NTC22 Privacy Policy – Our Commitment to Your Data Security

1 Introduction & Scope of This Privacy Policy

Ntc22 (operating under the domain ntc22.asia) is an online Sports Betting and casino platform that takes the protection of our members' personal data seriously. This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and sets out transparently how ntc22 collects, processes, stores, and protects your personal data.

This policy applies to all users of the ntc22 platform — including unregistered website visitors, registered members, and former members whose accounts have been closed. It also applies to all channels of interaction with ntc22, including the ntc22.asia website, the ntc22 mobile app, customer support live chat, and email communications.

Ntc22 acts as a fully accountable "data processor" under Malaysia's PDPA for all personal data we collect and handle. This means we have a legal duty to ensure your data is processed lawfully, fairly, and transparently at all times. Our approach to privacy goes beyond meeting the minimum legal requirements — we strive to exceed them in order to provide the strongest possible protection for ntc22 members.

2 Types of Personal Data We Collect

Ntc22 collects various types of personal data depending on how you interact with our platform. Below are the categories of data we collect:

Ntc22 only collects data that is strictly necessary to provide platform services to you. We do not collect sensitive personal data such as health information, political views, or religious beliefs unless specifically required by applicable Malaysian law.

3 How NTC22 Uses Your Personal Data

Ntc22 uses the personal data collected for the following legitimate and stated purposes:

• Account Management: Creating and managing your ntc22 account, including identity verification, OTP authentication, and account record maintenance.
• Service Provision: Processing bets and casino games, managing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and delivering all ntc22 platform features.
• KYC Verification: Verifying your identity for anti-money laundering compliance and withdrawal requirements.
• Service Communications: Sending important account notices, terms updates, and transaction information you need to know as an ntc22 member.
• Bonus Management: Processing and distributing ntc22 bonuses — including the Welcome Bonus of up to RM 888, weekly cashback, and other promotions — to eligible members.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multi-account usage, bonus abuse, and other security threats.
• Customer Support: Handling enquiries, complaints, and assistance requests submitted to the ntc22 support team.
• Responsible Gaming: Monitoring gaming patterns to identify potential gambling issues and provide appropriate support to members who may need it.
• Legal Compliance: Fulfilling ntc22's legal obligations under the PDPA, anti-money laundering legislation, and other applicable regulations in Malaysia.
• Platform Improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve the ntc22 platform's user experience.

Ntc22 does not use your personal data for third-party marketing, commercial profiling unrelated to ntc22's services, or any purpose not stated in this policy without your prior written consent.

4 Legal Basis for Personal Data Processing

Under Malaysia's PDPA, ntc22 processes your personal data on different lawful bases depending on the type of processing involved:

• Consent: For optional ntc22 marketing communications such as promotional emails and periodic bonus offers. You may withdraw this consent at any time via the "unsubscribe" link in any such email.
• Contract Performance: Processing required for ntc22 to fulfil its obligations to you as a member — including account management, deposit and withdrawal processing, and the provision of all gaming services on the platform.
• Legal Obligations: Processing required by Malaysian law, such as KYC verification for withdrawals above a specified amount, reporting of suspicious transactions, and retention of financial records for legally prescribed periods.
• Legitimate Interest: Processing required for ntc22's legitimate business interests that do not override your privacy rights — such as fraud prevention, platform security, and service improvement through aggregated data analysis.

5 Data Sharing with Third Parties

Ntc22 takes a highly cautious approach to data sharing. As a matter of principle, we do not sell or share members' personal data for commercial purposes. However, in the following limited circumstances, ntc22 may need to share your personal data:

• Payment Service Providers: ntc22 shares the transaction information required with registered Malaysian local payment processors (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks) solely to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Malaysian Authorities: ntc22 will disclose information lawfully requested by Malaysian law enforcement agencies, courts, or relevant regulatory authorities pursuant to a court order or valid written request. ntc22 does not disclose more information than is specifically required.
• Technology Providers: ntc22 works with a number of certified third-party technology providers (such as RNG auditing services and fraud detection systems) that may have limited access to certain data subsets. All such providers are bound by data processing agreements that comply with Malaysia's PDPA.
• Business Transfer: In the event of an ntc22 merger, acquisition, or asset transfer, members' personal data may be transferred to the successor entity. Members will be notified in advance and given the option to close their accounts if they do not consent to the transfer.

Ntc22 does not share members' personal data with data brokers, third-party marketing companies, advertising agencies, or any party without a direct and legitimate business need tied to the provision of ntc22 platform services to you.

6 NTC22 Data Security Measures

Ntc22 continually invests in its cybersecurity infrastructure to ensure members' personal data is protected against an ever-evolving threat landscape. Our security measures include:

• Encryption in Transit: All communication between your device and ntc22's servers is protected with 256-bit TLS/SSL encryption — ensuring your data remains unreadable even if intercepted in transit.
• Encryption at Rest: Sensitive data stored in ntc22's databases — including passwords and financial information — is kept in encrypted format using strong algorithms.
• Internal Access Controls: Access to members' personal data within ntc22's systems is granted only to staff who require it to carry out their legitimate job functions, in accordance with the principle of "least privilege".
• Two-Factor Authentication: Ntc22 provides and encourages the use of 2FA on all member accounts as an additional layer of protection against unauthorised access.
• Continuous Monitoring: ntc22 systems are monitored 24/7 to detect suspicious activity, intrusion attempts, and other security threats.
• Penetration Testing: ntc22 conducts regular security assessments, including penetration testing by independent security experts, to identify and address vulnerabilities before they can be exploited.
• Staff Training: All ntc22 staff who handle members' personal data undergo regular security awareness and privacy training.

7 Data Retention Period

Ntc22 does not retain your personal data for longer than is necessary for the legitimate purpose for which it was collected. The following outlines our data retention guidelines:

• Active Account Data: Retained for the duration of the active account and up to five years after account closure, for legal compliance and dispute resolution purposes.
• Financial & Transaction Records: Retained for a minimum of seven years in accordance with the requirements of Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).
• KYC Records: Copies of identity verification documents are retained for the duration of the active account and five years after account closure.
• Security Logs: Access logs and security activity records are retained for two years for the purpose of security incident investigations.
• Customer Support Records: Communication records with the ntc22 support team are retained for three years.
• Cookie Data: This depends on the type of cookie — session cookies are deleted when you close your browser, while persistent cookies are stored for the duration specified in their respective cookie settings (typically 30 days to 12 months).

When personal data is no longer needed and there is no legal obligation to retain it, ntc22 will securely delete it or anonymise it so that it can no longer be linked to you as an individual.

8 Your Rights as a Data Subject Under Malaysia's PDPA

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data held by ntc22:

9 Cookies & Tracking Technologies

Ntc22 uses cookies and similar tracking technologies to enhance your platform experience and keep your account secure. Cookies are small text files stored in your browser when you visit ntc22.asia.

Ntc22 uses the following cookie categories:

• Essential Cookies: Required for core ntc22 platform functions — including login, gaming sessions, and account security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information about how you use ntc22 — such as the most frequently visited pages and page load times — to help us improve platform performance. Data is collected in aggregate and does not identify individuals.
• Functional Cookies: Remembering your preferences such as preferred language, odds format, and display settings to deliver a more personalised experience on ntc22.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and maintain the integrity of your login sessions on ntc22.

You can manage your cookie settings through your browser preferences. However, disabling essential cookies may affect your ability to use the ntc22 platform fully. Ntc22 does not use third-party cookies for advertising or commercial profiling purposes.

10 Child Data Protection

The ntc22 platform is intended solely for users aged 18 and above. ntc22 does not knowingly collect or process personal data of individuals under the age of 18. Strict age verification is conducted during registration to ensure compliance with this requirement.

Should ntc22 discover that personal data of a child under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. If you believe a child's data has been entered into the ntc22 platform, please contact us at privacy@ntc22.asia without delay.

Parents or guardians who discover that a minor has accessed the ntc22 platform are encouraged to contact the ntc22 support team via live chat or email for immediate action. Ntc22 takes its child protection responsibilities seriously and will cooperate fully with all legitimate requests.

11 Amendments to This Privacy Policy

Ntc22 reserves the right to modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or relevant technological developments. Our amendment notification process is as follows:

• An email notification will be sent to all active ntc22 members at least 14 days before any material amendments take effect.
• The latest version of the Privacy Policy will always be available on this page, with a clear "Last Updated" date displayed at the top.
• For non-material amendments (such as spelling corrections or language clarifications), ntc22 may not send an email notification but will update the amendment date in this document.
• Continued use of the ntc22 platform after the effective date of any amendments is deemed acceptance of the updated Privacy Policy.

Ntc22 recommends reviewing this Privacy Policy page regularly — at least once every six months — to stay informed about how we handle your personal data.

12 Contact the NTC22 Privacy Officer

For any enquiries, requests, or concerns regarding this Privacy Policy or how ntc22 handles your personal data, please reach us through the following channels: