Privacy Policy — teratai168

This Privacy Policy ("Policy") issued by teratai168 ("the Company", "we", "us", "our") and applies to all personal data collected, processed, stored, or transmitted in connection with your use of the teratai168 online sports betting and live casino platform, accessible at https://teratai168.cam ("the Platform").

teratai168 is committed to protecting the privacy and confidentiality of personal data belonging to all registered players and visitors to the Platform ("you", "your", "Player", "User"). This Policy describes the types of personal data we collect, the purposes for which we process it, the parties with whom we share it, the security measures we employ to protect it, and the rights available to you in respect of your data.

This Policy should be read in conjunction with our Terms and Conditions, which are accessible at /terms-conditions. By registering an account on teratai168 or by continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, date of birth, identification number, contact details, financial data, device identifiers, and behavioural data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, alteration, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means teratai168, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third-party service provider that processes personal data on behalf of the Company under a contractual arrangement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "Cookies" means small text files placed on your device by the Platform to store preferences and session information.
• "KYC" means Know Your Customer — the identity and age verification documentation required by the Company to comply with anti-money laundering and responsible gambling obligations.
• "Account" means your registered player account on the teratai168 Platform.

teratai168 collects personal data from you through several channels. The categories of personal data we collect include:

teratai168 processes your personal data for the following purposes:

teratai168 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms and Conditions you entered into upon registration — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable anti-money laundering laws, KYC obligations, licensing conditions, and other regulatory requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and internal analytics where our legitimate interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where your freely given, informed consent has been obtained. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

teratai168 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary and only under strict data processing agreements:

• Payment Processors & Financial Institutions: To facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Visa, Mastercard, or cryptocurrency networks. These parties process only the minimum data required to complete your transaction.
• Identity Verification Providers: Third-party KYC service providers who assist with verifying the identity and age of players prior to processing withdrawals or as required by compliance obligations.
• Game and Technology Providers: Software providers who supply the live dealer casino, slot, and sportsbook technology underlying our platform. These providers may process session data in connection with the delivery of their games.
• Fraud Prevention Services: Third-party services that assist in detecting and preventing fraudulent account activity, bonus abuse, and financial crime.
• Legal and Regulatory Authorities: Law enforcement agencies, regulatory bodies, and courts, where disclosure is required by applicable law, court order, or where we believe disclosure is necessary to protect the rights, property, or safety of the Company, our players, or the public.
• Professional Advisers: Lawyers, auditors, and financial advisers acting under binding confidentiality obligations where necessary for our legal and business operations.

teratai168 uses cookies and similar technologies to operate and improve the Platform, maintain your login session, and personalise your experience. Below are the categories of cookies we use:

• Strictly Necessary Cookies: Essential for the basic functioning of the Platform — maintaining your login session, processing bets, and securing your account. These cannot be disabled without significantly impairing platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how players use the Platform — page load times, feature usage patterns, and error reporting — to help us improve performance and reliability.
• Functional Cookies: Used to remember your preferences such as your preferred language, odds format (e.g., decimal), and notification settings, so you do not need to re-configure them on each visit.
• Marketing & Attribution Cookies: Used to track the effectiveness of our promotional campaigns and to understand how you arrived at the teratai168 Platform. These are only placed with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform, including account login and bet placement.

teratai168 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. Our general retention principles are as follows:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum post-closure period as mandated by our legal and compliance obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in accordance with anti-money laundering record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years following account closure or the completion of the last transaction, whichever is later.
• Support Communications: Retained for a period of two (2) years following the closure of each support interaction, unless required for ongoing dispute resolution.
• Marketing Preference Records: Retained from the date of consent until you withdraw consent or request deletion, whichever is earlier.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in manner that prevents re-identification.

teratai168 employs a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and our servers is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Password Storage: Account passwords are stored using strong, industry-recognised one-way hashing algorithms. We never store passwords in plain text.
• Segregated Financial Accounts: Player funds are held in accounts segregated from the Company's operational funds, protecting deposits from corporate financial events.
• Access Controls: Strict role-based access controls limit which Company personnel can access personal data, based on legitimate operational need.
• Regular Security Audits: We conduct periodic security assessments of our platform infrastructure to identify and remediate vulnerabilities proactively.
• Incident Response Procedures: We maintain documented data breach response procedures and will notify affected players and relevant authorities in the event of a material data breach, in accordance with applicable legal obligations.

While we implement robust security measures, no system is entirely immune to risk. You are responsible for maintaining the confidentiality of your teratai168 account credentials and for logging out of shared devices. If you suspect your account has been compromised, contact our support team immediately.

As a data subject, you have the following rights with respect to your personal data held by teratai168. To exercise any of these rights, please contact our support team at [email protected] with your account details and a description of your request. We will respond within a reasonable timeframe and in accordance with our applicable obligations.

teratai168 strictly prohibits access to the Platform by persons under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. As part of our KYC process, all players are required to verify their identity and age prior to processing any withdrawal. Any account found to have been registered by an underage individual will be immediately closed, and any personal data associated with that account will be deleted in accordance with our retention obligations, save where retention is required for legal or investigatory purposes.

If you are a parent or guardian and believe that a minor under 21 has registered an account on teratai168, please contact us immediately at [email protected]. We will take prompt action to investigate and close the account where confirmed.

In connection with the operation of the teratai168 platform, your personal data may be transferred to and processed in countries outside of Malaysia. This may occur in connection with the use of third-party technology providers, payment processors, or cloud infrastructure services based in other jurisdictions.

Where personal data is transferred internationally, teratai168 ensures that appropriate safeguards are in place to protect the data in a manner consistent with the protections afforded under this Privacy Policy. Such safeguards may include contractual data processing agreements incorporating standard data protection clauses or equivalent protections applicable to the receiving jurisdiction.

The teratai168 Platform may incorporate links to or integrations with third-party services — including payment gateways (such as the FPX banking network, Visa/Mastercard, or cryptocurrency networks), game providers, and identity verification systems. These third-party services operate under their own privacy policies, and teratai168 is not responsible for the data practices of these external parties.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of teratai168. When you initiate a payment transaction via Touch 'n Go eWallet, Boost, DuitNow, FPX, or any other payment method, your interaction with that payment provider is governed by that provider's terms and privacy practices.

teratai168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, regulatory requirements, or platform functionality. Revised versions of this Policy will be published on this page with an updated "Last Updated" date.

Where amendments are material — for example, where we introduce a new category of data processing or change how we share data with third parties — we will endeavour to notify registered players by email or through an in-platform notification where reasonably practicable, in advance of the changes taking effect.

Your continued use of the teratai168 Platform following the publication of a revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not agree with any material changes to this Policy, you should cease using the Platform and request account closure.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how teratai168 handles your personal data, please contact us through the following channels:

• Email: [email protected] — please include "Privacy Enquiry" in the subject line for prompt routing to our data team.
• Live Chat: Available 24/7 through the teratai168 Platform — our support agents can triage data access and deletion requests in real time.
• Response Time: We aim to acknowledge all data-related enquiries within 3 business days and to resolve them fully within 30 calendar days, subject to the complexity of the request.

Our support team serves players from across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — around the clock. We take every data enquiry seriously and commit to handling your request with the professionalism and care it deserves.