Privacy Policy tc77 – Your Personal Data Protection

1 Information We Collect

Tc77 collects various types of information to enable us to provide the best service, ensure platform security, and comply with applicable legal requirements in Malaysia. The information we collect falls into three main categories:

Information You Provide Directly

• Registration Information: Full name, email address, phone number, date of birth, and the password you chose when opening your tc77 account.
• Identity Verification (KYC) Information: Copies of identity cards (MyKad), passports, driving licences, or other official identity documents requested during the account verification process.
• Financial Information: Bank account details, e-wallet account numbers (Touch 'n Go, GrabPay, Boost), and payment information required to process deposits and withdrawals.
• Contact Information: Residential address, postcode, and state of residence in Malaysia.

Automatically Collected Information

• Technical Log Data: IP address, web browser type, device operating system, screen resolution, and technical device information used to access TC77.
• Platform Activity Data: Login and logout records, games played, total betting amounts, win and loss records, and complete financial transaction history.
• Session Data: The duration of each gaming session, platform usage patterns, and your interactions with specific features within tc77.

Information from Third-Party Sources

• Payment Verification: Identity verification and transaction status from payment providers such as FPX, DuitNow, and the e-wallets you use.
• Security Verification: Information from fraud prevention and anti-money laundering (AML) compliance services used by tc77.

2 Purpose of Information Use

All information collected by tc77 is used solely for legitimate and necessary purposes in operating the platform. tc77 never uses member data for purposes beyond the scope stated below:

Tc77 will only use your data for marketing purposes if you have given explicit consent during registration or through your account settings. You may withdraw this consent at any time.

3 How We Protect Your Data

The privacy of our members' personal data is tc77's highest priority. We continuously invest in the latest security technologies and procedures to ensure your information is protected from unauthorized access, disclosure, alteration, or destruction.

• Data in Transit Encryption: All data transmitted between your device and tc77's servers is encrypted using TLS 1.3 protocol with AES-256-bit encryption. This includes all login activity, financial transactions, and in-platform communications.
• Stored Data Encryption: Sensitive information such as passwords and financial details is stored in encrypted form using bcrypt and one-way hashing algorithms. tc77 does not store your password in plain text.
• Layered Access Controls: Access to the TC77 member database is strictly controlled through a multi-factor authentication (MFA) system. Only specifically authorised staff may access member data, and all such access is logged for audit purposes.
• Continuous Threat Monitoring: tc77 employs a SIEM (Security Information and Event Management) system that monitors abnormal activity on the platform 24 hours a day, 7 days a week. Any intrusion attempts are automatically detected and blocked.
• Regular Security Audits: tc77 conducts regular penetration testing and third-party security audits to identify and address any vulnerabilities in our systems.
• Incident Response Plan: tc77 has a tested security incident response plan in place. In the event of any data breach, we are committed to notifying affected members within 72 hours in accordance with international best practices.

4 Data Sharing with Third Parties

Tc77 does not sell, rent, or share members' personal information with third parties for their own commercial purposes. However, in operating the platform, tc77 may need to share certain data with selected and trusted third parties in the following situations:

• Payment Providers: Required information is shared with FPX, DuitNow, Touch 'n Go, GrabPay, and Boost providers solely to process your financial transactions. All payment providers partnering with tc77 comply with PCI DSS security standards.
• Game Service Providers: Game session data is shared with game software providers that supply content on the TC77 platform to ensure a smooth gaming experience.
• Compliance and KYC Services: Identity verification documents are shared with recognised third-party KYC service providers to ensure compliance with AML and CTF legal requirements.
• Legal Requirements: tc77 will disclose member information to the relevant authorities if directed to do so by a court order, warrant, or other valid and binding legal requirement.

5 Cookies and Tracking Technologies

Tc77 uses cookies and related tracking technologies to enhance the user experience, ensure platform security, and understand how members use our services. The following are the types of cookies used by tc77:

• Essential Cookies: These cookies are required for core tc77 platform functions such as login session management and security. The platform cannot operate properly without them and they cannot be disabled.
• Performance Cookies: Used to collect anonymous information about how members interact with the platform, including most frequently visited pages and response times. This data helps TC77 improve platform performance.
• Functional Cookies: Allows the tc77 platform to remember your preferences such as language, display resolution, and other settings to deliver a more personalized experience.
• Analytics Cookies: tc77 uses internal analytics tools to understand overall platform usage patterns. This data is processed in aggregated form and does not identify any specific individual.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality of the TC77 platform. Session cookies are automatically deleted when you close your browser, while persistent cookies expire according to their set duration, typically no longer than 12 months.

6 Your Rights as a Data Subject

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection practices, you as a tc77 member have the following rights regarding your personal data:

To exercise any of the above rights, please contact the tc77 support team via the 24/7 in-platform live chat. tc77 is committed to processing all data rights requests within 30 business days from the date the request is received.

7 Data Retention and Deletion

Tc77 only retains members' personal information for as long as necessary to fulfil the purpose of data collection or as required by applicable Malaysian law. The following are general guidelines for tc77's data retention periods:

• Active Account Data: For as long as your account remains active and for the required period following account closure to comply with legal requirements.
• Financial Transaction Records: Minimum 7 years from the transaction date, in line with Malaysia's tax and financial legal requirements.
• KYC Documents: Minimum 5 years from the date of verification or account closure, in line with AML/CTF compliance requirements.
• System and Security Logs: 2 to 3 years for security and fraud investigation purposes.
• Support Communication Data: 3 years from the date the support case is resolved.

Once the stipulated retention period has ended, tc77 will securely delete or anonymise your data using data deletion methods that comply with international standards, ensuring the data cannot be recovered or identified.

8 Changes to the Privacy Policy

Tc77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data handling practices, new legal requirements, or platform service improvements. Any significant changes to this policy will be communicated to members via:

• In-platform notifications on tc77 during your next login session.
• Email sent to the address registered in your TC77 account.
• Announcement on the tc77 homepage for a minimum of 14 days.

The date of the most recent update is always displayed at the top of this Privacy Policy document. Your continued use of the tc77 platform after any policy changes take effect constitutes your acceptance of the updated policy. If you do not agree with the changes made, you have the right to close your tc77 account by contacting our support team.

9 Contact Us

If you have any questions, concerns, or requests regarding tc77's Privacy Policy or the handling of your personal data, our team is ready to assist. You may contact tc77's Data Protection Officer (DPO) through the following channels: