Privacy Policy ntc22 – Your Personal Data Protection

Welcome to the ntc22 Privacy Policy. This document transparently explains how ntc22 ("we", "Platform") collects, uses, stores, and protects your personal information when you use our website and services at ntc22.onl.

This Privacy Policy applies to all users of the ntc22 platform, including website visitors, registered members, and any individuals interacting with our services. By registering or continuing to use the ntc22 platform, you confirm that you have read, understood, and agreed to the terms set out in this Privacy Policy.

Ntc22 takes its responsibilities under the Malaysian Personal Data Protection Act 2010 (PDPA) seriously. We are committed to ensuring that your personal data is handled lawfully, fairly, and transparently. If you have any questions about this policy, our support team is ready to assist via email at [email protected].

Ntc22 follows a data minimization principle — we only collect information that is truly necessary to deliver the best service to you. The following are the categories of data we collect:

We do not collect sensitive data such as your health information, religious beliefs, or political views. All financial data you provide is processed through secure payment channels and is not stored in plain text on our systems.

Your personal data is collected through several key channels:

• Account Registration: When you complete the ntc22 registration form, you provide basic identity and contact information required to open an account.
• KYC Verification: To meet legal compliance requirements, we collect identity verification documents such as MyKad or passport during the KYC process.
• Financial Transactions: Your bank account and digital wallet information is collected when you make a deposit or withdrawal to ensure transactions are processed correctly and securely.
• Platform Usage: Our system automatically records your technical data and usage patterns, such as games played, session duration, and in-platform navigation, for security and service improvement purposes.
• Cookies and Similar Technologies: The ntc22 platform uses cookies and similar tracking technologies to enhance your user experience, remember your preferences, and analyze website traffic.
• Communications: When you contact our support team via live chat or email, the content of that communication is stored for reference and service improvement purposes.

Ntc22 uses your personal data solely for legitimate and transparent purposes. The following are the primary purposes for which your data is used:

• Account Management: Create, verify, and maintain your member account, including processing registration and KYC identity verification.
• Transaction Processing: Process deposits, withdrawals, and all other financial transactions promptly, securely, and accurately.
• Platform Security: Detect and prevent fraud, money laundering, account misuse, and any suspicious or unlawful activity.
• Legal Compliance: Fulfil legal obligations and reporting requirements to the relevant authorities as required by applicable Malaysian law.
• Customer Support: Provide effective technical support and customer service whenever you need assistance.
• Service Improvements: Analyse usage patterns to improve platform quality, develop new features, and ensure a better user experience.
• Service Communications: Send important notifications related to your account, security updates, and transaction information via email or SMS.
• Marketing (with consent): Send you promotional information, special offers, and the latest ntc22 news — only if you have given explicit consent to receive marketing communications.

Ntc22 does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, under the limited circumstances outlined below, we may share your data with the following parties:

• Payment Providers: Required financial information is shared with approved payment providers such as FPX, Touch 'n Go, GrabPay, and ShopeePay solely to process your transactions. All these providers are subject to their own strict privacy policies and security standards.
• Technology Service Providers: We use trusted third-party service providers for technical infrastructure such as server hosting, data processing, and analytics. These providers are only permitted to use your data in accordance with ntc22's instructions and not for their own purposes.
• Authorities and Regulatory Bodies: ntc22 is required to disclose member information to the relevant authorities when mandated by law, court order, or a legitimate criminal investigation.
• Business Transfers: In the event of a company merger, acquisition, or asset sale, member data may be transferred to the receiving entity. You will be notified in advance before any such transfer takes place.

The security of your data is ntc22's absolute top priority. We implement multiple layers of technical and organisational security controls to protect your personal information from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All data transmitted between your browser and ntc22 servers is protected with 256-bit SSL encryption using the latest TLS 1.3 protocol.
• Secure Data Storage: Sensitive data is stored in databases protected with high-level encryption, isolated from publicly facing systems.
• Strict Access Controls: Only authorized ntc22 staff who require access to specific data are permitted to do so, based on the principle of least privilege.
• 24/7 Threat Monitoring: Our AI-powered security monitoring system operates around the clock to detect and respond to any suspicious activity or intrusion attempts in real time.
• Regular Security Audits: ntc22 conducts regular internal and external security audits to identify and address any vulnerabilities in our systems.
• Two-Factor Authentication (2FA): We encourage all members to enable two-factor authentication to add an extra layer of security to their accounts.

While ntc22 takes all reasonable precautions, no security system is completely foolproof. You also play an important role in keeping your account secure by using a strong password and never sharing your login credentials with anyone.

Ntc22 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for the platform's core operations, such as login session authentication and security. Without them, the platform cannot function properly. These cookies cannot be disabled.
• Functional Cookies: These cookies allow the platform to remember your preferences — such as language, display settings, and other personal configurations — to provide a more comfortable experience.
• Performance & Analytics Cookies: We use analytics cookies to understand how visitors use our platform, which pages are most popular, and where users encounter difficulties. This information is used solely to improve the platform.
• Security Cookies: Specialized cookies are used to detect and prevent fraudulent activity, bots, and cyberattacks on the ntc22 platform.

You can manage your cookie settings through your internet browser. However, disabling certain cookies may affect the functionality and user experience of the ntc22 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and ntc22's internal policies, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data ntc22 holds about you at any time.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data, unless ntc22 has a legal obligation to retain it.
• Right to Object to Processing: You have the right to object to the processing of your data for specific purposes, particularly for direct marketing.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the validity of processing carried out prior to the withdrawal.
• Right to Lodge a Complaint: If you believe ntc22 has violated your privacy rights, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, please contact the ntc22 support team via email at [email protected] or through the in-platform live chat. We will process your request within 21 business days.

Ntc22 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by law. The following are our general data retention guidelines:

• Active Account Data: As long as your account remains active, ntc22 will retain all relevant account data to ensure continuity of service.
• Data After Account Closure: After account closure, core data will be retained for a minimum of 7 years to comply with anti-money laundering and financial record requirements in Malaysia.
• Transaction Records: All financial transaction records are retained for a minimum of 7 years from the date of transaction as required by Malaysian financial regulations.
• Communication Logs: Customer support communication records are retained for 2 years for reference and service improvement purposes.
• Marketing Data: If you withdraw your marketing consent, the relevant data will be deleted or anonymized within 30 days.

When data is no longer needed and there is no legal obligation to retain it, ntc22 will securely delete or anonymize it using industry-recognized methods.

Ntc22 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technological advancements. Any changes will take effect immediately upon publication on this page.

For material changes — that is, changes that significantly affect how we handle your personal data — ntc22 will notify you via:

• Pop-up notifications or banners on the platform's home page when you log in.
• An email will be sent to your registered email address at least 14 days before the changes take effect.
• Updates the "Last updated" date at the top of this Privacy Policy page.

It is your responsibility to review this page periodically to stay informed of ntc22's current privacy practices. Continued use of the platform after any updates constitutes acceptance of the revised terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how ntc22 handles your personal data, please contact us through the following channels:

• Privacy Email: [email protected] — Please include "Privacy Inquiry" in your email subject line. We aim to respond within 3 business days.
• Live Chat 24/7: The fastest channel — available directly within the ntc22 platform for immediate assistance with privacy and account security concerns.
• FAQ: Visit page FAQ for answers to the most frequently asked privacy questions.

Ntc22 is committed to responding to all legitimate privacy inquiries within a reasonable timeframe and ensuring your concerns are addressed seriously and respectfully.