Official tpower2 Documents

Tpower2 Privacy Policy – Our Commitment to Protection Your Personal Data

Tpower2 takes the privacy of every Malaysian member seriously. This Privacy Policy clearly sets out what data we collect, why we collect it, how it is used, and your rights as the owner of that data. We do not sell your data. We do not share your information without a legitimate reason. Full stop.

Updated: 1 January 2026
Language: Bahasa Malaysia
Jurisdiction: Malaysia

Tpower2's Privacy Commitment at a Glance

Six key ways tpower2 protects your data

Full 256-bit SSL Encryption

All data transmitted between your device and tpower2's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading banking institutions such as Maybank and CIMB. No third party can intercept or read your information during transmission.

No Sale of Data to Third Parties

Tpower2 has never sold, rented, or traded members' personal data to third parties for marketing or commercial purposes. Your data belongs to you — it is not an asset we profit from. This commitment remains unchanged regardless of any changes to tpower2's operations.

Restricted Data Access for Authorised Staff Only

Only tpower2 staff with a specific operational need are permitted to access member personal data. All access is logged and monitored. Your account password is stored in a hashed format that is unreadable by any tpower2 personnel, including the technical team.

You Are in Control of Your Own Data

As a tpower2 member, you have the full right to view, amend, download, or request deletion of your personal data at any time. These rights can be exercised by contacting the tpower2 support team, and tpower2 is committed to processing such requests within a reasonable timeframe.

Malaysia PDPA Compliance

Tpower2 operates in compliance with the Personal Data Protection Act 2010 (PDPA) Malaysia. All collection, storage, and processing of Malaysian members' data is carried out in accordance with applicable local legal requirements, including the obligation to obtain explicit consent before data is collected.

Data Is Not Retained Longer Than Necessary

Tpower2 retains member personal data only for as long as it is needed for the stated purposes, or as required by Malaysian law. Once an account is closed and the mandatory retention period has lapsed, personal data will be permanently deleted or anonymised from tpower2's systems.

Introduction. This Privacy Policy describes tpower2's privacy practices regarding the collection, use, and protection of member personal data. By registering for or using the tpower2 platform, you agree to the practices described in this Privacy Policy. If you have any questions, please contact us at support@tpower2.xyz.

1Personal Data We Collect

1.1 Data You Provide Directly

When you register, verify your account, or use tpower2's services, we collect data that you voluntarily provide, including:

  • Identity information: Full name, date of birth, identity card number (for account verification)
  • Contact information: Email address, mobile phone number
  • Address information: Residential address in Malaysia (for certain verification requirements)
  • Account information: Chosen username (passwords are stored in a non-readable hashed format)
  • Payment information: Bank account or e-wallet details used for deposits and withdrawals — including bank name, account number, or phone number linked to Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX
  • Verification documents: Copy of identity card, passport, or other supporting documents requested for the KYC (Know Your Customer) process

1.2 Data Collected Automatically

When you use the tpower2 platform, our systems automatically collect certain technical information required for secure and stable operation:

  • Device information: Device type, operating system, phone model, screen resolution
  • Network information: IP address, general location (state/city level), internet service provider
  • Session data: Login and logout times, session duration, and pages visited within the platform
  • Gaming activity data: Betting records, wins, losses, games played, and session duration
  • Transaction data: Complete history of deposits, withdrawals, and all financial activity within your tpower2 account

1.3 Data Summary Table

Data Category Sample Information How It Is Collected
Identity Full name, date of birth, IC number Registration form / KYC
Contact Email address, phone number Registration form
Finance Bank account, digital wallet Deposit/withdrawal processing
Technical IP address, device type Automatically during use
Activity Betting records, game history Automatic during gameplay
Cookies Language preference, login session Automatic via browser

2Purposes for Which Your Personal Data Is Used

Tpower2 only uses member personal data for legitimate and necessary purposes. We will never use your data for any purpose not stated here without first obtaining your renewed consent.

2.1 Account Operations & Services

  • Creating and managing your tpower2 account
  • Verifying your identity during the registration and KYC process
  • Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, and other Malaysian payment methods
  • Processing winnings withdrawals to your payment account
  • Providing transaction records and game history for your reference

2.2 Security & Fraud Prevention

  • Detecting and preventing unauthorised access to your account
  • Identifying patterns of suspicious or potentially fraudulent activity
  • Ensuring compliance with anti-money laundering (AML) requirements
  • Verifying that an individual does not hold more than one active account

2.3 Communication & Customer Support

  • Sending important account-related notifications via email or SMS
  • Responding to your customer support enquiries
  • Notifying you of changes to these Terms & Conditions or Privacy Policy
  • Sending relevant tpower2 promotions and offers (only if you have consented to receive them)

2.4 Service Improvement

  • Analysing aggregated usage patterns to improve the overall user experience on the tpower2 platform
  • Testing new features prior to official launch
  • Identifying technical issues and resolving them more quickly

Tpower2 does not use your personal data to make automated decisions that significantly affect your rights without human review. Any material decisions — such as account closure or fraud detection — are subject to manual review by the tpower2 team.

3Disclosure of Data to Third Parties

3.1 We Do Not Sell Your Data

Tpower2 states this explicitly: we do not sell, rent, trade, or transfer members' personal data to third parties for commercial or marketing purposes. This is an absolute policy with no commercial exceptions.

3.2 Third Parties That May Receive Data (for Operational Purposes Only)

In the course of legitimate operations, tpower2 may share necessary data with the following parties:

  • Payment service providers: Providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, the DuitNow network, and banks participating in FPX require basic information to process your transactions. Data is shared only to the extent necessary to complete the transaction in question.
  • Game providers: Evolution Gaming, Microgaming, Pragmatic Play, and other game providers may receive the technical session data required to run their games. These providers are bound by strict data protection agreements with tpower2.
  • Technical service providers: Companies providing hosting infrastructure, fraud detection systems, or technical support services necessary for tpower2's operations — all bound by confidentiality agreements.
  • Relevant authorities: tpower2 will disclose information to Malaysian authorities when required by court order, applicable laws, or regulations — including AML compliance requirements.

3.3 Cross-Border Data Transfers

Some of tpower2's technical service providers may operate outside Malaysia. Where this is the case, tpower2 ensures that all international data transfers are protected by agreements that guarantee a level of data protection equivalent to or exceeding Malaysia's PDPA standards.

Important: tpower2 never shares data with competing gaming platforms, insurance companies, credit institutions, or any party not listed above. If you receive a communication claiming to be from tpower2 that asks for sensitive personal information, please contact us immediately as it may be a phishing attempt.

4Data Security at tpower2

4.1 Technical Security Layers

Tpower2 continuously invests in security infrastructure to protect member data. Key technical measures we employ include:

  • Encryption during transmission: 256-bit SSL/TLS encryption for all communications between your device and tpower2 servers
  • Encryption at rest: Sensitive data such as payment details are stored in encrypted format within tpower2's database
  • Password hashing: Passwords are stored using a one-way, irreversible hashing algorithm — meaning no one at tpower2 can ever see your actual password
  • Continuous monitoring: An intrusion detection system that monitors for unusual activity around the clock
  • Layered firewall: Multi-layered protection against external cyber attacks
  • Two-factor authentication (2FA): Additional security options available to all tpower2 members

4.2 Organisational Security Measures

Beyond technical measures, tpower2 also enforces strict internal security controls:

  • Mandatory cybersecurity training for all tpower2 staff
  • Minimum access principle — staff may only access data relevant to their role
  • Complete audit logs for all access to members' personal data
  • Regular security audits conducted by independent third parties

4.3 Your Responsibilities in Security

Your account security also depends on your own actions. tpower2 recommends that you:

  • Use a unique, strong password that is not used on any other platform
  • Do not share your login credentials with anyone, including family members
  • Log out of your tpower2 account when using a shared device
  • Report to the tpower2 support team immediately if you suspect any unauthorised activity on your account
  • Ensuring your device has up-to-date security software

5Cookies & Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored in your web browser or device when you visit the tpower2 platform. They allow tpower2 to remember your preferences, maintain your login session, and deliver a better experience each time you return.

5.2 Types of Cookies Used by tpower2

  • Session cookies: Required to maintain your login during an active session. This cookie is automatically deleted when you close your browser.
  • Preference cookies: Saves your preferences such as your chosen language and display settings, allowing tpower2 to present the interface according to your preferences each time you log in.
  • Analytics cookies: Collecting aggregated data on how members use the tpower2 platform to help us understand which pages are most visited and where improvements are needed. This data does not identify you individually.
  • Security cookies: Used to detect and prevent fraudulent activity, and to ensure only one active login session at a time in order to protect your account.

5.3 Managing Cookies

You can manage or delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of the tpower2 platform — for example, you may need to log in again on every visit. Security cookies are required for core platform functions and cannot be disabled without fully impairing the user experience.

Tpower2 does not use third-party tracking cookies for advertising purposes across other platforms. tpower2 cookies operate exclusively within our platform environment.

6Your Rights as a Data Subject

As a tpower2 member residing in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA) Malaysia:

6.1 Right to Access Data

You have the right to request a copy of all personal data that tpower2 holds about you. This request can be made through tpower2 customer support, and we will provide the relevant information within 30 days of receiving your request.

6.2 Right to Rectification

If you find that the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Certain details such as name and date of birth may require document verification before changes are made, in order to prevent misuse.

6.3 Right to Withdraw Consent

For data collected on the basis of your consent — such as opting in to promotional emails — you may withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing carried out prior to the withdrawal.

6.4 Right to Request Erasure

You may request the deletion of your personal data upon closing your tpower2 account, subject to mandatory data retention requirements under Malaysian law — for example, financial records may need to be retained for a period specified by accounting and anti-money laundering legislation.

6.5 How to Exercise These Rights

To exercise any of the rights above, please contact the tpower2 support team through:

  • Email: support@tpower2.xyz
  • 24/7 LiveChat available within the tpower2 platform

Please clearly state the right you wish to exercise and provide sufficient proof of identity. tpower2 will process your request within 30 business days.

7Data Retention & Deletion

7.1 Data Retention Period

Tpower2 retains members' personal data for as long as their account remains active, and for the period required after account closure in accordance with the following requirements:

  • Financial transaction records: Minimum seven (7) years from the transaction date, in accordance with Malaysian financial legislation
  • Identity verification data (KYC): Minimum five (5) years from account closure date, in accordance with AML requirements
  • Customer support communication logs: Two (2) years for reference and dispute resolution purposes
  • Gaming activity data: Three (3) years for audit and dispute resolution purposes
  • Technical data and system logs: One (1) year for security and troubleshooting purposes

7.2 Deletion Process

Once the mandatory retention period has ended, tpower2 will either permanently delete your personal data from all our systems or anonymise it so that it can no longer be linked to your identity. The deletion process is carried out securely in accordance with industry standards to ensure that data cannot be recovered after deletion.

Important note: Even after your account is closed at your own request, tpower2 is still legally required under Malaysian law to retain certain financial and KYC records for a specified period. This is a legal compliance requirement, not a choice made by tpower2.

8Contact Us About Privacy

If you have any questions, concerns, or complaints about how tpower2 handles your personal data, we encourage you to reach out to us directly first. Our team will work to resolve any issues promptly and fairly.

8.1 Contact Channels

  • Privacy email: support@tpower2.xyz (please state "Privacy Enquiry" in the email subject line)
  • LiveChat: Available 24/7 within the tpower2 platform — the fastest way to get a response

8.2 Changes to This Privacy Policy

Tpower2 reserves the right to update this Privacy Policy from time to time to reflect changes in operational practices, legal requirements, or technologies used. Any material changes will be communicated to members via their registered email or through an in-platform notification on tpower2 before the changes take effect. The "Updated" date at the top of this page reflects the date of the most current version of this Privacy Policy.

8.3 Complaints to the Relevant Authority

If you are not satisfied with how tpower2 has handled your privacy complaint after going through our internal channels, you have the right to lodge a formal complaint with Malaysia's Department of Personal Data Protection (PDPD) under the provisions of the PDPA 2010.

For any enquiries relating to this Privacy Policy, please contact us at support@tpower2.xyz. We are committed to responding to all privacy enquiries within 3 business days.

Your Rights as a tpower2 Member

A summary of your data protection rights under Malaysia's PDPA

Right of Access

Request a copy of all data we hold on you

Right to Rectification

Correct inaccurate or incomplete data

Right to Erasure

Request data deletion when it is no longer needed

Right to Object

Object to processing for marketing purposes

Right to Data Portability

Receive your data in a portable format

Withdrawal of Consent

Withdraw consent for promotional communications

FAQ – tpower2 Privacy Policy

The most frequently asked questions from Malaysian members about data privacy at tpower2

No. tpower2 does not store your full credit card number or bank account details in our systems. For payment methods such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, transactions are processed directly through certified, secure payment gateways — tpower2 only receives confirmation that a transaction was successful, not your full card or account details. For direct bank transfer methods, we may retain the recipient name and account number used for withdrawals for identity verification purposes, but this data is stored in encrypted format.

No. Your tpower2 account password is stored using a one-way, irreversible hashing technique. This means that when you set a password, tpower2's system stores a mathematical "fingerprint" of that password — not the password itself. When you log in, the system compares a newly generated fingerprint against the stored one. No one on the tpower2 team, including engineers and system administrators, can view or retrieve your original password. This is also why, if you forget your password, we cannot tell you what the old one was — we can only help you set a new one.

You can stop receiving promotional emails from tpower2 in two ways. First, click the "Unsubscribe" link found at the bottom of any promotional email you receive from tpower2 — the change will take effect within 48 hours. Second, log in to your tpower2 account, go to Account Settings or Communication Preferences, and disable the option to receive promotional communications. Please note that even if you unsubscribe from promotional emails, tpower2 will still send important account-related emails such as transaction confirmations, security notifications, and terms updates — these are necessary service communications and do not fall under the marketing category.

In the unlikely event that tpower2 ceases operations, the handling of members' personal data will form part of a closure management process conducted in compliance with Malaysian law. Members will be notified in advance and given the opportunity to download their account records or request data deletion. Any transfer of data to another entity as part of that process will only take place where necessary to fulfil outstanding obligations to members, and members will be informed of any such transfer. Financial records required by law will be retained for the period prescribed under Malaysian regulations.

tpower2 collects general location information based on your IP address — at the city or state level, not precise GPS coordinates. This data is used solely for account security purposes (such as detecting login attempts from unusual locations), operational compliance, and verifying that you are accessing the platform from Malaysia. tpower2 does not track your physical movements in the real world and does not use GPS or precise location data from your device without your explicit consent. You can prevent your browser from granting location access to tpower2 through your device's permission settings.

Your Data Is Safe. Play with Peace of Mind at tpower2.

Tpower2 is committed to protecting the privacy of every Malaysian member. With 256-bit SSL encryption, a strict no data-selling policy, and full compliance with Malaysia's PDPA — you can play, deposit, and withdraw your winnings with complete confidence. Register today and enjoy a safe, exciting online casino experience.

Bahasa Melayu