THB168 Privacy Policy – Malaysia Member Personal Data Protection

Thb168 collects various types of information from members for lawful and transparent purposes. This data collection is necessary to ensure the platform operates securely, meets legal requirements, and delivers the best experience to every user in Malaysia.

Information you provide directly:

• Account registration information: full name, date of birth, email address, mobile number, and password.
• Identity verification documents (KYC): a copy of MyKad, passport, or other valid identity document.
• Financial information: bank account details, bank name, and account number for deposit and withdrawal purposes.
• Address information: current residential address and postcode for AML compliance purposes.
• Communication information: the content of messages you send to our customer support team.

Information collected automatically:

• Technical data: IP address, web browser type, operating system, and device screen resolution.
• Activity data: login records, pages visited, games played, and session duration.
• Transaction data: deposit history, withdrawals, wagering, and wins within the platform.
• General geolocation data: country or region detected based on IP address.
• Mobile device information: device model, operating system version, and unique device identifier when using the thb168 app.

All data collection is carried out with a clear purpose and does not exceed the scope necessary for the safe and responsible operation of the platform.

Thb168 uses the personal data collected for purposes that are lawful, responsible, and transparent. We do not use your data for any purpose unrelated to platform operations or that could be detrimental to your interests.

For marketing communications such as promotional notifications and exclusive offers, we will obtain your explicit consent in advance. You may withdraw this consent at any time through your account settings without any penalty.

Thb168 takes a highly cautious approach to sharing members' personal data. Our core principle is simple: we do not share your data unless there is a clear, lawful, and reasonable need to do so.

We only share your data in the following situations:

• Payment service providers: Providers such as DuitNow, FPX, Touch 'n Go eWallet, and GrabPay receive the information required to process your financial transactions. They are bound by strict data protection agreements.
• Game software providers: Our game technology partners receive only the minimum data required to display games and securely store wagering records.
• Regulatory authority: thb168 fully complies with lawful requests from Malaysian government agencies, anti-money laundering (AML) bodies, and other authorities with legal jurisdiction.
• Technical service providers: The cloud infrastructure providers, transactional email services, and customer support platforms we use may process some of your data, but they are bound by strict confidentiality agreements and are not permitted to use that data for their own purposes.

In all data-sharing situations, THB168 ensures that the receiving party has data protection measures equivalent to or exceeding our own standards.

The security of your personal data is a responsibility we take extremely seriously. thb168 continuously invests in the latest security infrastructure to ensure your information is always protected against unauthorized access, data theft, and all forms of cyber threats.

The technical security measures we employ include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols for all communication between client and server.
• Encryption of stored data (data at rest) using the AES-256 algorithm for all databases containing sensitive member information.
• Strict role-based access control (RBAC), ensuring only authorised staff can access member data, and only for legitimate work purposes.
• Next-generation intrusion detection systems (IDS) and firewalls that continuously monitor network traffic.
• Regular security audits by independent third parties to identify and address any system vulnerabilities.
• Two-factor authentication (2FA) for internal administrative access, ensuring employee accounts cannot be compromised even if a password is leaked.

While we take all reasonable precautions, no digital system can guarantee 100% absolute security. We therefore encourage members to also take personal steps such as using a strong and unique password and never sharing their login credentials with anyone.

As a thb168 member and owner of your own personal data, you have rights protected under Malaysia's Personal Data Protection Act 2010 (PDPA) and our internal policies. thb168 is committed to respecting and facilitating the exercise of these rights without any undue obstacles.

Thb168 uses cookies and similar tracking technologies to enhance platform functionality and security. Cookies are small text files stored on your device when you visit our website or use the thb168 mobile app.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management, account security, and transaction processing. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helping us understand how members use the platform through aggregated and anonymized data. This information is used solely to improve the user experience.
• Functional Cookies: Remembering your preferences such as language, display settings, and game choices to deliver a more personalized experience.
• Security Cookies: Used to detect and prevent fraudulent activity, ensuring only legitimate users can access their accounts.

You can manage or delete cookies through your web browser settings. Please note, however, that disabling essential cookies may affect the functionality and security of the platform.

In the course of operating a global platform, your personal data may be processed outside Malaysia, specifically in countries where our cloud infrastructure providers and technology partners operate. THB168 ensures that any such data transfers are carried out with adequate safeguards in place.

The steps we take to protect data in cross-border transfers include:

• Only working with service providers that comply with internationally recognised data protection standards.
• Signing Data Processing Agreements (DPA) with all third-party vendors involved in processing member data.
• Ensuring destination countries have data protection legal frameworks equivalent to or exceeding Malaysia's standards.
• Using recognized data transfer mechanisms such as standard contractual clauses where applicable.

Thb168 is a platform designed exclusively for adults aged 18 and above. We do not intentionally collect, process, or store personal data from individuals under the age of 18.

All prospective members are required to confirm that they meet the minimum age requirement during the registration process, and the subsequent identity verification (KYC) will validate this information. Should thb168 discover that personal data of a minor has been inadvertently collected, we will take immediate steps to delete that data and close the account in question.

Parents and guardians who have concerns about their children's use of the platform are encouraged to contact the THB168 support team immediately.

The thb168 platform may contain links or integrations with third-party services such as payment providers and game software suppliers. This Privacy Policy applies only to data collected and processed directly by thb168.

Thb168 is not responsible for the privacy practices or content of third-party websites or services. We strongly encourage you to read the privacy policy of every third-party provider whose services you access through or in connection with the thb168 platform. Your interactions with third parties are solely between you and those parties.

Thb168 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform improvements. Each updated version will be published on this page with a clear effective date.

For significant changes that materially affect your privacy rights, thb168 will notify you via your registered email or a prominent notice within the platform at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision.

Continued use of the thb168 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to close your account and withdraw any valid balance in accordance with our standard procedures .

If you have any inquiries or concerns, or wish to exercise your privacy rights, THB168's Data Protection Officer (DPO) team is ready to assist you. We are committed to responding within 14 business days for every inquiry received.

You may contact us via:

• Privacy Email: [email protected]
• Live Support: Via the Live Chat feature within the thb168 platform, available 24 hours a day, 7 days a week.
• FAQ Page: For general privacy-related enquiries, please visit the FAQ our page.

When contacting us regarding privacy, please include your full name, THB168 account username, and a clear description of your inquiry or request. This helps us process your request more quickly and accurately.