Privacy Policy T2Club – Personal Data Protection for Malaysian Players

T2Club is an online casino and betting platform operating under applicable laws and committed to protecting the privacy of every user and member. This Privacy Policy applies to all personal information collected through the T2Club platform, including but not limited to the official website at t2club.bet, the T2Club mobile app for iOS and Android, customer support services, promotional and marketing programmes, and payment integrations with Malaysian payment providers.

This Policy is written in Bahasa Melayu to ensure it is easily understood by all our Malaysian players. In the event of any conflict between the Bahasa Melayu version and any other language version, the Bahasa Melayu version shall prevail. T2Club updates this Privacy Policy from time to time in response to legal requirements or changes in our business practices, and the date of the most recent update is always displayed at the top of this document.

T2club collects various types of personal information necessary to provide a secure, efficient, and personalised experience for every member. We only collect what is strictly required — nothing more.

We collect data through three main channels: (1) information you provide directly during registration, verification, or when contacting customer support; (2) information collected automatically as you use the platform via cookies and tracking technologies; and (3) information we receive from third-party payment providers such as Touch 'n Go, GrabPay, DuitNow, or FPX when you carry out financial transactions.

T2Club uses collected personal information for legitimate and transparent purposes. We do not use your data for purposes unrelated to the services you use, nor without a lawful basis for doing so.

• Processing account registrations and verifying player identities (KYC process) to ensure platform security.
• Processing deposits and withdrawals via the Malaysian payment methods you use, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, and CIMB Clicks.
• Providing responsive and effective customer support in both Bahasa Melayu and English through Live Chat, WhatsApp and email.
• Detecting and preventing fraud, money laundering, account hacking and platform abuse.
• Keeping you informed about T2Club's latest promotions, bonuses and offers relevant to your gaming activity — provided you have opted in to receive marketing communications.
• Complying with applicable legal and regulatory obligations, including reporting to relevant authorities where required by law.
• T2Club does NOT use your data to make automated decisions that materially affect your rights without human oversight.
• T2Club does NOT sell or rent your personal data to third parties for their own marketing purposes.

T2Club is committed to not disclosing your personal information to external parties without a legitimate and valid reason. However, there are certain circumstances where sharing information is necessary to deliver the services you use or to comply with the law.

Parties that may receive limited access to your personal information include: (1) Malaysian payment service providers you use for deposits and withdrawals — Touch 'n Go, GrabPay, DuitNow, FPX, and others — who require information to process transactions; (2) Our casino game software providers such as Pragmatic Play, PG Soft, and Evolution Gaming, which receive only minimal game session data for technical purposes; (3) Malaysian government authorities and law enforcement agencies when we are legally obligated to do so.

T2Club invests heavily in security infrastructure to protect every member's personal data. Our security systems operate 24 hours a day, 7 days a week, and are designed to defend against the latest and increasingly sophisticated cyber threats.

• Data-in-Transit Encryption: SSL/TLS 256-bit encryption protects all data transmitted between your device and T2Club's servers — including login credentials, financial transactions and communications.
• Stored Data Encryption: Sensitive data such as passwords, bank account numbers, and identification details are stored in encrypted form that cannot be read without a dedicated decryption key.
• Two-Factor Authentication (2FA): T2Club offers 2FA for all member accounts to add an extra layer of security that prevents unauthorised access.
• Continuous Monitoring: Intrusion detection and anomaly monitoring systems operate 24/7 to identify and respond to any security threats in real time.
• Internal Access Controls: T2Club staff access to members' personal data is restricted on a strict need-to-know basis, with comprehensive audit logs maintained for every instance of data access.

While T2Club takes every reasonable measure to protect your data, no security system can guarantee absolute protection. You also play a role in safeguarding your account by using a strong password, keeping your login credentials private, and promptly reporting any suspicious activity to T2Club's support team.

T2Club uses cookies and similar technologies to enhance the user experience, maintain platform security, and understand how players use our platform. Below are the types of cookies used by T2Club and their respective purposes:

You can manage your cookie settings through your web browser preferences. Please note, however, that disabling essential cookies may affect the functionality of the t2club platform. For guidance on managing cookies, refer to your web browser's documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and T2Club's privacy policy, you have the following rights regarding your personal data. T2Club is committed to respecting and facilitating the exercise of these rights in a straightforward and timely manner.

To exercise any of the above rights, please contact the T2Club privacy team by email at privacy@t2club.bet or via Live Chat on the platform. T2Club will process your request within 14 business days. In complex cases, this period may be extended, and you will be notified accordingly.

T2Club takes financial data protection extremely seriously. When you make a deposit or withdrawal using Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX (Maybank2u, CIMB Clicks), your financial information is processed through secure, encrypted channels.

T2Club does not directly store credit/debit card numbers in our systems. All card information is processed through third-party payment gateways compliant with PCI-DSS (Payment Card Industry Data Security Standard). Transaction records we retain are strictly for audit, legal compliance, and dispute resolution purposes.

T2Club does not knowingly collect, store, or process any personal information from individuals under the age of 21. The T2Club platform is strictly for adults — the minimum age to register and use any of our services is 21 years old.

Should we discover that we have inadvertently collected personal information from someone under the age of 21, we will promptly delete that information and close the relevant account. Parents or guardians who find that their child has registered on T2Club are urged to contact us immediately so that appropriate action can be taken without delay.

T2Club reserves the right to update or modify this Privacy Policy at any time. Members will be notified of material changes via their registered email or in-platform notification at least 30 days before the changes take effect, giving you time to review them and make an informed decision.

The date of the most recent update is always displayed at the top of this document. Your continued use of the T2Club platform after any changes take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account and request deletion of your personal data in accordance with the procedure set out in Section 7.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how T2Club handles your personal data, please contact our Privacy Officer through the following channels. We are committed to responding within 3 business days for general enquiries and 14 business days for formal data subject rights requests.