tpower is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, who it may be shared with, and the rights you hold over your own data. Please read this document in full before using our Services.
Identity, contact, payment, and device information — collected only as needed.
256-bit SSL encryption, access controls, and secure infrastructure at every layer.
Only verified payment partners and compliance authorities — never sold to advertisers.
Access, rectification, erasure, portability, and objection rights available on request.
tpower ("we", "us", "our", "the Platform") operates the online casino and sports betting website accessible at https://tpower.cam, as well as any associated mobile applications, platforms, and digital services (collectively, the "Services"). We serve players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam, and we take seriously the trust those players place in us when they share their personal information.
This Privacy Policy ("Policy") sets out in clear and formal terms how tpower collects, uses, stores, protects, and, where applicable, shares the personal data of individuals who interact with our Services — whether as registered players, prospective users, or visitors to our website. This Policy is incorporated by reference into tpower's Terms & Conditions, available at tpower.cam/terms-conditions, and forms a legally binding part of the overall agreement between tpower and each user.
By accessing our website, registering an account, or using any of the tpower Services, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this Policy, you must cease using our Services immediately.
This Privacy Policy applies to all personal data processed by tpower in connection with the provision of its Services. It applies to:
This Policy does not apply to third-party websites, platforms, or services that may be referenced in communications from tpower but are operated independently. tpower is not responsible for the privacy practices of any third-party operators, including payment service providers, whose own privacy policies govern their respective data processing activities.
The following terms have the meanings ascribed to them below throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifier, or factors specific to that person's identity. |
| "Processing" | Any operation performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, transmission, restriction, erasure, or destruction. |
| "Data Controller" | tpower, as the entity that determines the purposes and means of processing personal data collected through its Services. |
| "Data Processor" | A third-party entity that processes personal data on behalf of tpower, pursuant to a written data processing agreement. |
| "Consent" | Freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for one or more specified purposes. |
| "KYC Data" | Identity and address verification documents submitted as part of the Know Your Customer process, including government-issued identification and proof of address. |
tpower collects personal data across several categories, depending on the nature of your interaction with the Platform. The categories of data collected are as follows:
When you create a tpower Account, we collect your full legal name, date of birth, gender, nationality, residential address (including city and postcode), email address, and mobile phone number. This information is required to establish your Account and to conduct the minimum identity checks necessary to comply with our operational compliance obligations.
Prior to processing withdrawal requests, or at any time we deem necessary for compliance purposes, we may collect copies of identity documents, including a valid Malaysian Identity Card (MyKad), Passport, or Driver's License; proof of residential address in the form of a utility bill (TNB, Syabas, Maxis, Unifi) or bank statement dated within three months; and a selfie photograph taken with your identity document. KYC data is treated with the highest level of security and access restriction within our systems.
tpower processes transaction records associated with all deposits and withdrawals made through your Account, including the payment method used (e.g., Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX), the transaction amount in MYR, the transaction timestamp, and relevant payment reference identifiers. tpower does not store full card numbers or complete banking credentials — these are handled exclusively by our certified payment service providers.
We record gameplay history, betting activity, session durations, wagering patterns, game preferences, and account activity logs. This data is used for account management, responsible gambling monitoring, bonus eligibility assessment, dispute resolution, and platform improvement.
When you access our platform, we automatically collect device identifiers, IP address, browser type and version, operating system, referring URL, pages visited, click-stream data, and session duration. This data is collected via cookies and similar technologies, as described in Section 10 of this Policy.
If you contact tpower support via live chat, email, or any other channel, we retain records of those communications, including the content of the conversation, the channel used, the date and time, and the support agent who handled the enquiry. This data is used for quality assurance, dispute resolution, and improvement of our support services.
tpower processes personal data only for defined, legitimate purposes. The table below sets out the primary purposes of processing and the legal basis relied upon in each case:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract — necessary to provide the Services you have requested. |
| KYC identity verification | Legal obligation — required under applicable compliance frameworks governing online gambling operators. |
| Processing deposits and withdrawals | Performance of contract — necessary to execute the financial transactions requested. |
| Fraud prevention and anti-money laundering monitoring | Legitimate interests and legal obligation — to protect players, the Platform, and third parties from financial crime. |
| Responsible gambling monitoring and intervention | Legitimate interests — to protect vulnerable players and fulfil responsible gambling commitments. |
| Customer support and dispute resolution | Performance of contract and legitimate interests. |
| Platform analytics and service improvement | Legitimate interests — to improve the performance and user experience of the platform. |
| Direct marketing communications (where opted in) | Consent — only where you have explicitly agreed to receive promotional communications. |
tpower retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders it irrecoverable. Anonymised data that cannot be linked to an identifiable individual may be retained indefinitely for analytical purposes.
tpower does not sell, rent, or trade personal data to third parties for commercial or marketing purposes under any circumstances. Disclosure of personal data to third parties is limited to the following categories and circumstances:
tpower shares transaction-relevant personal data with certified payment service providers, including operators of Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX infrastructure, solely for the purpose of processing deposits and withdrawals. Data shared is limited to the minimum necessary to complete the transaction in question.
Where tpower engages third-party KYC verification service providers to assist in identity document validation, personal data including identity documents and selfie photographs may be shared with such providers under strict data processing agreements requiring equivalent privacy protections.
tpower may disclose personal data to governmental, regulatory, law enforcement, or judicial authorities where required to do so by law, court order, or regulatory instruction, including for the purposes of anti-money laundering investigations, tax reporting, or fraud investigations. tpower will disclose only the minimum data required and will, where legally permissible, notify the Account holder of such disclosure.
tpower may share data with fraud prevention, cybersecurity, and risk management service providers for the purpose of detecting, preventing, and investigating fraudulent activity, security breaches, and prohibited conduct. Such sharing is conducted under contractual confidentiality obligations.
In the event of a merger, acquisition, restructuring, or sale of all or part of tpower's business, personal data held by tpower may be transferred to the relevant successor entity as part of the transaction, subject to equivalent privacy protections and appropriate notification to affected players.
tpower operates with infrastructure and service providers located in multiple jurisdictions across Southeast Asia and beyond. As a result, personal data collected from Malaysian players may be transferred to, stored in, or processed in jurisdictions outside Malaysia.
Where personal data is transferred outside Malaysia to a jurisdiction that does not provide an equivalent level of data protection, tpower implements appropriate safeguards to ensure that such transfers comply with applicable data protection standards. These safeguards include contractual clauses with receiving entities that impose obligations equivalent to those described in this Policy, and technical security measures appropriate to the sensitivity of the data concerned.
By using tpower's Services, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia where tpower or its service providers operate, subject to the protections described in this clause.
tpower implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security framework includes, but is not limited to, the following controls:
Notwithstanding the foregoing, no information security system is entirely impervious to attack. tpower cannot provide an absolute guarantee that personal data will never be subject to a security incident. In the event of a material breach affecting your personal data, tpower will notify you promptly and take all reasonably practicable steps to mitigate the impact.
tpower uses cookies and similar tracking technologies — including session tokens, local storage objects, and web beacons — on its website and platform to operate core functionality, measure platform performance, and improve user experience. The categories of cookies used are as follows:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Required for platform functionality — authentication tokens, session management, security flags. Cannot be disabled without preventing use of the Services. | Session / up to 24 hours |
| Performance & Analytics | Measures page load times, identifies error pages, and analyses player navigation patterns to improve platform performance. | Up to 12 months |
| Functional | Remembers user preferences such as language selection, game lobby display settings, and preferred deposit method. | Up to 6 months |
tpower does not use third-party advertising cookies or cross-site tracking technologies that share your data with external advertising networks. You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to access and use the tpower platform.
tpower strictly enforces a minimum age requirement of 21 years for all registered players. tpower does not knowingly collect personal data from individuals under the age of 21. Account registration requires affirmative confirmation of age at the point of sign-up, and KYC verification requires submission of a valid identity document confirming date of birth.
If tpower becomes aware that personal data has been collected from a person under the age of 21, the relevant Account will be immediately closed, all related deposits will be refunded to the payment source, and all personal data associated with the Account will be deleted in accordance with our data retention procedures, except where retention is required to document the age violation for regulatory compliance purposes.
If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered an Account with tpower, please contact our support team immediately at the contact details provided in Section 14 of this Policy.
Subject to applicable data protection law and the specific circumstances of your request, you hold the following rights in relation to the personal data tpower processes about you. Requests to exercise any of these rights should be submitted in writing to tpower's support team using the contact details in Section 14. tpower will respond to all verified data rights requests within 30 days.
You have the right to request a copy of the personal data tpower holds about you, together with information about how it is processed and on what legal basis.
You have the right to request correction of inaccurate or incomplete personal data. Account profile information can be updated directly through your Account settings for most fields.
You may request deletion of your personal data where it is no longer necessary for the purposes collected, or where you have withdrawn consent and no other legal basis applies. This right is subject to retention obligations under applicable law.
Where processing is based on your consent or the performance of a contract, you may request that data you have provided be transferred to you or a third party in a structured, commonly used, machine-readable format.
You may request that tpower restrict the processing of your personal data in specific circumstances, such as where accuracy is contested or where you have objected to processing pending verification of legitimate grounds.
You have the right to object to processing based on legitimate interests where you believe your particular circumstances override those interests. You also have an absolute right to object to direct marketing at any time.
tpower reserves the right to amend, update, or replace this Privacy Policy at any time. Material changes to the Policy will be communicated to registered players via a prominent notice on the tpower website, or via email to the address registered on your Account, where practicable, at least 7 days prior to the change taking effect.
The "Last Updated" date displayed at the top of this Policy reflects the date on which the most recent revision was published. Your continued use of the tpower platform after the effective date of any revision constitutes your acceptance of the updated Policy.
If you disagree with any changes to this Policy, you must cease using the tpower Services and request closure of your Account prior to the effective date of the revision. Closing your Account does not affect the lawfulness of any processing carried out prior to closure.
If you have any questions, concerns, or requests relating to this Privacy Policy or tpower's data processing practices, or if you wish to exercise any of the data rights described in Section 12, please contact tpower's Data Protection team through the following channels. All privacy-related communications must be submitted in writing.
tpower is committed to resolving all privacy-related enquiries promptly and transparently. We take every data rights request seriously and will provide a substantive response within the timeframes stated above.
For queries related to responsible gambling, account self-exclusion, or deposit limits, please visit our dedicated Responsible Gambling page. For general Terms & Conditions enquiries, see our Terms & Conditions page.
All data transmitted between your device and tpower is encrypted using industry-standard 256-bit SSL/TLS — the same level of protection used by Maybank and CIMB for online banking transactions in Malaysia.
tpower does not sell, rent, or trade your personal data to any third party for commercial or advertising purposes. Your information is used exclusively to operate your Account and maintain platform security.
Identity documents submitted for KYC verification are stored in encrypted, access-controlled environments. Document access is restricted to authorised compliance personnel only and is logged for audit purposes.
Financial transaction data is processed exclusively through certified Malaysian payment partners including Maybank, CIMB, Touch 'n Go eWallet, DuitNow, and FPX. tpower does not store complete banking credentials on our own systems.
tpower retains your personal data only for as long as necessary. Transaction and KYC records are kept for regulatory compliance periods, after which data is securely deleted or anonymised — not accumulated indefinitely.
Access, correction, deletion, portability, and objection rights are available to all tpower players. Submit a written request to our support team and receive a substantive response within 30 days — no runaround, no delays.
tpower's support team is available 24/7 in English, Bahasa Melayu, and Mandarin to answer any privacy questions or to process a data rights request on your behalf.
For full terms of service, see our Terms & Conditions. For responsible gambling tools, visit Responsible Gambling. tpower — For players aged 21 and above only.