TWCBets Privacy Policy

This Privacy Policy ("Policy") explains how TWCBets ("the Company", "we", "us", "our") collects, processes, uses, discloses, and protects personal data relating to users ("you", "your") of the TWCBets platform accessible at twcbets.cam ("the Platform"). This Policy forms part of the overall agreement between you and the Company governing your use of the Platform and should be read in conjunction with ourTerms & Conditions.

We are committed to protecting your privacy and handling your personal data with transparency, care, and respect. We collect only the data that is genuinely necessary, retain it only for as long as required, and do not use it for purposes beyond those described in this Policy without your consent.

By registering an account on the Platform or continuing to use our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should discontinue use of the Platform and contact us to close your account.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, or factors specific to the physical, economic, or social identity of that person.
• "Processing" means any operation or set of operations performed upon personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, TWCBets.
• "Data Processor" means any entity that processes personal data on behalf of the Data Controller, including payment processors, KYC verification services, and fraud detection providers.
• "Consent" means any freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data.
• "KYC" means Know Your Customer — the identity and age verification procedures applied to all accounts in accordance with the Company's anti-money laundering obligations.
• "Cookies" means small text files placed on your device by the Platform for the purposes described in Section 8.

TWCBets is the Data Controller responsible for the personal data processed through the Platform. The Company operates under an international online gaming licence (Curacao jurisdiction) and is responsible for ensuring that personal data collected through the Platform is handled in accordance with this Privacy Policy and applicable data protection obligations under its licensing framework.

For all data-related enquiries, rights requests, or privacy concerns, you may contact the Company via the contact details set out in Section 16 of this Policy. We have designated a responsible person to handle privacy matters and will respond to all enquiries in a timely manner.

TWCBets collects the following categories of personal data:

4.1 Registration & Account Data

• Full legal name as it appears on your identity document
• Date of birth (to verify compliance with the21+ age requirement)
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Email address
• Contact telephone number
• Username and encrypted account credentials
• Account preferences and notification settings

4.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Malaysian MyKad, passport)
• Proof of residential address (e.g., utility bill, bank statement)
• Proof of payment method ownership where required
• Selfie or live verification photographs where applicable

4.3 Financial & Transaction Data

• Deposit and withdrawal records including amounts, dates, and payment methods
• Payment method identifiers (e.g., last four digits of a bank account, e-wallet registered mobile number)
• Wagering and gaming activity history
• Account balance history

4.4 Technical & Usage Data

• IP address and geolocation data (country/city level)
• Device type, operating system, and browser information
• Pages visited, features used, and time spent on the Platform
• Session logs and login history
• Error and crash logs

4.5 Communications Data

• Support chat transcripts and email correspondence
• Responses to surveys or feedback requests (if provided voluntarily)
• Marketing preference records

TWCBets processes personal data on the following legal bases:

• Contractual Necessity: Processing required to enter into and fulfil the contractual relationship with you — including account operation, payment processing, and delivery of the Services described in our Terms & Conditions.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and the conditions of our international gaming licence. This includes identity verification, transaction monitoring, and mandatory record retention.
• Legitimate Interests: Processing carried out in pursuit of our legitimate business interests, including fraud detection and prevention, platform security, responsible gambling monitoring, and platform performance optimisation — provided these interests are not overridden by your data protection rights.
• Consent: Where you have provided explicit consent — for example, to receive marketing communications or to participate in optional research surveys. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.

We use the personal data we collect for the following purposes:

• To create, verify, and maintain your TWCBets account.
• To process deposits and withdrawals through your chosen Malaysian payment methods (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, Hong Leong Bank, BTC, USDT).
• To verify your identity and age in compliance with our KYC obligations and to enforce the21+ age restriction.
• To detect, prevent, and investigate fraud, money laundering, and prohibited conduct as defined in our Terms & Conditions.
• To manage responsible gambling tools including deposit limits, self-exclusion, and cooling-off periods.
• To provide customer support via live chat and email.
• To send transactional communications (e.g., deposit confirmations, withdrawal notifications, account security alerts).
• To send marketing communications about promotions and offers, where you have consented or where permitted under applicable rules.
• To personalise your platform experience, including tailored sports markets and game recommendations.
• To monitor and improve platform performance, security, and reliability.
• To comply with our legal, regulatory, and licensing obligations.

TWCBets does not sell, rent, or trade your personal data to third-party marketing organisations. We share personal data only in the following specific circumstances, and only to the extent necessary:

• Payment Processors: Payment data is shared with our verified Malaysian and international payment partners (including providers supporting Touch 'n Go eWallet, DuitNow, FPX, and participating banks) to process deposits and withdrawals.
• KYC & Identity Verification Providers: Identity documents and verification data are processed by accredited third-party KYC service providers. These providers operate under strict data processing agreements and are prohibited from using your data for any purpose beyond verification.
• Fraud & Security Services: Technical usage data including IP addresses and device fingerprints may be shared with fraud detection and cybersecurity partners to protect all Platform users.
• Game & Software Providers: Where you play games delivered by third-party software studios, anonymised gameplay data may be transmitted to those providers for the purpose of delivering the game service.
• Legal & Regulatory Authorities: Where required by law, court order, or a directive from a competent regulatory authority, the Company may disclose personal data to governmental bodies or law enforcement agencies.
• Business Transfers: In the event of a merger, acquisition, or restructuring of the Company, personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection commitments.

All third parties with whom we share data are required to handle it in accordance with applicable data protection standards and are prohibited from using it for purposes beyond those for which it was shared.

The TWCBets Platform uses cookies and similar technologies (including web beacons, pixel tags, and local storage) to operate effectively, ensure security, and improve your experience. The cookies we use fall into the following categories:

• Essential Cookies: Required for the Platform to function. These include session authentication, fraud prevention tokens, and load-balancing identifiers. These cookies cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: Used to understand how users interact with the Platform — which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is used in aggregate form to improve the product.
• Functional Cookies: Store your preferences such as language, currency display, and odds format to personalise your experience across sessions.
• Security Cookies: Used to detect unusual login activity, manage two-factor authentication sessions, and prevent account takeover attacks.

You can manage non-essential cookies through your browser's cookie settings. Please note that disabling certain cookies may affect the performance or functionality of the Platform. Most major browsers (including those on Android and iOS devices commonly used in Malaysia) provide straightforward controls for managing cookie preferences.

The security of your personal data is a priority for TWCBets. We implement a range of technical and organisational security measures appropriate to the sensitivity of the data processed, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage for all sensitive personal data and identity documents.
• Strict access controls — only authorised personnel with a legitimate operational need may access personal data, and all such access is logged and audited.
• Two-factor authentication (2FA) options for all registered accounts.
• Regular security assessments, penetration testing, and vulnerability scanning of our platform infrastructure.
• Incident response procedures to manage and notify of data breaches in accordance with applicable obligations.

While we implement robust security measures, no system is entirely immune from the risk of unauthorised access. You are responsible for maintaining the confidentiality of your account credentials. If you suspect any unauthorised access to your account, please contact our support team immediately.

We retain personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with our legal and regulatory obligations. The following retention periods apply:

• Account & Transaction Data: Retained for the duration of your account and for a minimum period of five (5) years following account closure. This is required to comply with anti-money laundering (AML) regulations applicable under our international licensing framework.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Support Communications: Retained for three (3) years from the date of the communication to facilitate dispute resolution.
• Technical & Usage Logs: Typically retained for twelve (12) months for security and performance monitoring purposes, and then deleted or anonymised.
• Marketing Preferences: Retained for the duration of your account. Opt-out records are retained indefinitely to ensure we honour your marketing preferences.

After the applicable retention period has elapsed, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

As an internationally operated platform, your personal data may be processed by our team or service providers in jurisdictions outside of Malaysia. This may include countries where data protection standards differ from those in your home jurisdiction.

Where personal data is transferred internationally, we take appropriate measures to ensure that adequate protections are in place, including:

• Entering into appropriate data processing agreements with service providers that impose equivalent data protection obligations.
• Working only with providers who maintain internationally recognised security certifications or operate under equivalent data protection standards.
• Applying technical safeguards including encryption for all data in transit.

By using the Platform, you consent to the processing of your personal data in locations outside of Malaysia as described in this section.

The TWCBets Platform is strictly for persons aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. All accounts are subject to mandatory KYC verification which includes confirmation of date of birth.

If we discover or are notified that an account holder is under 21 years of age, we will immediately suspend that account, void any bonus funds and winings, and delete all personal data associated with that account to the extent legally permissible. Any deposited real money funds held in underage accounts will be handled in accordance with our Terms & Conditions and applicable legal requirements.

If you have reason to believe that a minor has registered an account on the Platform, please contact us immediately at the address in Section 16.

With your consent, TWCBets may send you promotional communications about offers, bonuses, new sports markets, seasonal promotions, and other platform updates. These communications may be sent by email or via in-platform notifications.

Opting Out: You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in any promotional email.
• Updating your communication preferences through your account settings.
• Contacting our support team directly [email protected] with a request to opt out of marketing communications.

Opt-out requests will be actioned within 48 hours. Please note that even after opting out of marketing communications, you will continue to receive transactional communications that are necessary for the operation of your account (e.g., deposit confirmations, withdrawal notices, security alerts, and KYC requests). These communications are not marketing and cannot be opted out of while your account remains active.

We do not engage in SMS marketing without explicit opt-in consent and do not share your contact details with third-party marketing organisations for their independent marketing use.

Subject to applicable law and any overiding legal obligations, you have the following rights in relation to your personal data:

• Right of Access: Request a copy of all personal data held about you, free of charge, with a response within 30 days.
• Right to Rectification: Request correction of any inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where it is no longer required for the purpose for which it was collected, subject to any mandatory retention obligations.
• Right to Restrict Processing: Request that processing of your personal data be suspended in certain circumstances.
• Right to Data Portability: Request your personal data in a portable, machine-readable format where technically feasible.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw any previously given consent for processing at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a written request to [email protected]. Include your registered email address, the right you wish to exercise, and sufficient detail to allow us to identify your account and respond accurately. We will acknowledge your request within 2 business days and aim to resolve all rights requests within 30 days.

TWCBets reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform operations. Where changes are material — for example, if we introduce a new category of data collection or a new purpose for processing — we will provide reasonable notice to users by posting a notice on the Platform or by sending an email to your registered address prior to the changes taking effect.

The effective date of the current version of this Privacy Policy is displayed at the top of this page. We recommend reviewing this Policy periodically — at least once every six months — to remain informed about how we handle your personal data.

Your continued use of the Platform after any revision to this Policy takes effect constitutes acceptance of the revised terms. If you disagree with a revision, please contact us to discuss your options, which may include account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by TWCBets, please contact using the details below:

We take all privacy enquiries seriously. Our team is available in English and familiar with the needs of Malaysian users. Whether your question relates to data access, correction, deletion, or marketing preferences, we are here to help.