Privacy Policy twc18 –
Our Commitment to Protecting Your Data

1 Introduction

Twc18 values the privacy of every member who entrusts their personal data to us. We understand that in this digital age, personal information is a highly valuable asset that must be safeguarded to the highest standard.

This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. It explains in detail every aspect of how your personal data is handled – from the moment you register a TWC18 account until the account is closed.

We adopt a "privacy by design" approach, meaning data protection is built into every stage of product development — not added as an afterthought. This ensures that every new feature introduced at TWC18 consistently prioritizes the security of your data.

If you have any questions about this Privacy Policy, please refer to Section 11 for our contact information.

2 Types of Personal Data We Collect

Twc18 only collects data that is genuinely necessary to provide a safe, efficient, and personalised service. Below are the categories of data we collect and their purposes:

We has never collect credit/debit card numbers directly. All payments are processed through certified third-party payment gateways that comply with PCI-DSS standards.

3 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. twc18 uses your personal data for the following purposes:

• Account Management: Creating, verifying, and maintaining your TWC18 account, including the KYC process required by law.
• Transaction Processing: Processing deposits, withdrawals, and all other financial transactions securely and accurately.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and other illegal activities.
• Legal Compliance: Fulfilling reporting obligations to the relevant authorities as required under Malaysian law.
• Customer Support: Resolving your inquiries, complaints, and disputes more quickly and accurately.
• Personalise Experience: Recommending games, promotions, and content relevant to your preferences and playing habits.
• Marketing Communications: Sending promotional offers, bonuses, and the latest TWC18 news — but only if you have consented to receive them.
• Product Improvement: Analyzing usage patterns in aggregate (without identifying individuals) to improve our products and services.

4 Data Sharing and Disclosure

Twc18 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Your data is only shared in very limited and legitimate circumstances:

• Authorized Service Providers: Payment providers, gaming software suppliers, customer support platforms, and identity verification services bound by strict confidentiality agreements with twc18.
• Statutory Authority: Law enforcement agencies, regulatory bodies and courts when required by a valid legal order in Malaysia.
• Fraud Prevention: Recognised industry bodies and fraud information-sharing platforms, solely to protect the integrity of the platform and the interests of all members.
• Business Transfer: In the event of a merger, acquisition or sale of company assets, data will be transferred as part of the business assets with prior notice to you.
• With Your Consent: In any other situation requiring data sharing, we will obtain your explicit consent beforehand.

All third parties receiving twc18 data are required to uphold data protection standards no less stringent than this Privacy Policy. We conduct regular audits of these third parties to ensure ongoing compliance.

5 Data Security Measures

Twc18 continuously invests in the latest cybersecurity infrastructure to ensure your personal data remains protected at all times. Key security measures we employ include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and twc18 servers is encrypted using the highest industry-standard encryption.
• Two-Factor Authentication (2FA): An extra layer of security via OTP sent to your registered phone number each time you log in from a new device.
• 24/7 Monitoring: An automated monitoring system operates around the clock to detect any suspicious activity or unauthorised access attempts.
• Stored Data Encryption: Sensitive data stored in our databases is protected using AES-256 encryption at the storage level.
• Internal Access Control: Only authorised personnel with a clear operational need may access member personal data, and every access is logged for audit purposes.
• Regular Penetration Testing: Independent third-party security experts conduct regular penetration testing to identify and patch system vulnerabilities.
• Incident Response Plan: twc18 has clear response procedures in place to handle any data breach, including notifying affected members within the timeframe prescribed by law.

6 Cookies and Tracking Technologies

Twc18 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your preference settings such as language, time zone, and platform display so you don't need to reconfigure them each time you log in.
• Analytics Cookies: Helps us understand how members use the platform in aggregate, enabling us to improve navigation and the overall experience.
• Performance Cookies: Optimizing page load speeds and platform performance, especially during peak traffic periods.

You can manage cookie settings through your web browser at any time. However, disabling essential cookies may affect certain functions on the TWC18 platform.

Twc18 does not use third-party cookies for cross-site advertising tracking. The analytics we use are based on aggregated data with no individual identification.

7 Your Rights Regarding Personal Data

As a twc18 member, you have the following rights regarding your personal data under Malaysia's PDPA:

To exercise any of the above rights, please contact our Data Protection Officer via email at [email protected]. We will respond to your request within 14 working days.

8 Data Retention Period

Twc18 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law.

• Active Account Data: Retained for the duration your account is active and for a defined period after account closure in accordance with regulatory requirements.
• Financial Transaction Records: Retained for a minimum of 7 years after a transaction takes place, in accordance with Malaysia's taxation and anti-money laundering legal requirements.
• Security Logs: Retained for 2 years for security investigation and dispute resolution purposes.
• KYC Records: Retained for 6 years after the business relationship ends, in accordance with the Anti-Money Laundering Act 2001.
• Support Communications: Retained for 3 years to allow historical service reference and dispute resolution.

When data is no longer needed and there is no legal obligation to retain it, TWC18 will securely delete or anonymise that data using industry-recognised methods.

9 Child Protection

Twc18 is a platform that exclusively for adult users aged 18 and above. We do not intentionally collect or process personal data of individuals under the age of 18.

If we discover that personal data belonging to a minor has been collected without our knowledge, we will take immediate steps to delete the information and close the relevant account. If you believe your child has registered a TWC18 account, please contact us immediately.

10 Amendments to the Privacy Policy

Twc18 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in business practices, legal requirements, or technological developments. All amendments take effect upon publication on this page.

For material amendments that significantly affect your rights, we will:

• Displaying a clear notice on the TWC18 platform at least 14 days before any amendment takes effect.
• Sending notification emails to all active members outlining the key changes made.
• Updating the "Last Updated" date at the top of this document.

Your continued use of the TWC18 platform following the publication of any amendments constitutes your acceptance of the updated Privacy Policy. It is your responsibility to review this page periodically.

11 Contact Our Data Protection Officer

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, please contact us via:

• Data Protection Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 directly from the twc18 platform or app.
• Response Time: We aim to respond to all privacy-related inquiries within 14 business days.

For complaints that cannot be resolved through the above channels, you have the right to lodge a complaint with the Department of Personal Data Protection under the Ministry of Communications Malaysia.