Privacy Policy – ttbet Data Protection Notice

1. Introduction

This Privacy Policy ("Policy") describes how ttbet ("ttbet", "we", "us", "our") collects, processes, stores, and protects personal data provided by users ("Member", "Player", "you") of the ttbet platform at ttbet.biz ("Platform"). This Policy forms part of the ttbet Terms & Conditions and should be read in conjunction with them.

By registering an account or using any ttbet service, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to the terms of this Policy, you must not access or use the Platform.

ttbet is committed to processing personal data responsibly, transparently, and in accordance with internationally recognised data protection principles, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and security.

2. Data We Collect

ttbet collects personal data in the following categories depending on how you interact with the Platform:

2.1 Registration Data

When you register a ttbet account, we collect: full name, date of birth, email address, residential address, username, and password (stored as a one-way cryptographic hash). This data is required to create and maintain your account and to verify that you meet the minimum age requirement of 21 years.

2.2 Identity Verification (KYC) Data

As required by our international gaming licence obligations, we may collect copies of identity documents (e.g., Malaysian National Identity Card / MyKad, passport), proof of address (e.g., utility bill, bank statement), and — for high-value transactions — source of funds documentation. KYC documents are processed and stored in accordance with anti-money laundering (AML) requirements.

2.3 Financial and Transaction Data

We collect data relating to deposits, withdrawals, and wagering activity on the Platform, including payment method details (e.g., bank account information, e-wallet identifiers), transaction amounts, dates, and outcomes. Full card numbers are never stored by ttbet; payment card data is handled exclusively by PCI-DSS compliant payment processors.

2.4 Technical and Usage Data

We automatically collect certain technical data when you access the Platform, including: IP address, browser type and version, operating system, device identifiers, referring URLs, pages visited, session duration, and click-stream data. This data is used for platform security, fraud prevention, performance optimisation, and aggregate analytics.

2.5 Communications Data

When you contact ttbet's support team via live chat or email, we retain records of those communications, including their content and metadata, for quality assurance, dispute resolution, and regulatory record-keeping purposes.

3. Legal Basis for Processing

ttbet processes your personal data on the following legal bases:

Processing Activity	Legal Basis
Account registration and management	Performance of contract
Identity verification (KYC / AML)	Legal obligation
Payment processing	Performance of contract
Fraud detection and platform security	Legitimate interests
Platform analytics and performance	Legitimate interests
Responsible gaming monitoring	Legal obligation / Legitimate interests
Promotional communications (where opted in)	Consent
Regulatory record-keeping	Legal obligation

4. How We Use Your Data

ttbet uses the personal data collected for the following specific purposes:

• To create, maintain, and administer your ttbet account.
• To verify your identity and age (minimum 21 years) in compliance with our licensing obligations.
• To process deposits, withdrawals, and wager settlements in Malaysian Ringgit (MYR) and supported cryptocurrencies.
• To detect and prevent fraud, money laundering, and prohibited conduct as defined in our Terms & Conditions.
• To comply with anti-money laundering (AML), counter-terrorism financing (CTF), and gaming regulatory requirements.
• To monitor and enforce responsible gaming obligations, including identifying players who may be exhibiting signs of problem gambling.
• To provide customer support and resolve disputes.
• To send transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts) which are non-optional for registered Members.
• To send promotional communications, only where you have provided explicit consent. You may withdraw consent at any time via your account preferences.
• To improve the Platform through anonymised aggregate analytics.

5. Data Sharing and Third Parties

ttbet does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We share your personal data only in the following limited circumstances:

• Payment processors: To facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, Visa, Mastercard, USDT, and Bitcoin infrastructure providers. These processors are contractually bound to process data only for payment purposes.
• Identity verification providers: Third-party KYC and AML screening services used to verify identity documents and screen against sanctions lists. These providers process data under strict data processing agreements.
• Game software providers: Certain game providers may receive anonymised or pseudonymised session data for RNG certification, RTP verification, and fair play auditing purposes.
• Regulatory and law enforcement authorities: Where ttbet is legally required to disclose data to a gaming regulator, financial intelligence unit, or law enforcement agency, we will do so in accordance with our legal obligations.
• Professional advisors: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations.

All third parties with whom ttbet shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the purposes for which it was shared.

6. Data Retention

ttbet retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. In practice:

• Account data is retained for the duration of your active membership and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• KYC documents are retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later.
• Financial transaction records are retained for a minimum of seven (7) years for tax and audit purposes.
• Support communication records are retained for three (3) years.
• Technical log data is retained for a maximum of twelve (12) months unless required for an ongoing investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ttbet's data disposal procedures.

7. Cookies and Tracking Technologies

ttbet uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function, including session management, authentication tokens, and security features. These cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to measure aggregate usage patterns, identify performance issues, and improve the Platform. Analytics data is processed in anonymised or pseudonymised form.
• Preference cookies: Used to remember your display preferences, such as language settings.

ttbet does not deploy third-party advertising or retargeting cookies. You may manage cookie preferences via your browser settings; however, disabling essential cookies may prevent you from accessing certain Platform features.

8. Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by ttbet:

• Right of access: You may request a copy of the personal data ttbet holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data in certain circumstances. Note that legal and regulatory retention obligations may prevent full erasure.
• Right to restrict processing: You may request that ttbet limits its processing of your data in certain circumstances.
• Right to data portability: You may request that certain data be provided to you in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on legitimate interests in certain circumstances.

To exercise any of the above rights, contact ttbet's support team via live chat from within your logged-in account dashboard. Requests will be acknowledged within five (5) business days and actioned within thirty (30) days. We may need to verify your identity before processing a data rights request.

9. International Data Transfers

ttbet operates as an international platform and may process or store personal data on servers located outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, ttbet implements appropriate safeguards — such as standard contractual clauses or equivalent data transfer mechanisms — to ensure that your data remains protected to a standard consistent with this Policy.

10. Children and Age Verification

ttbet does not knowingly collect personal data from persons under the age of 21. The Platform is strictly for use by adults aged 21 and above. Age verification is conducted as part of the registration and KYC process. If ttbet becomes aware that personal data has been collected from a person under 21, that data will be deleted and the associated account closed immediately. 21+

11. Security Measures

ttbet implements a range of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include TLS 1.3 encryption for all data in transit, AES-256 encryption for sensitive data at rest, bcrypt hashing for passwords, role-based access controls for internal systems, regular penetration testing and security audits, and a documented incident response procedure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ttbet will notify affected Members and the relevant regulatory authority in accordance with applicable legal requirements.

12. Changes to This Policy

ttbet reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Members via email notification or a prominent notice on the Platform prior to the effective date. Your continued use of the Platform following the effective date of a revised Policy constitutes acceptance of the updated terms. We encourage you to review this Policy periodically.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or ttbet's data processing practices, please contact our support team via the live chat feature available in your logged-in account dashboard. The support email address is listed in plain text in the footer of this website and is not a clickable link. We aim to respond to all privacy-related enquiries within five (5) business days.