Updated: January 2026

Twc18 Privacy Policy – Your Personal Data Protection

At twc18, we treat your privacy as a serious responsibility. This Privacy Policy clearly explains how we collect, use, store and protect your personal information throughout your use of our platform.

Our Commitment to Your Privacy

When you register and use the platform twc18, you trust us with your personal information. That trust is not something we take lightly. Every decision we make regarding user data is guided by a simple principle: your data belongs to you, and we only use it to deliver a better experience for you.

This Privacy Policy is drafted in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and global industry best practices. It applies to all users accessing the website twc18, our mobile app and all related services.

Quick Summary: We collect only the information that is necessary, use it for purposes you understand, never sell it to third parties, and keep it secure within our systems protected by 256-bit SSL encryption.

How twc18 Protects Your Privacy

Advanced Data Encryption

All your personal and financial transaction data is protected by 256-bit SSL encryption. This means your information cannot be read by unauthorized parties during data transmission.

Secure Data Storage

Your data is stored on servers protected by multi-layered firewalls and intrusion detection systems. Access to the user database is restricted to authorised personnel only.

No Sale of Data to Third Parties

twc18 has never and will never sell, rent, or commercialise your personal data to any third party for marketing or any other purpose without your explicit consent.

Full Control in Your Hands

You have the right to access, correct, transfer or request deletion of your personal data at any time. Contact our team and we will process your request within 14 working days.

Malaysia PDPA Compliance

All our data management practices are fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct periodic compliance reviews to ensure there are no gaps in our privacy controls.

Data Breach Notification

In the event of any security breach involving your information, twc18 is committed to notifying you within the timeframe required by law and taking immediate remedial action.

1. Types of Personal Data We Collect

We collect various types of information depending on how you interact with the platform twc18. The following are the main categories of data we collect:

A. Information You Provide Directly
  • Full name and date of birth upon account registration.
  • Email address and phone number for communication and account verification.
  • Identity card or passport number for identity verification (KYC) purposes.
  • Bank account or digital wallet information for processing deposits and withdrawals.
  • Account passwords are stored in encrypted (hashed) format — we do not store passwords in plain text.
  • Images of your identity document submitted during the KYC process.
B. Information Collected Automatically
  • IP address and device information (device type, operating system, browser version).
  • General location data based on IP address for security and compliance purposes.
  • Platform activity logs such as login dates and times, games played, and transactions made.
  • Cookie data and similar tracking technologies to enhance the user experience.
Data Categories Primary Purpose Retention Period
Identity information Account verification & KYC Throughout active account + 5 years
Financial information Transaction processing 7 years (audit requirement)
Activity log data Security & fraud detection 2 years
Cookie data User experience Up to 12 months

2. How We Use Your Data

Every piece of data we collect has a clear purpose. We do not use your data for purposes unrelated to the services we provide. Here are the primary ways your data is used by twc18:

1
Account Management

Registration information is used to create and manage your account, ensure secure login, and enable account-related communications.

2
Financial Transaction Processing

Your banking and digital wallet details are used solely to process deposits and withdrawals efficiently and securely. This information is not shared with any party other than approved payment processors.

3
Identity Verification (KYC)

Your identity document is used to verify your identity in order to meet legal compliance requirements, prevent fraud and protect your account from unauthorised access.

4
Security and Fraud Prevention

Activity logs and device data are continuously analyzed to identify suspicious activity patterns, protect your account, and maintain platform integrity. twc18.

5
Service Improvement

Anonymised usage data is used to understand platform usage patterns and make improvements that enhance your experience.

6
Communication and Customer Support

Your email address and phone number are used to send important account notifications, promotions (with your consent) and responses to customer support enquiries.

You may opt out of marketing communications at any time by updating your notification settings in your account, without affecting core services.

3. Data Sharing with Third Parties

twc18 does not sell your personal data. However, there are certain situations where we need to share your data with trusted third parties to enable smooth platform operations:

  • Payment Processors: Transaction information is shared with licensed payment processors that help us provide deposit and withdrawal services. All processors are bound by strict data protection agreements.
  • KYC Service Providers: Identity verification documents are shared with approved KYC service providers to expedite your account verification process.
  • Legal Authorities: We may be required to disclose certain data to authorities or law enforcement agencies when ordered by a court or competent body.
  • Technical Service Providers: The cloud infrastructure and cybersecurity providers we use may have limited access to data in the context of delivering their services to us.

All third parties handling user data twc18 are contractually bound to maintain data confidentiality and to use it only for the agreed purposes.

4. Cookies and Tracking Technologies

Platform twc18 uses cookies and similar technologies to enhance your browsing experience. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session security and navigation. These cookies cannot be disabled without affecting platform functionality.
  • User Preference Cookies: Saves your preferences such as language, display theme, and other settings to deliver a more personalized experience.
  • Analytics Cookies: Collects non-identifiable usage data to help us understand how users interact with the platform and make improvements.
  • Security Cookies: Detects suspicious login activity and helps our systems distinguish legitimate users from automated bots.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality or your experience on the platform. twc18.

5. Your Rights as a Data Subject

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights regarding your personal data held by twc18:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within 14 working days.

Right to Rectification

If your personal data is inaccurate or outdated, you have the right to request an immediate correction. Contact our support team to initiate this process.

Right to Deletion

You may request deletion of your personal data, subject to our legal obligations to retain certain financial records for the prescribed period.

Right to Object to Processing

You have the right to object to the processing of your data for direct marketing purposes. Such requests will be processed without any further questions.

Right to Data Portability

You may request your personal data in a machine-readable format for transfer to another service if needed.

To exercise any of the rights above, please contact our Data Protection team. We will verify your identity before processing any request to ensure the security of your data.

6. Data Security Measures We Practice

twc18 continuously invests in the latest security technologies and procedures to ensure your data remains protected at all times. Measures we employ include:

  • Encryption in Transit and at Rest: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
  • Role-Based Access Control: Only staff with a legitimate business need are permitted to access user data, and such access is logged and audited regularly.
  • Continuous Threat Monitoring: Our security systems operate 24 hours a day to detect and respond to any threats or intrusion attempts.
  • Regular Penetration Testing: We conduct regular security tests carried out by independent third-party security experts to identify and address any vulnerabilities.
  • Two-Factor Authentication (2FA): Our internal administration systems require two-factor authentication for all administrator access to reduce the risk of unauthorized entry.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against all threats. We encourage you to also practise good security habits, such as using strong passwords and enabling 2FA on your account.

7. Changes to This Privacy Policy

twc18 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or new platform features. When material changes are made:

  • We will update the "Updated" date at the top of this page.
  • For significant changes, a notification will be sent to your registered email address or via an in-platform notice at least 14 days before the changes take effect.
  • Continued platform usage twc18 after the effective date will be deemed acceptance of the updated Privacy Policy.

We encourage you to review this page regularly to stay informed about how we protect your information.

Privacy Is More Than a Document — It Is Our Promise

In today's digital world, personal data has become an extremely valuable asset. Many companies exploit users' trust to commercialise their personal information without clear disclosure. At twc18, we take a firm stance against such practices.

We understand that as a betting platform, trust is the backbone of our business. If you cannot trust us with your personal data, how can you trust us with your money? That is why every data management decision is made with one key question in mind: is this what is best for our users?

The KYC process, for example, may feel inconvenient to some players. But it is the most effective protection mechanism to ensure no other party can access or make withdrawals from your account. Similarly, the activity logs we maintain are not there to monitor your behavior, but to allow us to quickly detect any unusual activity on your account.

Every day, millions of transactions are processed worldwide in the online wagering industry. Cybersecurity risks are real and ever-evolving. The commitment of twc18 is to always stay one step ahead of these threats, investing in the technology and expertise needed to keep your data safe — not because the law requires it, but because it is the right thing to do.

Your Data Is Safe with twc18

Sign up with confidence — your privacy and data security are our top priority. Enjoy a safe and exciting betting experience today.

Privacy-Related Enquiries?

Contact our Data Protection Officer for any enquiries regarding your privacy and personal data.

Bahasa Melayu