Privacy Policy t400 – How We Protect the Personal Data of Our Malaysian Members

T400 ("we", "the platform") respects the privacy of every member and user of our platform. This Privacy Policy has been prepared to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and to provide you — Malaysians using t400's services — with complete clarity on how your personal data is handled from start to finish.

This Privacy Policy applies to all personal data collected through the official t400 website, the t400 mobile app, and any of our official communication channels, including email, Live Chat, and WhatsApp. It covers every stage of your interaction with t400 – from the moment you first browse our website, through registration, gameplay, financial transactions, and customer support communications.

We wish to make it clear from the outset that t400 has never sold, rented, or traded members' personal data to any third party for marketing or commercial purposes. Your data belongs to you, and we use it only for the purposes expressly stated in this Privacy Policy.

T400 collects your personal data through several different means depending on the nature of your interaction with the platform. The categories of data we may collect are as follows:

Data You Provide Directly:

• Full legal name as shown on your Malaysian identification document.
• Identity card number (MyKad) or passport number for identity verification (KYC) purposes.
• An active email address used for account communications.
• An active Malaysian mobile phone number.
• Date of birth for age verification (must be 18 years or older).
• Bank account or e-wallet details (TnG eWallet, GrabPay, Boost, ShopeePay, DuitNow) for the purposes of deposits and withdrawal of winnings.
• Current residential address, where required for compliance purposes.

Automatically Collected Data:

• The IP address of the device used to access t400.
• Device type, operating system, and web browser used.
• Platform usage data, including pages visited, games played, and session duration.
• Transaction log data including deposit details, withdrawals, and game history.
• Cookie data and similar tracking technologies as described in Section 7.

Personal data collected by t400 is used solely for legitimate purposes directly related to providing quality services to you as our Malaysian member. The specific purposes for which your data is used are as follows:

• Account Management: Creating, verifying, and maintaining your t400 member account, including identity and age verification.
• Transaction Processing: Processing deposits via TnG eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks), and processing winnings withdrawals to your registered payment method.
• Platform Security: Detecting and preventing fraud, multi-account abuse, money laundering (AML), and other illegal activities that threaten the security of the platform and its members.
• Customer Support: Providing personalised assistance and support based on your account and transaction history when you reach out to us via Live Chat or WhatsApp.
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including KYC and AML reporting requirements.
• Service Improvements: Analysing aggregated (not individual) usage patterns to improve the gaming experience, platform interface, and overall services.
• Communications: Sending you important account notifications, policy updates, and relevant service information. t400 does not send spam or marketing communications without your consent.

As a platform operating in compliance with Malaysia's PDPA 2010, t400 only processes your personal data on a lawful and valid legal basis. Those bases are:

• Consent: When you register a t400 account and agree to these Terms & Conditions and Privacy Policy, you provide your explicit and voluntary consent to the processing of your data for the stated purposes. You have the right to withdraw this consent at any time, subject to any implications that may arise for our ability to provide services.
• Contractual Performance: Data processing is necessary to fulfil our contractual obligations to you — including processing financial transactions, maintaining your account, and providing access to the games you have subscribed to.
• Legitimate Interest: We process certain data based on t400's legitimate interests in preventing fraud, maintaining platform security, and improving our services – provided those interests do not override your fundamental rights and freedoms.
• Legal Obligation: Some data is processed because it is necessary to comply with applicable legal obligations in Malaysia, including financial reporting and anti-money laundering requirements.

T400 does not sell, rent, or disclose members' personal data to third parties for marketing or commercial purposes under any circumstances. However, in the normal course of platform operations, there are situations where t400 needs to share certain information with carefully selected third parties:

• Payment Service Providers: Transaction information required for payment processing is shared with the payment gateway providers operating TnG eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX to process your deposits and withdrawals. These providers maintain their own privacy policies and are bound by strict confidentiality agreements with t400.
• Game Providers: Limited account information required for authentication may be shared with licensed game providers that supply slots, live casino, and other games on the t400 platform. Such disclosure is kept to the minimum technically necessary.
• Relevant Authorities: t400 will disclose information to Malaysian law enforcement, judicial, or regulatory authorities when required by law or a valid court order. In such circumstances, t400 will comply with its legal obligations while protecting your rights to the fullest extent permitted.
• Technical Service Providers: Cloud infrastructure and security providers that help us operate the platform may process your data as data processors on behalf of t400, subject to strict data processing agreements and equivalent security standards.

T400 continually invests in state-of-the-art security infrastructure to ensure your personal data is protected at all times. The technical and organisational security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and t400's servers is protected by 256-bit SSL encryption — the same level of security used by Malaysia's leading banks, including Maybank and CIMB.
• Data-at-Rest Encryption: Sensitive data stored in t400's databases is encrypted at rest using the latest industry-standard encryption.
• Strict Access Controls: Only t400 staff with role-specific authorisation may access member personal data. All access is logged and audited on a regular basis.
• 24/7 Security Monitoring: Automated security monitoring systems operate around the clock to detect and respond to any threats or intrusion attempts in real time.
• Regular Security Testing: t400 conducts regular penetration testing and vulnerability assessments carried out by independent security experts to ensure our systems remain up to date and secure.

Data Retention Period:

T400 retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. Once your account is closed and all legal obligations have been met, your data will be deleted or anonymised within a reasonable period in accordance with t400's data retention policy.

T400 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the t400 website. The types of cookies we use are as follows:

• Essential Cookies (Required): These cookies are required for core platform functions, such as maintaining your login session and ensuring transactions are processed securely. Without them, the t400 platform cannot operate properly.
• Performance & Analytics Cookies: These cookies help us understand how visitors use the t400 platform – which pages are visited most frequently, time spent on the platform, and where users encounter difficulties. This information is collected in aggregate form and does not identify individuals.
• Functional Cookies: These cookies allow t400 to remember your preferences and settings — such as your preferred language and game settings — in order to deliver a more personalised experience.
• Security Cookies: Security cookies help us detect and prevent fraudulent activity, and protect your account from unauthorised access.

You can manage your cookie settings through your web browser. However, blocking essential cookies may affect the functionality of the t400 platform. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

Under Malaysia's PDPA 2010, you as a data subject have certain rights regarding your personal data held by t400. t400 fully respects and facilitates the exercise of these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Data access requests can be submitted by emailing [email protected].
• Right to Rectification: If your personal data is inaccurate or out of date, you have the right to request a correction. Some data can be updated directly through your t400 account settings.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your data, subject to data retention obligations prescribed by Malaysian law.
• Right to Restrict Processing: You may request that t400 restrict how your data is processed in certain circumstances, for example while the accuracy of the data is being disputed.
• Right to Object: You have the right to object to the processing of your data based on t400's legitimate interests, including the use of your data for marketing communications.
• Right to Withdraw Consent: You may withdraw your consent at any time. Withdrawing consent does not affect the validity of any processing carried out prior to the withdrawal.

To exercise any of the above rights, please contact the t400 Privacy Officer by email at [email protected], including sufficient information to verify your identity. t400 will respond to your request within 21 working days as required under Malaysia's PDPA.

T400 is a gaming platform exclusively for adults aged 18 and above. We strictly prohibit the use of our platform by anyone under the stipulated age. t400 does not knowingly collect personal data from individuals under the age of 18.

All new account registrations require age verification, which we carry out through our KYC process. Should t400 discover that personal data belonging to a minor has been collected inadvertently, we will take immediate steps to delete that data and close the associated account.

In the course of its operations, t400 may need to transfer personal data outside Malaysia — for example, to technical infrastructure providers or service partners operating in other countries. Any such transfer is carried out in strict compliance with Malaysia's PDPA requirements, including ensuring that the recipient country provides a level of data protection equivalent to or higher than that required under Malaysian law.

T400 employs appropriate safeguards for cross-border data transfers, including comprehensive data processing agreements with all third parties involved, approved standard contractual clauses, and data protection impact assessments prior to any new transfer.

T400 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements to platform operations. When material changes are made:

• The "Last Updated" date at the top of this page will be revised accordingly.
• An email notification will be sent to your registered address to inform you of any significant changes.
• An in-platform notification will be displayed when you log in to your t400 account.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the t400 platform after any changes take effect will be considered your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding t400's Privacy Policy, the handling of your personal data, or wish to exercise any of your rights as a data subject, please contact t400's Privacy Officer through the following channels:

• Email: [email protected] – For privacy complaints and official data access requests.
• Live Chat: Available 24/7 via the chat icon on the t400 website for general privacy-related enquiries.
• WhatsApp: Via the official t400 number listed on the platform's support page.

T400 is committed to responding to all privacy-related enquiries within a reasonable timeframe. Formal personal data complaints will be acknowledged within 3 business days and resolved within 21 business days in accordance with Malaysia's PDPA requirements. If you are not satisfied with t400's response, you have the right to refer your complaint to the Personal Data Protection Commissioner of Malaysia.