Privacy Policy

This Privacy Policy ("Policy") is issued by tlk999 ("tlk999", "we", "us", "our"), the operator of the online gaming and sports betting platform available at https://tlk999.cam. It describes how we collect, process, store, share, and protect personal data relating to registered members, prospective users, and visitors to the platform ("you", "Data Subject").

tlk999 is committed to handling personal data responsibly and in full compliance with applicable data protection legislation. We recognise that privacy is a fundamental right, and we take our obligations as a data controller seriously. This Policy reflects our commitment to transparency regarding how your information is used throughout your relationship with the platform.

By registering an account with tlk999, accessing the platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this Policy, you should refrain from using the platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, national identification number, financial account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data — including collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, tlk999 is the Data Controller.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller in accordance with documented instructions and binding contractual obligations.
• "Consent" means any freely given, specific, informed, and unambiguous indication of the Data Subject's wishes by which they signify agreement to the processing of their Personal Data.
• "KYC" means Know Your Customer — the identity and address verification procedure required to comply with anti-money laundering and responsible gambling regulations.
• "Cookies" means small text files stored on your device by a web browser in connection with your use of the platform, used for session management, analytics, and functionality purposes.

tlk999 collects Personal Data across several categories, depending on the nature of your interaction with the platform. The following table sets out the principal data categories and specific data points within each:

We do not collect special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, or biometric data beyond what is strictly necessary for identity document verification).

tlk999 collects Personal Data through the following channels:

1. Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, respond to a survey, or update your account settings.
2. Automatically through platform use — via server logs, session cookies, analytics tools, and device fingerprinting technologies that capture Technical Data as you interact with the platform.
3. From payment service providers — transaction confirmation data, payment status updates, and chargeback or dispute notifications received from e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), banks (Maybank, CIMB, Public Bank, Hong Leong), and DuitNow / FPX payment rails.
4. From identity verification service providers — confirmation results from third-party KYC and document verification services engaged by tlk999 to validate the authenticity of identity documents.
5. From fraud prevention and compliance services — risk scores, sanctions screening results, and PEP (Politically Exposed Persons) database checks conducted as part of our anti-money laundering compliance programme.

tlk999 processes your Personal Data for the following purposes. Each processing activity is carried out on one or more of the following lawful bases: (a) Contractual Necessity — processing is necessary to perform the contract between you and tlk999; (b) Legal Obligation — processing is required to comply with applicable laws and regulations; (c) Legitimate Interests — processing is necessary for our legitimate business interests, balanced against your rights; (d) Consent — you have provided explicit consent for a specific processing activity.

• Account Creation & Management — registering your account, authenticating your identity on login, and managing account settings. Basis: Contractual Necessity.
• KYC & Age Verification — verifying that you are at least 21 years of age and confirming your identity and residential address. Basis: Legal Obligation; Contractual Necessity.
• Transaction Processing — facilitating deposits and withdrawals through your chosen payment method, including routing through Malaysian payment providers (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong). Basis: Contractual Necessity.
• Anti-Money Laundering (AML) & Fraud Prevention — monitoring account activity for suspicious patterns, conducting sanctions screening, and reporting to competent authorities where required. Basis: Legal Obligation; Legitimate Interests.
• Customer Support — resolving account queries, complaints, and technical issues submitted via live chat or email. Basis: Contractual Necessity; Legitimate Interests.
• Responsible Gambling — operating deposit limits, session reminders, cooling-off periods, and self-exclusion tools; monitoring for indicators of problem gambling behaviour. Basis: Legal Obligation; Legitimate Interests.
• Platform Improvement & Analytics — analysing aggregated usage patterns to improve platform performance, game selection, and user experience. Basis: Legitimate Interests.
• Direct Marketing — sending promotional communications, bonus offers, and platform updates by email where you have opted in. Basis: Consent. You may withdraw consent at any time.
• Legal Claims — establishing, exercising, or defending legal claims in disputes or regulatory proceedings. Basis: Legitimate Interests; Legal Obligation.

tlk999 does not sell your Personal Data. We share your data only with third parties where there is a lawful basis to do so, and only to the extent necessary for the specified purpose. Categories of recipients include:

• Payment Service Providers: E-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), banking institutions (Maybank, CIMB, Public Bank, Hong Leong), and interbank network operators (DuitNow, FPX) — for the purpose of processing deposit and withdrawal transactions. These providers act as independent data controllers for their own platform operations and are subject to their own privacy policies.
• Identity Verification Services: Third-party KYC and document verification providers engaged under data processing agreements to validate identity documents submitted during account verification.
• Fraud Prevention & AML Compliance Services: Providers of sanctions screening, PEP screening, and transaction monitoring services engaged to fulfil our regulatory compliance obligations.
• Game Content Providers: Game studios that power the tlk999 platform may receive limited technical data (session tokens, game round identifiers) necessary for game delivery and dispute resolution. No identifiable personal data beyond what is operationally necessary is shared.
• IT Infrastructure & Cloud Service Providers: Hosting, content delivery, and data backup service providers operating under binding contractual data processing agreements with tlk999.
• Regulatory & Law Enforcement Authorities: Competent regulatory bodies, law enforcement agencies, and courts where disclosure is required by applicable law, court order, or regulatory direction. tlk999 will notify you of any such disclosure to the extent permitted by law.
• Professional Advisers: Legal counsel, auditors, and compliance consultants bound by professional confidentiality obligations where disclosure is necessary in connection with their advisory services.

Some of tlk999's service providers, hosting infrastructure, and operational systems are located outside Malaysia. Where Personal Data is transferred to countries that may not provide an equivalent level of data protection to that afforded under Malaysian law, tlk999 will implement appropriate safeguards to ensure that your data remains protected to an equivalent standard.

Safeguards employed for international data transfers include contractual clauses that impose data protection obligations on recipient entities, and engagement of service providers that are certified under recognised international data protection frameworks. By using the tlk999 platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your Personal Data to servers and service providers located outside Malaysia for the purposes described in this Policy.

tlk999 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general framework:

• Account Data & KYC Documents: Retained for the duration of your active membership plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of seven (7) years following the transaction date in accordance with financial record-keeping obligations.
• Support Communications: Retained for three (3) years from the date of the last communication, or longer where the communication relates to an unresolved dispute or legal claim.
• Marketing Preference Data: Retained for as long as your marketing consent remains active, or for two (2) years from the date consent is withdrawn, for suppression list management purposes.
• Technical & Analytics Data: Aggregated analytics data may be retained indefinitely in anonymised form. Identifiable technical data is retained for a maximum of thirteen (13) months.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to system architecture constraints, the data will be isolated, protected from further processing, and deleted at the next available scheduled purge cycle.

The tlk999 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to collect analytics data that helps us understand how members use the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to operate correctly. These include session authentication cookies, load balancing cookies, and security tokens. These cannot be disabled without preventing core platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, preferred display options, and responsible gambling tool settings. These enhance your user experience but are not essential to core platform operation.
• Analytics Cookies: Used to collect aggregated, anonymised data about how members navigate the platform — including pages visited, time on page, and error events. This data is used solely to improve platform performance and user experience. Where these cookies process identifiable data, your consent is obtained prior to placement.
• Security Cookies: Used to detect and prevent fraudulent account access, session hijacking, and bot activity. These cookies process Technical Data including IP address and device fingerprint data.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the tlk999 platform. For detailed information on managing cookies in your specific browser, consult your browser's documentation.

Subject to applicable law and certain exceptions, you have the following rights with respect to your Personal Data held by tlk999. Requests may be submitted by contacting our support team at [email protected]. We will respond to all verifiable requests within thirty (30) days of receipt.

The tlk999 platform is strictly intended for individuals who are at least 21 years of age. We do not knowingly collect, process, or retain the Personal Data of any person under the age of 21. Registration is prohibited for individuals below this age threshold, and our KYC verification procedures are specifically designed to detect and prevent underage registration attempts.

In the event that tlk999 becomes aware, through any means, that Personal Data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the relevant data as expeditiously as possible, and refund any deposited funds to the source payment method where such a refund is technically feasible and lawfully permissible.

If you have reason to believe that a minor has registered on the tlk999 platform, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

tlk999 implements a comprehensive set of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• Encryption in Transit: All data transmitted between your browser and the tlk999 platform is protected by TLS 1.2 / 1.3 encryption (256-bit SSL). The platform enforces HTTPS across all pages and API endpoints.
• Encryption at Rest: Sensitive Personal Data and financial records stored in our databases are encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to Personal Data is restricted to authorised personnel on a strict need-to-know basis. All staff with access to member data are subject to confidentiality obligations and regular data protection training.
• Two-Factor Authentication: Administrative access to systems processing Personal Data requires multi-factor authentication. Members are also encouraged to enable two-factor authentication on their accounts.
• Intrusion Detection & Monitoring: Our infrastructure is monitored continuously for unusual activity patterns, potential security breaches, and unauthorised access attempts.
• Penetration Testing: We conduct regular third-party security assessments and penetration tests to identify and remediate vulnerabilities in our platform and infrastructure.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, tlk999 will notify affected members and relevant authorities without undue delay in accordance with applicable law.

The tlk999 platform may contain references to or integrations with third-party payment providers and service partners. Where data is shared with such third parties — including Malaysian payment operators such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, and FPX — those parties operate under their own privacy policies and act as independent data controllers for their own platform operations.

tlk999 is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party payment or service provider through whose platform you interact when using tlk999 services. Our responsibility extends only to the data processing activities that occur within the tlk999 platform environment and under our direct control.

tlk999 reserves the right to update or revise this Privacy Policy at any time in response to changes in applicable law, our data processing activities, or our operational practices. The revised Policy will be published on this page with an updated "Last Updated" date. Where changes are material — meaning they significantly affect how we process your data or the rights available to you — we will notify registered members by email at least fourteen (14) days before the changes take effect.

Your continued use of the tlk999 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the platform and may request account closure by contacting our support team.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by tlk999, please contact our Data Protection team through the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line for prioritised routing to our data protection team.
• Live Chat: Available 24 hours a day, 7 days a week, via the live chat facility on the tlk999 platform. For complex data requests, email is preferred to ensure a written record of the exchange.
• Response Timeframe: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within thirty (30) days of receipt of a verified request. Where a request is complex or involves multiple data subjects, we may extend this period by a further two months, in which case we will notify you of the extension within the initial 30-day period.