TWC Online Privacy Policy – Our Commitment to Protecting Malaysian Players' Data

TWC Online ("we", "the platform") is the data controller responsible for the personal information you provide when using our services. This Privacy Policy applies to all users of the TWC Online platform — including website visitors, registered members, and active players.

We understand that trust is the foundation of the relationship between an online casino platform and Malaysian players. When you register with TWC Online and share your personal information with us, you place your trust in us — and we take that seriously. This Privacy Policy is our commitment to you on how we handle that information with transparency, responsibility and care.

TWC Online collects your personal information through several channels: directly when you complete a registration form or contact our support team, and automatically through the technologies used within our platform.

Data you provide directly:

• Account information: full name, date of birth, email address, Malaysian mobile number
• Identity verification documents (KYC): copy of Malaysian MyKad or passport, proof of address
• Financial information: Malaysian bank account number, bank name, eWallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow)
• Communications with the TWC Online customer support team
• Feedback, reviews, or surveys you choose to participate in

Automatically collected data:

• Technical data: IP address, browser type, operating system, screen resolution
• Log data: login and logout times, pages visited, session duration
• Gaming data: betting records, wins, losses, game preferences, play duration
• Cookie data: language preferences, login session, personal settings

TWC Online uses your personal data for the following legitimate purposes:

• Account management: Creating and managing your TWC Online account, verifying your identity, and processing deposits and withdrawals in MYR.
• Service delivery: Enabling you to play slots, Live Casino, poker, roulette, lottery, e-sports and progressive jackpot games on our platform.
• Security and fraud prevention: Detecting and preventing unauthorised access, fraud, money laundering, and activities that violate TWC Online's Terms & Conditions.
• Legal compliance: Meeting KYC (Know Your Customer), AML (Anti-Money Laundering), and other applicable legal obligations.
• Service communications: Sending you important notifications about your account, transaction confirmations, and updates to the TWC Online Privacy Policy or Terms & Conditions.
• Personalised promotions: With your consent, sending you information about relevant promotions, bonuses, and offers based on your gaming preferences at TWC Online.
• Responsible gambling: Monitoring gameplay patterns to identify signs of problem gambling and taking proactive steps to support members who may need assistance.
• Platform improvements: Analysing aggregated usage data (not individual data) to improve the overall functionality, speed and user experience of TWC Online.

TWC Online does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, there are limited circumstances in which we need to share your information with others in order to deliver our services:

• Malaysian payment providers: Information required to process deposits and withdrawals is shared with financial institutions and eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX/Maybank2u, CIMB Clicks) operating under Malaysian law.
• Licensed game providers: The minimum technical information required to enable gameplay from audited and licensed software providers.
• Security and authentication services: Third parties who assist us with KYC processes and fraud detection, bound by strict confidentiality agreements.
• Legal authorities: Where required by Malaysian law, court order, or direction from a legitimate regulatory authority.

TWC Online continually invests in technology and information security best practices to safeguard your personal data. The security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and TWC Online's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banks.
• Data encryption at rest: Sensitive data stored in our databases — particularly financial information and identity verification details — is encrypted at rest using AES-256 encryption.
• Internal access controls: Only TWC Online staff with a legitimate business need may access members' personal data, and all such access is recorded in audit logs that are regularly monitored.
• Two-factor authentication (2FA): Available to all member accounts and mandatory for all TWC Online internal administration accounts.
• 24/7 security monitoring: Automated monitoring systems operate around the clock to detect any suspicious or unauthorised access attempts.
• Regular penetration testing: TWC Online conducts periodic independent security testing to identify and address any potential vulnerabilities in our systems.

TWC Online retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required under Malaysian law.

• Active account data: Retained for as long as your TWC Online account remains active.
• Data following account closure: Financial transaction records and KYC documents are retained for a minimum of 7 years following account closure, in accordance with Malaysian anti-money laundering (AML) legal requirements.
• Communication logs: Customer support chat records are retained for 3 years for quality assurance and dispute resolution purposes.
• Marketing data: Retained until you withdraw your consent to receive marketing communications from TWC Online.
• Technical data and logs: System logs are typically retained for 12 months before being automatically deleted.

Once the retention period has expired and there is no legal requirement to keep the data longer, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

As a TWC Online member and data subject under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have the following rights in relation to your personal data:

• Right of Access: You have the right to know what personal data we hold about you and to request a copy of it.
• Right to Rectification: If any information we hold about you is inaccurate or out of date, you have the right to request a correction.
• Right to Erasure: Under certain circumstances, you may request that your personal data be deleted from TWC Online's systems.
• Right to Restrict Processing: You may request that we restrict how we use your data under certain circumstances.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Data Portability Right: You have the right to receive your personal data in a machine-readable format and to transfer it to another party if you wish.

To exercise any of the rights above, please contact the TWC Online Data Protection team at support@twconline.xyz, stating the right you wish to exercise and your account details. We will process your request within 14 working days. In complex cases, this period may be extended by up to 30 days, with notice provided to you.

TWC Online uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the TWC Online platform — for example, you may be unable to stay logged in or access certain games. Optional cookies can be disabled without impacting the platform's core functionality.

The TWC Online platform is intended for users aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18. If you are a parent or guardian and believe your underage child has submitted personal information to TWC Online, please contact us at support@twconline.xyz immediately.

Once confirmed, TWC Online will delete all information relating to that minor from our systems as soon as possible. Any account opened by someone under 18 will be terminated immediately upon confirmation, in line with TWC Online's Terms & Conditions.

TWC Online may update this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, legal requirements, or other operational reasons. When we make significant changes, we will take the following steps:

• Updating the "Last Updated" date at the top of this page.
• Sending notifications to all registered TWC Online members via email at least 14 days before the changes take effect.
• For particularly significant changes, we may seek fresh consent from you before those changes apply to the processing of your data.

We encourage you to review this Privacy Policy periodically to stay informed about how TWC Online protects your information. Continued use of our platform following any changes to this Privacy Policy will be considered acceptance of those changes.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way TWC Online handles your personal data, please reach out to us through the following channels:

• Data Protection Email: support@twconline.xyz (please include "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24 hours a day, 7 days a week within the TWC Online platform
• Service Language: Bahasa Malaysia and English
• Response Time: We are committed to responding within 3 working days for general enquiries and 14 working days for formal data rights requests

If you believe that TWC Online is not processing your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), you also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.