T2club Privacy Policy – Your Personal Data Protection in Malaysia

This Privacy Policy is issued by T2Club ("we", "T2Club" or "platform") and applies to all users who access or use the T2Club website at t2club.ws, the t2club mobile app, and all related services ("Services").

T2club is committed to protecting the privacy of all our members in Malaysia and operates in accordance with the requirements Personal Data Protection Act 2010 (PDPA) Malaysia. This policy explains how we collect, use, disclose, store, and protect your personal data when you use T2Club Services.

By registering an account or using any part of the t2club Services, you agree to the collection and processing of your personal data as described in this Privacy Policy. If you do not agree, please discontinue use of our Services.

T2Club collects various types of personal data depending on how you interact with our platform. Below are the main categories of data we collect:

T2Club does not collect sensitive data categories such as health information, religious beliefs, or political views without a compelling reason and your explicit consent.

T2Club collects your personal data through several key channels:

• Account Registration: Information you provide when first registering a T2Club account — name, email, phone number, and date of birth.
• Identity Verification (KYC): Supporting documents such as MyKad and bank statements when required for compliance purposes, particularly for withdrawals of RM5,000 and above.
• Financial Transactions: Information related to deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks), and withdrawals to your bank account or eWallet.
• Platform Usage: Data automatically generated when you use t2club — logins, game records, pages visited, session duration.
• Support Interactions: Information you share when contacting the T2Club customer support team via live chat or email.
• Cookies & Tracking Technologies: Data collected through cookies, web beacons, and similar technologies as you browse the t2club platform.

T2Club uses the personal data collected for the following purposes, all of which have a valid legal basis under PDPA 2010:

• Account Management: Creating, verifying, and managing your T2Club account, including login processing and account security.
• Transaction Processing: To securely process deposits, withdrawals, and all other financial transactions associated with your T2Club account.
• Verification & KYC: To meet legal obligations related to identity verification and anti-money laundering compliance.
• Customer Support: Providing you with technical support and assistance whenever needed.
• Platform Security: Detecting and preventing fraud, account abuse, and activities that violate T2Club's Terms & Conditions.
• Service Improvement: Analyse usage patterns (in aggregate and without individual identification) to improve the T2Club user experience.
• Communication: Sending important account notifications, system updates, and security information.
• Legal Compliance: Complying with all applicable Malaysian legal requirements, including reporting obligations to the relevant authorities.

T2Club does not use your personal data for any purpose not stated above without your additional consent.

T2Club does not sell, rent, or trade your personal data. However, there are limited situations where T2Club may need to share data with trusted third parties:

• Payment Service Providers: Payment processors handling Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other payment methods — only the information necessary to process transactions is shared.
• Technical Service Providers: Hosting, cybersecurity, and infrastructure companies that help us operate T2Club — all bound by strict confidentiality agreements.
• Legal Authorities: Malaysian police, courts, or regulatory agencies where required by law or a valid court order.
• Game Providers: In some cases, licensed game providers used by t2club may receive minimal data (such as a player ID) to operate the games — without exposing your personal identity.

T2Club implements a multi-layered security framework to protect our members' personal data. The measures we have in place include:

• Encryption in Transit: All communications between your web browser or app and t2club's servers are encrypted using TLS 1.3 / SSL 256-bit.
• Storage Encryption: Sensitive data stored in T2Club's databases is encrypted using AES-256 algorithm.
• Strict Access Control: Only t2club staff who require access to perform their duties are permitted to access personal data — with mandatory two-factor authentication.
• 24/7 Monitoring: A continuous threat detection system monitors all network activity and database access to identify anomalies.
• Regular Security Testing: T2Club conducts regular penetration testing and independent security audits.
• Incident Response Procedure: A comprehensive cybersecurity incident response plan to ensure swift action in the event of any data breach.

While t2club takes all reasonable precautions, no security system can guarantee absolute 100% protection. We are continually working to strengthen our platform's security to safeguard our members' interests.

T2Club uses cookies and similar tracking technologies to enhance user experience and understand how our platform is used. Types of cookies used by T2Club:

• Essential Cookies: Required for core platform functions such as login sessions and security settings. Cannot be disabled.
• Preference Cookies: Remembering your preferences such as language and display settings for a more personalised experience.
• Analytics Cookies: Collecting aggregated usage data (without individual identification) to help us understand how the platform is used and make improvements.
• Security Cookies: Help detect suspicious activity and protect your account from unauthorised access.

In the course of t2club's operations, your personal data may be transferred to, or processed in, countries or regions outside Malaysia — primarily in connection with the infrastructure and cloud hosting services used by t2club.

When such transfers occur, T2Club ensures that protection equivalent to Malaysia's PDPA standards is maintained through:

• Data transfer agreements that comply with internationally recognised standards.
• Only engage service providers that meet high security and privacy standards.
• Ensuring all third-party providers are subject to the same privacy and security obligations as T2Club's internal requirements.

If you have any concerns about these data transfers, please contact us for more information.

As a t2club member and data subject under PDPA 2010, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request the correction of inaccurate or incomplete personal data.
• Right to Erasure: Request the deletion of your personal data under certain circumstances ("right to be forgotten").
• Right to Restrict Processing: Request that we restrict the processing of your data under certain circumstances.
• Right to Object: To object to the processing of your personal data for specific purposes.
• Right to Withdraw Consent: To withdraw consent previously given at any time, without affecting the validity of prior processing.

To exercise any of the rights above, submit a written request to privacy@t2club.ws along with your account information and request details. T2Club will process your request within 72 working hours.

T2club retains your personal data only for as long as necessary for the stated purpose, or as required under applicable Malaysian law:

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

T2Club services are exclusively for individuals aged 18 years and above. T2Club does not knowingly collect or process personal data of children under the age of 18.

If T2Club becomes aware that personal data of an individual under the age of 18 has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question.

If you have any questions, concerns, or requests regarding the t2club Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Privacy Email: privacy@t2club.ws
• General Support Email: support@t2club.ws
• Live Chat: Available on the T2Club platform, 24 hours a day, 7 days a week

T2Club is committed to responding to all privacy-related enquiries within 72 working hours. For more complex issues requiring thorough investigation, we will keep you informed of a realistic expected timeline.

If you are not satisfied with T2Club's response to a privacy complaint, you have the right to report the matter to Personal Data Protection Commissioner of Malaysia established under PDPA 2010.