TT789 Privacy Policy —
Your Data Security, Our Priority

To provide a safe, personalized, and effective service to every tt789 member, we need to collect certain categories of personal information. This collection is carried out transparently and only for legitimate purposes. Below is the information collected and how it is received:

Tt789 does not collect sensitive data such as health information or biometric data unless required by law. All data collection is carried out with member consent and for clearly defined purposes.

Tt789 uses member personal data solely for platform operations, security, and service improvement. We do not use your data for unrelated commercial purposes without your prior consent.

• To manage member accounts including the registration process, identity verification (KYC), login, and secure account recovery.
• To process financial transactions including deposits via FPX, DuitNow, Touch 'n Go eWallet, GrabPay, and Boost, as well as withdrawals to members' local bank accounts.
• To detect and prevent fraud, money laundering, account abuse, and suspicious activities that could compromise the security of the platform or other members.
• To provide effective customer support, including resolving complaints, answering enquiries, and assisting with technical issues via 24/7 live chat.
• To send important account-related notifications such as transaction confirmations, security alerts, and service terms updates.
• To comply with legal and regulatory obligations relating to platform operations in the applicable jurisdiction.
• To analyse platform usage patterns for the purpose of improving the interface, adding new features, and optimising the overall user experience.
• To send marketing communications such as bonus offers and exclusive promotions — only to members who have consented to receive such communications.

The security of members' personal data is at the core of TT789's operations. We continuously invest in the latest security technologies and procedures to ensure your information remains protected at all times — whether in transit or stored on our servers.

• 256-bit SSL Encryption: All communications between your device and tt789's servers are protected by 256-bit SSL encryption — the same standard used by leading financial institutions and banks worldwide.
• Stored Data Encryption: Sensitive data such as financial information and KYC documents are stored in encrypted format using AES-256 encryption algorithms, which cannot be read without the correct encryption key.
• Two-Factor Authentication (2FA): tt789 provides and encourages the use of 2FA for all member accounts to add an extra layer of security during login.
• 24/7 Monitoring: tt789's security system continuously monitors platform activity to detect and respond to any security threats or unauthorized access.
• Internal Access Control: Access to member personal data is granted only to TT789 staff who require it to perform their duties, in accordance with the principle of minimum access control.
• Regular Audits: tt789 conducts regular internal and external security audits to ensure data protection systems consistently meet the highest industry standards.

Tt789 does not sell, rent, or disclose member personal information to third parties for marketing or commercial purposes without explicit member consent. However, there are limited situations where data sharing is necessary for platform operations:

• Payment Service Providers: Required transaction information is shared with payment processors such as FPX, DuitNow, and e-wallet providers solely to securely process your deposits and withdrawals.
• Game Providers: Minimum required technical data is shared with our licensed game providers to ensure a smooth gaming experience and accurate win calculations.
• Regulatory Authorities: tt789 will disclose required information to legal or regulatory authorities when mandated by a court order or applicable legislation.
• Identity Verification Providers: During the KYC process, identity document information may be shared with trusted third-party identity verification service providers to ensure the accuracy of the verification process.
• Technical Service Providers: Hosting, cybersecurity, and analytics service providers who are bound by strict confidentiality agreements with TT789 may have limited access to data to carry out their technical duties.

All third parties working with tt789 are required to comply with strict privacy policies and are not permitted to use tt789 member data for any purpose other than those specified in their agreement with us.

Tt789 uses cookies and similar tracking technologies to enhance the user experience, analyze platform traffic, and deliver relevant content. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login authentication, session management, and security. They cannot be disabled without affecting platform functionality.
• Performance Cookies: Used to collect information on how visitors use the TT789 platform — such as the most frequently visited pages and error messages received — for platform improvement purposes.
• Functionality Cookies: To allow the platform to remember your preferences such as language, time zone, and display settings for a more personalised experience.
• Analytics Cookies: To help TT789 understand platform usage patterns in aggregate and anonymised form, enabling better decisions on feature improvements.

You can manage cookie settings through your internet browser. However, disabling certain cookies may affect the functionality and user experience of the TT789 platform. Continued use of the platform is considered consent to the use of cookies as described above.

As a tt789 member, you have clear and enforceable rights over your personal data under Malaysia's PDPA 2010. tt789 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the tt789 support team via live chat or email. We will process your request within 14 business days of receipt. In complex cases, this period may be extended with reasonable notice to you.

Tt789 retains member personal data only for as long as necessary to fulfill the original purpose of collection or to comply with applicable legal requirements. Our data retention policy is as follows:

• Active account data is retained for the duration of the active account plus 5 years after account closure, in line with anti-money laundering (AML) compliance requirements.
• Financial transaction records are retained for 7 years from the transaction date in accordance with applicable Malaysia financial regulations.
• KYC documents and identity verification records are retained for 5 years after account closure or the date of last verification, whichever is later.
• Customer support communication logs are retained for 2 years for reference, service improvement, and dispute resolution purposes.
• Analytics data and technical logs that do not contain personally identifiable information may be retained longer for security and system analysis purposes.
• Upon expiry of the retention period, data will be securely deleted using methods that ensure it cannot be recovered.

Tt789 takes every privacy-related inquiry, concern, and complaint seriously. If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to report a data security concern, we are here to help.

You may contact the TT789 Data Privacy Officer through the following channels:

• 24/7 Live Chat: The fastest way to get immediate assistance — click the chat icon at the bottom corner of the TT789 platform at any time.
• Privacy Email: Send your written enquiry to [email protected] — we will respond within 3 business days.
• Help Center: Visit the FAQ us for answers to the most frequently asked privacy questions.

Tt789 reserves the right to update this Privacy Policy from time to time to reflect changes in data practices, legislation, or platform operations. Any material changes will be communicated to members via in-platform notifications or email at least 14 days before taking effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.