properly. For optional cookies, you may opt out without affecting your basic access to TK88.

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and TK88's privacy commitments, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights in a straightforward and hassle-free manner.

To exercise any of the rights above, contact TK88's privacy team via 24/7 live chat or email support@tk88-jit.net. Please include your full name, TK88 account number, and details of the right you wish to exercise. TK88 will process your request within the timeframes stated above at no charge.

TK88 retains your personal data only for as long as necessary for the purposes stated in this privacy policy, or for as long as required under applicable Malaysian law. The following are the data retention guidelines we follow:

• Active account data: For as long as your TK88 account remains active, your profile data, transaction records, and activity history are fully retained to keep the platform running and to support customer service.
• Financial records data: Financial transaction records — including deposits via Touch 'n Go, GrabPay, DuitNow, and withdrawals — are retained for a minimum of 7 years after the transaction date, in line with Malaysia's accounting and tax legal requirements.
• AML compliance data: Records related to anti-money laundering compliance are retained for a minimum of 6 years after the end of the business relationship, in accordance with applicable Malaysian legal requirements.
• Data after account closure: When your TK88 account is closed at your request, personal profile data that is not required for legal purposes will be deleted or anonymised within 90 days. Financial and compliance records will be retained for the periods stated above.
• Support communication records: Live chat session logs and emails with the TK88 support team are retained for 2 years for service quality purposes and dispute resolution where applicable.
• Marketing data: If you withdraw consent for marketing communications, we will remove your contact details from our marketing lists within 30 days.

Once the specified retention period has elapsed, TK88 will permanently delete or anonymise the data using secure deletion procedures, ensuring it cannot be recovered or re-identified.

TK88 may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. We are committed to informing you of any material changes in a transparent and accessible manner.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page
• Displaying a clear notification within the TK88 platform upon your next login after changes have been made
• Sending SMS notifications to your registered Malaysian mobile number for changes that materially affect your privacy rights

Your continued use of the TK88 platform after the effective date of an updated Privacy Policy will be considered your acceptance of the revised terms. If you do not agree with any changes to this policy, you have the right to close your TK88 account and request the deletion of eligible data. The latest version of the Privacy Policy is always available on this page.

If you have any questions, concerns, or complaints about how TK88 handles your personal data, or if you wish to exercise any of the privacy rights described in this document, we encourage you to reach out to us directly.

• 24/7 Live Chat: The fastest way to get an immediate response — TK88's support team averages a response time of under 2 minutes. Look for the live chat icon at the bottom corner of the TK88 platform.
• Privacy Email: support@tk88-jit.net — for detailed written enquiries or those requiring documentation. We aim to respond within 3 business days.

When contacting us regarding a privacy matter, please include the following to help us process your request faster: the full name registered to your TK88 account, your account number or registered phone number, and a clear description of your enquiry or request.

TK88 takes every privacy complaint seriously. If you feel we have not addressed your concerns adequately, you have the right to lodge a complaint with Malaysia's Personal Data Protection Commissioner under the PDPA 2010.