Privacy Policy ntc22 — Protecting Our Members' Personal Data

1 Introduction

Ntc22 ("we", "the platform") is committed to protecting the privacy and security of the personal data of all members and users of our platform. This Privacy Policy transparently explains how we collect, use, store, disclose and protect your personal information when you use our services at ntc22.win.

This policy is prepared in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and international best-practice standards in data privacy management. We take this responsibility seriously because your trust is the foundation of our relationship.

When you register an account, make a deposit, play games, or simply browse our website, there is certain information we need in order to provide you with the best experience. This document explains all of that openly so you know exactly what happens with your data.

2 Personal Data We Collect

Ntc22 only collects data that is strictly necessary to provide our services. Below are the categories of data we collect and the purposes for which they are collected:

Data we do not collect: ntc22 does not collect sensitive information such as biometric data, medical records, political views or religious beliefs unless specifically required by law.

3 How We Use Your Personal Data

The personal data we collect is used responsibly and only for legitimate purposes. The following are the primary ways we use your information:

• Account Management: Creating, maintaining and protecting your ntc22 account, including identity verification and mandatory KYC processes.
• Transaction processing: Processing deposits, withdrawals and all financial activity in your account securely and accurately.
• Service Provision: Ensuring you can access all games, promotions and platform features you are eligible for.
• Security and fraud prevention: Monitoring suspicious activity, preventing unauthorized access and protecting platform integrity for the benefit of all members.
• Legal compliance: Fulfilling legal obligations including anti-money laundering (AML) requirements and applicable gambling regulations.
• Service communications: Sending important notifications relating to your account, security, transactions and policy changes that affect you.
• Platform improvement: Analyzing usage patterns in aggregate and anonymized form to improve the overall user experience.
• Marketing (with consent): Sending information about promotions, bonuses and special offers to members who have consented to receive marketing communications.

4 Data Sharing with Third Parties

Ntc22 does not sell or trade your personal data. However, in certain limited situations, we may need to share your information with the following parties:

• Payment service providers: Financial institutions, banks, and digital wallet operators that process your financial transactions. This sharing is limited strictly to information required to complete the transaction.
• Technology providers: Companies that provide the technical infrastructure, security systems, and cloud services we use to operate the platform. All such providers are bound by strict confidentiality agreements.
• Game Providers: Third-party game developers who provide game content on our platform may receive session data required to display games correctly.
• Statutory authorities: Government agencies, law enforcement bodies, or judicial authorities when required by law or a valid court order.
• Professional advisors: Lawyers, accountants or auditors bound by strict professional confidentiality obligations.

5 Personal Data Security

Ntc22 continuously invests in the latest security infrastructure to ensure your personal data is protected against cyber threats, unauthorized access and data breaches. Key security measures we implement include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is protected with the same industry-grade encryption used by leading financial institutions.
• Database security: Personal data stored in our databases is protected with additional encryption, and access to these databases is strictly limited to authorised personnel.
• Two-factor authentication (2FA): Multi-layer authentication is applied to all internal administrative access and is also available to members as an additional layer of protection.
• 24/7 security monitoring: Our cybersecurity team continuously monitors systems to detect and respond to any threats or unusual activity.
• Regular penetration testing: We conduct regular security audits and penetration testing by qualified independent parties to identify and address vulnerabilities.
• Staff training: All ntc22 staff who handle personal data receive regular data protection training and are bound by confidentiality agreements.

6 Data Retention Period

Ntc22 only retains your personal data for as long as necessary to fulfill the purpose for which it was collected, or as required by law. Below are our data retention guidelines:

• Active account data: Retained for the duration your account remains active and used to provide services to you.
• Financial transaction data: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysia's financial and tax legal requirements.
• KYC and identity verification data: Retained for the period specified by applicable anti-money laundering (AML) regulations.
• Support communication records: Retained for 3 years for reference and service improvement purposes.
• Technical log data: Retained for 12 months for security and fraud detection purposes.
• Closed account data: Following account closure, personal data that is no longer required will be deleted or anonymised within 90 days, unless legal obligations require longer retention.

7 Your Rights as a Data Subject

Under Malaysia's PDPA and ntc22's privacy policy, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

8 Cookies, Tracking and Similar Technologies

Ntc22 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

• Required cookies: These cookies are required for the platform to function properly. They store your login session information and basic preferences. They cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting anonymous data on how users interact with our platform, such as the most frequently visited pages. This data is used to improve website performance.
• Functionality cookies: Storing your preferences such as language, display settings and game preferences so you don't have to reconfigure them on every visit.
• Security cookies: Used to identify and prevent fraudulent activity, keep your login sessions secure, and block unauthorised access.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect your ability to fully use some features of the ntc22 platform.

9 Amendments to This Privacy Policy

Ntc22 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or platform improvements. When we make significant changes:

• We will provide clear notice via the platform, your registered email, or both, at least 14 days before any changes take effect.
• The "Last Updated" date at the top of this document will be updated to reflect the date of the latest amendment.
• For material and significant changes, we may request your renewed consent before you can continue using the platform.
• Continued use of the platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this page periodically to stay informed about how we protect your information. Previous versions of the Privacy Policy are available upon request.

10 Contact Our Data Protection Officer

Ntc22 has appointed a Data Protection Officer responsible for ensuring PDPA compliance and handling all privacy-related inquiries. If you have any questions, concerns or complaints about how we handle your personal data, you may contact us through the following channels:

• Data protection email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week, directly on the ntc22 platform
• Service language: Malay and English

We are committed to responding to all privacy-related enquiries within 3 business days and resolving formal complaints within 30 business days. If you are not satisfied with our response, you also have the right to refer your complaint to the Department of Personal Data Protection Malaysia.