Tra66 Privacy Policy — User Personal Data Protection

This Privacy Policy is issued by tra66, a trusted online gaming platform in Malaysia. This document explains in detail how we, as the platform operator, collect, process, store, use, and protect the personal information you provide when registering, using our services, or interacting with the tra66 platform in any way.

This policy applies to all tra66 platform users, including registered members, website visitors, and any individual who communicates with tra66 through customer support channels, email, or other means. By using the tra66 platform, you confirm that you have fully read and understood this policy.

Tra66 fully complies with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and all data protection regulations and guidelines issued by the relevant authorities. We regard your trust as our most valuable asset and are committed to upholding it.

Tra66 collects various types of personal data depending on the nature of your interaction with our platform. Below is a summary of the data types, their collection purposes, and the basis for processing:

Technical data is collected automatically when you browse the tra66 website, including through cookies and similar tracking technologies. This information helps us ensure the platform runs smoothly and securely for all users.

We do not collect sensitive data such as health information, political affiliations, or religious beliefs unless absolutely necessary and with your explicit consent beforehand.

Tra66 uses collected personal data solely for lawful, transparent purposes that are consistent with your expectations as a user. The following are the primary ways we use that data:

• Account Management: Creating, verifying, and maintaining your user account, including the KYC process required to comply with financial regulations.
• Transaction Processing: Processing all deposits, withdrawals, and other financial transactions accurately and securely within your tra66 account.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and other illegal activities that could compromise platform security and other users.
• Service communications: Sending important notifications related to your account, security updates, transaction confirmations, and relevant operational information.
• Platform Improvements: Analyzing usage patterns in aggregate and anonymized form to improve the design, functionality, and overall performance of the tra66 platform.
• Responsible Gaming: Monitoring your play habits to identify early signs of problem gambling and offering appropriate support when needed.
• Legal Compliance: Meeting reporting and compliance obligations to regulatory authorities, including applicable AML (Anti-Money Laundering) requirements.

Tra66 takes a highly cautious approach to sharing users' personal data. We do not disclose your data to third parties except in the following strictly defined and controlled situations:

• Service Providers: Technical partners who help us operate the platform, such as payment processors, cloud service providers, and identity verification companies. All third parties are bound by strict data protection agreements and may only use your data for specified purposes.
• Legal Requirements: When required by Malaysian law, court order, or a legitimate request from law enforcement agencies and regulatory authorities.
• Interest Protection: In circumstances strictly necessary to protect user safety, prevent fraud, or defend tra66's legitimate rights in legal proceedings.
• Business Transfers: Should tra66 be involved in a merger, acquisition, or asset transfer, user data may be transferred as part of that transaction, provided the receiving party adheres to an equivalent privacy policy.

For service providers operating outside Malaysia, tra66 ensures that such data transfers are carried out using recognised protection mechanisms and in compliance with Malaysia's PDPA requirements and applicable international data protection standards.

The tra66 website uses cookies and similar tracking technologies to enhance the user experience, maintain secure login sessions, and analyze overall platform usage patterns.

There are several types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled without affecting basic website functionality.
• Performance Cookies: Collecting information about how you use our website (such as most frequently visited pages and error messages received) to help us improve platform performance. All information collected is in aggregated and anonymized form.
• Functional Cookies: Allowing the platform to remember your preferences (such as username, language, or region) to deliver a more personalized experience.
• Analytics Cookies: Used to analyse overall traffic patterns and user behaviour to help us understand platform effectiveness and make targeted improvements.

You can manage your cookie preferences through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality and your experience on the tra66 platform.

The security of your personal data is tra66's top priority. We have implemented a comprehensive range of technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

Key security measures we have in place include:

• End-to-End Encryption: All communications between your device and tra66's servers are secured with 256-bit SSL/TLS encryption, ensuring data cannot be intercepted during transmission.
• Strict Access Controls: Only specifically authorised personnel may access users' personal data, and such access is limited strictly to what is required to perform their duties.
• 24/7 Monitoring: Automated security monitoring systems operate around the clock to detect and respond to any threats or suspicious activity immediately.
• Two-Factor Authentication (2FA): tra66 provides and encourages the use of two-factor authentication for all user accounts to add an extra layer of security.
• Regular security audits: Security assessments and penetration testing are conducted periodically by independent security experts to identify and address any potential vulnerabilities.
• Incident Response Plan: We have clear, tested procedures in place to respond to any data breach, including timely notification to affected users and the relevant authorities within the required timeframes.

Tra66 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required to comply with relevant legal obligations.

As a general guide:

• Active account data: Retained for the duration your account is active and for several years after account closure to fulfil audit record and legal compliance requirements.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date in accordance with applicable Malaysian financial and tax legislation.
• Support communication data: Retained for 3 years from the date of last interaction for reference and service improvement purposes.
• Technical log data: Retained for 90 days for debugging and security analysis purposes, after which the data is deleted or anonymised.

Once the retention period expires, your personal data will be securely deleted or anonymised using methods that ensure the data cannot be recovered or re-identified.

As a tra66 user, you have clear and enforceable rights regarding your personal data under Malaysia's PDPA and our privacy policy. These rights are as follows:

To exercise any of the above rights, please contact the tra66 customer support team. We will process your request within the stipulated timeframe and notify you of the action taken.

The tra66 platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data from minors or individuals below the legal age to play.

Tra66 encourages parents and guardians to monitor their children's online activities and to use appropriate parental control software to prevent access to online gaming websites.

Tra66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. All changes take effect immediately upon publication on the official tra66 website.

In the event of significant changes that affect how we use your personal data, we will provide clear notice through:

• In-account notifications when logged in
• Notification email to your registered email address
• Prominent notices on the tra66 homepage

The effective date of the latest version of this Privacy Policy is stated at the top of this document. We encourage you to review this page periodically to stay informed on how we protect your information. Your continued use of the tra66 platform after changes are published constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how tra66 handles your personal data, we encourage you to contact us directly. Our Data Protection Officer (DPO) team is ready to assist you.

You can reach us through:

• Email: [email protected]
• Live support: Via the live chat function within the tra66 platform
• FAQ Page: Visit our FAQ page for answers to frequently asked questions

We are committed to responding to all privacy-related inquiries within 5 business days. For formal requests involving data subject rights, the processing period is up to 21 business days depending on the complexity of the request.

If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia or the relevant authority in your jurisdiction.