Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by tpower3 ("tpower3", "we", "us", "our") and applies to all personal data processed in connection with your use of the tpower3 platform, accessible at tpower3.cam (the "Platform"), including all associated services, games, sports betting markets, VIP programmes, and customer support interactions.

This Policy is intended to provide you with a clear, transparent, and comprehensive account of how tpower3 handles personal data. We are committed to processing personal data responsibly, lawfully, and in accordance with applicable data protection principles.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which contain provisions relevant to how we handle account-related and compliance-related data. In the event of any conflict, the specific provisions of the relevant policy shall take precedence.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information that identifies or could reasonably identify a living individual, either directly (e.g., name, identity card number) or indirectly (e.g., IP address, player ID combined with other data).
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, deletion, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. tpower3 is the Data Controller for personal data processed through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of tpower3 under contractual instruction (e.g., payment processors, fraud detection providers).
• "Data Subject" — the individual whose personal data is being processed; in this context, you as a registered player or visitor to the Platform.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "Special Category Data" — sensitive personal data warranting heightened protection, such as health data (relevant in the context of responsible gambling assessments).

Data Controller Information

tpower3 is the Data Controller responsible for the personal data of all registered players and visitors to the Platform. Our designated contact for data protection enquiries is the tpower3 Data Protection Team, reachable through the support channels set out in Section 15 (Contact Us) of this Policy.

Where tpower3 engages third-party Data Processors — including but not limited to payment gateway providers, KYC verification services, fraud detection technology providers, and game content suppliers — those processors operate under contractual Data Processing Agreements that impose obligations consistent with this Policy. tpower3 remains responsible for ensuring those processors handle your data appropriately.

Personal Data We Collect

tpower3 collects personal data across several categories, depending on your interaction with the Platform. The table below summarises the key categories, examples of data within each, and the primary collection method:

We do not knowingly collect sensitive personal data beyond what is strictly necessary for compliance purposes (e.g., health-related information provided voluntarily in connection with a responsible gambling self-assessment). Where such data is provided, it is handled under heightened protections and used solely for the purpose for which it was submitted.

Lawful Basis for Processing

tpower3 processes personal data only where a valid lawful basis exists. The following bases apply across the categories of data described in Section 04:

• Contractual Necessity: Processing required to create and manage your account, process deposits and withdrawals, and deliver the games and services you have contracted to receive. Without this processing, we cannot provide the Platform to you.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) obligations, and other applicable regulatory requirements. This includes retention of transaction records and KYC documentation for mandated periods.
• Legitimate Interests: Processing undertaken to protect the security and integrity of the Platform, prevent fraud and bonus abuse, and improve the quality of our services. We carry out legitimate interests assessments to ensure these interests do not override your privacy rights.
• Consent: Where you have opted in to receive marketing communications or where processing is not otherwise justified under the above bases. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

How We Use Your Data

tpower3 uses the personal data it collects for the following specific purposes. Each purpose is linked to a lawful basis as described in Section 05:

Account Management & Service Delivery

We use your identity, contact, and financial data to register your account, verify your identity and age (21+ requirement), process deposits and withdrawals via DuitNow, FPX, e-wallets, and supported Malaysian banks, maintain your account balance, and communicate essential service notifications.

Security & Fraud Prevention

Technical data, financial data, and gameplay records are analysed to detect and prevent fraudulent activity, multi-accounting, bonus abuse, and money laundering. This processing is essential for the integrity of the Platform and the security of all players.

Regulatory Compliance

Identity, financial, and compliance data is used to fulfil obligations under applicable AML, KYC, and gaming regulations. Transaction records and KYC documentation are retained for the periods mandated by those regulations.

Responsible Gambling

Gameplay data is used to monitor for indicators of problem gambling behaviour and to apply responsible gambling tools (deposit limits, self-exclusion, cool-off periods) accurately and promptly. Where a player voluntarily provides health or wellness information in connection with a self-exclusion request, that information is treated as special category data.

Platform Improvement & Analytics

Aggregated and anonymised technical and gameplay data is used to improve platform performance, identify bugs, optimise user experience, and develop new features. No personally identifiable data is used in published analytics.

Marketing Communications (with Consent)

Where you have opted in, we may use your contact data to send you personalised offers, bonus notifications, and updates about tpower3 services. You may opt out of marketing communications at any time by contacting our support team.

Data Sharing & Third Parties

tpower3 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following limited circumstances:

• Payment Processors: Financial data is shared with our payment processing partners — including DuitNow operators, FPX network participants, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency processing services — solely to facilitate deposits and withdrawals.
• KYC & Identity Verification Providers: Identity and document data is shared with our contracted KYC verification partners to complete account verification as required by applicable regulations.
• Fraud Detection & Security Providers: Technical and transactional data may be shared with fraud detection service providers under Data Processing Agreements for the purpose of Platform security.
• Game Content Suppliers: Where gameplay data is necessary for the delivery of third-party game content (e.g., live dealer games), the minimum necessary data is shared with those licensed providers under contractual protections.
• Regulatory Authorities: We may be required by law to disclose personal data to governmental or regulatory authorities, including in response to lawful requests relating to AML investigations or gaming licence compliance.
• Professional Advisers: Legal, accounting, and audit professionals may have access to personal data under strict confidentiality obligations where required in connection with their professional engagements.

Data Retention

tpower3 retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or regulation. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account relationship with tpower3, plus a post-closure retention period as required by AML and gaming regulations (typically 5–7 years from account closure, depending on applicable jurisdiction).
• Transaction Records: Financial transaction records, including deposit and withdrawal history denominated in MYR, are retained for a minimum of 5 years from the date of the transaction to satisfy AML record-keeping obligations.
• KYC Documentation: Identity and verification documents are retained for a minimum of 5 years from account closure or from the date of KYC completion, whichever is later.
• Communications Data: Support correspondence and live chat transcripts are retained for a minimum of 2 years for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Records of marketing consent and opt-out are retained indefinitely to demonstrate compliance with consent obligations.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised in a manner that renders it permanently non-identifiable.

Data Security

tpower3 implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the tpower3 platform.
• Encryption of sensitive data at rest, including financial records and KYC documentation, using AES-256 or equivalent standards.
• Access controls that restrict personal data access to employees and contractors who require it for legitimate business purposes, enforced through role-based permission systems.
• Two-factor authentication (2FA) requirements for administrative access to systems that process personal data.
• Regular internal security audits, vulnerability assessments, and penetration testing conducted by qualified security professionals.
• Incident response procedures designed to detect, respond to, and notify affected parties of any personal data breach within applicable regulatory timeframes.

While tpower3 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all threats. You are encouraged to use a strong, unique password for your tpower3 account and to enable 2FA through your account security settings.

Cookies & Tracking Technologies

tpower3 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and gather analytical data to improve our services. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session management cookies that maintain your login state and security tokens. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, last-visited game category, and responsible gambling tool configurations.
• Analytical Cookies: Used to collect aggregated information about Platform usage — page visits, feature interactions, session duration — to inform product improvements. This data is processed in anonymised or pseudonymised form.
• Fraud Prevention Cookies: Technical markers used alongside IP data to detect multi-accounting, bonus abuse, and other fraudulent behaviour patterns.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling functional cookies will result in loss of personalisation. Analytical and fraud prevention cookies support the security and improvement of the service but are not strictly essential for basic access.

International Data Transfers

tpower3 operates with infrastructure and service partners located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, tpower3 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that provided under this Policy.

Safeguards used for international transfers include: contractual Data Processing Agreements with receiving entities, transfers to jurisdictions with data protection frameworks recognised as providing adequate protections, and where necessary, supplementary technical or organisational measures to address jurisdiction-specific risks.

If you would like further information about the safeguards applicable to a specific international transfer of your data, please contact us using the details in Section 15.

Your Rights as a Data Subject

As a Data Subject whose personal data is processed by tpower3, you hold the following rights. To exercise any of these rights, please contact our support team using the channels set out in Section 15: