TWC Net Privacy Policy – Personal Data Protection for Malaysian Players

twc net understands that privacy is a fundamental right of every individual. As an online betting platform serving Malaysian players, we recognise the trust you place in us each time you share your personal information — and we do not take that responsibility lightly.

This Privacy Policy applies to all information collected through:

• The website twcnet.best and all associated pages.
• The twc net member registration and account management process.
• Processing deposits and withdrawals using Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay.
• Your interactions with the twc net customer support team via live chat, email, or WhatsApp.
• Use of all games and services offered on the twc net platform.

This Privacy Policy does not cover third-party websites or services that you may access through links on the twc net platform. We encourage you to read the privacy policy of any third-party site you visit separately.

twc net only collects personal data that is strictly necessary to provide you with a safe, legitimate, and high-quality betting platform. The following are the categories of data we collect:

a) Data you provide directly:

• Identity information: Full name, date of birth, Malaysian identity card number (MyKad).
• Contact information: Email address, Malaysian mobile number, residential address.
• Financial information: Bank account or e-wallet details (Touch 'n Go, GrabPay, DuitNow) for deposit and withdrawal purposes — stored in encrypted format.
• Identity verification documents: Copies of your identity card, bank statements, or other documents submitted during the KYC (Know Your Customer) process.
• Support information: Records of conversations with the twc net support team, complaints submitted, and resolutions provided.

b) Data collected automatically during platform use:

• Technical data: IP address, device type, operating system, web browser type, screen resolution.
• Usage data: Pages visited, games played, session duration, and favourite game preferences.
• Transaction data: A complete record of all deposits, withdrawals, bets and winnings in your twc net account.
• Location data: Coarse location information based on IP address for eligibility verification and fraud prevention purposes.
• Cookie data: Information collected through cookies and other tracking technologies as described in Section 8.

twc net only uses your personal data for lawful purposes directly related to the provision of our betting platform services. These purposes are:

• Account management: Creating, verifying, and managing your twc net member account, including processing logins, password resets, and profile information updates.
• Financial transaction processing: Securely and accurately processing all deposits via Touch 'n Go, GrabPay, DuitNow, FPX, Boost, ShopeePay, as well as withdrawals to your Malaysian bank accounts and e-wallets.
• Provision of gaming services: Ensuring you can access all games and services on twc net — slots, Live Casino, Sports Betting, e-sports, poker, and lottery — with a seamless and personalised experience.
• Security and fraud prevention: Detecting and blocking suspicious activity, unauthorised login attempts, payment fraud and platform abuse to protect both you and the twc net platform.
• Legal compliance: Fulfilling obligations under PDPA 2010, the Anti-Money Laundering Act (AMLA), KYC requirements and other applicable Malaysian laws.
• Customer support: Resolving enquiries, complaints, and assistance requests that you submit to the twc net support team 24/7.
• Platform improvements: Analysing usage patterns in aggregate (not individually) to improve the performance, design and features of the twc net platform.
• Marketing communications: Sending you information about twc net promotions, bonuses, and special offers via email or notifications — only if you have agreed to receive them.
• Responsible gambling: Monitoring usage patterns to identify early signs of gambling-related issues and offering appropriate assistance or control tools to players who need them.

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, twc net process your personal data on one or more of the following valid legal bases:

• Contractual fulfilment: Processing required to fulfil the service agreement between you and twc net — including account management, payment processing and provision of access to games and platform services.
• Legal compliance: Processing required to comply with applicable legal obligations in Malaysia, including PDPA, AMLA, KYC requirements, and prevailing gambling regulations.
• Legitimate interests: Processing for the purposes of platform security, fraud prevention, internal statistical analysis, and service improvement — where twc net's legitimate interests do not override your privacy rights.
• Your consent: For processing that falls outside the categories above — such as optional marketing communications or non-essential cookie analytics — twc net will only process your data after obtaining your clear and freely given consent.

You have the right to withdraw your consent at any time for processing that is based on consent. Withdrawing your consent will not affect the validity of any processing that took place prior to the withdrawal.

twc net does not sell, rent, or disclose your personal data to any third party for marketing purposes. However, in the course of operating the platform, we may share your data with the following categories of third parties under limited and controlled circumstances:

• Payment service providers: Malaysian e-wallet and online banking providers (Touch 'n Go, GrabPay, DuitNow, FPX, Boost, ShopeePay, Maybank2u, CIMB Clicks) receive only the minimum transaction data necessary to securely process your deposits and withdrawals.
• Game provider: Third-party gaming companies that provide slots, Live Casino, and other game content on the twc net platform may receive session data necessary to operate those games properly. These providers are bound by strict data protection agreements.
• Technology infrastructure providers: Cloud service providers, security monitoring, and technical support partners that help us operate the twc net platform — they are granted only the limited data access required to carry out their specific tasks.
• Authorities and regulatory bodies: twc net will disclose personal data when required to do so by Malaysian law, a valid court order, or a request from a competent authority — including for the purposes of financial crime investigation or anti-money laundering.
• Independent auditors: Registered audit firms conducting compliance audits, financial audits or system security audits of twc net may require limited access to certain data — all bound by strict confidentiality agreements.

twc net implement a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, loss or destruction:

• Data encryption in transit: All communications between your browser and twc net servers are protected with 256-bit SSL/TLS encryption, ensuring that transmitted data cannot be intercepted or read by unauthorised third parties.
• Encryption of data at rest: Sensitive data such as financial information, identity card numbers, and passwords are stored in encrypted format using one-way hashing algorithms that cannot be decrypted.
• Role-based access control: Only twc net staff with a legitimate business need and specific authorisation may access user data. All access is logged in a continuous audit trail.
• Two-factor authentication (2FA): twc net offers 2FA for all member accounts as an additional layer of security. We strongly encourage all players to enable 2FA in their account settings.
• Real-time threat monitoring: twc net's automated security system monitors all platform activity 24 hours a day to detect suspicious patterns, intrusion attempts, and fraudulent activity.
• Periodic penetration testing: twc net conducts regular penetration testing by independent cybersecurity experts to identify and patch any vulnerabilities before they can be exploited.
• Incident response plan: twc net has a comprehensive incident response procedure in place. In the event of a data breach, we will notify affected users and the relevant authorities within the timeframes required under Malaysian law.

twc net only retain your personal data for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. The following are general data retention period guidelines:

• Active account data: For as long as your twc net account remains active, and thereafter for up to 7 years following account closure, for the purposes of Malaysian financial and anti-fraud legal compliance.
• Financial transaction records: Minimum 7 years in accordance with the Anti-Money Laundering Act (AMLA) requirements and applicable Malaysian financial laws.
• KYC records and identity verification: A minimum of 5 years after the business relationship ends, in accordance with AML/CTF compliance requirements.
• Support communication records: 2 years from the date of interaction, or longer if related to an ongoing complaint or litigation.
• Technical log data: 12 months for routine system logs; up to 3 years for logs related to security incidents.
• Marketing data (if consented): Until you withdraw consent or request deletion.

When data is no longer needed and there is no legal requirement to retain it, twc net will securely delete or anonymise that data using methods that ensure it cannot be recovered.

Platform twc net uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and understand how players interact with our platform.

Types of cookies we use:

• Essential cookies (mandatory): Required for the core functions of the twc net platform, such as login session authentication, account security, and language preferences. These cannot be disabled without affecting platform functionality.
• Performance and analytics cookies: Collecting information about how you use the twc net platform — such as most-visited pages, time spent, and favourite games — to help us improve the platform. This data is collected in aggregate form and cannot be used to identify you personally.
• Functional cookies: Remembering your preferences and settings on the twc net platform — such as your preferred language, display preferences, and saved login information — so you do not need to reconfigure them each time you use the platform.
• Marketing cookies (optional): Used to display twc net promotional content relevant to your interests. Only activated with your consent.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the twc net platform. Optional cookies can be declined or disabled without affecting your basic access to the platform.

The Personal Data Protection Act 2010 (PDPA) of Malaysia grants you certain rights in relation to personal data held by twc net. We fully respect these rights and will process every request within a reasonable timeframe:

To exercise any of the rights above, please contact the twc net privacy team at support@twcnet.best by stating the right you wish to exercise and providing the information required to verify your identity. We will respond within 21 business days.

In the context of platform operations twc net which uses international technology service providers, there is a possibility that some of your personal data may be processed or stored on servers located outside of Malaysia.

When such data transfers occur, twc net ensures that:

• Transfers are only made to countries or recipients that provide a level of data protection equivalent to or higher than Malaysia's PDPA requirements.
• Appropriate data transfer agreements — including standard contractual clauses or recognised protection mechanisms — have been put in place with all data recipients outside Malaysia.
• Any cross-border data transfers are carried out solely for necessary operational purposes and do not include transfers to third parties for marketing purposes.

You may request further information about the protection mechanisms used for cross-border data transfers by contacting the twc net Data Protection Officer via our support email.

Platform twc net is exclusively for adults aged 18 and above. twc net does not knowingly collect or process personal data of children under the age of 18.

If twc net discovers that personal data belonging to an individual under the age of 18 has been collected without their knowledge or without valid consent, we will:

• Closing the account in question promptly.
• Delete all related personal data in the shortest time possible.
• Returning any real money balance remaining in the account in accordance with the applicable procedures.

If you believe that a minor under the age of 18 has registered an account on twc net or has provided their personal data to our platform, please contact us immediately at support@twcnet.best so that appropriate action can be taken without delay.

twc net reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or new platform features. When material amendments are made, we will:

• Updating the "Last Updated" date displayed at the top of this document.
• Displaying a clear notice on the twcnet.best homepage regarding the changes.
• Sending email notifications to all registered members when material changes to how we use personal data occur.

We encourage you to review this Privacy Policy periodically — especially before making any new data disclosures to twc net. Your continued use of the platform following any changes to the Privacy Policy will be deemed as your acceptance of the updated version.

If you have any questions, concerns or complaints regarding this Privacy Policy or the way twc net handling your personal data, please contact our Data Protection Officer through the following channels:

Twc net is committed to addressing all privacy-related enquiries and complaints seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.