Privacy Policy tgn40 – Our Commitment to Protecting Malaysian Players' Personal Data

Tgn40 is an online entertainment platform operating in Malaysia. We understand that your trust in us depends greatly on how we handle the personal information you provide. As such, we take a transparent and responsible approach to all matters relating to data privacy.

This Privacy Policy applies to all individuals who:

• Visiting the tgn40.my website even without registering an account.
• Registering an account as a tgn40 member.
• Using the tgn40 mobile app on an iOS or Android device.
• To communicate with tgn40's customer support team through any available channel.
• Participating in tgn40 promotions, contests, or loyalty programmes.

Tgn40 collects your personal data through various means depending on how you interact with our platform. The categories of data we may collect are as follows:

a) Data You Provide Directly:

• Registration Information: Full name, Malaysian phone number, email address (where required), date of birth, and account password.
• Identity Verification Information (KYC): A copy of your identity card (MyKad) or passport, your identification number, and any other documents required to verify your identity in compliance with legal requirements.
• Payment Information: Details of the payment methods you use, including the phone number linked to Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or bank account information for FPX (Maybank2u, CIMB Clicks). We do not store credit or debit card numbers directly.
• Communications: Records of your conversations with the tgn40 customer support team via live chat or email.

b) Automatically Collected Data:

• Usage Data: Information on how you use the tgn40 platform, including games played, session duration, total wagers placed, and transaction history.
• Technical Data: IP address, device type, operating system, web browser type, unique device identifier, and other relevant technical information.
• Cookie Data: Information collected through cookies and tracking technologies, as further described in Section 8.

Tgn40 uses the personal data we collect solely for legitimate, stated purposes. We do not use your data for any other purpose without obtaining fresh consent from you. These purposes are:

• Account Management: Creating and managing your tgn40 account, processing your registration, and verifying your identity.
• Transaction Processing: Processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and other Malaysian payment methods securely and accurately.
• Service Provision: To enable you to access and enjoy all the games and services available on the tgn40 platform.
• Security & Fraud Prevention: To detect and prevent fraud, money laundering, multiple account usage, and any activity that violates tgn40's Terms & Conditions.
• Legal Compliance: To fulfil tgn40's legal obligations under Malaysia's PDPA 2010 and other applicable laws, including anti-money laundering (AML) requirements.
• Customer Support: Providing assistance and resolving any issues you encounter while using the tgn40 platform.
• Promotional Communications: Sending information about tgn40 bonuses, promotions, and special offers that may interest you — only if you have given your consent to receive such communications.
• Platform Improvements: Analysing aggregated usage patterns to improve the user experience, platform performance, and tgn40's game library.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and providing the necessary support to tgn40 members who may need it.

Tgn40 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, we may need to share certain information with selected third parties in the following circumstances:

• Service Provider: Companies we engage to provide services on tgn40's behalf, including game providers (Pragmatic Play, Spadegaming, Evolution Gaming, etc.), payment gateway providers, and IT service providers. These vendors may only use your data for purposes specified by tgn40 and are bound by strict confidentiality agreements.
• Legal Authorities: tgn40 may be required to disclose your personal data to Malaysian authorities if mandated to do so by law, court order, or in the context of fraud or anti-money laundering investigations.
• Business Sharing: Should tgn40 undergo a merger, acquisition, or asset sale, members' personal data may be transferred as part of that transaction. We will notify you in advance and ensure that the receiving party is bound by a privacy policy of an equivalent standard.

Tgn40 takes data security seriously and has put in place robust technical and organisational measures to ensure your personal information remains protected at all times. These include:

• 256-bit SSL Encryption: All communications between your device and tgn40's servers are encrypted using the latest TLS/SSL protocols, ensuring data cannot be intercepted while in transit.
• Stored Data Encryption: Sensitive data stored on tgn40 servers — including passwords (stored as irreversible hashes) and identity verification information — is protected by database-level encryption.
• Role-Based Access Control: Only tgn40 staff with a legitimate operational need are permitted to access members' personal data, with detailed audit logs maintained for every access.
• Two-Factor Authentication (2FA): tgn40's internal systems require 2FA for all staff accessing systems that contain members' personal data.
• Continuous Monitoring: tgn40's security systems continuously monitor platform activity to detect any unauthorised access attempts or suspicious behaviour.
• Regular Security Audits: tgn40 conducts regular penetration testing and independent security audits to ensure our systems remain resilient against the latest threats.

Tgn40 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: For as long as your tgn40 account remains active or operational.
• Transaction Data: At least 7 years from the date of the transaction, in accordance with Malaysia's tax and financial regulatory requirements.
• Identity Verification (KYC) Data: For a minimum of 5 years after account closure, in line with Malaysia's anti-money laundering (AML) requirements.
• Support Communication Data: Up to 3 years after the last communication, for reference purposes and in the event a dispute arises.
• Data After Account Closure: Once an account is closed and the mandatory retention period has expired, your personal data will be securely deleted or anonymised from tgn40's systems.

If you request the deletion of your data before the mandatory retention period has ended, tgn40 will inform you which data can be deleted immediately and which must be retained to meet legal requirements, along with the applicable retention period.

Under Malaysia's PDPA 2010 and tgn40's policies, you have the following rights regarding the personal data we hold about you:

• Right of Access: You have the right to request a copy of the personal data we hold about you. tgn40 will provide this information within 21 working days.
• Right to Rectification: If the personal data we hold is inaccurate or incomplete, you have the right to request a correction. You may also update certain information directly through your tgn40 account settings.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data – subject to our legal obligations to retain specific data for prescribed periods.
• Right to Restrict Processing: You may request that we restrict how we process your personal data in certain situations — for example, while we are verifying the accuracy of data you have disputed.
• Right to Withdraw Consent: You may withdraw consent previously given for specific data processing activities (such as marketing communications) at any time, without affecting any processing that took place prior to the withdrawal.
• Right to Complain: You have the right to lodge a complaint with Malaysia's data protection authority if you believe that tgn40 has violated your privacy rights.

To exercise any of the rights above, please contact tgn40's data protection team by email at [email protected], clearly stating your request. We will verify your identity before processing any data-related request.

Tgn40 uses cookies and similar tracking technologies to enhance your experience on our platform, maintain the security of your session, and understand how users interact with the platform.

Types of cookies used by tgn40:

• Essential Cookies: Cookies essential for the tgn40 platform to function correctly, including login session cookies and security cookies. These cannot be disabled without affecting the platform's core functionality.
• Preference Cookies: Cookies that remember your preferences such as language, display settings, and your favourite games on tgn40, so you do not have to reconfigure them each time you visit.
• Analytics Cookies: tgn40 uses analytics cookies to understand aggregated, anonymised platform usage patterns, helping us continuously improve our services.
• Security Cookies: Cookies that help tgn40 detect suspicious activity and prevent fraud or unauthorised access.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality of the tgn40 platform. Continued use of the tgn40 platform after being notified of our cookie practices will be taken as your consent to their use.

The tgn40 platform may contain links or integrations to third-party services such as payment gateways (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX) and game providers. When you access these third-party services, you will be subject to their respective privacy policies, which may differ from tgn40's Privacy Policy.

Please note that when you make a deposit via Touch 'n Go eWallet or GrabPay, for example, those e-wallet providers have access to transaction information in accordance with their own privacy policies. tgn40 only receives confirmation that the payment was successful and does not receive your full account details on those third-party platforms.

The tgn40 platform is strictly for individuals aged 18 and above. tgn40 does not knowingly collect or process personal data from anyone under the age of 18.

Should we discover that we have collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the account in question. Parents and guardians who suspect their child has registered an account on tgn40 are encouraged to contact us promptly at [email protected] so that swift action can be taken.

Tgn40 may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to tgn40's services. When we make significant changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice on the tgn40 platform regarding the changes.
• Sending notifications to tgn40 members via their registered mobile number or email address regarding important changes.

We encourage you to review this Privacy Policy periodically. Your continued use of the tgn40 platform after any changes take effect will be considered your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how tgn40 handles your personal data, please contact us via:

• Email: [email protected]
• Live Chat: Available 24/7 on the tgn40 platform (average response time under 3 minutes)
• Language of Service: Bahasa Malaysia and English

Tgn40 is committed to addressing privacy concerns seriously and within a reasonable timeframe. We will acknowledge receipt of your enquiry within 3 business days and endeavour to provide a full response within 21 business days.