Tk10 Privacy Policy — We Fully Protect Your Personal Data

1Introduction

Tk10 values the privacy of every player who uses our platform. This Privacy Policy explains in detail how we collect, process, store and protect your personal information when you use the tk10.ml website, the tk10 mobile app and all related services.

By registering or using any part of the tk10 platform, you agree to the privacy practices outlined in this document. We encourage you to read this policy in full so you fully understand how we manage your personal information.

This Privacy Policy applies to all tk10 platform users regardless of access method — whether via web browser, iOS app, or Android app. If you disagree with any part of this policy, you are advised to discontinue use of the tk10 platform.

2Data Collected

Tk10 collects various types of personal information to enable us to provide a safe, compliant and high-quality service. The information we collect can be divided into several key categories:

We only collect data that is strictly necessary for the stated purposes. tk10 does not collect sensitive information such as health details or biometric data unless there is a specific legal requirement to do so.

3How Your Data Is Used

Tk10 uses the personal information collected for lawful and transparent purposes. Every use of data is based on a solid legal foundation, whether it is necessary for the fulfilment of a contract, legal compliance or our legitimate interests:

• Identity Verification (KYC): To verify your eligibility to use the platform and ensure compliance with anti-money laundering legal requirements.
• Transaction Processing: To process deposits, withdrawals and all financial activities in your account quickly and accurately.
• Account Management: To manage your account, provide access to the platform and resolve any technical issues that may arise.
• Platform Security: To detect and prevent fraud, system abuse, money laundering and other unlawful activities.
• Service Communications: To send important notices regarding your account, policy updates and necessary technical information.
• Marketing (with consent): To send relevant promotional offers and bonus information — you may withdraw your consent at any time.
• Responsible Gaming: To monitor gameplay patterns and provide timely assistance if signs of problem gambling are detected.
• Platform Improvement: To analyse usage patterns and improve the overall tk10 platform experience.

Tk10 will not use your personal data for any purpose not stated in this policy without first obtaining your explicit consent.

4Data Sharing with Third Parties

Tk10 is committed to never selling or renting your personal data. However, there are limited situations where we may need to share certain information with carefully selected third parties:

• Payment Providers: Providers such as FPX, DuitNow, Touch 'n Go eWallet, GrabPay, and Boost receive only the minimum transaction information required to process your payments securely.
• Game Service Providers: Third-party game platform providers that are part of the tk10 ecosystem may receive game session information necessary for technical operations.
• Identity Verification Agency: For KYC purposes, identity information may be verified with recognised and trusted verification agencies.
• Legal Authorities: tk10 will disclose information to authorities when required to do so by law, court order or to protect our legitimate rights.
• Professional Advisors: Lawyers, accountants, and auditors bound by confidentiality obligations may receive limited access to data required for their services.

5Data Security

Tk10 invests seriously in security infrastructure to ensure your personal data remains protected at all times. The technical and organisational security measures we implement include:

• Data in Transit Encryption: All communications between your device and tk10's servers are secured by TLS 1.3 protocol with 256-bit encryption, ensuring no third party can intercept your data in transit.
• Stored Data Encryption: Personal data stored in our databases uses AES-256 encryption for an additional layer of protection even in the event of unauthorised physical access.
• Two-Factor Authentication (2FA): A two-factor authentication system is available for all accounts to add a strong layer of security at login.
• 24/7 Monitoring: The tk10 cybersecurity team monitors our systems around the clock to detect any suspicious activity or intrusion attempts.
• Regular Security Testing: Penetration testing and security audits are conducted regularly by qualified independent third parties.
• Internal Access Controls: The principle of least privilege is applied — staff are only granted access to data genuinely required for their job responsibilities.

While tk10 makes every effort to protect your data, no system can guarantee 100% absolute security against all evolving cyber threats. In the event of any security incident involving your personal data, tk10 will notify you within the timeframe required by law.

6Cookies & Tracking Technologies

The tk10 platform uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage patterns. The following are the types of cookies we use:

• Essential Cookies: Required for basic platform operations such as maintaining your login session and ensuring account security. These cookies cannot be disabled.
• Performance Cookies: Collects information on how you use the platform — such as the most frequently visited pages — to help us improve performance and responsiveness.
• Functional Cookies: Allows the platform to remember your preferences such as language, display settings, and game choices for a more personalised experience.
• Analytics Cookies: Used to understand overall usage patterns for product improvement purposes. Data collected is in aggregate form and cannot identify individuals.

You can manage your cookie settings through your web browser. Disabling certain cookies may affect the functionality of some parts of the platform. For more information on managing cookies, please refer to your web browser's help documentation.

7Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by tk10:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information within 21 calendar days from the date the request is received.
• Right to Rectification: If you find that any personal data held by tk10 is inaccurate, incomplete, or outdated, you have the right to request an immediate correction.
• Right to Restrict Processing: Under certain circumstances, you have the right to request that we restrict how we use your personal data, particularly during a dispute investigation.
• Right to Withdraw Consent: For data processing based on consent (such as marketing communications), you may withdraw your consent at any time without affecting your basic eligibility to use the platform.
• Right to Complain: You have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your privacy rights have been violated.

To exercise any of the rights above, please contact the tk10 data privacy team via email or live chat. We are committed to processing all data rights requests within the timeframe required by law.

8Data Retention Period

Tk10 only retains your personal data for as long as necessary to fulfil the purpose of collection or as required by applicable law. The following are general guidelines for data retention periods:

• Active Account Data: For as long as your account is active and in use.
• Financial Transaction Data: At least 7 years from the transaction date, in accordance with Malaysia's financial legal requirements.
• KYC Documents: At least 5 years after account closure, as required by anti-money laundering regulations.
• Game Log: Up to 2 years for dispute resolution and audit purposes.
• Communication Data (support): Up to 3 years for training and quality assurance purposes.
• Marketing Data: Until you withdraw consent or request deletion.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised so that it can no longer be personally associated with you.

9Changes to the Privacy Policy

Tk10 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in operational practices, legal requirements or service improvements. Whenever this Privacy Policy is updated, we will revise the "Updated" date shown at the top of this page.

For changes deemed material — meaning changes that significantly affect how we process your data — tk10 will endeavour to notify you directly via an in-platform notice or your registered email at least 14 days before the changes take effect.

Continued use of the tk10 platform following any changes to this Privacy Policy constitutes your acceptance of the updated privacy terms. We encourage you to review this page periodically to stay informed of our latest privacy practices.

10Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how tk10 manages your personal data, our data privacy team is ready to assist:

• Live Chat: Available 24/7 directly via the tk10 website or app — the fastest way to get an immediate response.
• Email: [email protected] (Include the subject "Data Privacy" for faster handling)
• WhatsApp: Available through the tk10 app for instant support in Bahasa Melayu and English.

Our team is committed to responding to all privacy-related enquiries within 3 business days. For more complex issues requiring thorough investigation, we will inform you of the expected resolution timeline and provide regular updates.