TTB88 Privacy Policy

TTB88 takes its data protection obligations seriously. We recognise that the players who use our platform — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, Shah Alam and across Malaysia — place trust in us every time they register an account, deposit funds or interact with our support team. This Policy is our commitment to honour that trust transparently and responsibly.

By creating a TTB88 account or otherwise using our services, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. Where consent is required for a specific processing activity, we will seek it separately and in clear terms. This Policy should be read alongside the TTB88 Terms and Conditions, which are incorporated by reference.

We reserve the right to amend this Policy from time to time. The version published on our website is the version currently in force. Where changes are material, we will notify Members through appropriate channels and update the "Last reviewed" date at the top of this document.

For the purposes of this Policy, the following terms have the meanings set out below:

TTB88 collects personal data only to the extent necessary for the purposes described in this Policy. The categories of personal data we process are as follows:

Identity and Registration Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used for age verification — 21+ requirement strictly enforced)
• Nationality and country of residence
• Government-issued identification number (e.g., Malaysian MyKad or passport number), collected during KYC verification
• Username chosen at registration

Contact Data

• Email address
• Mobile telephone number
• Residential address (required for KYC and withdrawal processing)

Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps and payment method identifiers
• E-wallet identifiers (e.g., Touch 'n Go eWallet, Boost, GrabPay account references)
• Bank account details (e.g., Maybank, CIMB, Public Bank, Hong Leong Bank account numbers) where used for bank transfer transactions via FPX or DuitNow
• Cryptocurrency wallet addresses where USDT transactions are made

Gameplay and Betting Data

• Betting and gaming history, including wager amounts, game titles, outcomes and session durations
• Bonus and promotion participation records
• Responsible gambling tool activations (e.g., deposit limits, self-exclusion requests)

Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system and browser version
• Session identifiers and cookie data
• Platform access logs and error reports

Communication Data

• Records of live chat and email interactions with TTB88 support, including timestamps and content
• Records of any formal complaints or dispute submissions

TTB88 collects personal data through the following channels:

• Account registration: Information submitted directly by you when completing the TTB88 registration form, including name, date of birth, contact details and chosen credentials.
• KYC verification: Identification documents and supporting evidence submitted by you in response to a verification request, including copies of your MyKad, passport or proof of address.
• Deposits and withdrawals: Payment method details associated with financial transactions processed through the TTB88 cashier.
• Platform usage: Data generated automatically as you navigate and interact with the TTB88 website, including through cookies, session tokens and server logs.
• Customer support interactions: Information you voluntarily provide when contacting TTB88 support via live chat or email.
• Third-party partners: Where permitted by applicable law, TTB88 may receive data from identity verification services, fraud prevention agencies and payment processors in connection with account operations.

TTB88 processes personal data on one or more of the following legal bases, depending on the nature and purpose of the processing activity:

TTB88 uses the personal data described in Section 3 for the following defined purposes:

• Account management: Creating, maintaining, verifying and closing Member accounts, including password resets, security checks and account history access.
• Transaction processing: Processing MYR and cryptocurrency deposits and withdrawals through approved Malaysian payment channels such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay and Maybank, CIMB, Public Bank and Hong Leong Bank bank transfers.
• Age and identity verification: Confirming that Members meet the 21+ age requirement and that accounts are registered in the Member's own name, in compliance with our Terms and applicable regulatory expectations.
• Regulatory compliance: Fulfilling anti-money laundering (AML), counter-terrorism financing (CTF) and other applicable legal obligations, including transaction monitoring and suspicious activity reporting where required.
• Fraud and security: Detecting, investigating and preventing fraudulent activity, unauthorised access, collusion, bonus abuse and other prohibited conduct described in the TTB88 Terms and Conditions.
• Customer support: Responding to Member enquiries, resolving disputes, actioning complaints and processing responsible gambling tool requests such as self-exclusion and deposit limit applications.
• Platform improvement: Analysing aggregated and anonymised usage data to identify areas for product and service improvements. Individual Members are not identified through this analysis.
• Responsible gambling: Monitoring gambling patterns to identify indicators of potential problem gambling and applying safeguards where appropriate, including proactive contact where risk signals are detected.
• Marketing communications: Sending promotional offers, bonus notifications and relevant platform updates to Members who have opted in to marketing communications. Members may opt out at any time.

TTB88 may share personal data with:

• Payment processors and financial institutions: Entities involved in processing your deposits and withdrawals, including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX and participating Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong Bank and others). Data is shared to the minimum extent necessary to complete the relevant transaction.
• Identity and KYC verification providers: Third-party services engaged to verify Member identity and age. These providers process identity documents and confirmation records under strict data processing agreements with TTB88.
• Fraud prevention and security services: Specialist organisations that assist TTB88 in detecting and preventing fraudulent activity, money laundering and other financial crime.
• Technology and infrastructure providers: Cloud hosting, platform software and analytics providers who process data on TTB88's behalf and are bound by contractual obligations equivalent to those described in this Policy.
• Legal and regulatory authorities: Where TTB88 is required by law, court order or regulatory directive to disclose personal data, we will comply with such requirements. Where legally permissible, we will endeavour to notify the affected Member.
• Professional advisers: Legal, accounting and auditing firms engaged by TTB88 under professional confidentiality obligations, where access to personal data is necessary for the performance of their services.

TTB88 uses cookies and similar tracking technologies to support platform functionality, maintain session continuity and understand how Members interact with our website. The cookies we use fall into the following categories:

Members may adjust cookie preferences through their browser settings. Disabling strictly necessary cookies will affect platform functionality. Disabling analytics or marketing cookies will not prevent access to TTB88 services.

TTB88 retains personal data only for as long as it is necessary for the purposes for which it was collected or as required by applicable law. The principal retention periods applied by TTB88 are as follows:

• Active account data: Retained for the duration of the Member's account and for a period of five years following account closure, to support any legal, regulatory or dispute resolution requirements.
• Financial and transaction records: Retained for a minimum of seven years from the date of the relevant transaction, in compliance with applicable financial record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of five years from account closure or the completion of the relevant transaction, whichever is later.
• Customer support and complaints records: Retained for three years from the date of the interaction or complaint resolution.
• Marketing preferences: Retained until the Member withdraws consent or for a period of two years from last interaction, whichever occurs first.

TTB88 implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks associated with its processing. These measures include:

• Transport Layer Security (TLS): All data transmitted between Member devices and TTB88 servers is protected by current-standard TLS encryption protocols.
• AES-256 data encryption: Sensitive data stored within TTB88 systems — including financial account references and identification numbers — is encrypted at rest using AES-256 encryption.
• Access controls: Personal data is accessible only to TTB88 staff and service providers who require it for legitimate operational purposes, subject to role-based access restrictions and regular access reviews.
• Two-factor authentication (2FA): Available to Members for account login to provide an additional layer of protection against unauthorised access.
• Monitoring and incident response: TTB88 maintains active security monitoring of platform infrastructure and has documented procedures for responding to security incidents, including notification protocols where a data breach affects Member rights.

Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. Members are reminded to use strong, unique passwords for their TTB88 account and to notify support immediately if they suspect unauthorised account access.

Subject to applicable law, TTB88 Members hold the following rights in relation to their personal data:

• Right of access: You may request a copy of the personal data TTB88 holds about you, together with information on how it is processed. We will provide this within a reasonable timeframe.
• Right to rectification: If any personal data TTB88 holds about you is inaccurate or incomplete, you may request that it be corrected. Members may also update certain account details directly through their account profile.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, consent has been withdrawn and there is no other legal basis for processing, or where processing was unlawful. This right does not apply where retention is required by law or for the establishment, exercise or defence of legal claims.
• Right to restrict processing: You may request that TTB88 limit the processing of your data in certain circumstances, such as where the accuracy of the data is contested or where processing is unlawful but you prefer restriction over deletion.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that TTB88 provide your personal data in a structured, commonly used and machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
• Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes. TTB88 will cease such processing unless compelling legitimate grounds can be demonstrated.

To exercise any of the rights listed above, please contact TTB88 support via live chat or email at [email protected]. TTB88 may require identity verification before actioning a data subject request to ensure the security of Member data.

TTB88 does not knowingly collect personal data from individuals under 21 years of age. Age verification is conducted as part of the registration and KYC process. If TTB88 becomes aware that an account has been registered by a person under the age of 21, that account will be immediately suspended, all funds held in the account will be frozen pending investigation and the matter may be reported to relevant authorities.

If you have reason to believe that a minor has registered an account on TTB88, please notify us immediately at [email protected] so that appropriate action can be taken without delay.

TTB88 primarily serves Members located in Malaysia and processes the majority of personal data within jurisdictions that provide an adequate level of data protection. Where personal data is transferred to or processed by service providers operating outside Malaysia — for example, cloud infrastructure or identity verification providers — TTB88 ensures that such transfers are subject to appropriate safeguards, including:

• Adequacy determinations or equivalent protections recognised under applicable law;
• Contractual clauses requiring the recipient to process personal data to standards equivalent to those described in this Policy; or
• Other legally recognised transfer mechanisms appropriate to the applicable jurisdiction.

Members who would like further information about the specific safeguards applied to international data transfers may contact TTB88 support.

TTB88 reserves the right to update this Privacy Policy at any time. All revisions will be published on the TTB88 website with an updated "Last reviewed" date. Where changes are material — for example, where a new processing purpose is introduced or a significant change to data sharing arrangements is made — TTB88 will endeavour to provide advance notice via registered Member email addresses or platform notifications before the revised Policy takes effect.

Continued use of TTB88 following publication of a revised Policy constitutes acceptance of the updated terms. Members who do not accept a revised Policy should cease using the platform and contact support to initiate account closure.

If you have questions about this Privacy Policy, wish to exercise a data subject right, or want to raise a concern about how TTB88 processes your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the live chat function on the TTB88 website. Average first response under 2 minutes.
• Email: [email protected] — please include your registered account username and a clear description of your query or request. Responses are typically provided within 24 hours.

TTB88 support is conducted in English. For data subject access requests, TTB88 may request identity verification to protect Member security before disclosing or modifying personal data.