Privacy Policy

Introduction

tpower1 ("we", "us", "our", "the Company") operates the online casino and sports betting platform accessible at https://tpower1.cam (the "Platform"). We respect the privacy of every individual who uses our Platform ("you", "User", "Player") and are committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles.

This Privacy Policy describes our practices with respect to the collection, use, storage, sharing, and protection of personal data submitted to or collected through the Platform. It applies to all registered players, visitors who browse the Platform without registering, and any individual who communicates with tpower1 through our support channels.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

Definitions

The following terms are used throughout this Privacy Policy and carry the meanings assigned below:

Data We Collect

tpower1 collects only the data necessary to operate the Platform, maintain account security, comply with our legal and licensing obligations, and deliver a high-quality service to Malaysian players. The categories of personal data we process are as follows:

3.1 Registration Data

When you create an Account, we collect:

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Email address;
• Contact telephone number;
• Residential address (including city — e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam);
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

To comply with our licensing and anti-money laundering obligations, we may request and process:

• Copies of government-issued identity documents (e.g., Malaysian MyKad or passport);
• Proof of address documentation (e.g., utility bill, bank statement dated within three months);
• Proof of ownership of the payment method used for deposits (e.g., e-wallet account screenshots, bank statements);
• Selfie or liveness verification images where required.

3.3 Financial Transaction Data

We process data related to your deposits and withdrawals, including:

• Payment method type and partial account identifiers (e.g., last four digits of a bank account or Touch 'n Go eWallet reference);
• Transaction amounts, timestamps, and reference numbers;
• Currency (MYR or cryptocurrency equivalent where applicable);
• Withdrawal and deposit history associated with your Account.

3.4 Technical & Device Data

When you access the Platform, we automatically collect:

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, and browser information;
• Session duration, page interaction data, and clickstream information;
• Cookie identifiers and session tokens.

3.5 Behavioural and Gaming Data

We collect records of your activity on the Platform, including:

• Wagers placed, game sessions, bet history, and settlement records;
• Bonus claims, promotional participation, and VIP tier activity;
• Responsible gambling tool usage (e.g., deposit limit settings, self-exclusion requests);
• Support ticket content and communication records.

3.6 Communications Data

Where you contact us by email, live chat, or any other channel, we retain the content of those communications along with associated metadata (timestamp, channel, and agent identifier) for quality assurance, dispute resolution, and regulatory compliance purposes.

How We Collect Data

tpower1 collects personal data through the following means:

• Directly from you — through account registration, KYC submissions, deposit and withdrawal requests, form submissions, and direct communications with our support team;
• Automatically — through cookies, server logs, session analytics, and device fingerprinting technologies when you access or interact with the Platform;
• From third parties — from KYC and identity verification service providers, payment processors, and fraud prevention services that we engage as Data Processors;
• From publicly available sources — where required for AML screening or sanctions checking, we may verify information against publicly accessible databases.

Data Processing & Purpose

The table below sets out the primary purposes for which tpower1 processes your personal data and the categories of data involved:

Legal Basis for Processing

tpower1 processes personal data on the following legal bases, consistent with international data protection principles:

• Contractual necessity: Processing required to perform the contract formed when you register an Account and use the Platform — including identity verification, transaction processing, and account management;
• Legal obligation: Processing required to comply with applicable laws and our licensing obligations, including KYC, AML, and record-keeping requirements;
• Legitimate interests: Processing carried out for tpower1's legitimate operational interests where those interests are not overridden by your rights — including fraud prevention, platform security, and business analytics;
• Consent: Processing for optional activities where you have provided clear, informed consent — including marketing communications and certain non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

tpower1 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:

7.1 Service Providers and Data Processors

We engage third-party service providers acting as Data Processors under contractual agreements that restrict their use of your data to the specific services they provide to tpower1. These include:

• Payment processors and financial institutions facilitating deposits and withdrawals (including providers of FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency settlement services);
• KYC and identity verification technology providers;
• Cloud infrastructure and data hosting providers;
• Customer support platform providers;
• Fraud detection and anti-money laundering screening services;
• Analytics and platform performance monitoring tools.

7.2 Legal and Regulatory Disclosure

We may disclose personal data where required to do so by applicable law, court order, regulatory authority, or our licensing body. In such cases, disclosure is limited to the minimum data necessary to satisfy the legal requirement.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of tpower1's assets, personal data held by the Company may be transferred to the acquiring entity subject to equivalent data protection commitments. Users will be notified of any such transfer where required by applicable law.

7.4 No Third-Party Marketing

tpower1 does not disclose your personal data to any third party for the purpose of that party's own marketing, advertising, or commercial activities. We do not participate in data brokerage arrangements of any kind.

Cookies & Tracking Technologies

tpower1 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session continuity, and improve the user experience. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, load balancing cookies, and security cookies. They cannot be disabled without affecting Platform functionality;
• Functional Cookies: Store your preferences such as language settings, game display options, and deposit method preferences to personalise your experience;
• Analytical Cookies: Collect aggregated, anonymised data on how the Platform is used — including pages visited, session duration, and error events — to help us improve performance;
• Marketing Cookies (where consented): Used to deliver relevant promotional content based on your activity on the Platform. These are only activated where you have explicitly consented.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform. A more detailed cookie preference interface is available via the Platform settings panel.

Data Retention

tpower1 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any overriding retention obligations imposed by our licensing authority or applicable law.

Where personal data is no longer required, it is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

Data Security

tpower1 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the Platform;
• Encryption at rest for sensitive data categories including KYC documents and financial account identifiers;
• Role-based access controls restricting internal access to personal data on a need-to-know basis;
• Multi-factor authentication for internal administrative access to data systems;
• Regular security assessments and penetration testing of Platform infrastructure;
• Incident response procedures for detecting and responding to data security incidents in a timely manner.

User Rights

Subject to applicable law and our legitimate retention obligations, you have the following rights with respect to your personal data held by tpower1:

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) business days and aim to respond substantively within thirty (30) days. Identity verification will be required before any data access or deletion request is processed.

International Data Transfers

tpower1 operates on an international platform and may process or store personal data on servers located outside Malaysia. Where personal data is transferred to countries that may not have equivalent data protection laws to those in Malaysia, we implement appropriate safeguards to ensure your data continues to receive an adequate level of protection.

Such safeguards include contractual data processing agreements with Data Processors that incorporate standard data protection clauses, and the selection of service providers that demonstrate compliance with internationally recognised security standards.

Minors

The Platform is strictly for adults aged 21 years and above. tpower1 does not knowingly collect personal data from individuals under the age of 21. If we become aware that an Account has been created by or on behalf of a person under 21, we will suspend the Account, delete the associated personal data (to the extent permitted by our legal obligations), and void any transactions connected to that Account.

If you have reason to believe that a person under the age of 21 has submitted personal data to tpower1, please contact us immediately at [email protected].

Policy Changes

tpower1 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we provide. Where material changes are made, we will notify registered Users by email to their registered address and/or by a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this document will be updated with each revision. We encourage you to review this Privacy Policy periodically to remain informed about how we protect your personal data. Your continued use of the Platform following any update constitutes acceptance of the revised Policy.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about how your personal data has been handled, please contact our Data Privacy team through the following channels:

We aim to acknowledge all formal privacy enquiries within 48 hours and to provide a substantive response within thirty (30) calendar days. For complex requests, we will notify you if additional time is required.