Privacy Policy TTB1 — Malaysian User Data Protection

Introduction & Scope of This Policy

TTB1 is an online gaming platform operating under the domain name ttb1.onl. We understand that user trust is the foundation of our service. This Privacy Policy has been carefully drafted to clearly and honestly explain how we manage your personal information.

This Privacy Policy applies to all TTB1 platform users, including website visitors, registered members, and anyone who interacts with our services via our website, mobile app, or official communication channels. By using the TTB1 platform, you agree to be bound by the terms outlined in this document.

We encourage you to read this document in full before registering an account or depositing funds. If you have any questions after reading it, our support team is ready to assist via live chat on the platform or by email at [email protected].

Types of Information We Collect

TTB1 collects personal information from users through two main methods — directly when you provide it to us, and automatically as you use our platform. Below is a detailed breakdown of the types of information we collect:

We only collect information that is genuinely necessary to provide you with a safe and quality service. We do not directly collect sensitive information such as biometric data, health records, or credit card details — payments are processed through trusted third-party payment providers that comply with PCI-DSS security standards.

Purpose of Personal Information Use

TTB1 uses collected personal information solely for lawful and necessary purposes in the operation of our services. The following are the primary purposes for which your data is used:

• Account management: Securely creates, verifies, and maintains your user account within the TTB1 platform.
• Transaction processing: Processes deposits, withdrawals, and all financial transactions associated with your account accurately and promptly.
• KYC & AML Compliance: Fulfills mandatory Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance obligations, including verifying user identity before processing high-value withdrawals.
• Platform security: Detects and prevents fraud, multi-account usage, suspicious activity, and any misuse of the TTB1 platform.
• Customer support: Enables our support team to assist you efficiently with account-related inquiries, complaints, and requests.
• Service improvements: Analyzes platform usage patterns in aggregate and anonymized form to improve user experience, platform performance, and game offerings.
• Account-related communications: Sends important notifications such as transaction confirmations, security alerts, and service terms updates.
• Relevant promotions: Contacts you with relevant bonus offers and promotions — only if you have consented to receive marketing communications during registration or through your account settings.

Sharing Information with Third Parties

TTB1 does not sell, rent, or disclose users' personal information to third parties for commercial gain. However, in the course of operating a safe and lawful platform, we may share your personal information in the following limited situations:

• Payment providers: Information required to process deposits and withdrawals is shared with licensed payment providers such as FPX and e-wallet providers registered in Malaysia. These providers are bound by strict confidentiality agreements.
• Game providers: Certain game session data is shared with game providers partnering with TTB1 solely to ensure a smooth gaming experience and accurate game outcomes.
• Technology service providers: Third parties that assist in operating ttb1's technical infrastructure, such as cloud computing services and analytics providers, are subject to data processing agreements that comply with international security standards.
• Law enforcement agencies: TTB1 will disclose users' personal information where required by a court order, investigation warrant, or official directive from a lawful law enforcement agency.
• Fraud prevention: In cases where there is strong evidence of fraud or illegal activity, relevant information may be shared with the appropriate authorities for investigation purposes.

Data Security Measures

User data security is a primary investment for TTB1, not merely an obligation. We implement multiple layers of technical and organisational protection to ensure your personal information is always safeguarded against unauthorised access, alteration, disclosure, or destruction.

• Data encryption in transit: All communications between your device and TTB1's servers are encrypted using TLS 1.3 protocol with a 256-bit SSL certificate.
• Data encryption at rest: Sensitive information such as passwords and financial data is stored in encrypted form using industry-standard encryption algorithms. Your password is never stored in plain text.
• Two-factor authentication (2FA): ttb1 users are encouraged and able to enable two-factor authentication for an additional layer of security during login.
• Access auditing: All access to user data by TTB1 staff is automatically logged and periodically reviewed by the internal security team.
• Penetration testing: TTB1 conducts regular security testing, including penetration testing by independent security experts, to identify and address any system vulnerabilities before they can be exploited.
• Incident response plan: TTB1 has tested security incident response procedures in place to ensure any data breach can be identified, contained, and resolved quickly and in an orderly manner.

While we take all reasonable precautions, no security system is completely foolproof. We encourage users to also play their part in protecting their own accounts by using strong passwords, not sharing login credentials, and always logging out after using the platform — especially on shared devices.

Cookies & Tracking Technologies

TTB1 uses cookies and similar tracking technologies to enhance the user experience, understand how the platform is used, and maintain the security of your login session. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login session authentication, security, and basic navigation. The TTB1 platform cannot function properly without these cookies and they cannot be disabled.
• Performance Cookies: Used to gather information on how users interact with the platform — most frequently visited pages, time spent, and any errors encountered. This data helps us improve platform performance.
• Functional Cookies: Allows the platform to remember your preferences such as selected language, display region, and other display settings to deliver a more personalized experience.
• Analytics Cookies: TTB1 uses analytics tools to understand aggregate usage trends. This data does not contain personal information that could identify any specific individual.

User Rights Relating to Personal Data

TTB1 fully respects your rights as the owner of your personal data. The following are the rights you hold and how to exercise them:

To exercise any of the above rights, please contact us by email at [email protected] or via live chat within the TTB1 platform. We may need to verify your identity before processing any request relating to personal data.

Data Retention Period

TTB1 retains users' personal information only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law. Our data retention guidelines are as follows:

• Active account data: Personal information of users with active accounts is retained for as long as the account remains active and for a period of 5 years after account closure to comply with financial record-keeping requirements.
• Transaction records: Complete financial transaction history is retained for a minimum of 7 years from the transaction date, in compliance with financial regulatory and audit requirements.
• KYC documents: Copies of identity verification documents are retained for 5 years after the termination of the business relationship with the user.
• Support communication logs: Correspondence records with the customer support team are retained for a period of 3 years for reference and service improvement purposes.
• Analytics data: Anonymised usage data may be retained for a longer period for long-term trend analysis purposes.

Once the applicable retention period has expired, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-identified.

Child Protection

Ttb1 platform is exclusively for users aged 18 and above. We do not knowingly or intentionally collect personal information from minors.

TTB1 employs a combination of technical and manual verification measures to prevent registration by underage individuals, including a KYC process that requires verification of the user's identity documents.

Changes to This Privacy Policy

TTB1 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. When we make material changes to this Privacy Policy:

• The "Last Updated" date at the top of this document will be changed to reflect the date of the most recent revision.
• Users with active accounts will receive notifications via their registered email or in-platform notifications regarding important changes.
• For significant changes, we may request renewed consent from users before those changes take effect on their accounts.

Continued use of the ttb1 platform after any Privacy Policy updates are published is considered acceptance of the updated terms. We encourage users to review this Privacy Policy periodically to stay informed about how we protect your data.

Contact Us Regarding Privacy

If you have any questions, concerns or requests regarding TTB1's Privacy Policy or how we handle your personal information, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly within the TTB1 platform — the fastest way to get an immediate response.
• Privacy Email: [email protected] — include "Privacy Request" in the subject line of your email to expedite processing. We aim to respond within 2 business days.
• FAQ: Visit our FAQ page for answers to frequently asked questions about your account and privacy.