Privacy Policy timu99 – Your Data Protection Is Our Priority

When you register and use the timu99 platform, we collect several categories of personal information to ensure our services function properly, securely, and in compliance with applicable legal requirements.

A. Information You Provide Directly

This is information you provide directly during the registration process or while using our platform:

• Identity Information: Full name as per identification card, MyKad or passport number, date of birth, and gender.
• Contact Information: Email address, mobile number, and current residential address.
• Financial Information: Bank account details, account holder name, and e-wallet information (Touch 'n Go, GrabPay, Boost) registered for deposit and withdrawal purposes.
• KYC Verification Documents: A copy of your MyKad (front and back), proof of address such as a utility bill or bank statement, and any additional documents requested for the identity verification process.

B. Automatically Collected Information

When you browse and use the timu99 platform — whether via web browser or mobile app — we automatically record the following information:

• Technical Data: IP address, browser type, operating system version, device type, and screen resolution.
• Session Data: Login and logout times, session duration, pages visited, and navigation patterns within the platform.
• Game Data: Betting history, game types played, wager amounts, game outcomes, and financial transaction records.
• Location Data: Country and region-level location data based on your IP address, used for geographic compliance and fraud detection purposes.

C. Information from Third Parties

In certain cases, timu99 may receive information about you from trusted third-party sources, including:

• The identity verification service provider we use to process KYC.
• Financial institutions for transaction verification purposes.
• Fraud prevention agencies to identify suspicious activity.

Every piece of information we collect is used for a lawful and specific purpose. Below is a summary table outlining the relationship between data types and their intended use:

Specifically, timu99 uses your data to:

• Verifying your identity and ensuring only eligible individuals can use the platform (age verification: 18 and above).
• Processing all financial transactions including deposits, withdrawals, and bonus payouts accurately and securely.
• Identifying and preventing fraud, money laundering, and terrorism financing in accordance with AML/CFT legal requirements.
• Sending important notifications related to your account, transactions, or policy changes via email or SMS.
• Providing more effective and personalised technical assistance and customer support services.
• Analysing usage patterns to improve the interface, system performance, and overall user experience.
• Monitoring signs of problem gambling and recommending appropriate self-protection tools through our Responsible Gaming programme.

Timu99 invests seriously in security infrastructure to ensure your personal data is stored and processed in the most secure manner possible. Below are the technical and organizational measures we have implemented:

Technical Security

• Data Encryption in Transit: All communications are protected by TLS 1.3, the most current encryption protocol available.
• Data Encryption at Rest: Sensitive information such as bank details and KYC documents is stored in encrypted format using AES-256.
• Strict Access Controls: The principle of least privilege is observed — staff may only access data that is necessary for their specific role.
• Two-Factor Authentication (2FA): All access to internal systems storing player data requires two-factor authentication without exception.
• Continuous Audit Log: All access activity involving player data is logged in an immutable audit trail for accountability purposes.

Data Retention Period

Timu99 does not retain your data longer than necessary. The following are our data retention period guidelines:

• Active account data: Retained for the duration your account is active and for 5 years after account closure (Malaysia AML requirement).
• Financial transaction records: Retained for 7 years in line with financial reporting and taxation requirements.
• Session and technical logs: Retained for 12 months for security and troubleshooting purposes.
• KYC Documents: Retained for 5 years after account closure or the end of the business relationship.

Timu99 does not share your personal data arbitrarily. Information sharing only occurs in limited, controlled, and legally permitted situations:

Approved Service Providers

We work with trusted third-party service providers to operate our platform, including:

• Payment Providers: FPX, Touch 'n Go, GrabPay, Boost, and cryptocurrency payment processors to facilitate transactions. They receive only the minimum information required to process payments.
• KYC Services: A digital identity verification provider that helps us validate documents quickly and accurately.
• Game Providers: Gaming software companies may receive non-personally identifiable session data for technical purposes.
• Analytics Services: Web analytics tools that help us understand how users interact with our platform, with strict privacy settings enabled.

All third-party service providers are bound by data protection agreements that prohibit them from using your information for any purpose other than those specified by timu99.

Legal Obligations

Timu99 may be required to disclose your personal information to the relevant authorities in the following circumstances:

• Valid court orders or warrants issued by a Malaysian court or competent judicial authority.
• Requests from law enforcement agencies such as the Royal Malaysia Police (PDRM) or Bank Negara Malaysia (BNM) in the course of a legitimate investigation.
• Reporting obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).

The timu99 platform uses cookies and similar tracking technologies to enhance user experience, ensure account security, and analyze usage patterns. Below is a full explanation of the cookies we use:

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are required for core platform functions such as login authentication, session management, and security. They cannot be disabled as the platform will not function properly without them.
• Performance & Analytics Cookies: Helps us understand how players use the platform — which pages are visited most, where technical issues occur, and average session duration. This information is used for continuous improvement.
• Functional Cookies: Storing user preferences such as language, time zone, and display settings to deliver a more personalised experience on subsequent visits.
• Security Cookies: Used to detect suspicious login attempts, unusual navigation patterns, and potentially fraudulent activity.

Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some timu99 platform features. For browser-specific instructions, please refer to your browser's official documentation.

Please note that third-party cookies placed by game providers and payment service providers may also be stored on your device while using the timu99 platform. These cookies are subject to each provider's own privacy policy.

As a timu99 player, you have clear and enforceable rights regarding your personal data. timu99 fully respects and facilitates the exercise of these rights:

Timu99 takes child protection very seriously. Our platform is strictly not intended for individuals under the age of 18, and we do not knowingly collect any personal information from children.

Steps we take to prevent access by minors include:

• Mandatory date of birth verification during the registration process.
• Cross-referencing identity documents during the KYC process to verify player age.
• Regular monitoring to detect accounts that may have been registered using false information by underage individuals.

If we discover that personal information belonging to an individual under 18 has been collected without the knowledge or consent of a parent or legal guardian, we will immediately delete that information and close the relevant account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the timu99 Data Protection Officer (DPO) team is ready to assist you.

You can reach us through the following channels:

• 24/7 Live Chat: Fastest option — click the chat icon on your timu99 platform and select the "Privacy & Personal Data" topic.
• Privacy Email: [email protected] — please state the subject "Privacy Inquiry" for faster processing.

Our team will respond within 3 working days for general enquiries, and within 14 working days for formal data rights requests.

We also encourage you to read our other related documents to fully understand timu99's commitment to a safe and responsible gaming experience:

• timu99 Terms and Conditions
• Responsible Gaming Guide
• Frequently Asked Questions (FAQ)