Privacy Policy — ttb88 Platform

The ttb88 platform is operated by the Operator ("ttb88", "we", "us", "our"), a company licensed under an international gaming authority to provide online gaming services. The Operator acts as the data controller in respect of personal data collected from registered members and visitors to ttb88.app.

This Privacy Policy applies to all personal data collected through the ttb88 website at ttb88.app, any associated mobile-optimised versions of the site, and any direct communications between ttb88 and its members (including support chat sessions and email correspondence). It does not apply to third-party gaming software providers whose products are accessible through the ttb88 lobby — those providers operate under their own data practices, which are separate from ttb88's.

For any privacy-related enquiries, including subject access requests, data correction requests, or concerns about our data practices, you may contact the ttb88 data protection team by email at the address listed on this site. We will respond within the timeframes prescribed by applicable law, and no later than 30 calendar days in all cases.

ttb88 collects personal data in three principal ways: directly from you when you register or interact with the platform; automatically through your use of the ttb88 website; and from third-party sources where necessary for identity verification or fraud prevention.

2.1 Data You Provide Directly

• Full legal name and date of birth (as it appears on your Malaysian IC / MyKad).
• Malaysian mobile number used as your account identifier and for OTP verification.
• Email address for account notifications and correspondence.
• Residential address in Malaysia, collected during KYC verification.
• Government-issued identity document (MyKad or passport) for KYC verification — image only; number and metadata retained per licensing requirements.
• Payment method details, including e-wallet identifiers (Touch n Go, Boost, GrabPay), bank account details (Maybank, CIMB, Hong Leong Bank, Public Bank), and cryptocurrency wallet addresses (USDT TRC20).
• Source of funds information where required by anti-money laundering compliance procedures.
• Communications you send to ttb88 support, including live chat transcripts and support ticket contents.

2.2 Data Collected Automatically

• IP address and approximate geographic location derived from IP at the time of login and each session.
• Device information, including device type, operating system, browser type and version.
• Session data, including login timestamps, pages visited, games played, bet amounts, and session duration.
• Cookie and tracking technology data as described in Section 6 of this policy.

ttb88 uses the personal data we collect for the following purposes, each of which is described alongside the legal basis relied upon:

• Account Administration: Creating and maintaining your ttb88 member account, including identity verification, password reset processes, and KYC compliance. Legal basis: contractual necessity and regulatory obligation.
• Service Delivery: Processing deposits, withdrawals, bets, game results, and bonus credits. Without this processing, we cannot provide the core ttb88 service to you. Legal basis: contractual necessity.
• Anti-Money Laundering & Fraud Prevention: Monitoring transactions and account behaviour for indicators of money laundering, financial fraud, or multi-accounting. Legal basis: legal obligation under licensing conditions.
• Responsible Gaming: Monitoring account behaviour against responsible gaming indicators, applying deposit limits and session controls, and in cases of identified problem gambling patterns, proactively contacting the member. Legal basis: legal obligation and legitimate interest.
• Communications: Sending transaction confirmations, security alerts, and platform-wide service notices. Where you have opted in, sending promotional communications about ttb88 offers and bonuses. Legal basis: contractual necessity for transactional communications; consent for marketing communications.
• Platform Improvement: Analysing anonymised aggregate usage data to improve the ttb88 user experience, identify technical issues, and plan product development. Legal basis: legitimate interest.
• Legal Compliance: Responding to lawful requests from competent authorities, including Malaysian regulatory bodies, law enforcement, and gaming licensing authorities. Legal basis: legal obligation.

Under applicable data protection law, ttb88 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between ttb88 and you — i.e., to operate your account and provide the gaming services you have registered to access.
• Legal Obligation: Processing is required to comply with ttb88's obligations under its gaming licence, applicable anti-money laundering legislation, and other applicable laws.
• Legitimate Interests: Processing is necessary for ttb88's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: For non-essential cookies and optional marketing communications, ttb88 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ttb88 does not sell or rent your personal data to any third party. Data may be shared in the following limited and controlled circumstances:

• Payment Processors: Your payment method details are shared with the relevant payment service providers (including Touch n Go eWallet operator, Boost operator, GrabPay, and your bank) solely for the purpose of processing deposits and withdrawals you initiate.
• KYC & Identity Verification Providers: Identity documents and associated data may be shared with licensed third-party KYC verification services engaged by ttb88 to fulfil its licensing obligations.
• Gaming Software Providers: Username and session data are shared with the gaming software providers whose games you access through ttb88 for the purpose of enabling gameplay and calculating results. These providers are contractually prohibited from using your data for any purpose beyond service delivery to ttb88.
• Regulatory & Law Enforcement Authorities: ttb88 will disclose personal data to competent authorities — including the relevant gaming licensing authority and Malaysian law enforcement — where required to do so by law, court order, or regulatory direction.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of ttb88's business, member data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations being imposed on the receiving party.

All third parties who receive personal data from ttb88 are bound by contractual data processing agreements that require them to protect your data and use it only for the specified purpose.

The ttb88 website uses cookies and similar tracking technologies (collectively "cookies") to operate the platform and improve your experience. We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the ttb88 platform to function. They enable core services such as maintaining your logged-in session, retaining your language preference, and managing the security of your account. These cookies are placed without requiring your consent as they are technically essential.
• Performance & Analytics Cookies: These cookies collect anonymised information about how visitors use the ttb88 website, including which pages are visited most frequently and whether users receive error messages from certain pages. This data helps ttb88 improve the platform. These cookies are only placed with your consent.
• Functional Cookies: These cookies allow ttb88 to remember your preferences (such as preferred display settings) and provide enhanced, more personalised features. These cookies may also be used to track whether you have previously seen a specific promotional banner. Placed with consent.

You can manage your cookie preferences at any time through your browser settings. Blocking strictly necessary cookies will impair the functionality of the ttb88 platform. For guidance on managing cookies in common browsers, refer to your browser's help documentation.

ttb88 retains your personal data for as long as is necessary to fulfil the purposes described in this policy, taking into account our legal and regulatory retention obligations:

• Active Accounts: Personal data is retained for the duration of your active ttb88 account plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements applicable to licensed gaming operators.
• Transaction Records: All financial transaction records, including deposit and withdrawal history and bet records, are retained for a minimum of seven (7) years following the relevant transaction date.
• KYC Documents: Identity verification documents are retained for five (5) years following account closure or the end of the business relationship, whichever is later.
• Support Communications: Live chat transcripts and support ticket records are retained for three (3) years.
• Marketing Consent Records: Records of your consent to receive marketing communications are retained for the duration of the consent period plus three (3) years as evidence of the consent given.

Data held beyond the minimum retention period is subject to secure deletion or irreversible anonymisation once the retention requirement expires.

Subject to applicable law and certain exceptions permitted under data protection legislation, you have the following rights in respect of your personal data held by ttb88:

• Right of Access: You may request a copy of the personal data ttb88 holds about you (a "subject access request"). Requests will be fulfilled within 30 calendar days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you. For basic contact information, you can update data directly through your ttb88 account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Requests will be assessed on a case-by-case basis.
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to ttb88 directly, in circumstances where the processing is based on consent or contractual necessity.
• Right to Object: You may object to processing of your personal data where ttb88 relies on legitimate interests as the legal basis, unless ttb88 can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the ttb88 data protection team at the support email address listed on this site. We will respond within 30 calendar days and may need to verify your identity before processing your request.

ttb88 implements a layered security framework to protect your personal data against unauthorised access, loss, destruction, or disclosure. Our security measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ttb88 servers.
• AES-256 encryption of sensitive data at rest, including payment method details and identity document metadata.
• bcrypt hashing of all member account passwords — passwords are never stored in readable form.
• SMS-based two-factor authentication (OTP) for new device logins and high-value withdrawal requests.
• Automated suspicious login detection with real-time account lockdown for anomalous activity patterns.
• Role-based access controls for internal staff, with full audit logging of all access to member personal data.
• Regular third-party penetration testing and vulnerability assessments of the ttb88 platform infrastructure.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ttb88 will notify you and the relevant supervisory authority within the timeframes required by applicable law.

The ttb88 platform is strictly for adults aged 21 years and above. ttb88 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted during the registration process and as part of KYC compliance procedures.

If ttb88 becomes aware that personal data has been collected from an individual under 21, we will immediately close the relevant account, void any activity on the account, process any eligible withdrawal of funds to the depositing payment method, and delete the associated personal data as promptly as permitted under applicable law.

If you believe that a person under 21 has created an account on ttb88, please contact our support team immediately using the email address on this site. We take underage access extremely seriously and will act on all reports without delay.

ttb88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our business operations. The "Last Updated" date at the top of this policy will be revised whenever a material change is made.

Where changes are material — for example, where we propose to use your personal data for a new purpose not previously disclosed — we will notify active members by in-platform notification or by email at least fourteen (14) days before the changes take effect, and will request fresh consent where required by applicable law.

Your continued use of the ttb88 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement that you have read and understood the revised terms. If you do not agree to the updated Privacy Policy, you may close your account and request deletion of your data as described in Section 8 above.

For any questions, concerns, or requests relating to this Privacy Policy or ttb88's handling of your personal data, including subject access requests, correction requests, or complaints, please contact the ttb88 data protection team:

If you are not satisfied with ttb88's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in Malaysia or the data protection supervisory authority of the jurisdiction in which the Operator holds its gaming licence.