Privacy Policy tar529 — Data Protection & Information Security

1. Introduction & Scope of Privacy Policy

Tar529 respects the privacy of all its users and is committed to protecting the personal information entrusted to us. This Privacy Policy applies to all users who access the tar529 platform via tar529.app, including registered members, visitors, and any party interacting with our services.

This document complies with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and relevant international standards on data protection. We take this responsibility seriously and strive to ensure your data is managed in a transparent, secure, and accountable manner.

If you have any questions regarding this Privacy Policy, our Data Privacy Officer team is available to be reached via the contact details at the end of this document.

2. Information We Collect

Tar529 collects your personal information through several channels depending on how you interact with our platform. The following are the categories of information collected:

2.1 Information You Provide Directly

• Identity information: Full name, date of birth, identification card number (MyKad) or passport.
• Contact information: Email address, phone number, and residential address.
• Financial information: Bank account numbers, digital wallet details, and transaction records.
• KYC documents: Copies of identification documents and proof of address for verification purposes.

2.2 Automatically Collected Information

3. How We Use Your Information

Collected data is used responsibly for the following purposes:

• Account management — registration, KYC verification, login, and user profile management.
• Transaction processing — processing deposits, withdrawals, and all financial activity on the platform.
• Fraud detection — identifying and preventing suspicious activity or fraud that could compromise your account security.
• Legal compliance — complying with legal requirements including PDPA, anti-money laundering laws, and regulatory directives.
• Customer Support — helping you resolve issues, answer inquiries, and improve your overall experience.
• Platform communications — sending important notifications, security updates, and account information.
• Platform improvement — analyzing usage patterns to improve platform features, performance, and interface.
• Responsible gaming — monitoring gameplay patterns to identify users who may need assistance or support.

4. Legal Basis for Data Processing

Every processing of personal data by tar529 is based on one or more valid legal grounds under Malaysia's PDPA:

• Consent: You have provided explicit consent during account registration and may withdraw that consent at any time.
• Contract performance: Processing is required to fulfil the service agreement between you and tar529.
• Legal obligation: Processing is required to comply with applicable laws and regulations.
• Legitimate interest: Processing for security purposes, fraud prevention, and service improvement that does not adversely affect your fundamental rights.

5. Sharing Information with Third Parties

Tar529 does not sell, rent, or trade your personal data to any third party for marketing purposes. Your information is only shared in the following limited situations:

5.1 Trusted Service Providers

We work with third-party providers who help us operate the platform, including payment providers (FPX, eWallet), game providers, and cloud infrastructure services. All providers are bound by strict confidentiality agreements and may only use data for specified purposes.

5.2 Legal Requirements

Tar529 may disclose information to authorities when required by law, court order, or legitimate requests from law enforcement agencies. We will notify you of such disclosures if permitted to do so by law.

5.3 Business Transfers

In the event of a merger, acquisition, or asset sale, user data may be transferred. You will be notified in advance and given the option to delete your account if you do not agree.

6. Data Security & Protection Measures

Tar529 implements multiple layers of technical and organizational security to protect your personal data from unauthorized access, loss, or misuse:

• 256-bit SSL Encryption for all data transmitted between your device and tar529's servers.
• Data encryption at rest (encryption at rest) for all sensitive records including financial information and KYC documents.
• 24/7 Monitoring System which detects and responds to unauthorized access attempts in real time.
• Two-factor authentication (2FA) available to all accounts for an added layer of protection.
• Internal access control which ensures that only authorized staff can access users' personal data, and only to the extent required for their duties.
• Regular security audits by independent third parties to identify and address vulnerabilities.

7. Cookies & Tracking Technologies

The tar529 website uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions properly.

Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled.
• Performance Cookies: Collects anonymous usage data to help us understand how users interact with the platform.
• Functional Cookies: Saves your preferences such as language, display settings, and frequently used information for your convenience.

You can manage cookies through your browser settings at any time. However, disabling essential cookies may affect platform functionality.

8. Your Rights as a User

Under Malaysia's PDPA and our policy, you have the following rights regarding your personal data:

To exercise any of the rights above, contact our team via live chat or email at [email protected]. We will process your request within 30 working days.

9. Data Retention & Deletion Period

Tar529 retains your personal data only for as long as necessary for the stated purposes or as required by law:

• Active account data: Retained for as long as your account is active and for the applicable period set after account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with anti-money laundering legal requirements.
• KYC documents: Retained for the duration of the active account and 5 years after account closure.
• Activity & security logs: Retained for 2 years for audit and investigation purposes.
• Customer support data: Retained for 3 years after case resolution.

Once the retention period expires, data will be permanently deleted or anonymised so that it can no longer be personally associated with you.

10. Children's Privacy

The tar529 platform is strictly prohibited for individuals under the age of 18. We do not knowingly collect or process personal data from minors. Should we discover that a child's data has been collected without our knowledge, we will take immediate action to delete that data and close the associated account.

If you believe someone under the age of 18 has registered on our platform, please contact us immediately through our support channels.

11. Amendments to the Privacy Policy

Tar529 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or new platform features. Any significant changes will be communicated to you via:

• In-platform notifications upon your next login.
• Email sent to your registered address.
• Update the "Last Updated" date at the top of this document.

We encourage you to review this page periodically. Continued use of the platform after any amendments are published constitutes your acceptance of the revised terms.

12. Contact Our Data Privacy Officer

If you have any questions, concerns, or wish to exercise your privacy rights, please contact the tar529 Data Privacy Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 on the tar529 platform

We are committed to addressing all privacy inquiries seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia.